Privacy Policy 432 Hz — How We Protect Malaysian Players' Data

432 Hz collects your personal data through several means — directly when you register or use the platform, automatically through standard tracking technologies, and occasionally through authorised third parties. We only collect data that is genuinely necessary to deliver 432 Hz services to you in a safe and effective manner.

Data you provide directly:

• Identity Information: Full name as per MyKad, date of birth, gender, and identification number (required for the KYC process)
• Contact Information: Email address, Malaysian phone number, and residential address
• Login Eligibility: Username and password (passwords are stored in encrypted form — 432 Hz does not store passwords in plain text)
• Verification Documents: A copy of your MyKad or other identity document submitted during the KYC process
• Payment Information: Your e-wallet account details or banking information used for deposits and withdrawals — see Section 9 for full details

Automatically collected data:

• Technical Data: IP address, browser type, operating system, screen resolution, and device type
• Usage Data: Pages visited, time spent on the platform, features used, and navigation patterns
• Game Session Data: Game date and time, game titles played, bet amounts, wins and losses — this data is required to ensure fair play and to support the 432 Hz VIP Rewards programme
• Location Data: General location based on IP address to ensure compliance with geolocation requirements

The data we collect is used exclusively for purposes related to providing and improving 432 Hz services to you. Below is a full list of how data is used on the 432 Hz platform:

432 Hz will not use your data for any purpose beyond those listed above without obtaining your prior consent. If you wish to withdraw your consent to receive marketing communications, you may do so at any time through your account settings or by contacting our support team.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), all personal data processing must have a valid legal basis. 432 Hz processes your data on the following grounds:

• Contract Performance: The majority of data processing at 432 Hz is necessary to fulfil the service agreement between you and 432 Hz — including account management, transaction processing and provision of access to games.
• Legal Obligation: Malaysian law — including anti-money laundering requirements and applicable financial regulations — requires us to collect and retain certain data, such as identity verification records and transaction history.
• Legitimate Interests: For platform security, fraud prevention, and service improvement based on aggregated usage data — where these interests do not override your privacy rights.
• Consent: For marketing communications and optional data uses — you may grant or withdraw this consent at any time without affecting your access to 432 Hz's core services.

432 Hz does not sell, rent, or transfer your personal data to third parties for their own marketing or commercial purposes. This is an absolute commitment to all Malaysian players.

However, in the course of operating the platform, 432 Hz shares your personal data with a limited and specific set of third-party categories, solely to enable the delivery of services to you:

• Game Providers: Game software providers such as Pragmatic Play, Evolution Gaming and PG Soft receive game session data necessary for game operations. All providers are bound by strict data processing agreements.
• Payment Processors: Authorised third-party payment gateways — including processors handling Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX transactions — receive the transaction information necessary to process your deposits and withdrawals. All such processors comply with PCI DSS standards.
• KYC Service Provider: Authorised third-party identity verification services may receive your identification documents for verification purposes. These services are bound by strict confidentiality agreements.
• Statutory Authorities: 432 Hz will disclose personal data to Malaysian authorities when required by law or court order — including for anti-money laundering investigations and confirmed fraud cases.
• Professional Advisors: Lawyers, accountants, and consultants involved in 432 Hz operations may require access to certain data, subject to their professional confidentiality obligations.

All third parties that receive 432 Hz players' personal data are bound by data processing agreements that require them to protect that data to a standard consistent with this 432 Hz Privacy Policy.

432 Hz takes its security infrastructure seriously to ensure our players' personal data is protected at every stage — during transmission, during processing and during storage.

Technical Security:

• 256-bit SSL Encryption: All communications between your browser or app and 432 Hz servers are transmitted via HTTPS using 256-bit TLS/SSL encryption — the same security standard used by Malaysia's major banking institutions such as Maybank and CIMB.
• Stored Data Encryption: Sensitive data stored in 432 Hz's databases — including passwords and identity information — is encrypted using robust encryption algorithms. Passwords are never stored in plain text.
• Access Control: Access to player data is restricted to 432 Hz staff with a legitimate operational need, and every access is automatically logged and audited.
• 24/7 Monitoring: Our security monitoring system operates around the clock to detect unusual activity, intrusion attempts or any anomalies that may indicate a security threat.
• Penetration Testing: The 432 Hz platform undergoes regular security testing by independent security experts to identify and address any vulnerabilities before they can be exploited.

Organisational Security:

• All 432 Hz staff who handle personal data undergo regular privacy and data security training
• Mandatory confidentiality agreements for all 432 Hz staff and contractors
• Clear incident response procedures in place for any potential data breach scenario

432 Hz retains your personal data for as long as necessary for the purposes outlined in this policy or as required by Malaysian law. Our general data retention schedule is as follows:

• Active Account Data: For as long as your 432 Hz account remains active, your profile data is retained to ensure uninterrupted access to our services.
• Financial Transaction Records: A minimum of 7 years from the date of the transaction, in accordance with Malaysian accounting and anti-money laundering legislation. This includes deposit history, withdrawals, and betting activity.
• KYC Documents: Minimum 5 years after account closure, or longer if required by Malaysian authorities.
• Support Communication Logs: 2 years after the last interaction, unless related to an ongoing dispute.
• Technical Data & Logs: 90 days for general access logs; security logs may be retained longer to meet investigative requirements.
• Closed Account Data: Following account closure, 432 Hz will delete or anonymise data that is no longer needed within a reasonable timeframe, while retaining records that are required by law.

Once a retention period has lapsed and there is no legal obligation to retain the data further, 432 Hz will securely delete or anonymise the relevant data in accordance with certified data disposal procedures.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data held by 432 Hz. All requests to exercise these rights may be submitted by email to support@432hz.my.

• Right of Access: You have the right to obtain a copy of the personal data we hold about you. 432 Hz will process data access requests within 21 business days.
• Right to Correction: If any personal data we hold about you is inaccurate or out of date, you have the right to request a correction. You may also update certain information directly through your 432 Hz account settings.
• Right to Withdraw Consent: For data processed based on your consent — such as marketing communications — you may withdraw that consent at any time without affecting your access to 432 Hz's core services.
• Right to Object: You have the right to object to the processing of your data carried out on the basis of 432 Hz's legitimate interests, except where those legitimate interests override your rights in a given context.
• Right to Complain: If you believe that 432 Hz has not complied with PDPA 2010 in the processing of your data, you have the right to lodge a complaint with Malaysia's Personal Data Protection Commissioner.

The 432 Hz platform uses cookies and related tracking technologies to ensure the platform functions correctly and to provide you with a better experience. The following types of cookies are used:

• Essential Cookies: Cookies required for core platform functionality — including login session management, security and basic preferences. These cookies cannot be disabled without materially affecting platform functionality.
• Performance Cookies: Cookies that collect data on how you use the platform — which pages you visit most often, how long you spend on the platform, and any error messages encountered. This data is used in aggregate form to improve the 432 Hz platform.
• Functional Cookies: Cookies that allow the platform to remember your preferences — including language, font size, and other display settings — so you do not need to reconfigure them each time you log in.
• Local Storage Cookies: The 432 Hz platform uses browser local storage to save your gaming preferences and non-sensitive session data in order to improve platform performance.

Most modern web browsers allow you to control cookies through your browser settings. However, disabling essential cookies may affect the functionality of the 432 Hz platform. For guidance on managing cookies in your browser, refer to the help documentation for the browser you are using.

Protecting players' financial data is the highest priority at 432 Hz. Here is how we specifically handle your financial information:

Payment Processing: All financial transactions on 432 Hz — whether deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX through Maybank2u and CIMB Clicks — are processed through certified third-party payment gateways that comply with the PCI DSS (Payment Card Industry Data Security Standard). This means:

• 432 Hz does not store your bank account numbers, card details, or e-wallet login credentials on our servers
• All payment information is entered within a secure environment controlled by an authorised payment processor
• All financial transactions are fully encrypted from the point of entry through to your bank or e-wallet provider

Transaction Records: 432 Hz retains transaction history records — including dates, times, amounts, and payment methods — for accounting purposes, AML compliance, and customer support. These records do not contain full sensitive payment details such as complete account numbers.

Policy Amendments: 432 Hz reserves the right to amend this Privacy Policy from time to time to reflect changes in platform operations, the technologies we use, or updates to applicable Malaysian law. When we make material changes to this policy, we will:

• Updating the "Last Updated" date at the top of this page
• Notifying all registered members via email or in-platform notice at least 7 days before any changes take effect
• In certain cases, requesting your explicit consent before any new data processing begins

Continued use of the 432 Hz platform after the effective date of any changes constitutes acceptance of the updated policy. We encourage you to review this page periodically.

Contact the 432 Hz Privacy Officer: If you have any questions, concerns or complaints regarding your data privacy at 432 Hz, you can reach us via:

• Email: support@432hz.my (please include "Privacy Enquiry" in the email subject line)
• Live Chat: Live chat is available on the 432 Hz platform once you're logged in — 24 hours a day, 7 days a week

We are committed to responding to all privacy-related enquiries within 2 business days. For more complex issues requiring investigation, we will provide an update within 7 business days and resolve the matter within 21 business days.