Does 356huat sell or share my information with advertisers?

No. 356huat has never sold, rented, or shared your personal information with advertisers or third-party marketing companies. This is our absolute commitment and is non-negotiable. The only circumstances in which we share information with third parties is with service providers who assist us in operating the platform (such as payment gateways for processing your Touch 'n Go or DuitNow transactions), and they are bound by strict confidentiality agreements. We are also legally required to share certain information with the relevant authorities when lawfully required to do so.

How do I request a copy of the personal data held about me?

To request a copy of the personal data 356huat holds about you, send an email to support@356huat.com with the subject line "DATA ACCESS REQUEST". Please include your full name and the phone number registered to your account for identity verification purposes. We will process your request and deliver a data report within 21 business days from the date the request is received and your identity is verified. Data will be sent in a readable format (typically PDF or CSV) to your registered email address. This service is provided free of charge.

What happens to my data if I close my 356huat account?

When you close your 356huat account, we will delete or anonymise data that is no longer required for operational purposes within a reasonable timeframe. However, certain data will be retained for periods prescribed by Malaysian law – specifically, financial transaction records (minimum 7 years) and KYC documents (minimum 5 years after account closure) under the AML Act and tax regulations. These are legal obligations we cannot waive even if you request full deletion. Retained data is only accessed when required for regulatory compliance and is not used for any other commercial purpose.

Is my bank card or e-wallet information safe at 356huat?

Yes. 356huat uses a multi-layered approach to protect your financial information. First, all transactions via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX are processed through certified payment gateways with 256-bit SSL encryption — meaning this information never passes through 356huat's servers in the open. Second, 356huat does not store your full account number, password, or e-wallet PIN in any of our systems. What we retain is only the account identifier needed to process withdrawals to the correct account. Third, all financial data stored in our databases is encrypted at rest using industry-grade encryption.

Can I opt out of receiving promotional emails from 356huat?

Yes, you can opt out of receiving marketing and promotional communications from 356huat at any time. There are two easy ways to do so: (1) Log in to your 356huat account, go to "Account Settings" and then "Notification Preferences" – uncheck the option to receive promotional emails and bonus notifications; or (2) Click the "Unsubscribe" link found at the bottom of any promotional email you receive from 356huat. Withdrawing this consent does not affect essential transactional and security emails such as OTP verification, transaction notifications, and account security updates – these will continue to be sent as they are necessary for the operation of the service.

What should I do if I suspect my account has been accessed without my authorization?

If you suspect your 356huat account has been accessed without authorisation, take the following steps immediately: (1) Change your account password straight away using the "Forgot Password" option or directly within your account settings if you are still able to log in; (2) Contact the 356huat support team via live chat or email at support@356huat.com with the subject line "ACCOUNT SECURITY INCIDENT" – provide your full name, registered phone number, and details of any suspicious activity you have noticed; (3) Review your login history and transaction records within your account to identify any unrecognised activity; (4) If you notice any unauthorised financial transactions, notify your e-wallet provider or bank as well. The 356huat security team will prioritise the investigation of account security issues and will contact you within 2 hours during operating hours.

356huat | Privacy Policy – Your Personal Data, Protected

Introduction

Welcome to Our Privacy Policy 356huat. This document has been prepared to give you complete clarity on how 356huat — a sports betting and online casino platform operating under the 356huat brand — handles your personal information across every aspect of our relationship.

We understand that entrusting your personal data to any online platform is not a decision to be taken lightly — especially when it involves financial information such as your Touch 'n Go e-wallet account number, DuitNow, GrabPay, or FPX banking details. That is why, 356huat built this privacy policy not merely to satisfy legal requirements, but to give you genuine assurance that your data is in responsible hands.

This Privacy Policy applies to all personal information collected through the 356huat, our mobile platform, customer support services, and all other interactions between you and our platform. By using 356huat, you acknowledge that you have read and understood this policy.

356huat complying with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. This policy is designed to explain your rights under the applicable legislation and how we ensure compliance with it.

Information We Collect

356huat collects various categories of personal information depending on how you interact with our platform. Below is a full breakdown of the types of data we collect and their sources.

