Star123 Privacy Policy – Malaysia Member Data Protection & Privacy

To provide every member with a secure, seamless, and high-quality service, star123 collects certain types of personal data. We only collect data that is strictly necessary for the stated purposes — nothing more.

Data collected during registration:

• Full name as shown on your identification document.
• Date of birth for age verification purposes.
• An active email address for account communications.
• An active Malaysian mobile number.
• Username and password chosen by you (passwords are stored in hashed form — we do not store your password in plain text).

Data collected through platform usage:

• IP address, device type, operating system, and browser used.
• Records of gaming activity, wagering, and financial transactions.
• General location information based on IP address (not GPS).
• Navigation history within the platform for the purpose of improving user experience.

KYC data collected for identity verification:

• A copy of your MyKad or valid identity document.
• Bank account details for fund withdrawal purposes.
• Proof of address document where required for specific cases.

Star123 uses collected data solely for purposes related to providing platform services and complying with legal obligations. The following are the primary purposes for data use:

• Account management: Creating, maintaining, and protecting your member account.
• Transaction processing: Verifying and processing deposits and withdrawals via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, and Boost.
• KYC verification: Verifying your identity in line with legal compliance requirements.
• Platform security: Detecting and preventing fraud, money laundering, and unauthorised access.
• Customer support: Processing your enquiries, complaints, and support requests effectively.
• Service communications: Sending important notifications related to accounts, transactions, and platform changes.
• Platform improvement: Analysing usage patterns in aggregate (not individually) to improve the user experience.
• Legal compliance: Fulfilling obligations under the PDPA and other Malaysian laws.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), star123 processes your personal data on the following lawful bases:

• Consent: You provided explicit consent during registration when you agreed to the star123 terms of service.
• Contract performance: Processing is necessary to fulfil the service agreement between you and star123 — including processing transactions and providing access to games.
• Legitimate interests: We process certain data on the basis of legitimate business interests, such as fraud detection and platform security, provided those interests do not override your fundamental rights.
• Legal obligations: Certain processing is necessary to comply with legal obligations applicable to star123.

Star123 takes member privacy seriously. We do not share your personal data broadly. Data may only be shared in the following limited circumstances:

• Payment processors: Required transaction information is shared with payment providers (such as banks and e-wallet gateways) solely to complete your transaction.
• Game providers: Game session information required is shared with game providers (such as Pragmatic Play or Evolution Gaming) for technical purposes only.
• Legal compliance: Data may be disclosed to legal or regulatory authorities if required by court order or applicable law.
• Fraud prevention: Certain information may be shared with recognised fraud prevention agencies to protect the platform and other members.

All third parties working with star123 are bound by strict confidentiality agreements and are only permitted to use data for specified purposes. They are not allowed to use your data for their own marketing purposes.

Star123 continuously invests in security infrastructure to ensure members' personal data remains protected against increasingly sophisticated digital threats. Below are the security layers we have in place:

• 256-bit SSL encryption: All data communications between your browser/app and star123's servers are fully encrypted.
• Secure password storage: Passwords are stored using a strong one-way hashing algorithm — we cannot view your password even if we wanted to.
• Two-factor authentication (2FA): Additional security layers are available for your account to prevent unauthorised access.
• Real-time AI monitoring: An AI system monitors account activity and automatically detects suspicious patterns.
• Staff access controls: Only authorised staff may access sensitive data, with every access recorded and audited.
• Periodic security assessments: Penetration testing and security audits are conducted periodically by independent parties.
• Environment segregation: Production data is isolated from development environments to prevent accidental exposure.

While we implement comprehensive security measures, no system can be guaranteed 100% secure against all threats. You also play an important role by keeping your password and login credentials confidential.

Star123 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit a website.

Types of cookies we use:

• Essential cookies: Required for core platform functions such as login verification and session security. Cannot be disabled without affecting platform functionality.
• Performance cookies: Collecting information on how pages are used to help us improve the platform. All data is aggregated and does not identify individual users.
• Functional cookies: Remembering your preferences such as language, display settings, and game choices for a more personalised experience.

You can manage cookie settings through your browser. However, disabling certain cookies may affect the functionality of some parts of the platform.

As a data subject under Malaysia's PDPA, you have the following rights regarding your personal data held by star123:

To exercise any of the above rights, contact the star123 customer support team via live chat or email. Requests will be processed within 30 working days in accordance with PDPA requirements.

Star123 retains your personal data only for as long as necessary to fulfil the purpose of collection and to comply with applicable legal obligations. The following are general data retention guidelines:

• Active account data: Retained for the duration your account is active and for the required period after account closure for legal compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's Companies Act and tax law requirements.
• KYC documents: Retained for the duration your account is active and for the period required by anti-money laundering (AML) regulations.
• Technical service logs: Typically retained for 90 days for debugging and security audit purposes, then automatically deleted.
• Marketing data (where applicable): Deleted when you withdraw consent or close your account, unless there is a legal requirement to retain it.

When data is no longer needed, it is securely deleted or anonymised using industry-standard methods.

Star123 reserves the right to amend this privacy policy from time to time in response to changes in law, industry practices, or operational requirements. When significant changes are made, we will:

• Updating the "Last Updated" date at the top of this document.
• Sending notifications to members via email or in-platform notifications for material changes.
• In the event of highly significant changes, new consent will be sought from members before the changes take effect.

We encourage you to review this privacy policy periodically to stay informed about how we protect your information. Continued use of the star123 platform after changes take effect constitutes acceptance of the updated policy.