Privacy Policy 70gsm – Personal Data Protection for Malaysian Platform Users

1. Introduction – 70gsm's Privacy Commitment

70gsm is an online casino platform serving users in Malaysia. We understand that user trust in how we handle their personal information is the foundation of a healthy and lasting relationship between 70gsm and our player community. As such, privacy protection is more than a legal obligation for 70gsm — it is a core value that shapes how we operate every day.

This policy is drawn up in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and the highest international data protection standards in the industry. We are committed to handling your personal data responsibly, transparently, and professionally. If you have any questions about how 70gsm manages your data, do not hesitate to reach out to our privacy team at [email protected].

2. Types of Personal Data We Collect

70gsm collects users' personal data under two main categories: information you provide directly when using the platform, and information collected automatically through tracking technologies. Below are the details of the data we may collect:

2.1 Information You Provide Directly

• Identity Information: Full name, date of birth, Malaysian identification card number (MyKad) or passport number.
• Contact Information: Malaysian mobile number, email address, residential address.
• Financial Information: Malaysian bank account details, digital wallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) for deposit and withdrawal purposes.
• Verification Documents: A copy of your MyKad, passport, or other identity verification documents submitted during the KYC process.
• Profile Information: Username, password (stored as an unreadable hash), language preference and account settings.
• Communication: Records of conversations with the 70gsm support team via live chat, email or WhatsApp.

2.2 Automatically Collected Information

• Technical Data: IP address, browser type and version, device operating system, screen resolution.
• Activity Data: Game history, betting records, winnings, play time, and usage patterns on the 70gsm platform.
• Transaction Data: A complete record of all deposits and withdrawals, including timestamps, payment methods, and amounts in MYR (RM).
• Cookie Data: Information collected through cookies and other tracking technologies as described in Section 7.
• Location Data: General location information derived from IP address, used for regulatory compliance and fraud prevention purposes.

3. How 70gsm Collects Your Personal Data

70gsm collects users' personal information through various channels that arise during your interactions with our platform:

• Account Registration: When you register a new account with 70gsm, you actively provide the identity and contact information required.
• KYC Process: During identity verification, you will be required to submit documents such as your MyKad or passport to 70gsm for review and retention.
• Financial Transactions: Every time you make a deposit using Touch 'n Go, GrabPay, DuitNow, FPX or any other local Malaysian payment method, or submit a withdrawal request, the transaction details are automatically recorded.
• Platform Usage: Gaming activity, page navigation, and interactions with 70gsm features are automatically recorded by our systems.
• Support Communications: When you contact the 70gsm support team, all conversations are recorded for quality assurance and future reference purposes.
• Cookie Technology: The 70gsm platform uses cookies and web tracking technologies to collect usage data that helps us improve the user experience.

4. Purposes for Using Personal Data

70gsm uses collected personal data solely for legitimate and necessary purposes. The following is a complete list of the purposes for which 70gsm uses user data:

4.1 Platform Operations & Account Management

• Creating and managing your 70gsm user account.
• Processing and verifying deposits and withdrawals in MYR (RM).
• Identifying and verifying user identity through the KYC process.
• Providing access to games and services on the 70gsm platform.
• Sending account-related notifications, transaction updates and relevant promotional communications.

4.2 Security & Compliance

• Detecting, investigating and preventing fraud, money laundering and other unlawful activities.
• Complying with Malaysian legal and regulatory requirements, including PDPA 2010.
• Maintaining platform security and protecting user accounts from unauthorised access.
• Complying with directives issued by the relevant Malaysian authorities when required.

4.3 Service Improvements

• Analysing usage patterns to improve the user experience on the 70gsm platform.
• Developing new features and improving existing ones based on user feedback and usage data.
• Delivering more effective and personalised customer support.
• Sending relevant promotional information tailored to your gaming interests on 70gsm – subject to your marketing preferences.

5. Data Sharing with Third Parties

70gsm does not sell, rent, or trade users' personal data to any third party for marketing purposes. However, in certain limited circumstances, 70gsm may need to share your information with the following parties:

5.1 Trusted Service Providers

70gsm works with selected third-party service providers to support platform operations, including:

• Payment Providers: Payment service providers such as Touch 'n Go, GrabPay, DuitNow, and Malaysian banks that process your financial transactions.
• Game Providers: Companies such as Pragmatic Play, Microgaming, Evolution Gaming, and Habanero, which provide games on the 70gsm platform, may receive minimal technical data for game verification purposes.
• Identity Verification Services: Third-party KYC providers that assist us in verifying user identity in accordance with legal requirements.
• Cloud Computing Services: Infrastructure providers that store and process 70gsm platform data under strict security standards.

All third-party service providers working with 70gsm are required to sign strict data protection agreements and are only permitted to use user data strictly for the agreed service purposes.

5.2 Legal Requirements

70gsm may disclose user data to the relevant Malaysian authorities when required by law, including for financial crime investigations, anti-money laundering (AML) purposes, or valid court orders. In such situations, we will disclose only the minimum data necessary and will notify you when this occurs, unless prohibited by law.

6. Data Security Measures

70gsm continually invests in the latest security infrastructure to ensure user personal data is protected at all times. The key security measures we have in place include:

• 256-bit SSL Encryption: All communications between your browser and 70gsm's servers are encrypted using the latest TLS protocol, rendering the data unreadable to anyone who attempts to intercept it.
• Data-at-Rest Encryption: Sensitive data such as financial information and identification card numbers are stored in encrypted form within 70gsm's database, not as plain text.
• Role-Based Access Control: Only 70gsm staff who require access to specific data to carry out their authorised duties are permitted to access it, in accordance with the principle of least privilege.
• 24/7 Security Monitoring: Automated monitoring systems operate around the clock to detect unauthorised access attempts, cyberattacks, or suspicious activity involving user data.
• Regular Security Audits: 70gsm conducts regular internal and external security assessments to identify and address potential vulnerabilities before they can be exploited.
• Two-Factor Authentication: The 2FA feature is available to all 70gsm users and is strongly recommended to be enabled for enhanced account protection.

While 70gsm takes all reasonable steps to protect your data, no security system in the world can guarantee 100% protection. We also encourage you to play your part in keeping your account safe — use a strong password and never share your login credentials with anyone.

7. Cookies & Tracking Technologies

The 70gsm platform uses cookies and similar web tracking technologies to enhance user experience, analyse platform traffic, and deliver more relevant content. Cookies are small text files stored on your device by your web browser when you visit the 70gsm platform.

7.1 Types of Cookies Used

7.2 Managing Cookies

You can manage or disable cookies through your browser settings. Please note that disabling essential cookies may affect core functionality on the 70gsm platform and your overall gaming experience. For guidance on managing cookies in your specific browser, please refer to that browser's help documentation.

8. User Rights Regarding Personal Data

As a 70gsm user in Malaysia, you have specific rights regarding your personal data, protected under the Personal Data Protection Act 2010 (PDPA). 70gsm is committed to making it straightforward for you to exercise these rights:

8.1 Right of Access

You have the right to request a copy of the personal data held by 70gsm about you. This request can be submitted through your account settings or by contacting [email protected]. 70gsm will provide the requested information within 30 business days.

8.2 Right to Rectification

If you believe that personal data held by 70gsm is inaccurate, incomplete, or out of date, you have the right to request a correction. For basic details such as your phone number or address, you can update these directly through your 70gsm account profile settings. For more sensitive information, please reach out to 70gsm support.

8.3 Right to Withdraw Marketing Consent

If you have previously given 70gsm consent to send marketing communications, you may withdraw that consent at any time by using the "unsubscribe" link in our marketing emails or by contacting 70gsm support directly.

8.4 Right to Lodge a Complaint

If you believe that 70gsm has handled your personal data in a manner that violates Malaysia's PDPA 2010, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia, or to contact 70gsm directly for internal resolution first.

9. Data Storage & Transfer

70gsm user data is stored on secure servers maintained to strict physical and digital security standards. In the course of platform operations, some data may be stored or processed outside Malaysia — in such cases, 70gsm ensures that all data transfers are subject to adequate safeguards equivalent to those required under the PDPA 2010.

9.1 Data Retention Period

70gsm retains your personal data for as long as your account remains active, and for an additional period following account closure as required by applicable Malaysian law:

• Active Account Data: Retained for as long as your 70gsm account remains active.
• Transaction Data: Retained for a minimum of 7 years after the transaction takes place, in line with Malaysian financial regulatory requirements.
• KYC Records: Retained for a minimum of 5 years after account closure in accordance with AML requirements.
• Communication Records: Retained for 2 years for reference and service quality purposes.
• Technical Log Data: Retained for 12 months for security and technical analysis purposes.

Once the relevant retention period has elapsed and there is no legal obligation to continue holding the data, 70gsm will securely delete your personal data using industry-standard data disposal methods.

10. Children's Privacy

The 70gsm platform is an online entertainment service intended exclusively for individuals aged 18 and above. We do not knowingly collect, process, or store personal data from anyone under the age of 18.

Should we discover that personal data belonging to a minor has been collected without our knowledge, we will immediately take appropriate action, including closing the account in question, deleting all associated data, and notifying the relevant authorities as required under Malaysian law.

If you believe a minor has registered an account on 70gsm, please notify us immediately at [email protected] and we will take prompt action.

11. Links to Third-Party Platforms

The 70gsm platform may contain links to third-party websites or services, particularly game providers and payment processors. 70gsm's Privacy Policy applies solely to our own platform and does not cover the privacy practices of any external websites or services you may visit through those links.

70gsm is not responsible for the privacy practices or content of third-party websites. We encourage you to read the privacy policy of every website you visit, particularly before submitting any personal information. The relationship between 70gsm and game providers such as Pragmatic Play, Evolution Gaming, Microgaming, and others is a B2B service provider arrangement, and any user data shared with them is limited to the minimum technical information necessary to enable gameplay.

12. Policy Amendments & How to Contact Us

70gsm reserves the right to amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes to platform operations. The "Updated" date at the top of this page will always reflect the date of the most recent amendment.

For significant and material changes to how we handle personal data, 70gsm will notify users via in-platform notifications, a login pop-up, or an email to your registered address — giving you sufficient time to review the changes before they take effect. Your continued use of the 70gsm platform after the effective date will be considered acceptance of the updated policy.

Contact the 70gsm Privacy Team

If you have any questions, concerns, or requests regarding this Privacy Policy or how 70gsm handles your personal data, please contact us through the following channels:

• Email: [email protected] (subject line: "Data Privacy Enquiry")
• Live Chat: Direct from the 70gsm platform, available 24/7
• WhatsApp: 24/7 support via the number listed on the platform