Privacy Policy Casino3 – Your Data, Our Responsibility, Full Protection

This Privacy Policy ("Policy") is issued by casino3 ("we", "our platform") to explain our privacy practices regarding the collection, use, disclosure, storage, and protection of personal data you provide to us when using the casino3.vu platform and its associated mobile applications.

This Policy applies to all casino3 platform users regardless of whether you register as a member, browse the platform without an account, or contact us through customer support channels. By using casino3's services, you agree to the practices described in this Privacy Policy.

Casino3 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA). We regard the protection of your personal data not merely as a legal obligation, but as a reflection of the respect and trust you place in us when choosing to play on the casino3 platform.

Casino3 collects various types of personal data depending on how you interact with our platform. The following are the main categories of data we collect:

Identity & Account Data

Financial & Transaction Data

Usage & Technical Data

Casino3 collects and processes your personal data only for legitimate and necessary purposes. We do not collect more data than is required to operate the platform properly and securely. The primary purposes for which casino3 processes data are:

• Account Management: Creating, verifying, and managing your member account, including the registration process, login, and identity verification (KYC).
• Transaction Processing: Processing your deposits, withdrawals, and all financial transactions accurately and securely through approved payment providers.
• Service Provision: Enabling you to access and use all games and features available on the casino3 platform.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraud, money laundering, and other suspicious activities that could harm you or the platform.
• Legal Compliance: Meeting legal obligations including reporting to relevant authorities when required by law.
• Customer Support: Providing assistance and resolving any issues or complaints you encounter while using the platform.
• Responsible Gaming: Monitoring gameplay patterns to identify problem gambling risks and provide appropriate support.
• Platform Improvements: Analyzing anonymized usage patterns to enhance user experience and casino3 platform features.
• Service Communications: Sending important notifications related to your account, transactions, and policy changes that affect you.
• Marketing (with consent): Sending casino3 promotional information and special offers only to members who have consented to receive marketing communications.

Casino3 does not sell, rent, or trade your personal data to third parties for marketing purposes. However, in the course of operating the platform, we may share necessary data with the following categories of third parties:

Approved Service Providers

• Payment Processors: DuitNow, FPX, Touch 'n Go, GrabPay, Boost, and banking institution providers that enable secure financial transaction processing.
• Game Providers: Third-party game software providers that supply slots, live casino, and other games on the casino3 platform.
• KYC/Identity Verification Services: Identity verification technology providers that help us meet our KYC obligations.
• Cloud & Hosting Services: Cloud infrastructure providers that host data in a secure, high-standard environment.
• Analytics & Security: System monitoring and analytics tools that help us detect fraud and enhance platform security.

Authorities & Legal Requirements

Casino3 will disclose your personal data to relevant authorities when required by law, court order, or legitimate regulatory requirement. This includes disclosures for law enforcement purposes, financial crime investigations, or compliance with regulatory body directives.

Casino3 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse a website. The following are the types of cookies we use:

• Essential Cookies: These cookies are required for core platform functions such as login session verification, security, and navigation. Without them, the platform cannot function properly. These cookies cannot be disabled.
• Performance Cookies: Used to collect information about how you use the platform – pages visited, time spent, and errors encountered. This information is used to improve how the platform functions and to help resolve technical issues.
• Functional Cookies: Allowing the platform to remember your preferences such as language and display settings to deliver a more personalized experience.
• Analytics Cookies: Helping casino3 understand how users interact with the platform as a whole. This data is anonymized and used solely for platform improvement purposes.

You can manage and delete cookies through your browser settings. However, disabling certain cookies may affect the functionality of the casino3 platform. For more information on managing cookies, refer to your browser's help section.

