my365 Privacy Policy

1 About This Policy

my365 ("we", "us", "our") is committed to protecting the privacy and security of our members across Malaysia and all regions where our services operate. This Privacy Policy describes the types of personal information we collect when you use my365's online betting, live casino, slots, and 4D lottery services, how we use that information, and the steps we take to keep it safe.

This document constitutes a binding agreement between you (the "Member" or "User") and my365 with respect to the processing of your personal data. If you do not agree to the terms of this Privacy Policy, you should discontinue use of my365 services immediately.

We may update this policy from time to time to reflect changes in our practices or applicable law. The date of the most recent revision will always be displayed prominently at the top of this page. Continued use of my365 after any update constitutes your acceptance of the revised terms.

2 Information We Collect

In order to provide a safe, compliant, and personalised betting experience, my365 collects several categories of personal information. We collect only what is necessary for the purposes described in this policy.

Registration & Account Data: When you create a my365 account, we collect your full legal name, date of birth, email address, mobile phone number, preferred username, and a securely hashed password. This information is mandatory to establish your identity and comply with age verification requirements (all members must be 21 years of age or above).

Identity Verification (KYC) Data: To satisfy our Know Your Customer obligations and prevent fraud and money laundering, we may request copies of government-issued identification documents such as your Malaysian IC (MyKad), passport, or driving licence, as well as proof of address documents such as a utility bill or bank statement.

Financial & Transaction Data: We record details of all deposits, withdrawals, wagers, winnings, and payment method information you use on my365. This includes data associated with Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and Malaysian bank accounts (Maybank, CIMB, Public Bank, RHB, Hong Leong). We do not store full card numbers or payment credentials on our own servers.

Device & Technical Data: We automatically collect certain technical information when you access my365, including your IP address, browser type and version, operating system, device identifiers, time zone, and pages visited. This helps us diagnose technical problems and protect against fraudulent access.

Behavioural & Usage Data: We collect information about how you interact with our platform — including games played, bets placed, session duration, and features accessed — to improve our products and tailor your experience.

Communications Data: If you contact our support team via live chat or email, we retain records of those interactions for quality assurance and dispute resolution purposes.

3 How We Use Your Data

my365 uses your personal information for the following lawful purposes:

• Account Management: To create, maintain, and secure your my365 account, and to verify your identity and age at registration and upon request.
• Service Delivery: To process your bets, deposits, and withdrawals, and to make available all sports betting, live casino, slots, and 4D lottery services.
• Legal & Regulatory Compliance: To meet our obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and responsible gaming regulations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, collusion, bonus abuse, and other prohibited activities on the platform.
• Customer Support: To respond to your enquiries, resolve disputes, and provide multilingual support in English, Bahasa Melayu, and Mandarin.
• Personalisation: To customise your experience, show you relevant promotions, and recommend games or betting markets that may interest you based on your usage history.
• Marketing Communications: Where you have given explicit consent, to send you promotional emails, SMS, or in-platform notifications about offers, bonuses, and new products. You may opt out at any time.
• Analytics & Platform Improvement: To analyse aggregate usage trends, improve site performance, and develop new features for Malaysian and regional members.

We will not use your personal data for any purpose that is incompatible with those stated above without first obtaining your consent or establishing another lawful basis.

4 Legal Basis for Processing

my365 processes your personal data on one or more of the following legal grounds, depending on the specific activity involved:

• Contractual Necessity: Processing is required to perform the contract between you and my365 — for example, to process a bet or execute a withdrawal to your Maybank account.
• Legal Obligation: Processing is necessary to comply with applicable laws and regulations, including AML requirements and age verification mandates.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, platform security, and improving our services, provided those interests are not overridden by your rights and freedoms.
• Consent: For optional activities such as marketing communications and non-essential cookies, we rely on your freely given, specific, and informed consent, which you may withdraw at any time.

5 Sharing Your Information

my365 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may, however, share your data with trusted third parties in the following limited circumstances:

• Payment Processors & Financial Partners: To facilitate deposits and withdrawals through services such as FPX, DuitNow, and local Malaysian banks, we share the minimum necessary financial data with regulated payment processing partners.
• Identity Verification Providers: To conduct KYC and AML checks, we may share identity documents with accredited verification service providers who are contractually bound to handle your data confidentially.
• Technology & Hosting Partners: Our platform infrastructure is supported by third-party cloud hosting and software providers. These partners access only the data necessary to perform their services and operate under strict data processing agreements.
• Regulatory & Law Enforcement Authorities: We may disclose your information to competent authorities if required to do so by law, court order, or regulatory directive.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will notify affected members and ensure continued privacy protections are in place.

6 Cookies & Tracking Technologies

my365 uses cookies, web beacons, and similar tracking technologies to operate and improve our platform. A cookie is a small text file placed on your device when you visit our site. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the site to function correctly — for example, keeping you logged in to your my365 account during a session. These cannot be disabled.
• Performance & Analytics Cookies: Help us understand how visitors use my365 — which pages are most popular, where users drop off, and how long sessions last. The data collected is aggregated and anonymous.
• Functionality Cookies: Remember your preferences such as language settings, preferred display options, and recently viewed games.
• Marketing & Targeting Cookies: Used (with your consent) to deliver relevant promotions and measure the effectiveness of our campaigns. You may opt out of these at any time.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the my365 platform. For more information, refer to your browser's help documentation.

7 Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes outlined in this policy, or as required by applicable law. In practice, this means:

• Account and registration data is retained for the duration of your active membership and for a minimum of five (5) years after account closure, in line with standard AML record-keeping requirements.
• Transaction records are retained for a minimum of six (6) years to comply with financial reporting obligations.
• KYC documentation is retained for five (5) years following the end of the business relationship.
• Support communications are retained for two (2) years from the date of the last interaction.
• Marketing consent records are maintained until you withdraw consent and for a reasonable period thereafter as evidence of compliance.

When data is no longer required, it is securely deleted or anonymised in accordance with industry best practices.

8 Security Measures

Protecting your data is a top priority at my365. We implement a comprehensive set of technical and organisational security controls, including:

• TLS 1.3 encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data stored at rest, including financial records and identity documents.
• Multi-factor authentication (MFA) options for member account access.
• Regular independent security audits and penetration testing of our platform infrastructure.
• Strict internal access controls — only authorised personnel with a legitimate business need can access member personal data.
• 24/7 intrusion detection and real-time monitoring systems to identify and respond to threats promptly.

Despite these measures, no system is completely immune to risk. In the unlikely event of a data breach that poses a risk to your rights and freedoms, my365 will notify affected members and relevant authorities as required by applicable data protection obligations.

9 Your Rights

As a my365 member, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team via live chat or at the email address listed in Section 13.

• Right of Access: You may request a copy of the personal data we hold about you, free of charge, in a structured and commonly used format.
• Right to Rectification: You may ask us to correct any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data. Note that we may be required to retain some information for legal compliance purposes even after an erasure request.
• Right to Restrict Processing: You may ask us to limit how we use your personal data in certain situations — for example, if you contest the accuracy of the data while we verify it.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request that we transfer your data to another provider in a machine-readable format.
• Right to Object: You may object to our processing of your data for direct marketing purposes at any time, with immediate effect.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

We will respond to all valid requests within a reasonable timeframe, and no later than 30 days from receipt. If we are unable to fulfil a request, we will explain the reasons clearly.

10 Third-Party Services

The my365 platform integrates with a number of third-party game providers, payment gateways, and analytics tools to deliver a complete betting and casino experience. While we carefully vet all partners, please be aware that third-party services operate under their own privacy policies and data practices.

my365 is not responsible for the privacy practices of external providers once data is shared with them under the limited circumstances described in Section 5. We encourage you to review the privacy policies of any third-party service you use in conjunction with my365.

11 Children & Age Restriction

my365 services are strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is conducted during the registration process and may be repeated at any time.

If we discover that we have inadvertently collected personal data from a person under 21 years of age, we will immediately delete that data and close the associated account. If you believe a minor has registered on my365, please contact us immediately at the details in Section 13.

Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling platforms. For guidance on responsible gaming tools available to my365 members, please visit our Responsible Gaming page.

12 Changes to This Policy

my365 reserves the right to update or modify this Privacy Policy at any time. When we make material changes, we will notify active members via email and/or an in-platform notification at least 14 days before the changes take effect. Minor clarifications or non-material updates may take effect immediately upon publication.

The effective date at the top of this document will always reflect the date of the most recent revision. We encourage you to review this policy periodically. Your continued use of my365 services after a revision has taken effect constitutes your acceptance of the updated terms.

13 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way my365 handles your personal data, our Data Protection team is here to help. You can reach us through the following channels:

• Live Chat: Available 24/7 inside your my365 member account — the fastest way to get a response.
• Email: [email protected] — for written enquiries, data subject access requests, and formal complaints. Please allow up to 5 business days for a response.

For responsible gaming support and self-exclusion requests, please visit our dedicated Responsible Gaming page, where you will find full details of available tools and resources.