Mycs3 Privacy Policy – Data Protection for Malaysian Members

This Privacy Policy ("Policy") describes how mycs3 ("we", "the platform", or "mycs3.best") collects, uses, processes, stores, and protects the personal information you provide to us or that we collect automatically when you use the mycs3 platform.

By registering a mycs3 account or using any of our services – whether slots, Live Casino, Malaysian Super League Sports Betting, BWF badminton betting, e-sports, or any other part of the platform – you agree to the terms of this Privacy Policy. If you do not agree with any part of this policy, please stop using our platform.

Mycs3 takes a "privacy by design" approach – meaning data protection is built into every new platform feature from the ground up, rather than added as an afterthought. This reflects our serious commitment to member privacy, especially in the context of an online gambling platform where trust is everything.

Mycs3 collects various types of information when you use our platform. This information falls into two main categories: information you provide directly, and information collected automatically as you use our services.

Information You Provide Directly

• Registration information: Full name, Malaysian mobile number, email address, date of birth, and identification details required for account verification
• Financial information: Payment method details used, including your Touch 'n Go eWallet account number, DuitNow account number, GrabPay ID, Boost ID, ShopeePay ID, or bank account information for FPX via Maybank2u or CIMB Clicks
• Identity documents: A copy of your ID card or passport may be requested during the Know Your Customer (KYC) process to verify your identity and age.
• Communications: Your conversation history with mycs3's customer support team via live chat or email, including complaints and enquiries
• Feedback: Reviews, ratings, or any other information you choose to share with mycs3.

Automatically Collected Information

• Usage data: Betting history, games played, session duration, deposit and withdrawal records, bonuses claimed, and all financial activity within your account
• Device & network data: IP address, device type, operating system, browser type, and unique device identifier
• Location data: General location based on IP address for security and geo-compliance purposes.
• Cookie & tracking technology data: Session information, platform preferences, and usage patterns collected through cookies and similar technologies

Mycs3 uses the information collected for various purposes related to providing and improving our services to members in Malaysia. Every use of data has a valid legal basis – whether to fulfil the contract between you and mycs3, to meet legal obligations, or based on the platform's legitimate interests.

Mycs3 does not use your data to make automated decisions that materially affect you without human oversight. Any significant decisions relating to your account, bonuses, or betting limits are reviewed by our trained team.

Mycs3 does not sell or trade your personal data. However, in the course of operating the platform, there are specific situations where mycs3 needs to share certain data with selected third parties. All such sharing is conducted on a need-to-know basis and is subject to strict data protection agreements.

Categories of Third Parties That May Receive Your Data

• Payment service providers: Payment gateway providers that process Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX transactions. Data is shared only to the extent necessary to process your transaction
• Game providers: Providers such as Pragmatic Play, PG Soft, and Joker Gaming receive the session identifiers needed to deliver games to you. They do not receive your full personal information
• Cloud & infrastructure service providers: Companies that provide the server infrastructure, data storage, and technical services required to operate the platform. All such providers are bound by strict confidentiality agreements
• Identity verification services: Third-party KYC providers that assist us in verifying member identities in accordance with legal requirements. Data shared is limited to what is necessary for verification
• Legal authorities: Law enforcement agencies, regulatory bodies, or courts that require data pursuant to a valid legal order. mycs3 discloses only the minimum data necessary and will endeavour to notify you where permitted by law

Mycs3 continually invests in the latest security infrastructure to ensure your personal data is protected at all times. The following are the key security measures we have in place:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or app and mycs3's servers is encrypted using the latest SSL/TLS protocols, preventing any third party from intercepting or reading your data in transit.
• Data-at-rest encryption: Sensitive personal data stored in mycs3's databases is encrypted at rest using industry-recognised encryption algorithms
• Access control: Access to member personal data within mycs3 is limited to staff who genuinely need it to carry out their duties. All access is logged and monitored.
• Two-factor authentication (2FA): mycs3's internal systems require 2FA for all staff access to member data. Members are also encouraged to enable 2FA on their personal accounts
• Regular security audits: mycs3 undergoes regular independent security audits to identify and address system vulnerabilities before they can be exploited.
• 24/7 Monitoring: Automated monitoring systems run around the clock to detect suspicious activity, intrusion attempts, or anomalies in data access patterns

Mycs3 also maintains detailed logs of all access to sensitive member data. These logs are reviewed regularly by our security team to ensure no unauthorised use of data occurs from within our own organisation.

