Privacy Policy 365 Huat – Our Commitment to Protecting Malaysian Players' Data

365 Huat collects various types of information for different purposes in order to provide and improve our services to Malaysian players. The types of information collected are as follows:

A. Information You Provide Directly

• Full name as stated in your official Malaysian identity document (MyKad / Passport)
• An active Malaysian mobile phone number
• A valid and active email address
• Date of birth (for age verification)
• Details of your chosen payment method (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, or FPX — including bank name and account type, but not your full account number)
• Identity verification documents collected during the KYC process

B. Automatically Collected Information

• Device IP address and estimated geographic location (state within Malaysia)
• Device type, operating system, and browser version
• Activity log records including the date, time, and type of action performed within the account
• Betting history and financial transaction records in MYR
• Cookie and similar tracking technology data

All information collected by 365 Huat is used solely for the following legitimate and stated purposes:

• Account Management: Creating, verifying, and managing your player account on the 365 Huat platform.
• Transaction Processing: Processing deposits and withdrawals through your chosen Malaysian payment methods, and maintaining accurate transaction records in MYR.
• Identity Verification (KYC): Fulfil legal obligations related to identity verification and anti-money laundering in compliance with Malaysian law.
• Service Improvement: Analysing usage patterns to better understand the needs of Malaysian players and continuously improve the overall platform experience.
• Communications: Sending important account-related information, security notifications, and — with your consent — the latest promotional updates and bonus offers.
• Platform Security: Detect and prevent fraud, abuse, and any activity that violates 365 huat's Terms & Conditions.
• Responsible Gaming: Monitoring betting patterns to identify players who may need assistance and recommending appropriate responsible gaming tools.

365 Huat does not sell, rent, or disclose players' personal data to third parties for commercial or marketing purposes. However, there are limited circumstances in which data sharing may be necessary:

• Payment Service Providers: Transaction information that must be shared with Malaysian payment providers (such as Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and FPX banks) to process your transactions. These providers are bound by strict confidentiality agreements.
• Game Software Providers: Limited data may be shared with licensed game providers that supply content such as slots, live casino, and other games, strictly for session management purposes.
• Regulatory Authorities: Data will be disclosed to Malaysian authorities where required by court order, official investigation, or other applicable legal obligations.
• Business Transfer: In the event of a merger, acquisition, or asset sale, user data may be transferred to the acquiring entity, but will remain subject to a Privacy Policy offering at least equivalent protections to this one.

All third parties receiving data from 365 Huat are required to adhere to strict data protection standards and may only use that data for the specific purposes stated.

365 Huat continuously invests in advanced security infrastructure to keep your data safe. Our implemented security measures include:

• 256-bit SSL/TLS encryption for all data in transit
• AES-256 encryption for data stored in our database
• Tokenisation of sensitive financial data — your Touch 'n Go, GrabPay, or FPX account details are never stored in their original form
• Strict access controls based on the "need-to-know" principle — only authorised staff may access player data
• Real-time threat monitoring 24 hours a day, 7 days a week
• Regular penetration testing by independent cybersecurity experts
• Regular, secure data backups to ensure continuity of service

365 huat uses cookies and similar tracking technologies to enhance user experience, analyse platform performance, and deliver relevant content.

You can manage or delete cookies through your web browser settings at any time. However, disabling certain cookies may affect platform functionality and cause some features to not work properly.

As a 365 Huat player residing in Malaysia, you have the following rights under Malaysia's Personal Data Protection Act 2010 (PDPA):

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request the correction of any inaccurate or incomplete data.
• Right to Erasure: Request data deletion where permitted by law.
• Right to Object: Object to the processing of your data for direct marketing purposes.
• Right to Portability: Receive your data in a structured format for transfer to another platform.
• Right to Withdraw Consent: Withdraw your consent for specific data processing at any time.

To submit any request relating to your privacy rights, please contact our data protection team at privacy@365huat.biz. All requests will be processed within 14 working days.

365 Huat does not retain your personal data for longer than is necessary for the original purpose of collection or to fulfil our legal obligations. Our data retention guidelines are as follows:

• Active Account Data: Retained for the duration your account is active with 365 Huat, plus 5 years after account closure for Malaysian legal compliance purposes.
• Financial Transaction Records (MYR): Retained for a minimum of 7 years in accordance with the Companies Act and applicable Malaysian financial regulations.
• Communication Logs: Customer support conversation records are retained for 2 years for quality assurance and dispute resolution purposes.
• Cookie Data: Depending on the type of cookie, storage duration ranges from a single session up to a maximum of 2 years.

When data is no longer required, it will be securely deleted using industry-standard data erasure methods that ensure it cannot be recovered.

In the course of its operations, 365 Huat may need to transfer your personal data to servers located outside Malaysia — for example, for data backup purposes or the use of international cloud infrastructure services.

Any such data transfer will be carried out with the following guarantees:

• The destination country or service provider maintains data protection standards equivalent to or higher than those in Malaysia.
• Binding data transfer agreements have been established with all data recipients.
• All transferred data is fully encrypted both in transit and at rest.
• Access to transferred data is strictly limited and tightly controlled.

365 huat services are intended exclusively for individuals aged 18 and above. We do not knowingly collect personal data from children or minors.

Should we discover that personal data belonging to an underage individual has been inadvertently collected, we will take immediate steps to delete that data and close the account in question. Parents or guardians concerned about their child's possible use of the platform are advised to contact us without delay.

365 huat reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or platform services offered.

When significant changes are made to this Privacy Policy, we will:

• Updating the "Last Updated" date displayed at the top of this document.
• Sending notifications via registered email to all active players should such changes materially affect how your data is managed.
• Displaying a prominent notice on the platform's homepage or login page for a period of at least 14 days.

Continued use of the 365 huat platform after any changes to the Privacy Policy take effect will be considered your acceptance of those changes. If you do not agree with any changes, you have the right to close your account before they come into effect.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how 365 Huat handles your personal data, please contact our Data Protection Officer (DPO) through the following channels:

• Privacy-Dedicated Email: privacy@365huat.biz (for privacy and data-related enquiries and requests)
• General Support Email: support@365huat.biz
• 24/7 Live Chat: Directly from the 365 Huat website or app

We are committed to responding to all privacy-related enquiries within 72 working hours for email and real-time for live chat. Formal requests relating to privacy rights (access, correction, deletion) will be processed within 14 working days.

This Privacy Policy is written in Bahasa Malaysia. In the event of any conflict between a translated version and this Bahasa Malaysia version, the Bahasa Malaysia version shall take precedence and be considered definitive.