3star Privacy Policy – Malaysian User Data Protection

This Privacy Policy applies to all users who access or use the 3star platform, including those browsing the website without registering an account, registered users making full use of our services, and any individual interacting with our platform through any channel, including live chat and customer support email.

3star is the data controller for all personal information collected through our platform. We are committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection. This means we only process your personal data on a valid legal basis, for clear and defined purposes, and to the extent necessary to provide our services to you.

We encourage you to read this Privacy Policy in full. If you have any questions after doing so, our data protection team is available to help via live chat or email at support@3star-bangla.com.

3star collects your personal data through various channels when you use our platform. Below are the categories of data we collect and how we collect them:

2.1 Data You Provide Directly

• Registration information: Your Malaysian phone number, your chosen username, and your password (stored as an irreversible hash that cannot be decrypted).
• Profile information: Full name, date of birth, email address (if provided), and any other demographic information you choose to add to your profile.
• Identity verification (KYC) information: Identity documents such as a MyKad or Malaysian passport, required for the verification process for withdrawals above a certain threshold or upon compliance request.
• Payment information: E-wallet account details (Touch 'n Go, GrabPay, Boost, ShopeePay) or bank account information for deposit and withdrawal purposes. We do not store your credit card number or online banking password.
• Customer support communications: Live chat records, emails, and any other communications you have had with the 3star support team.

2.2 Automatically Collected Data

• Platform usage data: The games you play, bet amounts, session duration, wins and losses, and your navigation patterns within the platform.
• Technical data: IP address, device type, operating system, browser type, screen resolution and other technical information relevant to ensuring the platform functions correctly on your device.
• Location data: Approximate location based on IP address to ensure regional compliance and account security. 3star does not collect GPS data from your device.
• Cookie and tracking technology data: As described in Section 8 of this document.

3star uses the personal data collected for the following purposes only, and for no other purpose without your additional consent:

• Account management: Creating and managing your account, processing registrations, verifying identity and maintaining account security, including detection of unusual login activity.
• Gaming services provision: Enables you to access and play all games on the platform, records your game history for review and dispute purposes, and processes winnings and payouts.
• Financial transaction processing: Processing deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks), as well as withdrawals to the same payment methods. All transactions are recorded for financial compliance and fraud detection purposes.
• VIP programme and promotions: Calculating VIP points, determining weekly cashback eligibility, and delivering promotional offers relevant to your usage patterns – provided you have agreed to receive marketing communications.
• Customer support: Resolving enquiries, complaints, and technical issues that you report to the 3star support team.
• Legal compliance: Meeting legal compliance obligations, including PDPA requirements, anti-money laundering (AML) requirements, and directives from relevant authorities.
• Platform improvements: Analysing usage patterns in aggregate (not at an individual level) to identify ways to improve platform performance, the user interface, and the overall gaming experience.
• Fraud detection and security: Identifying and preventing fraudulent activity, multi-account use, bonus exploitation, and any security threats to the platform or other users.

We will not use your data for any purpose beyond those stated above without first obtaining your consent.

3star does not sell, rent, or transfer users' personal data to third parties for their own commercial purposes. However, in the course of operating the platform, there are limited situations where data may need to be shared:

All third parties working with 3star are required to comply with strict data protection standards and may only use shared data for the stated purposes. We ensure that all data sharing is governed by appropriate data protection agreements.

Protecting your personal data is 3star's highest priority. We implement multiple layers of technical and organisational security measures to safeguard your data against unauthorised access, loss, destruction or disclosure:

• Encryption in transit: All communications between your device and 3star's servers are encrypted using TLS 1.3 protocol with 256-bit SSL encryption — the same technology used by Maybank2u, CIMB Clicks, and Malaysia's leading financial institutions.
• Data-at-rest encryption: Sensitive data stored in our databases, including payment information and identity details, is encrypted at rest using industry-standard encryption.
• Access management: Access to user data is strictly limited to staff who need it to carry out their job responsibilities. All access is logged and automatically monitored to detect any unusual activity.
• Regular security audits: The 3star platform undergoes regular penetration testing and security audits by independent cybersecurity experts to identify and address any vulnerabilities before they can be exploited.
• Two-factor access control: All internal systems storing user data are protected by mandatory two-factor authentication (2FA) for all staff with access.
• 24/7 Monitoring: An automated monitoring system operates around the clock to detect and respond to security threats in real time.

While we take all reasonable steps to protect your data, no security system can be guaranteed 100% secure. You also play an important role in your account's security — please use a strong password, do not share your login credentials, and contact us immediately if you suspect any suspicious activity on your account.

3star retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required under applicable Malaysian law. The following are general retention guidelines for key data categories:

• Active account data: Retained for as long as your account remains active on the 3star platform. If your account has been inactive for 12 consecutive months, we may contact you before making a decision on data retention.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian accounting legislation and financial compliance requirements, even after account closure.
• KYC Documents: Retained for a minimum of 5 years after the business relationship ends, in accordance with Malaysia's anti-money laundering (AML) legal requirements.
• Customer support communication records: Retained for 2 years from the date of communication for reference and dispute resolution purposes.
• Game history records: Retained for 90 days in active systems for user review, and up to 5 years in system archives for compliance and dispute purposes.
• Cookie data: Duration varies by cookie type as described in Section 8. Session cookies expire when you close your browser; persistent cookies have a stated expiry date.

Once the relevant retention period has elapsed, your data will be securely deleted or anonymised in accordance with established data deletion procedures.

As a 3star user covered under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data: