Privacy Policy 369vip —
Your Data, Our Responsibility

This Privacy Policy applies to all users who access the 369vip website, use our mobile app, or interact with any of our services. This includes casual visitors, prospective members in the registration process, active members, and former members whose accounts have been closed.

The primary purpose of this document is to provide you with a clear and transparent understanding of:

• What personal data 369vip collects when you use our platform.
• Why the data is needed and how it is used to improve your experience.
• With whom, if anyone, your information is shared — and under what circumstances that sharing takes place.
• The security measures we take to protect your data from unauthorised access.
• Your rights as a data subject and how to exercise them.

369vip operates in compliance with Personal Data Protection Act 2010 (PDPA) Malaysia. We regard compliance not merely as a legal requirement, but as the foundation of trust between the platform and our members.

369vip only collects data that is strictly necessary to provide you with a secure, seamless, and personalised service. The following are the categories of data we collect:

We does not collect sensitive data such as medical information, religious beliefs, political views, or biometric data unless specifically required by law.

Your personal data is collected through several channels depending on the type of interaction you have with the 369vip platform:

• Account Registration: When you register, we require basic information such as your name, phone number, email, and banking details to set up your account securely.
• Identity Verification (KYC): To meet compliance requirements, members may be asked to submit supporting documents such as a copy of their identification card or bank documents. All such documents are stored securely and used solely for verification purposes.
• Platform Usage: Every interaction you have with the platform — including games played, wagering amounts, and activity timestamps — is automatically recorded as part of normal platform operations.
• Device & Browser: When you visit the 369vip website or use the app, technical information about your device is automatically collected by our systems for security and performance optimisation purposes.
• Communications with Us: Any communication you initiate with our support team — via live chat, email, or other messaging platforms — will be retained as a service record.
• Cookies & Tracking Technologies: Our website uses cookies and similar technologies to improve user experience. More details are available in Section 7 of this document.

Every piece of data we collect has a clear and legitimate purpose. 369vip uses your personal data for the following purposes:

• Account Management: Creating, verifying, and securely managing your member account, including login processing, two-factor authentication, and account recovery.
• Transaction Processing: Processing all deposits, withdrawals, and other financial transactions accurately and securely through payment channels registered in your name.
• Regulatory Compliance: Fulfilling legal obligations under Malaysia's PDPA and the KYC/AML (Anti-Money Laundering) requirements set by the relevant authorities.
• Platform Security: Detecting and preventing fraudulent activity, unauthorised access, multi-account usage, and any behaviour that violates our terms of service.
• Personalise Your Experience: Personalising game recommendations, relevant promotions, and the user interface based on your usage patterns and preferences.
• Service Communications: Sending important account notices, transaction confirmations, security updates, and responses to your support enquiries.
• Marketing (with consent): Contacting you about promotions, bonuses, and exclusive offers — only if you have given explicit consent during registration or through your account settings.
• Platform Improvement: Analysing usage patterns in aggregate (not individually) to improve the design, performance, and new features of our platform.

369vip does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. However, in certain limited situations, we may need to share your information with the following parties:

• Payment Service Providers: Local banks, eWallet operators (such as Touch 'n Go eWallet, Boost, GrabPay) and payment processors that facilitate your deposit and withdrawal transactions. They receive only the minimum data required to complete the transaction.
• Game Service Providers: Third-party game providers that supply gaming content on our platform. Data shared is limited to what is necessary to ensure games function properly.
• Relevant Authorities: Law enforcement agencies, regulatory bodies, or courts when we are required to do so under Malaysian law, or when necessary to protect the rights and safety of the platform and our members.
• Technical & Security Consultants: IT infrastructure and cybersecurity service providers that assist us in managing and protecting the platform's systems. All parties are bound by strict confidentiality agreements.

In all data sharing situations, 369vip ensures that recipient parties are subject to data protection obligations equivalent to our own standards, through legally binding contractual agreements.

The security of your personal data is 369vip's highest priority. We continuously invest in security infrastructure to ensure your information is always protected from cyber threats and unauthorised access.

• 256-bit SSL Encryption: All data transmitted between your device and our servers is encrypted using industry-standard TLS/SSL protocols. This means your information cannot be read by any party attempting to intercept the communication.
• Secure Data Storage: Sensitive data stored in our databases is protected with an additional layer of encryption. Critical financial information is never stored in plain text.
• Internal Access Controls: Only 369vip staff with legitimate operational needs are granted access to member personal data — and every access is logged and audited on a regular basis.
• 24/7 Monitoring: Our security systems operate at all times to detect and respond to any suspicious activity, intrusion attempts, or anomalies related to member data.
• Periodic Security Testing: We conduct regular penetration testing and independent security audits to identify and remediate any system vulnerabilities.
• Incident Response Plan: 369vip has clear procedures in place to handle any data security incidents. In the event of a material data breach, we will notify affected members within a reasonable timeframe.

The 369vip website uses cookies and similar tracking technologies to enhance your browsing experience and help us understand how the platform is used. The following are the types of cookies we use:

• Essential Cookies: These cookies are required for core platform functions such as login session management, form security, and language preferences. The platform cannot function properly without them and does not require your consent.
• Performance Cookies: Collecting aggregate data on how visitors use our website — such as most frequently visited pages and time spent — to help us improve performance and navigation.
• Functional Cookies: Saving your preferences such as language settings, display themes, and login details to streamline repeat visits without requiring you to re-enter the same information.
• Marketing Cookies: Used to display promotions and advertisements relevant to your interests. This type of cookie is only activated with your consent and can be disabled through your browser settings.

You can control and manage cookie settings through your internet browser at any time. Please note that disabling certain cookies may affect the functionality of some parts of the platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by 369vip:

To exercise any of the above rights, please contact the 369vip support team via live chat within our platform or mobile app. We will process your request within 14 business days.

369vip retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable laws and regulations in Malaysia.

• Active Account Data: Retained for the duration your account is active and in good standing, plus 7 years after account closure for legal and tax compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years after each transaction is completed, in line with Malaysia's financial legal requirements.
• KYC Documents: Retained for at least 5 years after the business relationship ends, in accordance with applicable AML/KYC compliance requirements.
• Support Communication Records: Retained for 3 years from the date of the last communication for customer service reference and dispute resolution purposes.
• Cookie Data: Depending on the cookie type — session cookies are deleted when you close your browser, while persistent cookies have a set expiry period ranging from 30 days to 2 years.

Once the retention period expires and there is no legal requirement to keep the data, we will securely delete or anonymise your data using industry-recognised methods.

If you have any questions, concerns, or complaints regarding how 369vip handles your personal data, or if you wish to exercise any of your privacy rights, we encourage you to contact us directly.

Our Data Protection Team is ready to assist you through the following channels:

• Live Chat: The fastest way to get a response — available 24/7 directly within the 369vip platform or mobile app.
• Official Email: [email protected] — for enquiries that require written documentation or involve more formal data rights requests.

We commit to providing an initial response within 3 business days and resolving more complex requests within 14 business days from the date of receipt.

369vip reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. The latest version will always be available on our official website. We will notify you of significant changes via in-platform notices or email to your registered address.