150r Privacy Policy – Personal Data Protection for Malaysian Players

1 Introduction and Scope of the Privacy Policy

This Privacy Policy is published by 150r ("we", "the 150r platform") and applies to all users who register for, access, or use the services provided through the 150r website and mobile application. This document explains the types of personal information we collect, how we use it, to whom we may disclose it, and the measures we take to protect it.

150r takes the privacy of our users very seriously. We understand that when you play your favourite slots such as Crystal Caverns, Mustang Gold, or Titans Rage on our platform, or make a deposit via Touch 'n Go eWallet or DuitNow, you are entrusting us with your personal information. We regard that trust as a significant responsibility — not something to be taken lightly.

This Privacy Policy applies to all information collected through:

• The official 150r website and all its subdomains.
• The 150r mobile app, available for Android and iOS.
• All interactions with the 150r customer support team via live chat, email, or other communication channels.
• Any third-party services integrated with the 150r platform are subject to the respective provider's own privacy policy.

2 Personal Information We Collect

150r only collects personal information that is strictly necessary to deliver our services safely, fairly, and efficiently. We do not collect excessive information or information that has no direct relevance to the purpose of our platform.

Information you provide directly to 150r:

• Malaysia phone number: Required for registration, identity verification, and account-related communications.
• Your chosen username: For identity verification within the 150r platform.
• Password (stored in encrypted hash form): For account security — we do not store passwords in plain text.
• Identity verification documents (if requested): Such as your IC or passport number for age and identity verification for large withdrawals.
• Payment method information: Details relating to Touch 'n Go eWallet, GrabPay, DuitNow, FPX Maybank2u, CIMB Clicks, Boost, or ShopeePay used for deposits and withdrawals.

Information collected automatically when you use 150r:

• IP address and general location information (state/city within Malaysia)
• Device type, operating system, and web browser used
• Gaming activity history including games played, bet amounts, and results
• Records of all financial transactions (deposits and withdrawals) with timestamps
• Session log data including login time, logout time, and session duration
• Cookie data and similar tracking technologies (see Section 9 for further details)

3 How We Collect Personal Information

150r collects your personal information through several different channels, all within the legitimate and reasonable context of using our platform:

• New account registration: When you first register with 150r, you provide basic information such as your phone number and password, which are required to create your account.
• Deposit and withdrawal processing: When you make a deposit via Touch 'n Go eWallet, GrabPay, DuitNow, or any other method, or withdraw your winnings, transaction data is automatically recorded for security and compliance purposes.
• Identity verification: When 150r requires age or identity verification (for example, for large withdrawals exceeding MYR 10,000), you may be asked to provide additional documents.
• Customer support interactions: When you contact the 150r support team via live chat or email, the content of that conversation is stored for quality assurance and dispute resolution purposes.
• General platform usage: Technical data such as device information, IP addresses, and usage patterns are collected automatically via server log technology and cookies.

4 Purpose of Personal Data Use

150r uses the personal information collected for the following purposes, all of which are directly related to the delivery of our platform services:

150r will not use your personal information for purposes unrelated to those stated above without first obtaining your additional consent. If you do not wish to receive promotional communications from 150r, you may withdraw that consent at any time through your account settings or by contacting our support team.

5 Sharing and Disclosure of Personal Data

150r does not sell, rent, or trade users' personal information to any third party for their own commercial purposes. This is our absolute commitment to all 150r users.

However, there are limited situations where 150r may need to share your personal information with third parties, namely:

• Payment service providers: Information required to process your deposits and withdrawals is shared with providers such as Touch 'n Go eWallet, GrabPay, DuitNow, FPX Maybank2u, CIMB Clicks, Boost, or ShopeePay. These providers receive only the information necessary to process the relevant transaction and are bound by strict confidentiality agreements with 150r.
• Technology service providers: Companies that provide technical infrastructure for the 150r platform (such as server hosting, cybersecurity services, and data analytics) may have limited access to certain data. All such providers are bound by strict data protection agreements.
• Malaysia legal authority: 150r will disclose users' personal information to legitimate Malaysian authorities (such as the Royal Malaysia Police, Bank Negara Malaysia, or the courts) when required by law, court order, or valid legal process.
• Industry regulatory body: In the context of compliance with applicable online gambling industry regulations.

