368e | Privacy Policy and Player Data Protection

1 Introduction & Scope of Privacy Policy

368e is an online casino platform operating exclusively for the Malaysian market. We regard the protection of players' personal data as one of the most important responsibilities we carry as an ethical and accountable platform operator. This Privacy Policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international standards.

This Privacy Policy applies to all personal information collected by 368e through our official website, mobile platform, email communications, live support chat and any other interactions between you and the platform 368e. This includes information you provide directly during registration, as well as data collected automatically while you use our platform.

We understand that Malaysian players have legitimate concerns about online privacy — especially when it involves sensitive financial and personal information. With that in mind, 368e adopts a "privacy by design" approach, where data protection is built into every technical and operational decision we make from the outset — not treated as an afterthought.

368e Privacy Commitment: Your personal information has never been, and will never be, sold to advertisers, marketing companies, or any third party for commercial purposes. This is a core principle that remains absolute under all circumstances.

2 Types of Personal Data We Collect

368e collects two main categories of data: information you provide directly and information collected automatically when you use our platform. Below is a detailed explanation of each category:

A. Information You Provide Directly:

Registration Information: Your full name, active Malaysian phone number, email address and date of birth as entered when registering your 368e account.
Identity Verification (KYC) Information: A copy of your MyKad, another recognised identification card, or supporting documents requested to verify your identity for compliance and security purposes.
Financial Information: Payment method details you use — including phone numbers linked to Touch 'n Go eWallet, GrabPay, Boost, ShopeePay or DuitNow, as well as bank account information for withdrawal processing via FPX, Maybank2u or CIMB Clicks.
Communications: Records of your conversations with the 368e support team via live chat, email, or any other communication channels we provide.

B. Information Collected Automatically:

Technical Data: IP address, device type, operating system, browser version, and language settings.
Usage Data: Pages visited, time spent on the platform, games played, visit frequency and actions taken within 368e.
Transaction Data: Deposit, withdrawal, wagering and winnings history generated through legitimate use of the 368e platform.
Location Data: General location based on IP address to ensure 368e services are accessed only from permitted locations.

Data Category	Example	Purpose of Collection
Identity	Full name, MyKad, date of birth	Verification & compliance
Contact	Phone, email	Communication & security
Financial	E-wallet, bank account	Payment processing
Technical	IP, device, browser	Security & analytics
Usage	Games played, duration	Platform improvements

3 How 368e Uses Your Data

368e uses personal data collected solely for legitimate, necessary and relevant purposes in connection with providing you our online casino platform services. The following outlines each specific purpose for which your data is used:

Account Management: Creating, maintaining and securing accounts 368e yours — including identity verification, password management and processing service requests related to your account.
Transaction Processing: Processes deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, as well as withdrawals of winnings to your bank account or e-wallet — quickly and securely.
Gaming Services Provision: Enabling you to access and enjoy all games available on the platform 368e, including slots, live casino, baccarat, roulette and all other games available on our platform.
Service Communications: Sends you important notifications about your account, system updates, policy changes and relevant security information through your registered communication channels.
Promotions & Marketing (With Consent): Contacting you about bonus offers, ongoing promotions, and platform updates 368e that may interest you — only if you have consented to receive such marketing communications at the time of registration or at a later date.
Legal Compliance: Fulfilling compliance obligations required under Malaysian law, including anti-money laundering (AML) requirements, customer identification (KYC) and mandatory reporting to the relevant authorities.
Platform Improvements: Analysing usage patterns on an aggregated and anonymised basis to better understand the needs of Malaysian players and make ongoing improvements to the user experience 368e.
Fraud Prevention & Security: Detecting, investigating and preventing fraudulent activity, bonus abuse, money laundering or any security threats to the platform and its members 368e.

4 Sharing Information with Third Parties

368e does not sell, rent or share your personal information with external parties for commercial purposes. However, there are limited situations where we need to share data with specific parties in order to deliver the services you use or to comply with the law:

Payment Service Providers: Minimum transaction data shared with e-wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) and banking institutions (Maybank, CIMB, and other banks via FPX) solely for the purpose of securely processing your deposits and withdrawals.
Game Software Providers: Required game session data is shared with third-party game providers (such as Pragmatic Play, Relax Gaming, and others) solely to enable games to function correctly within the 368e. These providers are subject to strict data confidentiality agreements.
Legal Authorities: 368e will disclose personal information to Malaysian authorities when required by law, court order or valid legal process — including investigations related to fraud or money laundering.
Technical Service Providers: Third-party companies that provide technical infrastructure services to 368e — such as server hosting, cybersecurity, and analytics — may have limited access to certain data, but solely to carry out their contracted technical functions and for no other purpose.

All third parties with access to your data in connection with 368e's services are bound by legally enforceable data protection agreements. They are strictly prohibited from using your data for any purpose other than what has been agreed upon in their service contract with 368e.

5 368e Data Security Measures

368e implements multiple layers of technical and organisational security controls to protect your personal data from unauthorised access, loss, alteration, or unintended disclosure. This goes beyond mere compliance — it is a serious investment we make to preserve the trust of every one of our Malaysian members.

368e Platform Security Status

Data Encryption in Transit (SSL/TLS) Active 24/7

Stored Data Encryption (AES-256) Active 24/7

Two-Factor Authentication (2FA) Available

Real-Time Security Monitoring Active 24/7

Independent Security Audit Periodic

Incident Response Plan Available

Overall System Security100%

Data Standards Compliance100%

Threat Detection Rate98%

Incident Response Time97%

While we implement comprehensive security measures, no online system can guarantee absolute 100% security under all circumstances. We therefore encourage you to take your own personal security precautions, such as using a strong password, not sharing your login credentials, and always logging out of your 368e when using a shared device.

