350e Privacy Policy – Personal Data Protection for Malaysia Online Casino Players

350e collects various types of personal information for legitimate purposes in operating the platform. The categories of information we collect are as follows:

Account Registration Information:

• A valid Malaysian phone number (used for OTP verification and account communications)
• Full legal name (for identity verification and withdrawal processing purposes)
• Password (stored as a hash that cannot be read by our staff)
• Date of birth (to verify that you meet the minimum age requirement of 18 years)

Financial & Transaction Information:

• Payment method details — e-wallet account name (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow account number, or FPX details for Maybank2u and CIMB Clicks
• Deposit and withdrawal history in MYR (RM)
• Complete transaction records including date, time, amount, and payment method

Technical & Usage Information:

• IP address and device information (device type, operating system, web browser)
• Usage log data — pages visited, games played, and session duration
• Cookie and session token information (please refer to the cookies section for more details)

350e uses the personal information collected solely for legitimate purposes directly related to the operation of the platform. Your data is used as follows:

• Account Management: To create and maintain your account, and to process registration, identity verification, and secure login.
• Transaction Processing: To process deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, and CIMB Clicks; and to securely and accurately process winnings withdrawals in MYR.
• Gaming Services Provision: To give you access to all games available on the 350e platform, including slots, Live Casino, and card games.
• Customer Support: To enable the 350e support team to identify your account and efficiently resolve any issues or enquiries you raise.
• Security & Fraud Prevention: To detect and prevent fraudulent activity, money laundering, account abuse, and other illegal activities on the platform.
• Legal Compliance: To comply with applicable legal and regulatory requirements, including anti-money laundering (AML) and know your customer (KYC) obligations.
• Service Communications: To send important account-related notifications — such as transaction confirmations, security alerts, and updates to our terms.
• Platform Improvements: To analyse aggregated usage patterns for the purpose of improving the 350e user experience — this analysis does not allow the identification of any individual user.

350e does not sell or rent your personal data to any third party. However, in certain limited circumstances, we may need to share information with the following parties:

• Payment Providers: Information required to process transactions is shared with payment service providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX. These providers maintain their own privacy policies and security measures, which they are required to adhere to.
• Game Providers: Game providers such as Pragmatic Play may receive the minimum technical data required to ensure games function correctly within the 350e platform. Sensitive personal information is not shared.
• Lawful Authorities: Where required by law or a valid court order, 350e may be required to disclose user information to authorities such as the Royal Malaysia Police or the Companies Commission of Malaysia. We will notify you of any such request unless prohibited by law from doing so.
• Cloud Services & Infrastructure: Data is stored on servers managed by trusted cloud service providers, who are bound by strict confidentiality and data security agreements with 350e.

In all data sharing situations described above, 350e ensures that only the minimum necessary information is shared, and that all recipients are bound by appropriate confidentiality and security obligations.

350e continually invests in cybersecurity infrastructure to ensure your personal data is always protected to the highest standard. The security measures we employ include:

• 256-bit SSL Encryption: All communications between your device and 350e's servers are fully encrypted. This means that even if your data were intercepted in transit, it cannot be read without the correct decryption key.
• Salted Password Storage: Your account password is never stored in plain text. Instead, it is stored as an irreversible hash — meaning even 350e staff cannot read your password.
• Two-Factor Authentication: OTP verification via your Malaysian phone number adds an extra layer of security during login and for critical transactions.
• 24/7 Security Monitoring: An automated monitoring system runs continuously to detect suspicious access patterns and unauthorised login attempts.
• Internal Access Controls: Access to user data within 350e is restricted to staff who require it for their specific job functions, with all access logged for audit purposes.
• Regular Security Audits: 350e's security systems undergo regular reviews and penetration testing by independent security experts to identify and address vulnerabilities before they can be exploited.

Platform 350e uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. Below is an explanation of the types of cookies we use:

• Session Cookies: Temporary cookies that expire automatically when you close your web browser. These cookies are essential for maintaining your login session and ensuring you do not need to log in again each time you navigate to a new page within the 350e platform.
• Preference Cookies: Preference cookies that remember your settings — such as language, text size, and display preferences — so your experience is more comfortable on future visits.
• Security Cookies: Cookies used to verify your identity and protect against security attacks such as CSRF (Cross-Site Request Forgery). These cookies are essential to the security of your account.
• Analytics Cookies: 350e uses aggregated analytical data that cannot be used to identify individual users, in order to understand platform usage patterns and make meaningful improvements to the user experience.

You can control or delete cookies through your web browser settings. Please note, however, that disabling certain cookies may affect the functionality of the platform 350e — particularly session cookies required for login. We recommend disabling only non-critical cookies if you have specific privacy concerns.

Under Malaysia's Personal Data Protection Act (PDPA) 2010 and privacy practices 350e, you have several important rights regarding your personal data:

To exercise any of the rights above, please submit a written request to [email protected] by stating the type of right you wish to exercise along with your account details for identity verification purposes. 350e will respond within 14 business days.

350e retains your personal data for as long as your account is active or as long as it is needed to provide services to you. Upon account closure, your data will be managed as follows:

• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian legal requirements relating to anti-money laundering (AML) compliance and taxation.
• Account Identification Information: Retained for 5 years after account closure for audit purposes and to resolve any disputes that may arise following closure.
• Usage Log Data: Retained for 2 years for security and fraud detection purposes, then deleted or anonymised.
• Contact Information (Email & Phone Number): Deleted within 90 days of account closure, unless retention is required for the legal purposes stated above.

When data is no longer needed and there is no legal obligation to retain it, 350e will erase or destroy that data securely using methods that ensure it cannot be recovered.

350e reserves the right to update this Privacy Policy from time to time in response to changes in law, technology, or our business practices. For any material amendments — those that significantly change how we handle your data — we are committed to:

• Updating the "Last Updated" date displayed at the top of this page.
• Sending notifications via the platform or email to users with a registered email address, at least 14 days before any material changes take effect.
• Retaining previous versions of the Privacy Policy, which you may request via [email protected] if you wish to compare changes.

Continued use of the platform 350e after an amendment takes effect will be considered acceptance of the revised Privacy Policy. We encourage you to review this page periodically.

If you have any questions, concerns, or complaints regarding how 350e handles your personal data, or if you wish to exercise any of your privacy rights, please contact our Data Privacy Officer via:

• Email: [email protected] — mark your email subject as "Privacy Enquiry" to expedite a response
• Live Chat: Available 24/7 directly within the 350e platform
• WhatsApp: For enquiries requiring an immediate response

We are committed to responding to all privacy-related enquiries within 3 business days. For more complex requests such as data exports or account deletion, processing may take up to 14 business days.