Privacy Policy 3star –
Data Protection for Malaysia Casino Members

Welcome to the 3star Privacy Policy page. This document explains in detail how we handle the personal information of members and visitors to our platform at https://3star.onl. As an online casino platform trusted by over 500,000 active members across Malaysia, we take every aspect of your personal data protection seriously.

This Privacy Policy applies to all services, websites, mobile applications, and communication channels operated by 3star. By using our platform, you agree to the collection and use of information as described in this document. If you do not agree, please stop using the platform immediately.

3star collects various types of information from users to ensure that the services provided are safe, seamless, and tailored to each member's needs. The information we collect falls into two main categories:

A. Information You Provide Directly

• Registration Information: Full name, email address, mobile phone number, date of birth, and password chosen during the account registration process.
• Identity Verification (KYC): A copy of your identity card (MyKad), passport, driving licence, or other official document requested for identity verification purposes prior to processing your first withdrawal.
• Financial Information: Bank name, bank account number, e-wallet account name (Touch 'n Go, GrabPay, Boost), and transaction details for deposits and withdrawals.
• Communications: Any enquiries, complaints, or feedback you submit to our support team via live chat or email.

B. Information Collected Automatically

• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and time zone.
• Usage Data: Pages visited, time spent, games played, betting history, transaction records, and activity patterns within the platform.
• Cookie Data: Login session data, language preferences, display settings, and site usage analytics.

The personal information we collect is used transparently and responsibly for the following purposes:

We will not use your data for any purpose beyond those listed above without obtaining your prior consent. Every marketing communication we send will include an option to unsubscribe at any time.

3star does not sell, rent, or trade your personal information to any third party for their own commercial purposes. However, there are limited situations where we need to share data with other parties to ensure smooth operations and legal compliance:

• Payment Service Providers: FPX, Maybank2u, CIMB Clicks, Touch 'n Go, GrabPay, and Boost receive financial information solely as required to process your deposit and withdrawal transactions. This information is shared securely and in a controlled manner.
• Game Provider: Game software providers that partner with 3star may receive the minimum data required to verify eligibility and process wins. All such providers are bound by strict confidentiality agreements.
• Legal Authority: 3star will disclose required information to the relevant authorities when mandated by law, court order, or for the purpose of investigating criminal activities including money laundering.
• Third-Party Analytics Services: We use trusted analytics tools to understand platform usage patterns. Any shared data is in aggregated form and cannot be used to directly identify individuals.

All third parties who receive your data are required to comply with data security standards equal to or higher than those we practise. They are not permitted to use such data for any purpose other than what has been agreed upon.

We continuously invest in enterprise-grade security infrastructure to ensure your personal and financial data remains protected at all times. Our key security measures include:

• Data Encryption in Transit: TLS 1.3 and 256-bit SSL protocols protect all communications between your device and 3star servers, ensuring no data can be intercepted during transmission.
• Data Encryption at Rest: Sensitive information such as passwords and financial details is stored in encrypted form using the industry-standard AES-256 encryption algorithm.
• Two-Factor Authentication (2FA): We offer an additional layer of security through two-factor authentication to protect your account from unauthorized access.
• Continuous Security Monitoring: Our systems are monitored 24 hours a day, 7 days a week by an experienced cybersecurity team to detect and address any threats immediately.
• Internal Access Controls: Access to members' personal data is restricted to authorized personnel only, based on the principle of least privilege.
• Regular Security Audits: Independent security assessments (penetration testing) are conducted regularly by third-party experts to identify and address any system vulnerabilities.

3star uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Session Cookies: Temporary cookies that are automatically deleted when you close your browser. These cookies are used to maintain your login session and ensure transaction security during active sessions.
• Preference Cookies: Remembering your preferences such as language, display settings, and game preferences so you do not need to reconfigure them on each visit.
• Analytics Cookies: Helps us understand how users interact with the platform — which pages are most popular, how long sessions last, and where users encounter issues. This data is used in aggregate and not to identify individuals.
• Security Cookies: Used to detect suspicious activity, prevent unauthorized access, and protect your account from cyber threats.

You can manage or disable cookies through your browser settings at any time. Please note, however, that disabling certain cookies may affect platform functionality and your gaming experience. Cookies required for security cannot be disabled.

As a 3star member, you have the following rights regarding your personal information. We are committed to respecting and facilitating the exercise of these rights:

3star retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable law. The following are our general data retention guidelines:

• Active Account Data: Throughout the duration of your active account and for a period of 7 years after account closure, to meet audit requirements and financial legal compliance.
• Financial Transaction Records: Minimum 7 years from the transaction date, in compliance with Malaysia's Anti-Money Laundering Act (AMLA) requirements.
• KYC Documents: Throughout the duration of the active account and for at least 5 years after account closure.
• Support Communication Records: 3 years from the date of communication for training and service improvement purposes.
• Log & Security Data: 12 months for standard technical logs; up to 7 years for logs related to security incidents or investigations.
• Cookie Data: Depending on the cookie type — session cookies expire when the browser is closed; persistent cookies expire within 12 months.

When data is no longer needed and there is no legal obligation to retain it, we will delete or anonymize it in a secure and irreversible manner.

The 3star platform may contain links or references to third-party websites or services not under our control, such as game providers or payment platforms. This Privacy Policy not applicable to those third-party websites or services.

We encourage you to read the Privacy Policy of every third-party website you visit, as their privacy practices may differ from ours. 3star is not responsible for the content, policies, or privacy practices of any third-party website.

3star reserves the right to update or modify this Privacy Policy at any time to reflect changes in our operational practices, legal requirements, or user feedback. The latest version will always be available on this page.

When we make material changes to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this page.
• Sending a notice to your registered email address at least 14 days before changes take effect, for material amendments.
• Displaying clear notices in prominent sections of our platform to inform members of any changes.

Your continued use of the 3star platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account and request data deletion.

If you have any questions, concerns, or wish to exercise your privacy rights, please reach out to our team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the live chat button at the bottom of the platform.
• Email: [email protected] (please copy and paste into your email client — displayed as plain text).
• Help Center: Browse page FAQ for an immediate response.

We are committed to responding to all privacy-related inquiries within 30 working days from the date of receipt. For urgent cases or those involving a data breach, we will respond within 72 hours.