6 Cookies & Tracking Technologies

368e uses cookies and similar tracking technologies to enhance your experience on our platform, ensure proper functionality and understand how Malaysian players interact with our platform. The following are the types of cookies we use:

Essential Cookies (Required): These cookies are required for the platform's core functionality 368e — including maintaining your login session, form security, and language preference settings. Without these cookies, the platform cannot function properly and you will be unable to log in or play.
Analytics Cookies: We use analytics tools to understand how players use the platform 368e — including the most frequently visited pages, most popular games and general navigation patterns. All such data is collected in aggregate and anonymised so that no individual is identified.
Functional Cookies: These cookies remember your preferences — such as your selected language, display settings, and game preferences — to ensure a more personalised and comfortable experience each time you log in to 368e.
Security Cookies: Used to detect and prevent fraudulent activity, unauthorised access and other security threats to your account on the platform. 368e.

Most web browsers allow you to control or delete cookies through your browser settings. Please note, however, that deleting or blocking essential cookies may affect the functionality of the platform 368e and prevent you from logging in or accessing certain features.

7 Data Storage & Transfers

Your personal data collected by 368e stored on secure servers with full encryption. 368e retains your personal data for as long as your account remains active and for the required period following account closure to fulfil legal obligations, resolve disputes and enforce our agreements.

The data retention period applicable to the account 368e:

Active Account Data: Retained for the duration your account remains active and for up to 7 years after account closure, in accordance with Malaysian legal compliance requirements.
Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian accounting and anti-money laundering legal requirements.
Security Logs: Retained for 2 years for investigation and fraud detection purposes.
Support Communication Records: Retained for 3 years for reference and dispute resolution purposes.

Once the retention period has expired and there is no legal obligation to retain the data, 368e will securely delete or anonymise your data in accordance with accepted industry standards.

8 Your Rights as a 368e Player

As a member of 368e and data subjects under Malaysian data protection law, you have the following rights regarding your personal information that we hold:

Right of Access

You have the right to request a copy of all personal data that 368e we hold about you at any time. Requests will be processed within 30 business days from the date a complete application is received.

Right to Rectification

If any personal data held by 368e is inaccurate or out of date, you have the right to request an immediate correction. Some information can be updated directly through your 368e account profile settings.

Right to Erasure ("Right to be Forgotten")

You may request the deletion of your personal data from our systems 368e under certain circumstances — such as when data is no longer needed for the purpose for which it was originally collected. However, this right is subject to legal obligations that may require us to retain certain data.

Right to Object to Marketing Processing

You may withdraw your consent to receive marketing communications from 368e at any time by contacting our support team or using the "unsubscribe" link in any marketing email we send you.

Data Portability Rights

In certain circumstances, you have the right to receive your personal data in a machine-readable format and transfer it to another service provider of your choice.

To exercise any of the above rights, please contact our support team 368e via email at [email protected] by clearly stating your request. We will verify your identity before processing any data-related request to ensure the security of your information.

9 Child Protection Policy

368e strictly prohibits the use of the platform by individuals under the age of 18. We do not knowingly collect or process any personal information from minors or underage individuals.

If 368e finds that personal data belonging to a child under the age of 18 has been collected without valid parental or guardian consent, we will immediately take the following steps:

Immediately suspending the account in question without prior notice.
Permanently removing all related personal data from our systems within a short timeframe.
Not processing any withdrawals or transactions associated with that account.
Reporting the case to the relevant authorities if necessary.

If you suspect that someone under the age of 18 is using the platform 368e, please notify us immediately at [email protected]. Child protection is a shared responsibility that we take extremely seriously.

10 Links to Third-Party Platforms

Platform 368e may contain links to or integrations with third-party services — such as payment providers (Touch 'n Go, GrabPay, DuitNow and others) and game software providers. When you click on such links or use integrated third-party services, you will be leaving the controlled environment of 368e and entering third-party platforms that operate under their own privacy policies.

368e is not responsible for the privacy practices, content, or security policies of any third-party websites or services that may be linked to or integrated within our platform. We encourage you to read and understand the Privacy Policy of each third-party service provider you engage with while using the 368e.

11 Changes to This Privacy Policy

368e reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, updates to Malaysian data protection laws, or improvements in how we safeguard player information. The date of the latest revision will always be displayed at the top of this document.

When we make material changes to this Privacy Policy, we will notify you via:

Clear in-platform notifications 368e upon your next login.
Email to the address registered on your account (for significant amendments).
Updates will be reflected on the "Last Updated" date shown at the top of this page.

Continued use of the platform 368e after any changes to this Privacy Policy take effect will be considered your acceptance of the amended Privacy Policy. If you do not agree with the changes made, please stop using the platform and contact us to request account closure.

12 Contact Us About Privacy

If you have any questions, concerns or requests regarding this Privacy Policy 368e or how we handle your personal data, our Data Privacy team is always ready to assist you at any time.

How to reach us:

Email: [email protected] — we aim to respond within 24 hours on business days.
Live Chat: Available 24 hours a day, 7 days a week via the chat icon within the platform 368e.

When contacting us regarding data privacy, please clearly state:

The full name and phone number registered to your 368e account.
The type of request you are making (data access, correction, deletion, etc.).
Specific details about your concern or request.

We are committed to addressing all privacy-related enquiries with care and thoroughness. No request relating to your personal data will be ignored or declined without a reasonable explanation. Contact us at [email protected] today.

368e Privacy Policy – Malaysian Player Data Protection

368e's Data Protection Commitment to Malaysian Players