Privacy Policy 365huat –
Your Personal Data Protection

365huat ("we", "our platform") is committed to protecting the privacy of every individual who uses our services. This Privacy Policy transparently explains how we handle your personal information — from the moment you register through your ongoing use of our platform.

By registering or continuing to use the 365huat platform, you agree to the data collection and usage practices described in this document. If you do not agree with any part of this policy, please stop using the platform and contact us to close your account.

This document should be read together with Terms and Conditions and Responsible Gaming Policy 365huat, all of which together form a comprehensive agreement between you and our platform.

365huat only collects data that is strictly necessary for platform operations, identity verification, and legal compliance. The following are the categories of data we collect:

We do not collect sensitive data such as health information, criminal records, or biometric data unless required by law or applicable licensing obligations.

Your personal data is collected through several key channels when you interact with the 365huat platform:

• Account Registration — You directly provide basic information such as name, email and phone number upon registration.
• KYC Process — Identity verification documents are uploaded by you when requested to verify your account or increase your withdrawal limit.
• Financial Transactions — Payment information is collected automatically when you make a deposit or withdrawal through the available payment methods.
• Platform Usage — Technical data and usage data are collected automatically through cookies, server log files and similar tracking technologies.
• Customer Support — When you contact our support team, the content of that conversation may be recorded for quality control and complaint resolution purposes.
• Trusted Third Parties — In certain cases, we may receive information from authorised identity verification providers or payment partners.

365huat uses your personal data solely for lawful and transparent purposes. We will not use your data for any purpose other than those stated below:

• Account Management — To create, verify and maintain your member account on the 365huat platform.
• Transaction Processing — To process deposits, withdrawals and any financial transactions you make on our platform accurately and securely.
• Identity Verification (KYC) — To fulfil legal requirements related to age verification, identity and source of funds to prevent fraud and money laundering.
• Platform Security — To detect, investigate and prevent fraudulent activity, collusion, cyberattacks or any security threats that could affect other members.
• Customer Support — To respond to enquiries, resolve complaints and provide you with technical assistance efficiently.
• Service Improvement — To analyse usage patterns in aggregate and anonymised form to improve the user experience on the 365huat platform.
• Marketing Communications — To send you promotional information, bonus offers and platform updates — only if you have opted in to receive them.
• Legal Compliance — To comply with directives from regulatory bodies, court orders or other applicable legal requirements.

365huat does not sell or disclose your personal data to third parties for their own commercial purposes. However, there are limited situations where we need to share your data with the following parties for legitimate reasons:

• Payment Providers — Required financial information is shared with providers such as DuitNow, FPX, Touch 'n Go eWallet, GrabPay and Boost solely to process your transactions.
• KYC & Identity Verification Providers — Identity documents may be shared with approved third-party verification services to meet compliance requirements.
• Game Software Providers — Minimum technical data required to run games is shared with licensed game providers integrated with our platform.
• Regulatory Authorities — In cases required by law, we will disclose information to the relevant authorities such as law enforcement agencies or licensing bodies.
• Technical Service Providers — Hosting, cloud computing and cybersecurity providers bound by strict confidentiality agreements.

365huat implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration, or disclosure:

• Data Encryption in Transit — All communications between your device and our servers are protected with TLS 1.3 protocol and 256-bit SSL encryption.
• Data Encryption at Rest — Sensitive data such as financial information and KYC documents are encrypted at rest using AES-256 encryption algorithms.
• Layered Access Control — Only 365huat staff with a legitimate job requirement are permitted to access member personal data, and every access is logged and audited.
• 24/7 Security Monitoring — An intrusion detection system (IDS) and threat monitoring operate around the clock to detect any suspicious activity.
• Regular Security Testing — Independent penetration testing and security audits are conducted periodically to identify and address system vulnerabilities.
• Secure Data Backup — Data backups are performed automatically and stored at a separate secure location to ensure service continuity.

365huat retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Our data retention guidelines are as follows:

• Active Account Data — Retained for the duration your account is active and for as long as necessary to resolve any outstanding transactions.
• Financial Transaction Records — Retained for a minimum of 7 years after the transaction date to fulfil accounting and anti-money laundering legal requirements.
• KYC Documents — Retained for a minimum of 5 years after account closure or end of business relationship as required by the Anti-Money Laundering Act.
• Support Communication Logs — Retained for 2 years from the date of communication for reference and complaint resolution purposes.
• Technical Data & Logs — Retained for 12 months before being automatically deleted unless required for an ongoing security investigation.

Once the retention period has expired, your personal data will be securely deleted or anonymised using approved procedures.

As a 365huat member, you have the following rights regarding your personal data that we hold. These rights may be exercised by contacting our support team through official channels:

365huat uses cookies and similar tracking technologies to enhance the user experience on our platform. The following are the types of cookies we use:

• Essential Cookies — Required for core platform operations such as login authentication and session management. These cookies cannot be disabled.
• Performance Cookies — To gather information about how you use the platform to help us improve our services. All data is collected anonymously.
• Functional Cookies — To enable the platform to remember your preferences such as language, display settings and game preferences for a more personalised experience.
• Analytics Cookies — Used to understand overall usage patterns to help us make better product development decisions.

You may control or delete cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the 365huat platform.

The 365huat platform may contain links or integrations with third-party services such as payment providers and game providers. This Privacy Policy applies solely to the 365huat platform itself.

We are not responsible for the privacy practices or content of those third-party websites or services. We encourage you to read the privacy policy of each third-party service you use separately.

The 365huat platform is strictly for individuals aged 18 and above. We do not knowingly collect, store, or process any personal data from individuals under the age of 18.

If we determine that personal data of a minor has been collected without appropriate age verification, we will take immediate action to delete that data and close the account in question. Parents or guardians who suspect their child has registered on the 365huat platform are encouraged to contact our support team immediately.

365huat reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. All amendments take effect immediately upon being published on our website unless otherwise stated.

For material amendments that may significantly affect your privacy rights, we will provide reasonable notice through:

• In-platform notification upon your next login.
• Email to your registered address.
• A clear notice displayed on the platform's home page.

Continued use of the 365huat platform after any amendments take effect constitutes your acceptance of the updated terms.

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, please contact the 365huat Data Protection Officer (DPO) through the following channels: