Menara3388 Privacy Policy – Protection
Your Personal Data

01 Who Is Responsible for Your Data

Menara3388 (hereinafter referred to as "we", "the platform", or "Menara3388") is the data controller for all personal information collected from members and users of our platform at menara3388.my.

As a responsible data controller, Menara3388 ensures that all personal data processing is carried out in accordance with the principles set out in Malaysia's Personal Data Protection Act 2010 (PDPA), namely:

• General Principles: Personal data is only processed in a lawful and fair manner.
• Notice & Choice Principles: Members are informed about how their data is used and are given a choice.
• Disclosure Principles: Data is not disclosed without consent unless required by law.
• Security Principles: Practical security measures are in place to protect your data.
• Integrity Principle: Data is always accurate, complete, and up to date.
• Access Principle: Members may access and update their own data.

For any enquiries regarding this Privacy Policy, you may contact our Data Protection Officer at support@menara3388.my.

02 Types of Personal Data We Collect

Menara3388 collects personal data across several categories as outlined in the table below. We only collect data that is strictly necessary for platform operations and the provision of services to members.

03 How We Collect Your Personal Data

Menara3388 collects your personal data through the following methods:

• Account Registration: Information you provide when registering a new account at Menara3388, including your name, email, date of birth, and phone number.
• KYC Verification: Identity verification documents uploaded during the Know Your Customer process, such as a copy of your MyKad or bank statement.
• Financial Transactions: Information associated with deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks).
• Platform Usage: Data generated automatically when you use Menara3388, including game records for slots, Baccarat, Blackjack, and football betting.
• Device and Browser: Technical information collected automatically by our servers when you browse the platform, such as your IP address and device type.
• Customer Communications: Conversations with our support team via live chat or email are recorded for training and service improvement purposes.
• Cookies & Tracking Technologies: Cookie data collected through your browser to enhance user experience and platform analytics.

We do not collect personal data from third-party sources except for identity verification through approved agencies, and only with your consent.

04 Purposes for Using Personal Data

Menara3388 uses the personal data collected solely for the following purposes:

• Account Management: Creating, managing, and maintaining your Menara3388 member account.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, and other methods, as well as withdrawals to your registered bank account or e-wallet.
• Identity Verification: To verify the age and identity of members in accordance with Malaysian legal compliance requirements.
• Platform Security: To identify and prevent fraud, hacking, and other unlawful activities including money laundering.
• Customer Support: Providing technical assistance and addressing enquiries related to your account, games, or transactions.
• Legal Compliance: To fulfil reporting and compliance obligations required by Bank Negara Malaysia and other regulatory bodies.
• Service Communications: Sending important notifications related to your account, policy changes, or security information.
• Platform Improvements: Analysing usage patterns to improve the overall playing experience and platform functionality.
• Responsible Gaming: Monitoring betting patterns to support members who may be experiencing problem gambling.

05 Third-Party Data Sharing & Disclosure

Menara3388 takes the trust you place in us seriously. Your personal data will not be sold or rented to any third party. However, we may share data in the following limited circumstances:

• Payment Service Providers: Transaction information is shared with approved payment gateways (such as FPX processors and TNG eWallet) solely for the purpose of processing your deposits and withdrawals.
• Gaming Service Providers: Usernames and game records are shared with game software providers for technical purposes and fair play auditing.
• Identity Verification Services: KYC documents may be shared with authorised third-party identity verification agencies in Malaysia.
• Malaysian Authorities: Menara3388 will disclose data to Bank Negara Malaysia, the Royal Malaysia Police, or any other government authority when required by law or court order.
• Fraud Prevention: Technical data may be shared with industry fraud prevention services to protect the platform and all members.

All third parties that receive personal data from Menara3388 are bound by strict confidentiality agreements and are required to process data solely for the specified purpose. They are not permitted to use the data for any other purpose.

06 Data Storage & Retention Period

All personal data of Menara3388 members is stored on protected servers housed in data centres that comply with international security standards. Data is encrypted both at rest and in transit.

Data retention periods are as follows:

• Active Account Data: Retained for the duration of the account and for 5 years after account closure, in compliance with Malaysia's PDPA requirements.
• Financial Transaction Records: Retained for a minimum of 7 years in compliance with Malaysian tax legislation and financial reporting obligations.
• Security Logs: Retained for 2 years for security incident investigation purposes.
• Support Communication Records: Retained for 3 years after the last interaction.
• Cookie Data: Session cookies are deleted when the browser is closed; persistent cookies expire within 12 months.

Upon expiry of the retention period, your personal data will be securely deleted or anonymised in accordance with Menara3388's internal procedures.

07 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a Menara3388 member have the following rights regarding your personal data:

To exercise any of the above rights, please contact us by email at support@menara3388.my with the subject line "Privacy Rights Request", or via our platform's live chat. We may require identity verification before processing your request.

08 Data Security and Protection Measures

Menara3388 implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, loss, or misuse:

• Data Encryption: All data is encrypted using AES-256 standards at rest and TLS 1.3 in transit.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA for an added layer of security on their accounts.
• Internal Access Controls: Access to members' personal data is restricted to staff who require that information to carry out their duties only.
• 24/7 Monitoring: An automated monitoring system operates around the clock to detect suspicious activity or intrusion attempts.
• Security Testing: Penetration testing is conducted periodically by independent security experts.
• Data Backup: Data is regularly backed up to separate locations to ensure service continuity.

However, no security system is 100% foolproof. In the event of a data security breach affecting your information, Menara3388 will notify you within the timeframe required by Malaysia's PDPA and take immediate steps to contain the incident.

09 Cookies Policy

Menara3388 uses cookies and similar tracking technologies to enhance the user experience and analyse platform usage. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Performance Cookies: Collects information on how visitors use the platform to help us improve functionality and content.
• Functional Cookies: Storing your preferences such as language, region, and display settings to deliver a more personalised experience.
• Analytics Cookies: Helps us understand traffic patterns and platform usage in aggregate, anonymised form.

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of some parts of the Menara3388 platform. Note: disabling essential cookies will prevent you from logging in to your account.

10 Links to Third-Party Platforms

The Menara3388 platform may contain links to third-party sites or services related to gaming or financial services. Our Privacy Policy does not apply to those third-party sites.

We encourage you to read the Privacy Policy of every site you visit, particularly when providing personal information. Menara3388 is not responsible for the privacy practices or content of third-party sites.

11 Privacy Policy Amendments

Menara3388 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or service improvements. Members will be notified of any material amendments through:

• Email notification to your registered address at least 14 days before the changes take effect.
• A clear notice on the Menara3388 platform homepage.
• Update the "Version" and "Effective Date" fields at the top of this document.

Your continued use of the Menara3388 platform after any amendments take effect will be deemed as your acceptance of the updated Privacy Policy. If you do not agree with any amendments, you have the right to close your account before the effective date of those amendments.

12 Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or the processing of your personal data, please contact the Menara3388 Data Protection Officer (DPO) through the following channels:

• Email: support@menara3388.my (subject: "Privacy Enquiry")
• Live Chat: Available 24 hours a day, 7 days a week on the Menara3388 platform
• Email Response Time: Within 3 business days

You also have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you believe your data has been processed in a manner that violates the PDPA 2010. Further information is available on the official website of the Department of Personal Data Protection Malaysia.

For complete information on your rights as a member, please also refer to Terms & Conditions and page Responsible Gaming us.