3phase Privacy Policy — Personal Data Protection for Malaysian Players

1Introduction — 3phase's Commitment to Your Privacy

3phase is an online casino platform built specifically for Malaysian players. We understand that your trust in us depends greatly on how we handle the personal information you entrust to us. This Privacy Policy is written in plain, straightforward language — not in complex legal jargon that only lawyers can decipher — because we believe every player deserves to genuinely understand how their data is managed.

3phase fully complies with Malaysia's Personal Data Protection Act (PDPA) 2010 in all aspects of personal data collection, processing and storage. We take our responsibilities as a data controller seriously and will always strive to protect your privacy to the best of our ability.

This Privacy Policy applies to all information collected by 3phase through our platform, including our website, mobile application, and all communication channels we operate.

2Personal Data We Collect

3phase collects various types of information depending on how you interact with our platform. Below is a detailed breakdown of the categories of data we collect:

3phase does not collect sensitive information that is not required, such as medical records, religious beliefs, or political views. We also do not collect data from individuals under the age of 21 — should we discover that such data has been collected inadvertently, we will delete it immediately.

3How We Use Your Personal Data

3phase uses the personal data we collect solely for the following purposes. Each use has a valid legal basis under Malaysia's PDPA 2010:

• Platform service delivery: Processing account registrations, verifying identities, handling deposits and withdrawals, and enabling you to play at 3phase.
• Security and fraud prevention: Detecting and preventing unauthorised account access, fraudulent activity, money laundering, and other breaches of our terms.
• Legal compliance: Fulfilling KYC requirements, reporting to relevant authorities in accordance with applicable Malaysian law, and maintaining records as required by law.
• Service communications: Sending you important account notifications, OTP verification, security information and relevant terms updates via email or SMS.
• Responsible gambling: Monitoring playing patterns to identify potential gambling issues and recommending appropriate responsible gaming tools to players who may need them.
• Platform improvements: Analysing aggregated and anonymised usage data to understand how players interact with 3phase and make meaningful improvements.
• Marketing communications: Sending information about promotions, bonuses, and new offers — only where you have given explicit consent to receive marketing communications from 3phase.

4Sharing Data with Third Parties

3phase does not sell, rent, or provide your personal data to third parties for their own marketing purposes. However, we may share your data in the following limited circumstances:

• Payment service providers: To process your deposits and withdrawals via DuitNow, FPX (Maybank2u, CIMB Clicks), Touch 'n Go eWallet, GrabPay, Boost and ShopeePay — only the minimum information necessary to complete each transaction is shared.
• Identity verification providers: To carry out KYC procedures for verifying your identity in accordance with Malaysian legal requirements.
• Authorities and law enforcement agencies: When required by Malaysian law, a court order, or a valid request from a relevant law enforcement agency.
• Technical service providers: Cloud infrastructure providers, cybersecurity services and technical support partners that help us operate the platform 3phase — all subject to strict confidentiality agreements.
• Business transfers: In the event of a merger, acquisition, or asset sale 3phase, your data may be transferred to the new entity — you will be notified in advance and will have the option to delete your account.

All third parties we work with are required to comply with data protection standards equivalent to or higher than those of 3phase itself. We conduct thorough due diligence on all third-party providers before granting them access to any data.

5Data Security Measures

3phase invests seriously in security technologies and processes to protect your personal data from unauthorised access, disclosure, alteration or destruction. The key security measures we employ include:

• 256-bit SSL Encryption: All data transmitted between your device and the 3phase encrypted using TLS 1.3 with 256-bit SSL — the same standard adopted by Malaysian banking institutions.
• Data-at-rest encryption: Sensitive data stored in our systems — including financial information and identity documents — is encrypted using robust AES-256 encryption.
• Two-factor authentication (2FA): We recommend and encourage two-factor authentication for all accounts 3phase to add an extra layer of security.
• Internal access controls: Access to players' personal data within internal systems 3phase is restricted to staff who require that access to perform their duties only, in accordance with the principle of least privilege.
• 24/7 Monitoring: A continuous security monitoring system detects any suspicious activity or unauthorised access attempts on the 3phase in real time.
• Regular security audits: 3phase conducts regular penetration testing and security audits carried out by independent third-party security specialists.
• Password management: Passwords are stored in an irreversible hashed format using the bcrypt algorithm — 3phase staff 3phase cannot see your actual password.

