Privacy Policy 32448 — Our Commitment to Protecting Your Data

1Introduction

32448 values the privacy of every player who trusts our platform. This Privacy Policy forms part of the overall agreement between you and 32448, and should be read alongside the Terms and Conditions applicable to all registered users.

This policy applies to all information collected through the official 32448 website, mobile apps for Android and iOS, and any communication channels we operate including Live Chat and support email. By registering an account with 32448, you consent to the collection and use of your personal data as described in this document.

We are committed to always acting in accordance with responsible data protection principles — collecting only what is necessary, storing it securely and deleting it when it is no longer needed.

---

2Information We Collect

We collect personal information from various sources as you interact with the 32448 platform. This information falls into three main categories:

A. Information You Provide Directly

• Full name as it appears on your official identification document
• Identity card number or passport number (for KYC verification purposes)
• Date of birth — to verify that you meet the minimum age requirement of 18 years
• Registered email address and mobile number
• Current residential address
• Bank account or digital wallet details for processing deposits and withdrawals
• Copies of identification documents uploaded during the KYC process

B. Automatically Collected Information

• IP address and approximate geographic location based on IP
• Device type, operating system and browser version
• Session data including pages visited, time spent, and actions taken
• In-platform game history and financial transaction records
• Cookie data and similar tracking technologies

C. Information from Third Parties

• Verification data from licensed KYC service providers
• Payment verification information from approved payment processors
• Records from blacklist databases or relevant self-exclusion lists

---

3How We Use Your Data

Every piece of information we collect has a clear and legitimate purpose. We do not use your data for any purpose other than those stated below:

For marketing communications, you may withdraw your consent at any time by contacting our support team. Withdrawing consent will not affect your core account services.

---

4Information Sharing with Third Parties

32448 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, there are specific situations where limited, controlled data sharing is necessary to operate the platform:

• Payment Processors: FPX, Touch 'n Go eWallet, GrabPay and other approved payment processors receive the transaction information required to process your deposits and withdrawals. They are bound by strict confidentiality agreements.
• KYC Service Providers: Licensed and approved third parties receive a copy of your identification document for identity verification purposes. All such providers comply with industry data security standards.
• Game Providers: Game software providers partnering with 32448 may receive anonymised user IDs to enable game logs for audit and dispute resolution purposes.
• Statutory Authority: We will disclose the required information to law enforcement authorities or regulatory bodies when required by applicable Malaysian law.
• Technical Infrastructure Providers: Cloud computing and server hosting service providers that process data on our behalf, bound by strict data processing agreements.

---

5Data Security

Protecting your personal information is a responsibility we take very seriously. 32448 implements multiple layers of technical and organisational security to ensure your data remains safe at all times:

• 256-bit SSL/TLS Encryption: All communication between your device and 32448 servers is protected by bank-grade encryption protocols. This means data transmitted cannot be read by any other party while in transit.
• Data-at-Rest Encryption: Sensitive data stored in our databases, including financial information and KYC documents, is encrypted using AES-256 standards.
• Strict Access Controls: Only staff with a legitimate operational need may access users' personal data, and every access is logged for audit purposes.
• Continuous Monitoring: Our systems are monitored 24/7 to detect any suspicious activity or unauthorised access attempts.
• Periodic Security Audits: We conduct regular security assessments by independent parties to identify and address any vulnerabilities before they can be exploited.
• Two-Factor Authentication (2FA): User accounts are protected with two-factor authentication, which we strongly encourage all players to enable.

While we take all reasonable precautions, no security system can guarantee 100% absolute protection. In the event of a data breach affecting your information, we will notify you within the timeframe required by applicable law.

---

6Cookies & Tracking Technologies

32448 uses cookies and similar tracking technologies to ensure the platform runs smoothly and to deliver a better experience for users. Below are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Stores your personal settings such as preferred language, time zone and display preferences. This enables a more personalised experience each time you return to the platform.
• Analytics Cookies: Helps us understand how users interact with the platform — which pages are visited most often, where users spend the most time and general navigation flows. This data is used in aggregated, anonymised form for platform improvement.
• Security Cookies: Used to detect suspicious activity and protect your account from unauthorised access, including detection of unusual login attempts.

You can manage cookie settings through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some parts of our platform.

---

7Your Rights as a User

As a registered 32448 user, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

• Access Rights: You have the right to request a copy of all personal data we hold about you. Data access requests will be processed within 30 business days.
• Right to Rectification: If you find that any information we hold is inaccurate or out of date, you have the right to request a correction. For basic details, you can update them yourself via your account settings.
• Right to Erasure: Under certain circumstances, you have the right to request the deletion of your personal data. Please note that we may need to retain certain records in accordance with legal obligations.
• Right to Object to Processing: You have the right to object to the processing of your data for specific purposes, particularly direct marketing communications.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format and transfer it to another service provider, where technically feasible.
• Right to Withdraw Consent: For processing that relies on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the validity of prior processing.

To exercise any of the above rights, contact our support team by email at [email protected] or via Live Chat within the platform. We will verify your identity before processing any data-related request.

---

8Data Storage & Deletion

32448 retains your personal data only for as long as necessary for the purposes stated in this policy, or as required by applicable law. Below are our data retention guidelines:

• Active Account Data: Retained for the duration your account remains active and as long as needed to provide the service.
• KYC Records: Retained for a minimum of 5 years after account closure in accordance with anti-money laundering compliance requirements.
• Financial Transaction Records: Retained for a minimum of 7 years for financial audit and tax compliance purposes.
• Support Communication Logs: Retained for 2 years for reference and dispute resolution purposes.
• Analytics Data: Anonymised data may be retained longer for trend analysis purposes.

When data is no longer needed and there is no legal obligation to retain it, we will securely delete it using methods that ensure the data cannot be recovered.

---

9Children's Privacy

The 32448 platform is strictly for individuals aged 18 and above. We do not knowingly collect any personal information from minors. Account registration requires age verification through a rigorous KYC process.

If we discover that personal information of a minor has been collected without parental or guardian consent, we will take immediate steps to delete that information and close the account in question. If you suspect that a minor has registered an account on our platform, please contact us immediately at [email protected].

---

10Privacy Policy Amendments

32448 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in how we handle user data.

When significant amendments are made, we will notify you via an in-platform notification or the email you registered with at least 7 days before the changes take effect. The "Updated" date at the top of this document will be refreshed each time an amendment is made.

Continued use of the 32448 platform after any amendments to this Privacy Policy take effect will be considered acceptance of the revised terms. We encourage you to review this page periodically.

---

11Contact Us About Privacy

If you have any questions, concerns, or complaints about how 32448 handles your personal data, or wish to exercise your rights, please contact us through the following channels:

• Privacy Email: [email protected] — please include "Privacy Enquiry" in your email subject line for faster processing.
• Live Chat: Available 24/7 directly within the platform for quick privacy-related enquiries.
• FAQ: Visit the page FAQ us for answers to frequently asked questions about privacy and account security.

We are committed to responding to all privacy-related enquiries within 3 working days. For data access or erasure requests, processing may take up to 30 working days depending on the complexity of the request.