Fit3 Privacy Policy – Personal Data Protection for Malaysia Online Casino Members

1 Introduction

Fit3 ("we", "the platform", "fit3.my") takes the privacy and security of members' personal data extremely seriously. This Privacy Policy transparently describes how we collect, store, use, protect, and ultimately delete your personal data as a member of fit3 Malaysia's online casino and gaming platform.

We understand how sensitive personal information can be in the context of an online casino platform – from your eWallet payment details to your gaming history. That is why every decision we make about data handling is guided by the principle of maximum member protection, not mere operational convenience. fit3 operates in accordance with the requirements of the Malaysia's Personal Data Protection Act (PDPA) 2010 and all relevant regulations currently in force.

This Privacy Policy applies to all users of the fit3 platform – including unregistered visitors, active registered members, members whose accounts have been closed, and any party that interacts with fit3 through any official communication channel, including the support email, live chat and online enquiry forms.

This document is written in English for the convenience of our members. Should there be any discrepancy in interpretation between language versions, the Bahasa Malaysia version shall prevail for Malaysian members. Any privacy-related enquiries may be directed to our team at [email protected] at any time.

2 Personal Data We Collect

Fit3 only collects personal data that is strictly necessary to provide and operate our online casino platform services. The following are the categories of data we collect and the reasons we require them:

We collect this data through three primary methods: (1) information you provide directly during registration, identity verification or interactions with customer support; (2) data automatically generated by our systems when you use the fit3 platform; and (3) data received from authorised payment service providers (such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, and CIMB Clicks) strictly for transaction verification and processing purposes.

3 How We Use Your Personal Data

Fit3 uses members' personal data solely for legitimate, clearly defined purposes. The specific purposes for which your data is used are as follows:

• Account Management: Creating, verifying and maintaining your fit3 account, including age and identity verification, password recovery and account settings management.
• Transaction Processing: Processing all deposits and withdrawals in MYR (RM) via your chosen payment method – including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u and CIMB Clicks.
• Game Operations: Ensuring smooth gameplay, recording betting history, calculating wins and losses, and resolving any game-related disputes based on accurate system records.
• Security & Fraud Prevention: To detect and prevent unauthorised access, fraud, money laundering, and the use of multiple accounts in violation of fit3's Terms & Conditions.
• Legal Compliance: Fully compliant with all applicable Malaysian legal requirements, including the PDPA 2010, Anti-Money Laundering (AML) obligations, and directives issued by the relevant regulatory authorities.
• Customer Support: To resolve enquiries, complaints, and assistance requests submitted by members via live chat, email, or other support channels.
• Experience Personalisation: Customising the platform interface, game recommendations and promotional offers based on your preferences and gaming history – only when you have not opted out of this feature in your account settings.
• Platform Improvements: Analysing aggregated usage patterns (not at the individual level) to improve the quality, performance and features of the fit3 platform for the benefit of all Malaysian members.
• Marketing Communications: Sending promotional offers, new bonus information and platform updates – only to members who have consented to receive such communications. You may unsubscribe from marketing emails at any time.

4 Personal Data Sharing

Fit3 firmly upholds the principle that members' personal data is confidential and not to be shared freely. We does not sell, rent or share your personal data to any third party for their own marketing or commercial purposes. However, there are limited situations where data sharing is necessary or legally required:

• Authorised Payment Service Providers: Financial data required to process your deposits and withdrawals is shared with authorised payment providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and approved FPX providers. Such sharing is strictly limited to the information necessary to complete each transaction.
• Legal Compliance & Regulatory Authority Directives: fit3 is required to disclose data when ordered to do so by a competent court, a Malaysian government agency, or a law enforcement authority acting within its lawful jurisdiction.
• Technical Service Providers: Third-party providers that assist in operating fit3's technical infrastructure (such as cloud computing services and intrusion detection systems) may access data within the limited scope required for their services, subject to strict confidentiality agreements with fit3.
• With Your Explicit Consent: In any situation not listed above, fit3 will only share your personal data after obtaining your clear and explicit written consent.

All third parties that receive data from fit3 are subject to strict data protection agreements and are only permitted to use such data for the specific purposes approved by fit3. fit3 is not responsible for the privacy practices of third parties operating outside our direct control; however, we select service partners with a proven track record of high data security standards.

5 Personal Data Security

Fit3 continuously invests in security infrastructure to ensure the personal data of Malaysian members is protected to the highest practicable standard. The security measures we employ include:

• 256-bit SSL/TLS Encryption: All communication between your browser or app and fit3's servers is encrypted using 256-bit SSL/TLS protocol – the same standard adopted by Malaysia's leading banks, including Maybank and CIMB.
• Data-at-Rest Encryption: Personal data stored in fit3's databases is encrypted at rest, providing an additional layer of protection even in the event of unauthorised physical access.
• Multi-Layered Access Controls: Only fit3 staff who have obtained specific authorisation, undergone background checks, and been trained in data protection procedures are permitted to access members' personal data. All access is logged and monitored.
• Firewall & Threat Detection Systems: fit3's infrastructure is protected by next-generation firewalls, intrusion detection and prevention systems (IDS/IPS), and 24/7 real-time threat monitoring.
• Two-Factor Authentication (2FA): fit3 members are encouraged to enable two-factor authentication on their accounts for an additional layer of security. 2FA can be activated via your account settings using your Malaysian phone number.
• Regular Security Testing: fit3 conducts regular penetration testing and security vulnerability assessments by independent third parties to identify and address any weaknesses before they can be exploited.

