Privacy Policy gz360 — Personal Data Protection for Malaysian Players

Gz360 collects your personal information through several channels when you use our platform. Below are the categories of data collected along with their primary purpose:

Gz360 does not collect sensitive information such as biometric data, health information, or full credit/debit card details — we process payments exclusively through Malaysian e-wallets and online banking platforms (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, FPX, Maybank2u, CIMB Clicks), each of which maintains its own independent security systems.

Gz360 uses your personal data for the following purposes, all of which are directly related to delivering our platform services to Malaysian players:

• Account management: Creating and maintaining your account, verifying your identity at login, and ensuring ongoing account security.
• Payment processing: Processing deposits and withdrawals via your chosen Malaysian payment method, verifying transactions, and resolving any payment issues.
• KYC and AML Compliance: To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements mandated by applicable laws and regulations.
• Customer support: To provide effective technical support and customer service, including maintaining communication logs for reference and dispute resolution.
• Platform security: Detecting and preventing fraud, account abuse, unauthorised access, and activity that violates gz360's Terms & Conditions.
• Service improvement: Analysing platform usage patterns in aggregate (not individual data) to improve user experience, technical performance, and game offerings.
• Marketing communications: Sending you information about promotions, bonuses, and new offers — only if you have given your consent to receive such communications. You may unsubscribe at any time.

Gz360 does not use your personal data for any purpose beyond those stated above without first obtaining your explicit consent.

Member data security is gz360's highest priority. We implement multiple layers of technical and operational safeguards to ensure your personal information remains protected at all times:

• 256-bit SSL Encryption: All communications between your browser and gz360's servers are encrypted using the latest TLS/SSL protocol with a 256-bit key length — the same standard used by Malaysia's leading financial institutions.
• Data-at-rest encryption: Data stored in the gz360 database is also encrypted, meaning that even if an unauthorised party gains physical access to the storage, they will be unable to read the data without the encryption key.
• Tiered access controls: Only gz360 staff who require access to specific data to carry out their assigned duties are granted that access — based on the principle of least privilege. Access logs are maintained and reviewed on a regular basis.
• 24/7 monitoring: gz360's security systems continuously monitor for unusual activity or unauthorised access attempts and respond automatically to identified threats.
• Regular penetration testing: gz360 conducts regular security assessments, including independent penetration testing, to identify and remediate vulnerabilities before they can be exploited.
• Staff training: All gz360 staff who handle personal data undergo regular privacy and data security training.

While gz360 implements all reasonable security measures, no online system can be guaranteed 100% secure against every threat. We therefore encourage members to play their part in keeping their accounts safe by using strong passwords and enabling two-factor authentication (2FA).

Gz360 does not sell, rent, or trade our members' personal data. However, there are limited situations where we need to share your data with carefully selected third parties:

• Payment processors: To process your deposits and withdrawals via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, FPX, Maybank2u, and CIMB Clicks, we are required to share the minimum transaction information needed by each provider. All payment processors used by gz360 maintain their own privacy policies and security measures.
• Game providers: Casino game and Sports Betting software providers may receive technical data necessary to operate the games correctly. This data does not include financial information or full identifying details.
• Competent authority: gz360 will disclose personal information to law enforcement agencies, courts, or regulatory bodies when required by Malaysian law or a valid court order. We will not voluntarily disclose such data without a legal basis for doing so.
• Technical service providers: Third-party companies that assist gz360 with technical operations — such as cloud services, platform analytics, and cybersecurity — may process your data as data processors on behalf of gz360. All such parties are bound by strict confidentiality agreements.

In all of the above data-sharing scenarios, gz360 ensures that only the minimum necessary data is shared, and all receiving parties are bound by contractual confidentiality obligations.

Cookies are small text files stored on your device when you visit the gz360 website. We use several types of cookies for different purposes:

• Essential cookies: These cookies are essential for the platform's core functions — maintaining your login session, remembering your language preference, and keeping your session secure. Without them, the gz360 platform will not work properly. These cookies cannot be disabled.
• Performance cookies: We collect information on how you use the platform — which pages are visited most frequently, how long sessions last, and any error messages encountered. All of this data is collected anonymously and used solely to improve platform performance.
• Functional cookies: This allows gz360 to remember your preferences — such as your preferred odds format (decimal, fractional, or moneyline), display settings, and information entered in forms — improving your overall experience on the platform.
• Analytics cookies: Helps gz360 understand how members use the platform as a whole — which sections are popular, typical navigation flows, and where users may encounter difficulties. This information is used for ongoing improvements.

You can manage cookies through your browser settings — disabling, deleting, or setting alerts when new cookies are about to be stored. Please note that disabling certain cookies may affect the functionality of the gz360 platform. For specific instructions on managing cookies, refer to the documentation for your browser (Chrome, Firefox, Safari, Edge, etc.).

Gz360 retains your personal data only for as long as necessary for the purposes described in this Privacy Policy, or as required by law. Below is a guide to retention periods by data category:

• Active account data: For as long as your gz360 account remains active. This data is required for us to provide services to you.
• Financial transaction records: Minimum 7 years after the transaction, in line with Malaysia's anti-money laundering legislation and applicable financial regulations.
• KYC records: Minimum 5 years after account closure, or longer if required by law.
• Customer support communication logs: 3 years, for reference purposes and to resolve any disputes that may arise.
• Technical data and logs: 1 year, for security purposes and technical troubleshooting.
• Marketing data: Until you withdraw your consent, or 2 years after your last interaction, whichever comes first.

Once the retention period expires, gz360 will securely delete or anonymise your data. Anonymised data (where individuals can no longer be identified) may be retained indefinitely for statistical analytics purposes.

As a gz360 member, you have the following rights regarding your personal data. To exercise any of these rights, contact us at support@gz360.best and specify which right you wish to invoke:

• Right of access: You have the right to request a copy of the personal data gz360 holds about you. We will provide this information in a readable format within 30 days.
• Right to rectification: If your personal data is inaccurate or incomplete, you have the right to request that gz360 correct it. You may also update certain information directly in your account settings.
• Right to erasure: Under certain circumstances, you have the right to request that gz360 erase your personal data. This right is not absolute — we may need to retain certain data to comply with legal obligations or resolve disputes.
• Right to restrict processing: You may request that gz360 restrict the processing of your data under certain circumstances — for example, while you are disputing the accuracy of the data or while an investigation is ongoing.
• Right to withdraw consent: For data processing based on your consent (such as marketing communications), you may withdraw that consent at any time through your account settings or by contacting us.
• Right to complain: If you believe gz360 has processed your personal data unlawfully, you have the right to lodge a complaint with the relevant authorities in Malaysia.

The gz360 platform is exclusively for individuals aged 18 and above. We do not knowingly collect or process personal information from individuals under the age of 18.

If we discover that we have inadvertently collected personal information from a minor, we will take immediate steps to delete that information and close the account in question. Our age verification process — including KYC checks using the Malaysian MyKad — is specifically designed to prevent underage registration.

If you are a parent or guardian who believes your child has registered a gz360 account while underage, please contact us immediately at support@gz360.best so we can take prompt action.

Gz360 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or changes to the services we offer.

When we make significant changes to this Privacy Policy, we will:

• Updating the "Last updated" date at the top of this document
• Displaying a prominent notice within the gz360 platform for a minimum of 14 days
• Sending notification emails to all active members if the changes materially affect how we process their personal data

We encourage you to review this Privacy Policy periodically. Continued use of the gz360 platform after notification of changes constitutes acceptance of the updated Privacy Policy terms.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how gz360 handles your personal data, please reach out to us through the following channels:

• Email: support@gz360.best — for privacy-related enquiries that require a written response or involve sensitive information
• Live Chat: Available on the gz360 platform after logging in, 24/7 in Bahasa Melayu — for general privacy enquiries that require an immediate response

The gz360 team is committed to responding to all privacy-related inquiries seriously and within a reasonable timeframe. For formal privacy rights requests (access, correction, deletion), please send an email with the subject line "Privacy Rights Request" to ensure it reaches the right team.