Privacy Policy fasa3 – Full Protection of Malaysian Players' Personal Data Guaranteed

Fasa3 collects various types of personal data from members during the registration process, platform usage, and interactions with our services. Below is a detailed overview of the data categories we may collect:

Fasa3 does not collect sensitive special-category data such as health information, religious beliefs, political opinions or biometric data, unless there is a specific legal requirement to do so.

Fasa3 collects your personal data through several key channels throughout your interactions with our platform:

• Direct Account Registration: When you register a new account at fasa3.my, you provide the required basic information directly through our online registration form.
• KYC Verification Process: When you are required to complete the Know Your Customer (KYC) verification process, you will be asked to submit a copy of an identity document such as your MyKad or passport.
• Financial Transactions: Financial data such as bank account numbers and digital wallet details are collected when you make a deposit via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, or ShopeePay, or when you submit a withdrawal request.
• Automatic Platform Usage: Our systems automatically record technical and platform usage data whenever you access and use fasa3.my, including login activity, gaming sessions, and in-platform navigation.
• Cookies & Tracking Technologies: fasa3 uses cookies and similar tracking technologies to enhance user experience and analyse platform usage patterns. Further details are provided in Section 6 on the Use of Cookies.
• Customer Support Interactions: When you contact the fasa3 customer support team via live chat or by emailing [email protected], information shared during those conversations may also be retained for service quality and issue resolution purposes.

Fasa3 uses the personal data collected for legitimate and specific purposes only. Below is a detailed explanation of each purpose and the legal basis supporting that processing:

• Member Account Management: To create, maintain, and manage your account on fasa3, including verifying your identity during registration and login, and ensuring your account remains secure.
• Financial Transaction Processing: To process all your deposits and withdrawals securely and efficiently, including payment verification via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay, and to ensure funds are credited or debited accurately.
• Legal and Regulatory Compliance: To comply with applicable legal requirements, including anti-money laundering (AML) obligations, the minimum age verification requirement of 21 years, PDPA requirements, and directives from relevant regulatory authorities.
• Fraud Detection & Prevention: To monitor, identify, and prevent any fraudulent activity, platform abuse, unauthorised bonus exploitation, or any other unlawful activity that may occur on fasa3.
• Customer Support: To provide assistance and resolve any enquiries, complaints, or technical issues you encounter while using the fasa3 platform.
• Service Improvement: To analyse platform usage patterns, understand member needs and preferences, and make data-driven decisions that continuously improve the quality of fasa3's services and user experience.
• Service Communications: To send important notifications regarding your account, updates to our Terms & Conditions or Privacy Policy, security information, and other essential communications relating to fasa3 services.
• Responsible Gambling: To monitor member gameplay patterns for the purpose of identifying signs of potential gambling problems and providing appropriate support or intervention, in line with fasa3's responsible gambling commitment.

Fasa3 will not use your personal data for any purpose other than those stated above without first obtaining your consent. If you do not wish to receive marketing communications from fasa3, you may unsubscribe at any time by following the "unsubscribe" instructions in any marketing communication we send, or by contacting us at [email protected].

Fasa3 understands that your trust depends on how we manage the sharing of your data. We uphold a strict principle: your data will not be sold or shared for third-party marketing purposes under any circumstances.

However, there are limited situations in which fasa3 may need to share your data with certain parties for legitimate and restricted purposes:

• Payment Processors: fasa3 works with certified payment processors to handle transactions via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost and ShopeePay. These payment processors receive only the data required to process a transaction and are bound by strict data protection agreements.
• Game Developers: Certain game developers such as Evolution Gaming, PG Soft, and Pragmatic Play may receive the minimum technical data required to operate their games on the fasa3 platform. No personally identifiable data is shared without a clear and specific need.
• Technical Service Providers: Companies providing technical infrastructure, cloud services, and cybersecurity that support fasa3 in operating the platform securely. All such providers are bound by confidentiality and data protection agreements.
• Legal and Regulatory Authorities: fasa3 will disclose personal data to the police, courts, or relevant regulatory authorities where required to do so by Malaysian law or a valid court order.
• Professional Advisors: Lawyers, accountants and auditors providing professional services to fasa3 may be granted limited access to relevant data, subject to their professional confidentiality obligations.

In all instances of data sharing described above, fasa3 ensures that only the minimum necessary data is shared and that all recipients are bound by protections equivalent to or greater than our own. fasa3 is not responsible for the privacy practices of third parties that have links or integrations with our platform.

