Privacy Policy 365 Casino – How We Protect Malaysian Players' Data

This Privacy Policy explains how 365 casino, operating through the website https://365casino.express, collects, processes, stores, and protects the personal information of Malaysian players who use our platform. This document also outlines your rights regarding the personal data we hold.

365 casino understands that trust is the foundation of any lasting relationship with our players. When you register, make a deposit via Touch 'n Go eWallet or DuitNow, or place a bet on the Malaysia Super League — you are entrusting us with your personal information. We do not take that responsibility lightly.

This policy is written in plain, easy-to-understand language — not filled with confusing legal jargon. Our goal is for every Malaysian player, regardless of background, to clearly understand what happens to their data at 365 casino.

This Privacy Policy is effective from January 2026 and supersedes all previous versions. Your continued use of the platform after this date constitutes your acceptance of the updated policy.

365 casino only collects data that is genuinely necessary to operate the platform safely and deliver the best experience to Malaysian players. Below are the types of data we collect and the purposes they serve:

We do not collect sensitive data such as health information, religious beliefs, or political views, unless required by law in specific circumstances related to responsible gambling programmes. In such cases, your explicit consent will be sought beforehand.

Every piece of data we collect has a clear and legitimate purpose. 365 casino does not use player data for any purpose other than those stated below:

• Account management: Creating, verifying, and maintaining your 365 casino account securely — including OTP processes, password recovery, and KYC.
• Financial transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX, as well as handling withdrawal requests to your bank account or e-wallet in MYR.
• Bet settlement and game records: Accurately and transparently calculating and crediting winnings, and settling bets across football, badminton, poker, 4D lottery, and all other games on the platform.
• Security and fraud prevention: Detecting suspicious activity, preventing unauthorised access, identifying patterns linked to money laundering, and protecting other players from exploitation.
• Customer support: Providing relevant, personalised assistance when you reach out to the 365 casino support team — your interaction history helps us understand your issue more quickly.
• Platform improvement: Analysing usage patterns in aggregate (not at an individual level) to improve the interface, expand into new markets, and enhance platform performance.
• Marketing communications: Sending you information about promotions, bonuses, and new offers at 365 casino — only if you opted in during registration or through your account settings.
• Legal compliance: Meeting reporting obligations to Malaysian authorities where required by law, including Anti-Money Laundering (AML) requirements.

365 casino does not use your personal data to make automated decisions that negatively affect you without human oversight. Any account-related decisions that may impact you will be reviewed by our team before any action is taken.

365 casino does not sell, rent, or disclose players' personal information to third parties for marketing purposes. However, there are limited situations where we need to share information with certain parties to keep the platform running safely and effectively:

• Payment service providers: The transaction information required for payments is shared with payment processors such as FPX gateways and e-wallet operators (Touch 'n Go, GrabPay, etc.) to enable deposits and withdrawals in RM. These providers are bound by strict confidentiality agreements.
• Game software providers: Only the minimum technical data required to operate the casino games and Sports Betting is shared with the software providers that support the 365 casino platform. All providers comply with industry data security standards.
• Legal authorities: Where required by Malaysian law, a court order, or an official investigation into money laundering or fraud, 365 casino may be obligated to disclose information to the relevant authorities. Any such disclosure will be carried out in accordance with proper legal procedures.
• Auditors and professional consultants: Legal advisors, accountants, and auditors bound by professional confidentiality obligations may access certain data for audit and compliance purposes.

Data security is not just an add-on at 365 casino — it is central to how we operate. We continuously invest in security technologies and procedures to ensure Malaysian players' data remains protected at all times.

Technical security measures we have in place:

• 256-bit SSL Encryption: All communications between your browser and our servers are encrypted using the latest TLS 1.3 protocol, ensuring that any data transmitted cannot be read even if intercepted.
• Two-Factor Authentication (2FA): Login and critical actions such as changing your password or bank account number require verification via an OTP sent to your registered phone number.
• Intrusion detection system: The 365 casino platform is monitored 24/7 by automated systems that detect unusual activity — such as logins from new locations or repeated failed access attempts.
• Internal access controls: 365 casino staff can only access player data relevant to their specific role. All access is logged and regularly audited.
• Secure password storage: Your password is never stored in plain text. We use strong cryptographic hashing, meaning even internal staff cannot view your password.
• Regular security testing: 365 casino conducts regular penetration testing and security audits to identify and address vulnerabilities before they can be exploited.

While we take every reasonable step to protect your data, no system can be guaranteed to be 100% secure. You also play an important role in keeping your account safe — keep your password confidential, avoid logging in from other people's devices, and report to us immediately if you suspect any suspicious activity on your 365 casino account.

Cookies are small text files stored on your device when you browse the 365 casino website. They help us provide you with a better and more secure experience. Below are the types of cookies we use:

You can manage your cookie settings through your web browser at any time. Do note that disabling essential cookies may affect the functionality of the 365 casino platform, including your ability to log in and carry out transactions securely. For guidance on managing cookies in popular browsers in Malaysia (Chrome, Firefox, Safari), refer to your browser's help section.

As a 365 casino player based in Malaysia, you have certain rights regarding the personal data we hold about you. We respect and facilitate the exercise of these rights:

365 casino retains players' personal data only for as long as necessary for the purposes stated in this policy, or as required by applicable Malaysian law.

• Active account data: For as long as your account remains active and you continue to use the 365 casino platform, we will retain your account data to ensure uninterrupted access and service.
• Financial and transaction records: In accordance with legal requirements relating to anti-money laundering and financial reporting, transaction records are retained for a minimum of 7 years from the date of the transaction — even after an account has been closed.
• Support communication records: Live chat conversation records and support emails are retained for 3 years from the date of last communication, for reference and dispute resolution purposes.
• Analytics data: Aggregated usage data (with no personally identifiable information) may be retained for longer periods for trend analysis and platform improvement purposes.
• Closed accounts: After voluntary account closure, personally identifiable information will be anonymised within 90 days, unless there is a legal requirement to retain it for longer.

Once the retention period has lapsed and there is no legal obligation or legitimate reason to keep the data, 365 casino will securely delete or anonymise it using industry-standard methods.

The 365 casino platform is strictly for individuals aged 18 and above. We take the privacy and protection of minors seriously and do not knowingly collect or process personal data from anyone under the age of 18.

During registration, users are required to confirm that they are 18 years of age or older. The KYC process, which involves identity document verification, serves as an additional safeguard to ensure only adults can use the 365 casino platform.

365 casino reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our privacy practices, the technologies we use, or evolving legal requirements. We are committed to keeping players informed of any material changes.

When significant changes are made to this policy, we will:

• Sending email notifications to all registered 365 casino players at least 14 days before any changes take effect.
• Displaying clear notices within the 365 casino platform regarding upcoming changes.
• Updating the "Last Updated" date at the top of this document.
• Maintaining an archive of previous versions of this policy for reference when needed.

Continued use of the 365 casino platform after the effective date of any amendment constitutes your acceptance of the updated policy. If you do not agree with the changes, you may close your account before the effective date by contacting our support team.

For any questions, concerns, or requests relating to your privacy and personal data at 365 casino, please contact our Data Privacy Officer: