Online456 Privacy Policy – Your Personal Data Protection

1 Introduction

Online456 is an online gaming platform operating in Malaysia, committed to protecting the privacy and personal data security of all its users. We understand that your trust is our most valuable asset, and we take every necessary step to ensure that the information you share with us is handled responsibly.

This Privacy Policy is drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and global information security best practices. As a platform handling sensitive financial and personal data, online456 adheres to the strictest data protection standards to give you peace of mind while you play.

This policy applies to all information collected through the online456 website, mobile app, customer support services, and all other interaction points between you and our platform. If you have any questions after reading this policy, our team is available via 24/7 live chat.

2 Data We Collect

Online456 collects various types of personal data to ensure our services run smoothly, securely, and in compliance with applicable legal requirements. The following are the categories of data we collect:

Technical data is automatically collected when you access the online456 platform via cookies, server logs, and other tracking technologies. This data is used solely to improve platform performance and security, not for surveillance or personal profiling.

3 How We Use Your Data

Personal data collected by online456 is used for the following purposes only:

• Account Management: Creates, manages, and verifies your member account, including the registration process and mandatory identity verification (KYC).
• Transaction Processing: Processes deposits, withdrawals, and all other financial transactions promptly, accurately, and securely in accordance with your requests.
• Platform Security: Detects, investigates, and prevents fraud, account misuse, money laundering activities, and other security threats.
• Legal Compliance: Fulfils applicable legal and regulatory obligations, including AML and KYC reporting requirements to the relevant authorities.
• Customer Support: Provides effective technical assistance and support when you contact our team through any available communication channel.
• Service Improvement: Analyses usage patterns to improve platform features, user experience, and the overall quality of online456 services.
• Service Communications: Sends you important notifications related to your account, transactions, terms changes, and relevant security information.
• Consent-Based Marketing: Sends promotions, special offers, and platform updates to members who have consented to receive marketing communications.

4 Data Sharing

Online456 does not sell members' personal data to any party. Data sharing is only carried out in the following limited circumstances and with appropriate safeguards:

• Payment Service Providers: Required transaction information is shared with registered payment processors and financial institutions to facilitate secure deposit and withdrawal processing.
• Game Software Providers: Minimum required game data is shared with licensed software providers to ensure games function correctly and to maintain game integrity.
• Lawful Authorities: Information is shared with government agencies, law enforcement, or regulatory bodies when required by law or a valid court order.
• Third-Party KYC Services: Identity information is shared with approved identity verification service providers to complete the mandatory KYC process.
• Security Researchers: Anonymised data that cannot be linked to any individual may be shared for cybersecurity research and industry fraud prevention purposes.

All third parties receiving data from online456 are bound by strict confidentiality and data protection agreements. They are only permitted to use such data for the specific purposes outlined in those agreements and may not use it for any other purpose.

5 Data Security

Online456 implements comprehensive technical and organisational measures to protect your personal data from unauthorised access, loss, misuse, disclosure, or alteration. Our key security measures include:

• 256-bit SSL Encryption: All data transmitted between your device and online456 servers is encrypted using the latest TLS protocol, making it unreadable to any unauthorised parties.
• Secure Server Infrastructure: Our servers are protected by multi-layered firewalls, intrusion detection systems (IDS), and continuous round-the-clock security monitoring.
• Internal Access Controls: Access to members' personal data within the organisation is restricted to staff with specific needs based on their job roles, with full audit logs maintained.
• Regular Security Testing: online456 conducts regular penetration testing and security audits by independent security experts to identify and address any potential vulnerabilities.
• Two-Factor Authentication (2FA): Members are encouraged to enable two-factor authentication on their accounts as a highly effective additional layer of security.
• Incident Response Plan: online456 has a comprehensive incident response procedure to address any security breaches swiftly and effectively, including notifications to affected members.

6 Data Retention Period

Online456 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable law.

• Active Account Data: For the duration your account remains active and for any additional period required by law following account closure.
• Financial Transaction Records: Minimum 7 years from the transaction date, in accordance with Malaysia's financial and anti-money laundering legal requirements.
• KYC Documents: Minimum 5 years after the business relationship ends, as required by the Anti-Money Laundering and Anti-Terrorism Financing Act 2001.
• Security Logs: 12 to 24 months, depending on the log type and security investigation requirements.
• Support Communication Records: 3 years after the last interaction, for reference and service improvement purposes.
• Marketing Data: Until you withdraw your consent or request deletion, whichever comes first.

Once the retention period expires, data will be securely deleted or anonymised in accordance with established procedures. You may request early deletion of your data subject to any legal obligations that prevent immediate removal.

7 Cookies & Tracking Technologies

Online456 uses cookies and similar tracking technologies to improve your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled as they are essential for platform operation.
• Performance Cookies: Collects information about how you use the platform to help us improve overall performance and user experience.
• Functional Cookies: Remembers your preferences and settings such as language, region, and display options to provide a more personalised experience.
• Analytics Cookies: Helps us understand aggregated platform usage patterns to make better decisions about new feature development.

Online456 does not use third-party cookies for advertising or cross-site tracking purposes. All cookies we use are solely for platform operations and the improvement of our own services.

8 Your Rights

Under Malaysia's Personal Data Protection Act 2010 and the online456 privacy policy, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact the online456 support team via 24/7 live chat. We will process your request within 30 business days from the date it is received, subject to the required identity verification.

9 Children's Data

The online456 platform is an online gaming service permitted only for users aged 18 years and above. We do not intentionally collect or process personal data from children under the age of 18.

During registration, online456 requires age verification through a comprehensive KYC process, including submission of valid identity documents. This is part of our commitment to responsible gaming and protecting minors from accessing online gambling.

10 Privacy Policy Changes

Online456 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or relevant technological developments.

• Any material changes will be communicated to active members at least 14 days before the effective date via in-platform notifications and email.
• The "Last Updated" date at the top of this page will be updated whenever changes are made to this policy.
• Continued use of the online456 platform after the effective date of an updated policy constitutes your acceptance of those changes.
• Previous versions of the Privacy Policy are available upon request through our support team for reference if needed.

We encourage you to review this page periodically to stay informed about how we protect your personal data. If you disagree with any changes, you have the right to close your account and withdraw from the platform before the new policy takes effect.

11 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we manage your personal data, please contact the online456 privacy team through the following channels:

• 24/7 Live Chat: The fastest channel for immediate assistance — available directly within the online456 platform.
• Privacy Email: [email protected] — for written enquiries requiring documentation or detailed responses.
• Response Time: We aim to respond to all privacy-related enquiries within 3 working days.