Fasa3 continually invests in best-in-class security infrastructure and practices to protect your personal data from unauthorised access, disclosure, alteration or destruction. The following are the key security measures we have implemented:

• Data Encryption in Transit: All communications between your browser and fasa3's servers are protected using TLS 1.3 with AES-256 encryption – the highest standard in the industry.
• Data Encryption at Rest: Sensitive data such as passwords are stored in an irreversible hashed format. Sensitive financial data is stored in encrypted form and managed by certified payment processors.
• Tiered Access Controls: A role-based access control (RBAC) system ensures that every fasa3 staff member can only access data relevant to their specific job responsibilities.
• Two-Factor Authentication: fasa3 offers two-factor authentication (2FA) for member accounts to add an extra layer of security beyond just a password.
• 24/7 Security Monitoring: An automated security monitoring system operates around the clock to detect and alert on any suspicious activity or intrusion attempts.
• Regular Security Audits: fasa3 conducts regular internal and external security audits to identify and address any vulnerabilities before they can be exploited.
• Incident Response Plan: fasa3 has a comprehensive security incident response procedure in place. In the event of a data breach that affects your rights, we will notify you within the timeframe stipulated by Malaysia's PDPA.

While fasa3 takes all reasonable precautions, no security system can be guaranteed to be completely foolproof. We encourage you to play your part in protecting your account by using a strong, unique password, not sharing your login credentials with anyone, and promptly reporting any suspicious activity to the fasa3 support team.

Fasa3 uses cookies and similar tracking technologies to enhance your experience on our platform, ensure essential functions operate correctly, and analyse how users interact with our website. The types of cookies we use are as follows:

You can manage your cookie preferences through your internet browser settings. Please note that disabling certain cookies may affect the functionality and your experience on the fasa3 platform. For more information on managing cookies in popular browsers such as Chrome, Firefox, or Safari, please refer to the relevant browser's help documentation.

As a fasa3 member and data subject under the Malaysian Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data we process. fasa3 fully respects these rights and provides straightforward mechanisms for you to exercise them:

• Right of Access: You have the right to obtain a copy of your personal data held by fasa3. You may request your data records by submitting a written request to [email protected].
• Right to Rectification: If the personal data held by fasa3 is inaccurate, incomplete, or out of date, you have the right to request a correction. You may also update certain profile information directly through your account settings.
• Right to Erasure: In certain circumstances, you have the right to request the erasure of your personal data. However, this right is not absolute – specific legal requirements may obligate fasa3 to retain certain data for a prescribed period.
• Right to Object to Processing: You have the right to object to the processing of your personal data for direct marketing purposes at any time, and we will cease such processing immediately.
• Right to Restrict Processing: Under certain circumstances, you have the right to request that fasa3 restricts how we use your data while a particular issue is being resolved.

To exercise any of the above rights, please submit a written request to the fasa3 data protection team via email at [email protected], clearly stating the right you wish to exercise along with sufficient information for us to verify your identity. fasa3 will respond to your request within 30 calendar days from the date the request is received.

Fasa3 does not retain your personal data for longer than is necessary for the purposes outlined in this Privacy Policy, or as required by applicable law. The following are general guidelines on data retention periods by category:

• Active Account Data: Personal data of members with an active fasa3 account is retained for the duration the account remains active, plus any additional period required by law following account closure.
• Financial Transaction Data: Financial transaction records — including deposits via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay, as well as withdrawal records — are retained for a minimum of seven (7) years in compliance with Malaysia's Companies Act and anti-money laundering regulations.
• Customer Support Data: Customer support communication records are retained for three (3) years for service quality and dispute resolution purposes.
• KYC Verification Data: Identity verification documents and KYC data are retained in accordance with applicable anti-money laundering compliance requirements.
• Analytics Data: Anonymised platform usage data collected for analytics purposes may be retained for longer periods, as it cannot be traced back to any specific individual.

Once the required retention period has elapsed, fasa3 will delete or irreversibly anonymise your personal data using secure, non-recoverable procedures. For specific questions about retention periods for particular data categories that apply to you, please contact us at [email protected].

Fasa3 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or developments in our technology and services. We are committed to managing this process with full transparency and respect for your right to be informed of changes that affect your privacy.

When we make material changes to this Privacy Policy, we will:

• Updating the "Effective Date" at the top of this document.
• Sending notifications to all registered members via the email provided at registration at least 14 days before any changes take effect.
• Displaying a clear notice on the fasa3.my homepage regarding upcoming changes.
• In the event of particularly significant changes, we may seek your renewed consent before those changes take effect.

We encourage you to review this Privacy Policy periodically to stay informed about how fasa3 protects your privacy. Continued use of the platform after any changes take effect will be considered your acceptance of the updated policy. If you do not agree with any changes, you have the right to close your account in accordance with the procedures set out in our Terms & Conditions.

If you have any questions or concerns, or wish to exercise your rights regarding your personal data at fasa3, our data protection team is available to assist you at any time.

• Email: [email protected] – please include "Data Protection Request" in your email subject line to help us process your request faster.
• Live Chat: Available 24/7 on fasa3.my – the fastest option for general privacy enquiries.
• Response Time: fasa3 aims to respond to all privacy-related enquiries within three (3) business days and to resolve formal requests within 30 calendar days.

If you are dissatisfied with how fasa3 has handled your privacy enquiry or complaint after contacting us, you have the right to lodge a complaint with the Malaysian Communications and Multimedia Commission (MCMC) or the relevant data protection authority in Malaysia.