Privacy Policy maju369 — Personal Data Protection for Malaysian Members

Maju369 ("we", "platform" or "maju369") is an online betting platform operator serving Malaysian users. We are fully committed to protecting the privacy and personal data of all members who use our services.

This Privacy Policy explains in detail how maju369 collects, uses, stores, protects and, in certain circumstances, shares your personal information when you use our platform — whether via the website or mobile application. It also outlines your rights as a member in relation to that personal data and how to exercise them.

This policy applies to all maju369 platform users in Malaysia, including registered members, visitors browsing our website, and anyone who interacts with any maju369 service online.

Maju369 only collects personal data that is strictly necessary to provide a secure, legally compliant, and high-quality platform experience. The categories of data we collect are as follows:

Technical data is collected automatically when you access the maju369 platform and is used primarily for security, fraud detection and user experience improvement purposes. No separate consent is required for this technical data collection, as it forms part of the normal operation of any online platform.

Maju369 uses your personal data only for legitimate and specific purposes. We do not use your data for any other purpose without first obtaining your additional consent. The primary purposes of use are as follows:

• Account management: Registering a new account, verifying your identity at login, managing account settings, and processing withdrawal and deposit requests via Malaysian payment methods such as Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX, Maybank2u and CIMB Clicks
• Service delivery: Enabling Sports Betting, Live Casino, slots and all maju369 platform features to function seamlessly for you
• Security & Fraud Detection: Monitoring account activity to detect and prevent unauthorised access, fraud, money laundering and platform abuse
• Legal compliance: Complying with Malaysian legal requirements including PDPA 2010 and reporting obligations to relevant authorities where required by law
• Platform improvements: Analysing usage patterns in aggregated, anonymised form to improve the performance, usability, and content of the maju369 platform
• Service communications: Sending important account-related information such as transaction confirmations, security notifications and terms updates — these communications cannot be opted out of as they are essential to your account security
• Marketing (with consent): Sending information about maju369's latest promotions, bonuses and offers — exclusively to members who have consented to receive them

Maju369 does not sell, rent or disclose your personal data to third parties for their own marketing purposes — under any circumstances. However, in order to operate as a fully functional platform, there are limited situations where we need to share certain data with relevant parties:

• Payment service providers: Required transaction information is shared with Malaysian payment processors — such as DuitNow providers, the FPX network, Touch 'n Go eWallet and GrabPay — solely for the purpose of processing your deposits and withdrawals. These providers are bound by strict confidentiality agreements with maju369.
• Game providers: Minimum required game session data is shared with casino game providers such as Evolution Gaming and Pragmatic Play to enable live games to function. No personally identifiable information is disclosed to these providers beyond what is necessary for the game session
• Legal authorities: maju369 will disclose personal data to Malaysian authorities when required by law, court order or valid legal process — and only to the extent specified by that order or requirement.
• Technical service providers: A limited amount of technical and operational data is shared with cloud infrastructure and cybersecurity providers that help us run the maju369 platform. All such providers are bound by strict data processing agreements.

In all of the sharing scenarios above, maju369 ensures that only the minimum necessary data is shared, and all third parties who receive your data are bound by data protection obligations that are equal to or stricter than our own.

Maju369 takes its security infrastructure seriously to ensure your personal data is protected at every stage — from transmission through to storage. The key security measures we have implemented are as follows:

• 256-bit SSL Encryption: All communications between your device and maju369's servers are encrypted using the latest TLS/SSL protocols, ensuring no third party can intercept or read data transmitted during transactions or your login session.
• Data segregation: Sensitive data such as identity and financial information is stored separately in distinct databases with strict access controls — accessible only to authorised personnel with a legitimate operational need
• Two-factor authentication (2FA): 2FA is available on all maju369 accounts as an added layer of security — we encourage all members to enable it in their account settings
• 24/7 Monitoring: maju369's cybersecurity team monitors platform activity around the clock to detect any unauthorised access attempts, suspicious patterns or security threats.
• Independent security audits: maju369 undergoes periodic independent third-party security audits to ensure our protection measures meet the latest industry standards
• Vulnerability management: We maintain a responsible disclosure programme and continuously update our systems to address identified security vulnerabilities.

Maju369 does not retain your personal data for longer than necessary for the purposes stated in this Privacy Policy or as required by applicable Malaysian law.

In general, data retention periods are as follows:

• Active account data: Retained for the duration your maju369 account is active and for 7 years after account closure — in line with financial record requirements under Malaysian law
• Financial transaction records: Retained for a minimum of 7 years from the transaction date to satisfy financial audit and legal compliance requirements
• Security logs: Technical and security log data is retained for 2 years to support investigations in the event of a security incident.
• Communication data: Customer support communication history is retained for 3 years for reference and service improvement purposes.
• Marketing data: Communication preferences and campaign history are retained until you unsubscribe or request deletion — whichever comes first

Where data is no longer required and there is no legal obligation to retain it, maju369 will securely delete or anonymise it using methods that ensure it cannot be recovered.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a maju369 member have the following rights regarding your personal data that we hold:

• Right to access: You have the right to request a copy of the personal data we hold about you. maju369 will provide this information within 21 working days of receiving your request.
• Right to Rectification: If the personal data we hold about you is inaccurate or out of date, you have the right to request a correction. You may also update most of your profile information directly through your maju369 account settings.
• Right to erasure: You may request deletion of your personal data by closing your maju369 account — subject to our legal retention obligations as described in Section 6.
• Right to object to processing: You may object to the processing of your data for direct marketing purposes at any time by contacting us or using the unsubscribe function.
• Right to withdraw consent: Where data processing is based on your consent, you may withdraw that consent at any time — withdrawal does not affect the validity of any processing that took place prior to it
• Right to lodge a complaint: If you believe that maju369 has violated your privacy rights, you have the right to file a complaint with the Personal Data Protection Commissioner of Malaysia.

To exercise any of the above rights, please contact the maju369 privacy team by email at support@maju369.best clearly stating your request. We will respond within 14 business days.

Maju369 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files stored on your device when you visit our website or application.

Types of cookies we use:

• Essential cookies: Required for core maju369 platform functions such as maintaining your login session and ensuring account security. These cookies cannot be disabled.
• Performance cookies: Helping us understand how users interact with the maju369 platform — such as the most frequently visited pages and load times — for improvement purposes
• Functional cookies: Saving your preferences such as language, display settings and marketing choices to deliver a more personalised experience
• Analytics cookies: Collecting aggregated, anonymised data on platform usage patterns to help us make better development decisions.

You can manage your cookie preferences through your web browser settings. However, disabling certain cookies may affect the functionality or user experience of the maju369 platform. For more information on how to manage cookies, please refer to your browser manufacturer's guide.

Maju369 carries out a Know Your Customer (KYC) process as part of our legal compliance obligations and to protect all members from fraud and money laundering.

Information collected during the KYC process includes copies of your identity document (MyKad or passport), and in certain cases, supporting financial documents such as bank statements or proof of the payment method used. All KYC documents:

• Stored in an encrypted server environment with highly restricted access controls
• Not shared with any third party except where required by law
• Used solely for identity verification and legal compliance purposes at maju369
• Securely deleted when no longer required for that purpose

For financial transactions, maju369 does not store full credit or debit card numbers. Digital wallet information such as Touch 'n Go eWallet, GrabPay, DuitNow, Boost or ShopeePay is stored only as secure tokens that cannot be used for transactions outside the maju369 platform. FPX and online banking data for Maybank2u and CIMB Clicks is processed directly through secure banking networks and is not stored on maju369's servers.

Maju369 does not offer any services to individuals under the age of 18. We do not knowingly collect personal data from minors. If we discover that we have collected personal data from someone under 18, we will take immediate steps to delete that information and close the relevant account.

Parents or guardians who believe their child may have registered an account on the maju369 platform without authorisation are encouraged to contact us immediately at support@maju369.best so that prompt action can be taken.

Maju369 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operational practices, Malaysian legal requirements or technological developments. Any material amendments will be communicated to members via their registered email or an in-platform notification at least 14 days before taking effect.

We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data. The "Updated" date at the top of this page indicates when the last revision was made.

Continued use of the maju369 platform after any amendment to this Privacy Policy takes effect will be considered acceptance of the updated policy.

If you have any questions, concerns or requests regarding maju369's Privacy Policy or how we handle your personal data, please contact us through the following channels:

• Email: support@maju369.best — for privacy-related enquiries and personal data rights requests
• Live chat: Available directly on the maju369 platform, 24 hours a day, 7 days a week

When contacting us regarding a privacy matter, please clearly state the nature of your request (data access, rectification, deletion, etc.) along with sufficient information for us to verify your identity before processing it. This is an important security measure to ensure your data is only disclosed or modified upon your own request.