Privacy Policy 325i – Protecting Your Personal Data

325i (hereinafter referred to as "we", "our platform", or "325i") takes seriously our responsibility to protect the personal data of every member and user on our platform. This Privacy Policy explains in detail how we collect, process, store, protect, and where necessary, disclose your personal data when you use our online casino platform 325i.

This document has been prepared in compliance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA), the primary legal framework governing the use of personal data in Malaysia. 325i is committed to complying with all provisions of PDPA 2010 and any other applicable related legislation.

This Privacy Policy applies to all information collected through the 325i website, mobile app, and any of our official communication channels, including email and customer support Live Chat. We encourage you to read this document carefully and to contact us if any section is unclear or requires further clarification.

325i collects various types of personal data from members and users of our platform. This data is gathered through a number of different methods depending on the context of use.

Data you provide directly:

• Identity information: Full name, date of birth, identity card or passport number, and images of identity documents uploaded during account verification.
• Contact information: Malaysian mobile number, email address, and residential address.
• Account information: Your chosen username, password (stored in encrypted form), and security questions.
• Payment information: E-wallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow details, and FPX information linked to your bank account (Maybank2u, CIMB Clicks) — all stored in tokenised form for security.

Data collected automatically:

• Device data: Device type, phone model, operating system (Android/iOS), browser version, and screen resolution.
• Connection data: IP address, internet service provider (ISP), general location based on IP (state only), and login timestamps.
• Activity data: Gaming records, betting history, total deposits and withdrawals, login frequency, and session duration.
• Cookie data: Information collected through cookies and tracking technologies, as described further in Section 6.

Personal data collected by 325i is used solely for legitimate purposes directly related to the operation of our platform. Below is a full list of the purposes for which your data is used:

• Identity verification and eligibility: Verifying that you meet the age requirement (21 and above) and membership eligibility 325i as stipulated.
• Account management: Creating, managing, and maintaining your account 325i including the login process and account security.
• Transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u FPX, and CIMB Clicks FPX, as well as managing your withdrawal of winnings.
• Provision of gaming services: Running slot games such as Fish Hunter, Cash Rocket, Power of Thor, Cai Shen, Fat Banker, Safari Wilds, Live Casino games, Andar Bahar, and all other games available on the platform 325i.
• Customer support: Helping you resolve technical issues, answer enquiries, and address complaints via Live Chat and email.
• Legal compliance: Fulfilling legal obligations under PDPA 2010, anti-money laundering legislation (AMLA), and any other applicable Malaysian regulations.
• Platform security: Detecting and preventing fraud, hacking, unauthorised access, and conduct that violates our terms of service 325i.
• Service improvement: Analysing usage patterns in aggregate (without identifying individuals) to improve the platform's user experience 325i.
• Official communications: Sending important notifications regarding your account, changes to our terms, or security issues that require your attention.

325i does not sell, rent, or disclose your personal data to any third party for commercial purposes. Your data belongs to you and we take its protection seriously. However, there are limited situations where data sharing may occur:

• Technical service provider: Companies that provide technical infrastructure services, server hosting, and payment processing required for the operation of 325i. All of these providers are bound by strict confidentiality agreements and are only permitted to use your data for purposes specified by 325i only.
• Regulatory and law enforcement bodies: Where required by a valid court order, a directive from Malaysia's Personal Data Protection Department, or a lawful request from a Malaysian law enforcement agency.
• AMLA Compliance: Information required to be disclosed to the Financial Intelligence Unit (UFIKE) or relevant agencies to fulfil legal obligations relating to anti-money laundering and counter-terrorism financing.
• Independent audit: Appointed audit body for verifying game fairness and RNG systems 325i — only technical game data is shared, not members' personal data.

325i invests heavily in security technologies and procedures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. The security measures we implement include:

• 256-bit SSL Encryption: All communications between your device and the 325i is encrypted using industry-standard Transport Layer Security (TLS) technology — the same standard used by Malaysia's leading banks.
• Payment data tokenisation: Sensitive payment details such as e-wallet account numbers are never stored in plain text. All such data is converted into secure tokens that cannot be used by any third party, even in the event of a breach.
• Two-factor authentication (2FA): Two-factor authentication is available to all members 325i to add an extra layer of protection to your account.
• 24/7 Monitoring: Our systems are continuously monitored to detect any suspicious activity or unauthorised access attempts on the platform 325i.
• Internal access controls: Members' personal data is accessible only to staff 325i who have a legitimate operational need, and all access is logged and audited on a regular basis.
• Regular security testing: 325i conducts regular penetration testing and security audits to identify and address vulnerabilities before they can be exploited.

