Privacy Policy 365huat — Your Personal Data Protection

1Introduction

365huat ("we", "Platform") is committed to protecting the privacy of every member who uses our services. This Privacy Policy explains our practices regarding the collection, use, disclosure, and protection of your personal information when you use the 365huat platform via our official website or mobile app.

This document is prepared in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. We regard your trust as our most valuable responsibility — and safeguarding your personal data with full accountability is how we honour that trust.

By registering an account or continuing to use the 365huat platform, you consent to the collection and use of your personal information as described in this Privacy Policy. If you disagree with any part of this policy, please stop using the platform and contact us to close your account.

2Data We Collect

We collect various types of personal information to enable us to provide you with a secure, efficient, and personalized service. The following are the categories of data we collect:

Data is collected through various means: directly when you register or fill in a form, automatically through our systems as you use the platform, and occasionally from trusted third parties such as identity verification providers and licensed payment processors.

3How We Use Your Data

Your personal information is used responsibly for the following purposes:

• Account management — Create, verify, and maintain your account, including required KYC processes.
• Transaction processing — Process deposits, withdrawals, and all financial transactions securely and accurately.
• Platform security — Detect and prevent fraud, money laundering, unauthorised access, and other harmful activities.
• Legal compliance — Fulfil obligations under gambling laws, AML, KYC, and applicable regulatory requirements.
• Service communications — Send account notices, security updates, transaction information, and customer support responses.
• Responsible gaming — Monitors betting habits to identify members who may need support and early intervention.
• Service improvement — Analyse usage patterns to improve the platform, diversify games, and refine the user experience.
• Marketing communications — Send promotions, offers, and the latest news — only to members who have given their consent.

4Information Sharing & Disclosure

365huat does not sell, rent, or trade your personal information to any third party for their own commercial purposes. This is our absolute commitment. However, there are limited situations where data sharing is necessary and lawful:

• Licensed payment processors — Transaction information that must be shared with payment gateway providers to process your deposits and withdrawals.
• Identity verification providers — Identification data required by accredited KYC third parties to verify your identity.
• Technical infrastructure — Cloud and hosting service providers supporting platform operations, subject to strict confidentiality agreements.
• Legal requirements — When required by a court, regulatory body, law enforcement agency, or AML compliance obligations.
• Rights protection — Where necessary to investigate fraud, protect the platform's rights, or defend legal claims.

5Data Security

We continuously invest in security infrastructure to ensure your data is always protected against unauthorized access, loss, or misuse. Key security measures we implement include:

• 256-bit SSL encryption for all data communications between your device and our servers.
• AES-256 encryption for sensitive data stored in our databases.
• Two-factor authentication (2FA) is available and strongly recommended for all member accounts.
• 24/7 security monitoring with real-time threat detection systems.
• Regular security audits conducted by qualified, independent cybersecurity firms.
• Strict internal access controls — only specifically authorized staff may access member personal data.
• Regular encrypted data backups to ensure continuity of service.

You also play an important role in keeping your account secure. Make sure you use a strong password, do not share your login credentials with anyone, and contact us immediately if you suspect any suspicious activity on your account.

6Cookies & Tracking Technologies

365huat uses cookies and similar tracking technologies to enhance your experience, maintain session security, and help us understand how the platform is used. Cookies are small text files stored on your device when you visit our platform.

Types of cookies we use:

• Essential Cookies — Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Performance Cookies — Collect information on how you use the platform to help us identify technical issues and improve loading speeds.
• Functional Cookies — Store your preferences such as language, display settings, and location to deliver a more personalised experience.
• Analytics Cookies — Helps us understand platform usage patterns in aggregate and anonymised form for continuous improvement.

7Your Rights Over Your Personal Data

As a 365huat member and data subject under Malaysia's PDPA, you have the following rights regarding your personal information:

• Right of Access — Request a copy of the personal information we hold about you.
• Right to Rectification — Request correction of any inaccurate or incomplete personal information.
• Right to Erasure — Request deletion of your personal data under certain conditions, subject to our legal retention obligations.
• Right to Restrict Processing — Request that we restrict how we use your data in certain circumstances.
• Right to Object — Object to the processing of your data for direct marketing purposes.
• Right to Data Portability — Receive your data in a structured, machine-readable format.
• Right to Withdraw Consent — Withdraw your consent for certain processing at any time.

8Data Retention

365huat retains your personal information for as long as your account remains active or as long as it is needed to provide services to you. Specific retention periods depend on the type of data and applicable legal requirements.

• Financial transaction records — Retained for a minimum of 7 years as required by financial compliance and AML regulations.
• Identity verification (KYC) data — Retained for the duration of active membership plus 5 years after account closure.
• Support communication logs — Retained for 3 years for reference and dispute resolution purposes.
• Analytics and usage data — Retained in anonymised form for 2 years from the date of collection.
• Marketing data — Deleted when you withdraw consent or close your account.

When data is no longer required, it is securely deleted using industry-standard methods, or permanently anonymised so that it can no longer be linked to you.

9International Data Transfers

As an online platform operating under an international licence, some of your data may be stored or processed on servers located outside Malaysia. This includes cloud infrastructure supporting our platform's technical operations.

All international data transfers we carry out are subject to adequate safeguards, including:

• Data processing agreements compliant with data protection standards equivalent to Malaysia's PDPA.
• Use of infrastructure that is licensed and compliant with international security standards such as ISO 27001.
• Regular assessments of service providers to ensure data protection standards are maintained.

10Minors & Underage Users

365huat is not intended for individuals under the age of 18. We do not knowingly collect or process personal information from minors below the specified age limit.

If we discover that we have inadvertently collected personal information from an individual under the age of 18, we will take immediate steps to delete that information and close the account in question. Parents or guardians who become aware that a child under their care has registered an account on our platform are requested to contact us immediately.

11Contact Us & Policy Updates

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Privacy Officer through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 on 365huat
• Telegram: Through official 365huat support channels

We are committed to addressing any concerns seriously and will respond within 3 business days. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in Malaysia.

365huat reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Material amendments will be communicated to you via your registered email or a prominent notice on the platform at least 14 days before taking effect. Your continued use of the platform after such amendments take effect constitutes your acceptance of the updated policy.