A. Information You Provide Directly

Registration Information: Full name, Malaysian mobile number, password (stored in an unreadable hashed format), and date of birth for age verification.
KYC Verification: A copy of your MyKad, passport, or other valid identification document; proof of address; and any other related documents required for anti-money laundering (AML) regulatory compliance.
Payment Information: Details of the payment methods you use – whether Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or your FPX bank account information (Maybank2u, CIMB Clicks). Note: 356huat does not store credit card or debit card numbers directly — this information is processed through encrypted payment gateways.
Communicating with Us: Records of live chat conversations, emails, and other customer support interactions, including the content of your enquiries and complaints.
User Preferences: Settings you have chosen within your account, including deposit limits, betting limits, game preferences, and notification preferences.

B. Automatically Collected Information

Usage Data: Records of your gaming activity — including date, time, game type, bet amount, outcome, and session duration — are retained for audit, security, and suspicious activity detection purposes.
Device Information: Device type (Android/iOS/desktop), operating system, web browser version, screen resolution, and unique device identifier.
Network Information: IP address, internet service provider (ISP), approximate location (city/state) based on IP, and connection timestamps.
Cookie & Session Data: Information collected through cookies, web beacons, and similar tracking technologies to improve platform functionality and the user experience.

Data Category	Example	Primary Purpose
Identity	Full name, IC number, date of birth	Age verification, KYC, account
Relationship	Phone number, email	Communications, OTP, support
Financial	E-wallet, FPX bank account	Deposits, withdrawals, AML
Transactions	Betting records, winnings	Audit, security, tax
Technical	IP, device, browser	Security, fraud prevention
Usage	Sessions, clicks, game preferences	Platform improvements, UX

How We Use Your Data

356huat uses the personal information collected solely for legitimate and specific purposes. We do not use your data for any purpose not stated in this policy without first obtaining your consent.

Primary Purposes of Data Use

Account Management: Creating and managing accounts 356huat you, verify your identity and eligibility, and process any service requests you make.
Financial Transaction Processing: Processing deposits via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX; processing withdrawals; and maintaining accurate and complete financial transaction records.
Regulatory Compliance: Fulfilling our obligations under AML (Anti-Money Laundering), KYC (Know Your Customer), and other applicable financial regulations. This includes detecting and reporting suspicious transactions to the relevant authorities.
Platform Security: Detecting fraud attempts, unauthorised access, multi-account usage, and other cybersecurity threats that could compromise the platform or other members.
Customer Support: Responding to enquiries, resolving complaints, and providing technical support.
Responsible Gaming: Monitoring gaming patterns to identify signs of problem gambling and reaching out to members who may need assistance or intervention.
Service Communications: Sending important notifications relating to your account, changes to our terms, security updates, and promotional information (where you have consented to receive them).
Platform Improvements: Analysing aggregated usage data to understand usage patterns, identify technical bugs, and make data-driven decisions about improvements to be made to the platform 356huat.

356huat does not use your personal data to make automated decisions that materially affect your rights without human involvement. Every significant decision — including account closures, withdrawal holds, or the imposition of limits — is reviewed by our human team before any action is taken.

Legal Basis for Data Processing

356huat processing your personal data on one or more valid legal bases under Malaysia's Personal Data Protection Act 2010 (PDPA) and related legislation. These legal bases are:

Consent: For purposes such as marketing communications, promotional notifications, and analysis of gaming preferences, we process your data based on the consent you provided during registration or at a later time. You may withdraw this consent at any time through your account settings.
Contract Performance: To process deposits and withdrawals, maintain your account, and provide the services you request — this processing is necessary to fulfil the agreement between you and 356huat.
Legal Obligations: For KYC, AML, and reporting purposes to the relevant authorities – 356huat has legal obligations that must be fulfilled regardless of individual consent.
Legitimate Interests: For platform security, fraud prevention, and service improvement purposes — we have a legitimate interest that does not override your privacy rights.

Data Sharing with Third Parties

356huat does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. This is our absolute commitment. However, there are limited situations where we need to share certain information with other parties for our operational and legal compliance purposes.

Third-Party Service Providers

We share necessary data with service providers that help us operate the platform, including:

Payment Gateway Provider: To process deposits and withdrawals via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX. These providers receive only the information necessary to process the transaction and are bound by strict confidentiality terms.
Game Providers: Casino and slots software providers such as Evolution Gaming, Ezugi, SA Gaming, and others that supply games on the platform 356huat. Data shared is kept to a minimum and limited to what is necessary to launch and operate a game session.
Cloud Infrastructure Services: Cloud computing service providers that host and process our platform data. All such providers are subject to strict data processing agreements.
Identity Verification Services: Third-party KYC service providers who assist us in verifying member identities for AML compliance purposes.

Mandatory Disclosure to Authorities

356huat will disclose personal information to government authorities or law enforcement agencies when required to do so under Malaysian law or by a valid court order. This includes but is not limited to reporting suspicious transactions to Malaysia's Financial Intelligence Unit (UFIU) under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001.

Important: All third-party service providers that receive data from 356huat are bound by legally enforceable data confidentiality agreements and are strictly prohibited from using your data for any purpose beyond what is specified in those agreements.

Data Security

356huat implementing comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. The following are the key security layers we employ.

Technical Security

256-bit SSL/TLS Encryption: All communications between your device and the 356huat encrypted using SSL/TLS protocol with 256-bit encryption keys – the same standard used by major Malaysian banking institutions.
Data-at-Rest Encryption: Sensitive data stored in our databases – including KYC information and payment details – is encrypted at rest using industry-approved encryption algorithms.
Hashed Passwords: Your account password is never stored in plain text. It is processed through a strong hashing function and cannot be recovered by anyone, including the technical team at 356huat.
Layered Access Controls: Access to member personal data within internal systems 356huat is limited to employees who require that access to carry out their duties only, based on the principle of least privilege.
24/7 Security Monitoring: An automated security monitoring system operates around the clock to detect and respond to suspicious activity, intrusion attempts, and other security threats.
Regular Penetration Testing: 356huat conducting regular security and penetration testing by independent third parties to identify and address vulnerabilities before they can be exploited.

Organizational Security

All employees who handle members' personal data are required to sign confidentiality agreements and undergo regular data protection training.
Comprehensive security incident response procedures are in place and tested on a regular basis.
Internal security audits are conducted on a regular basis to ensure ongoing compliance with security policies 356huat.

While we implement robust security measures, no system is 100% immune to cyber threats. You also play an important role in protecting your account — use a strong, unique password, never share your login credentials, and contact us immediately if you suspect any suspicious activity on your account 356huat you.

Cookies & Tracking Technologies

356huat uses cookies and similar tracking technologies to enhance platform functionality and the user experience. This section explains the types of cookies we use and how you can manage them.

Types of Cookies We Use

Essential Cookies (Required): These cookies are required for the basic functionality of the platform 356huat — including login session verification, security, and platform stability. These cookies cannot be disabled without affecting platform functionality.
Functional Cookies: Saving your preferences such as your chosen language, selected betting limits, and other display settings so you don't have to reconfigure them every time you log in.
Analytics Cookies: Collecting aggregated information on how users interact with our platform – most frequently visited pages, typical navigation paths, and general usage patterns – to help us improve the platform. This data does not contain any personally identifiable information.
Security Cookies: Helps us detect and prevent suspicious activity, unauthorised login attempts, and other security threats.

Managing Cookies

You can manage your cookie settings through your web browser. Most modern browsers allow you to view, delete, and block cookies from specific websites. However, disabling essential cookies may affect your ability to use the platform. 356huat entirely. Please refer to your browser's help documentation for guidance on managing cookies on your device.

Data Storage & Transfer

Data Retention Period

356huat retains your personal data for as long as your account remains active, or for as long as necessary for the purposes for which it was collected, plus any additional period required to fulfil our legal obligations. The specific retention policy is as follows:

Active Account Data: Retained for as long as your account is active and for 7 years after account closure for legal compliance purposes.
Financial Transaction Records: Retained for a minimum of 7 years as required under Malaysian financial and tax legislation.
KYC Records: Retained for a minimum of 5 years after the end of the business relationship, as required by AML regulations.
Communication Logs: Customer support records and complaint-related communications are retained for 2 years for reference and service improvement purposes.
Analytics Data: Aggregated and anonymized usage data may be retained for longer periods for trend analysis purposes.