In all instances of data sharing described above, 150r ensures that recipients of the information are bound by data protection obligations equivalent to, or stricter than, our own privacy policy.

6 Data Security Measures

The security of your personal data at 150r is our top technical priority. We continually invest in best-in-class information security technologies and practices to ensure your data remains protected at all times.

Technical measures we implement at 150r:

• 256-bit SSL/TLS encryption: All communications between your browser or application and 150r's servers are encrypted using the latest SSL/TLS protocol with a 256-bit key — the same standard used by leading banks in Malaysia.
• Encryption of data at rest: All sensitive information stored in the 150r database — including passwords (stored as irreversible one-way hashes), payment details, and identity documents — is encrypted using industry-standard encryption algorithms.
• Multi-layered access controls: Only 150r staff who require access to specific personal information in order to carry out their duties are permitted to access that data. All access is logged and monitored.
• 24/7 security monitoring: Intrusion detection systems (IDS) and intrusion prevention systems (IPS) operate continuously to identify and block any suspicious activity.
• Regular penetration testing: 150r conducts regular penetration testing by independent third parties to identify and address any security vulnerabilities before they can be exploited.
• Secure data backups: Critical data is regularly backed up to separate, secure locations to ensure continuity of 150r's services under any circumstances.

7 Personal Data Retention Period

150r does not retain your personal data for longer than is necessary to fulfil the purpose for which it was collected, or to comply with applicable legal requirements. The following are our data retention guidelines:

• Active account data: Retained for as long as your account is active with 150r and for 7 years after account closure for Malaysian legal compliance purposes.
• Financial transaction records: Retained for 7 years in accordance with the requirements of the Companies Act and Malaysia's anti-money laundering regulations.
• Customer support communication records: Retained for 3 years for quality assurance purposes and the resolution of any disputes that may arise.
• Technical log data: Retained for 90 days, then permanently deleted or fully anonymised.
• Identity verification documents: Retained for the period required by applicable compliance regulations, generally not exceeding 5 years after the last verification.

Once the applicable retention period has expired, 150r will delete or anonymise your personal data using secure, irreversible methods.

8 User Rights Regarding Personal Data

As a 150r user based in Malaysia, you have the following rights regarding your personal data, in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia:

To exercise any of the rights listed above, you may:

• Contacting the 150r customer support team via the live chat function, available 24/7.
• Submit a written request to [email protected], clearly stating the right you wish to exercise and your account details.
• Using the data management tools available in your 150r account settings for standard requests such as correcting your information.

150r will process all data rights requests within 14 business days. For more complex cases, we may require up to 30 business days and will notify you if this applies.

9 Cookies and Tracking Technologies

150r uses cookies and similar tracking technologies to enhance your experience on our platform, ensure account security, and understand how users interact with our services.

Types of cookies used by 150r:

• Mandatory session cookies: Required for core platform functions at 150r, such as logging in, maintaining your session, and securing transactions. These cookies cannot be disabled, as the platform will not function properly without them.
• Preference cookies: Stores your preferences such as your chosen language, last bet amount, and most frequently played games, personalising and streamlining your experience on 150r.
• Analytics cookies: Used to collect aggregated, anonymised information about how users interact with the 150r platform, helping us identify areas for improvement.
• Security cookies: Helps detect and prevent fraudulent activity, unauthorised access, and other security threats to 150r user accounts.

You can manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the 150r platform. Mandatory session cookies cannot be fully disabled if you wish to use our services.

10 Privacy Policy Updates & Contact Us

150r reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or service improvements. Whenever this Privacy Policy is materially updated, we will:

• Sending SMS notifications to your registered phone number to alert you to important account changes.
• Updating the "Last Updated" date at the top of this document.
• Displaying a clear notice on the 150r platform homepage for a reasonable period following the publication of any changes.

Continued use of the 150r platform after changes to the Privacy Policy are published will be considered your acceptance of the updated version. If you do not agree with the changes, you have the right to close your account and withdraw your balance before the new terms take effect.

We encourage you to review this Privacy Policy periodically — at least once every six months — to ensure you remain informed about how we protect your personal information at 150r.