As a mycs3 member, you hold several important rights regarding your personal data held by our platform. mycs3 is committed to respecting and facilitating the exercise of these rights without undue burden or delay.

To exercise any of the above rights, contact the mycs3 support team at support@mycs3.best, stating the right you wish to exercise along with your account information for identity verification. mycs3 will process your request within the timeframe required by applicable law and will keep you informed of its progress.

Mycs3 uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session security, and understand how members use our platform so we can continuously improve our services.

Types of Cookies We Use

• Essential cookies (required): Required for core platform operations — login session management, CSRF security, and basic gaming functionality. Without these cookies, the platform cannot function properly. These cookies cannot be disabled
• Functional cookies: Stores your preferences such as language, display settings, and favourite games to deliver a more personalised experience. You may disable these cookies, though some features may be affected
• Analytics cookies: Collects anonymised usage data to help us understand how members interact with the platform. This helps us identify areas for improvement. This data is not linked to your personal identity
• Performance cookies: Monitors platform performance such as page load times and error rates to ensure the platform operates at optimal levels for all users

You can manage your cookie settings through your browser. Most modern browsers allow you to view, delete, or selectively block cookies. Please note that disabling essential cookies will affect your ability to log in and use the mycs3 platform normally.

Mycs3 retains your personal data only for as long as necessary to fulfil the purposes set out in this policy, or as required by applicable law. The following are general retention guidelines for key data categories:

• Active account data: Retained for the duration of your account and for the period following account closure as required by law.
• Financial transaction records: Retained for the minimum period required by financial and AML regulations (typically 5–7 years from the transaction date)
• Customer support communication logs: Retained for 3 years from the date of communication for dispute resolution purposes
• Usage data and analytics: Anonymised data is retained indefinitely for platform improvement purposes; identifiable data is deleted after account closure in accordance with established guidelines
• KYC documents: Retained in accordance with applicable licensing and AML legal requirements

Upon expiry of the retention period, data is securely deleted or anonymised using procedures that ensure it cannot be recovered. The data deletion process is audited on a regular basis to ensure compliance.

In operating the mycs3 platform, some of your personal data may be transferred to and stored on servers located outside Malaysia. This occurs because our cloud infrastructure and technology service providers may process data across multiple geographic locations.

Mycs3 ensures that all cross-border data transfers are carried out with adequate safeguards, including:

• Binding data processing agreements with all service providers that handle member data
• Ensuring that recipient countries or providers maintain data protection standards equivalent to or higher than our own
• Data encryption in transit and at rest, regardless of its physical location

If you have any questions, concerns, or requests regarding this Privacy Policy or how mycs3 handles your personal data, we encourage you to reach out to us. mycs3 takes every privacy-related enquiry seriously.

• Email: support@mycs3.best – for privacy enquiries, please include "Privacy Enquiry" in the email subject line
• Live Chat: Available 24/7 at mycs3.best – for urgent privacy or data access enquiries
• Response time: mycs3 is committed to acknowledging every privacy enquiry within 48 hours and providing a full response within 30 working days

If you believe mycs3 has not met our privacy responsibilities, you have the right to lodge a complaint with the relevant data protection authority. That said, we encourage you to contact us first so we can address your concerns directly and promptly.

Mycs3 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or improvements to our services. The "Last Updated" date at the top of this document will be revised whenever changes are made.

For material changes — meaning changes that significantly affect how we use your data or impact your rights — mycs3 will provide more prominent notice, such as:

• Email notification to all active members with a verified email address
• An in-platform pop-up notification the next time you log in
• Announcements on the mycs3 news section or homepage

We encourage you to review this Privacy Policy periodically. Your continued use of the mycs3 platform following any changes to this Privacy Policy will be deemed your acceptance of the updated terms.