Cross-Border Data Transfers

In the course of delivering our services, your data may be processed or stored on servers located outside Malaysia, particularly in connection with international casino game providers and cloud infrastructure. Nevertheless, 356huat ensuring that any such data transfers are subject to adequate safeguards through data processing agreements that meet protection standards equivalent to Malaysia's PDPA.

Your Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and our privacy policy, you have the following rights regarding your personal data held by 356huat. We are committed to respecting and facilitating the exercise of these rights.

Right of Access

You have the right to request a copy of the personal data we hold about you. Submit your request by email to support@356huat.com with the subject line "Data Access Request". We will respond within 21 business days.

Right to Rectification

If the personal data we hold about you is inaccurate or out of date, you have the right to request a correction. You may update certain information directly in your account settings 356huat yours, or by contacting our support team for information that requires document verification.

Right to Erasure

Under certain circumstances, you have the right to request the deletion of your personal data. However, please note that this right is limited by our legal data retention obligations – in particular, financial records and KYC records that must be retained for the periods prescribed under Malaysian law.

Right to Withdraw Consent

For data processing based on your consent – such as marketing communications and promotional notifications – you may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. This can be done through the notification settings in your 356huat you.

Right to Restrict Processing

In certain situations — such as when you are disputing the accuracy of your data or during a complaint investigation — you have the right to request a temporary restriction on the processing of your data. To make this request, contact us at support@356huat.com.

Right to Lodge a Complaint

If you believe that 356huat is not handling your data in accordance with this Privacy Policy or Malaysia's PDPA, you have the right to raise a complaint with us first at support@356huat.com. If you are not satisfied with our response, you may refer the matter to the Personal Data Protection Commissioner of Malaysia.

Children's Data

356huat is an exclusive platform for individuals aged 21 and above. We do not knowingly collect, process, or store personal data of individuals under the age of 21. Our registration process includes age verification, and we conduct KYC checks to confirm this.

If you believe that a child or underage individual has registered an account at 356huat, please notify us immediately by email at support@356huat.com. We will take prompt action to investigate and, if confirmed, close the account and delete all associated data.

Parents and guardians concerned about potential underage access to online gambling platforms may use the parental control features on their devices as an additional layer of protection.

Third-Party Links

Platform 356huat may contain links to third-party websites or services from time to time, including payment provider help pages or game provider documentation. Privacy Policy 356huat does not apply to those third-party websites or services.

We recommend reading the privacy policy of every website you visit after leaving the 356huat. 356huat is not responsible for the privacy practices or content of any third-party websites that you may access via links within our platform.

Changes to This Privacy Policy

356huat reserves the right to update or amend this Privacy Policy at any time. Such changes may occur in response to developments in data protection legislation, changes in our business practices, or changes in the types of services we offer.

When we make material changes to this Privacy Policy, we will notify you through:

A notice displayed prominently on the platform's main page 356huat.
Notification emails sent to the address registered to your account.
In-platform notifications for users who are currently logged in.

The "Last Updated" date shown at the top of this document reflects the date of the most recent version of this Privacy Policy. We encourage you to review this policy periodically. Continued use of the 356huat after changes are published will be considered acceptance of the updated version of the Privacy Policy.

Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how 356huat handles your personal data, please contact us through the following channels:

Privacy Email: support@356huat.com (Please use the subject line: "PRIVACY – [Query Type]")
Live Chat: Available 24/7 in Bahasa Melayu via the chat icon on the platform 356huat
Response Time: Privacy enquiries submitted via email are responded to within 5 business days; urgent security issues are prioritised and addressed within 24 hours

For formal requests relating to personal data rights (access, correction, or deletion), please send an email with the subject line "DATA RIGHTS REQUEST" along with your account details (full name and registered phone number) to facilitate identity verification before your request is processed.

356huat committed to addressing every privacy enquiry with transparency and professionalism. Your privacy is our priority.

356huat Privacy Policy – Malaysia Personal Data Protection

Contents