While fit3 takes every reasonable measure to protect your data, no digital security system can be guaranteed 100% foolproof. You also play a vital role in keeping your account secure – use a strong, unique password, never share your login credentials, and contact fit3 support immediately if you suspect any suspicious activity on your account.

6 Cookies & Tracking Technologies

The fit3 platform uses cookies and similar tracking technologies to enhance your experience, maintain the security of your login session and analyse platform usage patterns. The types of cookies we use are as follows:

• Essential Cookies (Required): Required for core platform functionality — including login authentication, session security, language preference memory, and transaction verification. Without these cookies, the fit3 platform will not function properly. These cookies cannot be disabled.
• Performance Cookies: Collects information about how you use the fit3 platform — including the most frequently visited pages, page load times, and any errors encountered. This information is used in aggregate to improve platform performance and usability. No individual personal information is recorded in these cookies.
• Functional Cookies: To remember your preferences and settings within the fit3 platform – including saved betting settings, display theme preferences, language, and notification preferences. These cookies allow us to deliver a more personalised and consistent experience each time you log in.
• Analytics Cookies: Used to understand overall platform usage patterns on an aggregated basis without identifying individuals. This data helps the fit3 development team make better-informed decisions about new features and improvements that Malaysian members need most.

You can manage or delete cookies at any time through your browser settings. Please note, however, that disabling essential cookies will significantly affect the functionality of the fit3 platform, and you may not be able to use all platform features properly. For more information on managing cookies, refer to the help documentation of your browser.

7 Your Privacy Rights as a fit3 Member

As a fit3 member residing in Malaysia, you have the following rights regarding your personal data under Malaysia's Personal Data Protection Act (PDPA) 2010 and fit3's internal policies:

To exercise any of the rights above, you may submit a request through your fit3 account dashboard or by sending an email to [email protected] with the subject line "Data Privacy Request – [Request Type]". fit3 will acknowledge receipt of your request within 48 hours and complete the processing within a reasonable timeframe, not exceeding 30 calendar days except in cases requiring additional verification.

8 Data Retention

Fit3 retains members' personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, meet our legal obligations, resolve disputes and enforce our agreements. The specific retention periods for each data category are as follows:

• Active Account Data: Retained for the duration your account remains active with fit3, plus a further 7 years after account closure to satisfy Malaysian legal requirements, including tax and AML obligations.
• Financial Transaction Records: Retained for 7 years from the transaction date in accordance with applicable legal requirements in Malaysia. This covers all deposit and withdrawal records denominated in MYR (RM).
• Game History: Retained for 3 years from the date of each gaming session for dispute resolution and audit compliance purposes.
• Support Communication Logs: Records of interactions with fit3's customer support team are retained for 2 years for quality assurance purposes and for reference should any ongoing dispute arise.
• Marketing Data: Marketing preference information and promotional communication history are retained for 1 year or until you withdraw your consent, whichever comes first.
• Technical Log Data: System access logs and security logs are retained for 12 months for fraud detection and security purposes.

Once the applicable retention period has expired, fit3 will securely delete or anonymise your personal data using approved deletion methods, ensuring it cannot be recovered. If you request deletion of your data before the retention period ends and your request is approved, your data will be deleted to the extent permitted by law.

9 Children's Privacy

The fit3 platform is intended exclusively for individuals aged 18 years and above only. fit3 does not knowingly collect, store or process any personal data from individuals under the age of 18.

Should fit3 discover that personal data has been collected from a minor without the knowledge of a parent or guardian, we will take immediate steps to permanently delete that data and close the associated account without prior notice.

Parents or guardians who suspect that their child or minor dependent has registered for or used the fit3 platform are urged to contact us immediately at [email protected] so that we can take the appropriate action without delay. fit3 is committed to treating such requests as our highest priority.

10 Amendments to the Privacy Policy

Fit3 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data handling practices, new legal requirements, or changes to the services we offer. Whenever a material change occurs, we will:

• Publishing an updated version of the Privacy Policy on the fit3.my website with a new "Last Updated" date.
• Notifying all active members via their registered email address or in-platform notification at least 14 days before the changes take effect.
• For highly material changes – particularly those that significantly affect your core privacy rights – we will seek your active consent before those changes apply to your existing data.

Your continued use of the fit3 platform after the effective date of an updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with any changes, you have the right to close your account and request deletion of your personal data before those changes take effect.

11 Contact Us – Privacy Enquiries

If you have any questions or concerns, or wish to exercise your privacy rights in relation to this Privacy Policy or the way fit3 handles your personal data, please reach out to us through the following channels:

• Privacy Email: [email protected] – Use the subject line "Data Privacy Enquiry" for faster processing. Responses within 24–48 business hours.
• Live Chat: Available directly within the fit3 platform – for straightforward privacy queries, responses are typically delivered in under 3 minutes, 24/7 including weekends and Malaysian public holidays.
• Official Complaints: If you are dissatisfied with how fit3 has handled your privacy request, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) under the PDPA 2010.

Fit3 is committed to responding to all privacy-related enquiries in a transparent, honest, and timely manner. Our team understands the sensitivity of privacy matters and handles every enquiry with the appropriate level of confidentiality. We regard the protection of member privacy not merely as a legal obligation, but as a foundation of trust that sustains our long-term relationship with the fit3 Malaysia member community.