Platform 325i uses cookies and similar tracking technologies to enhance the user experience, maintain your login session, and understand how members use our platform. Below is an explanation of the types of cookies we use:

You can manage your cookie settings through your web browser. However, disabling certain cookies — particularly essential cookies — may affect the functionality of the platform 325i and may cause issues when logging in or playing games. We recommend keeping your default cookie settings for the best experience.

325i does not use cookies for third-party advertising purposes or to track your activity on other websites outside our platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by 325i. We fully respect and facilitate the exercise of these rights:

• Right to access: You have the right to request a copy of the personal data we hold about you. Such requests will be processed within 14 working days.
• Right to correction: If any personal data we hold about you is inaccurate or incomplete, you have the right to request an immediate correction.
• Right to withdraw consent: You may withdraw your consent to the use of your personal data at any time, particularly in relation to marketing communications. However, such withdrawal does not affect the validity of any processing that has already taken place.
• Right to object: You have the right to object to the processing of your personal data for specific purposes, subject to any legal obligations we are required to fulfil.
• Right to erasure: Under certain circumstances, you may request that we delete your personal data. Such requests will be considered in light of our legal obligations to retain certain records.
• Right to lodge a complaint: If you are not satisfied with how 325i handles your personal data, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.

325i retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable Malaysian law.

General data retention policy 325i is as follows:

• Active account data: Retained for the duration that your account remains active on 325i and updated each time you make changes to it.
• Financial transaction records: Retained for a minimum of 7 years following the date of the transaction, in line with Malaysian accounting and tax legislation and AMLA requirements.
• Game activity logs: Retained for 2 years from the date of activity for complaint verification and internal audit purposes.
• Customer support communication records: Retained for 2 years from the date of your last interaction.
• Closed account data: Basic information is retained for 5 years after account closure to meet legal requirements and prevent unauthorised re-registration.

Once the retention period has ended, your personal data will be securely deleted or anonymised so that it can no longer be associated with you. The deletion process employs methods that ensure data cannot be recovered by any party.

Platform 325i is strictly for individuals aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. Should we discover that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account.

Parents and guardians are responsible for monitoring their children's internet use and ensuring they do not access the platform 325i or any online gambling platform not intended for minors.

The security of your payment information is our highest priority 325i. We process payments through methods that are widely recognised and used across Malaysia:

All financial transactions on the platform 325i are processed through secure, encrypted payment channels. We apply tokenisation to all payment data — meaning your actual account number is never stored in our systems in readable form. Instead, we retain only a unique token representing your payment method, to facilitate future transactions.

325i does not request and has never stored sensitive information such as your PIN number, e-banking password, or OTP. If anyone claims to be a staff member of 325i and requests such information, please treat it as a fraudulent attempt and contact us immediately through our official channels.

All financial transaction information is stored and protected in accordance with strict industry standards, and is accessible only to 325i who have a legitimate operational need, or in the context of complaint investigations or legal compliance requirements.

325i reserves the right to modify or update this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or service improvements. The date of the most recent update will always be displayed at the top of this document.

For changes that we consider material and significant to the way we use your personal data, we will endeavour to notify you via your registered email address or through an in-platform notification 325i at least 14 days before any changes take effect. This gives you sufficient time to read and understand the updates.

Continued use of the platform 325i after the effective date of any Privacy Policy changes will be considered your acceptance of the latest version. If you do not agree with any changes, please stop using the platform and contact us to close your account.

We encourage you to review this page regularly — at least once every three months — to stay informed about how 325i handles your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or how 325i handles your personal data, we encourage you to contact us directly. Our team is ready to assist you in Bahasa Melayu.

You may contact the privacy team at 325i via:

• Email: [email protected] (Please include "Privacy Enquiry" in the email subject line)
• Live Chat: Available 24 hours a day, 7 days a week via the chat button on the platform 325i

All privacy-related enquiries will be responded to within 3 business days. For formal PDPA rights requests, please clearly state the right you wish to exercise and include the necessary identity verification details. This verification process is essential to ensure we only provide or amend data to the rightful person.