Casino3 implements multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Key security measures we employ include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and casino3 servers is protected with the same encryption used by leading banking institutions.
• Two-Factor Authentication (2FA): casino3 members are encouraged to enable 2FA for an additional layer of protection on their account.
• Real-Time Monitoring: The casino3 security monitoring system operates 24/7 to detect any suspicious activity or unauthorized access attempts.
• Internal Access Control: Only approved personnel who require access to carry out their duties are permitted to access member personal data. All access is logged and audited.
• Regular Security Testing: Casino3 conducts regular penetration testing and security audits by qualified third parties.
• Segregated Data Storage: Sensitive data such as payment information and passwords are stored separately with additional layers of encryption.
• Incident Response Plan: Casino3 has clear procedures for responding to data breaches, including notification to the relevant authorities and affected members within the timeframes stipulated by the PDPA.

Casino3 retains your personal data only for as long as necessary for the stated purposes or as required by law. Retention periods vary by data type and applicable regulatory requirements:

• Active Account Data: Retained for as long as your account remains active at casino3. This data is necessary to allow you to continue using the services.
• KYC & Identity Data: Retained for a minimum of 5 years after account closure in compliance with anti-money laundering legal requirements.
• Financial Transaction Records: Retained for a minimum of 7 years after the transaction date in accordance with accounting and tax law requirements.
• Support Communication Log: Retained for 3 years for dispute resolution and service improvement purposes.
• Marketing Data (consent-based): Retained until you withdraw your consent or request deletion.

Once the retention period expires and there is no legal requirement to retain the data, casino3 will securely delete or anonymise it using industry-approved methods.

Under Malaysia's PDPA and international data protection principles, you have the following rights regarding the personal data casino3 holds about you:

• Right of Access: You have the right to request a copy of the personal data we hold about you. Casino3 will process access requests within 21 working days.
• Right to Rectification: If your personal data is inaccurate or incomplete, you have the right to request that casino3 make a correction. You may also update most of your account information yourself through your profile settings.
• Right to Erasure (Right to be Forgotten): Under certain circumstances, you have the right to request that casino3 delete your personal data. Please note that this right is not absolute and may not be fully fulfilled if casino3 has a legal obligation to retain the data.
• Right to Withdraw Consent: You may withdraw consent for consent-based data processing (such as marketing communications) at any time. Withdrawing consent does not affect the validity of processing that took place prior to withdrawal.
• Right to Object: You have the right to object to the processing of your personal data for specific purposes such as direct marketing.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format and to transfer it to another data controller.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] stating the right you wish to exercise and the information needed to verify your identity. casino3 will respond within 21 business days.

In the course of operating casino3, your personal data may be transferred to and stored on servers located outside Malaysia. This occurs when we use international cloud services or service providers based overseas to carry out certain platform functions.

Casino3 ensures that any cross-border data transfers are carried out with adequate safeguards in line with Malaysia's PDPA requirements. This includes:

• Ensuring data recipients are located in countries with a level of data protection equivalent to or higher than Malaysia.
• Establishing data transfer agreements that incorporate internationally recognized standard protection clauses.
• Ensuring all data transfers are conducted with up-to-date encryption to prevent any risk of leakage during transfer.

Casino3 may update this Privacy Policy from time to time to reflect changes in our privacy practices, evolving legal requirements, or changes in how the casino3 platform operates. All changes will be published on this page along with an updated "Last Updated" date.

For material or significant changes, casino3 will notify you via:

• A clear in-platform notification when you log in after changes have been made.
• Notification email sent to the address registered in your account.
• A notice displayed on the casino3.vu homepage for a minimum of 30 days.

We encourage you to review this Privacy Policy periodically to stay informed about how casino3 protects your information. Continued use of the platform after any Privacy Policy update is published will be considered acceptance of the latest version of this Policy.

If you have any questions, concerns, or complaints regarding how casino3 handles your personal data, you may contact our Data Protection Officer, who is specially appointed to handle privacy-related matters.

We are committed to responding to all privacy inquiries within 21 working days from the date we receive your request. For cases requiring in-depth investigation, we will keep you updated on progress within the same timeframe.

Contact the Casino3 Data Protection Officer by email at [email protected] including your full name, account number (if applicable), and a brief description of your query or complaint.

If you are not satisfied with casino3's response to your privacy complaint, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia appointed under PDPA 2010.