6Cookies & Tracking Technologies

3phase uses cookies and similar tracking technologies to enhance your experience on our platform. Below is an overview of the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication, session management and security. These cookies cannot be disabled without affecting the overall functionality of the platform.
• Preference Cookies: Remembering your preferences such as language settings, visual themes, and game preferences so you don't have to reconfigure them each time you log in to 3phase.
• Analytics Cookies: Collecting aggregated and anonymised information about how you use the platform to help us understand usage patterns and make improvements. This data does not identify you personally.
• Security Cookies: Helps detect suspicious activity and protect your account from unauthorised access and cyber threats.

You can manage your cookie preferences through your web browser settings. Disabling certain cookies may affect the functionality of some parts of the platform 3phase. We do not use third-party cookies for targeted advertising or to track your activity outside of the platform 3phase.

7Financial Transaction & Payment Data

The processing of financial transactions is the most sensitive aspect of data protection at 3phase, and we treat it with the utmost care. When you make a deposit or withdrawal using a local Malaysian payment method, here is how we handle your financial data:

• 3phase does not store your bank account number, card number or e-wallet credentials directly in our systems. Payment information is processed through certified third-party payment gateways.
• Every transaction is processed through encrypted, audited channels. Transaction records are retained for audit purposes and compliance with anti-money laundering laws as required under Malaysian legislation.
• All transactions at 3phase conducted exclusively in MYR — with no exposure to foreign currency exchange risk.
• Your complete financial transaction history is accessible via the transaction history menu in your 3phase your account at any time.

8Your Personal Data Rights

Under Malaysia's PDPA 2010, you have several important rights regarding the personal data held by 3phase. Below are those rights and how to exercise them:

To exercise any of the rights above, please contact 3phase via email at [email protected] with the subject line "Personal Data Rights Request". We will verify your identity before processing any data-related request to ensure the security of your account.

9Data Retention Period

3phase retains your personal data only for as long as necessary for the purpose it was collected, or to meet applicable legal requirements. Below is a general guide to data retention periods by category:

• Active account data: Retained for as long as your account remains active at 3phase and for any additional period required after account closure for legal compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years in compliance with Malaysian financial and anti-money laundering legislation.
• KYC and identity verification data: Retained for the duration of the active account and for a minimum of 5 years following account closure, in accordance with compliance requirements.
• Customer support communication logs: Retained for 2 years for reference and service improvement purposes.
• Anonymised analytics data: Anonymised data may be retained for a longer period for the purposes of trend analysis and platform improvement.
• Consent-based marketing data: Retained until you withdraw consent or request deletion, whichever comes first.

When data is no longer needed, 3phase will delete or anonymise that data using secure, irreversible procedures. Deletion is carried out periodically in accordance with the schedules set out in our internal data management policy.

10Changes to This Privacy Policy

3phase reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements or improvements in the way we protect your data.

When we make significant changes to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this document.
• Notifying you of significant changes to the platform 3phase when you log in.
• Sending email notifications to your registered address for changes that materially affect your privacy rights.

We encourage you to review this Privacy Policy page periodically. Your continued use of the 3phase after a policy change takes effect constitutes your acceptance of the latest version. If you do not agree with the changes made, please contact us to close your account and we will promptly process your withdrawal request for any remaining balance.

11Contact Us About Privacy

If you have any questions, concerns or complaints regarding this Privacy Policy, or how 3phase handle your personal data, or to exercise your data rights, please contact us through the following channels:

• Privacy Email: [email protected] — Please use the subject line "Privacy Policy Enquiry" or "Data Rights Request" to help us process your query faster.
• Live Chat: Available 24 hours a day, 7 days a week, directly within the 3phase.
• Response Time: Privacy enquiries are typically responded to within 3 business days. Formal data rights requests will be processed within 30 days in accordance with the requirements of PDPA 2010.

For general enquiries about the platform 3phase, please visit the Frequently Asked Questions ours first, as you may find the answers you need there without having to wait for a response from our team.