Privacy Policy 570ms – Personal Data Protection for Malaysia's Online Casino Members

1Introduction – 570ms's Privacy Commitment

570ms understands that trust is the foundation of our relationship with every Malaysian member. When you register with 570ms and play games such as Mahjong Ways, Fruit Mania, VIP Baccarat, or Super Sic Bo, you are entrusting us with sensitive personal information — a responsibility we take with the utmost seriousness.

This 570ms Privacy Policy has been drafted in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA), the primary legislation governing the processing of personal data by commercial entities in Malaysia. We are committed to ensuring that every aspect of our data management meets or exceeds the legal requirements set out under the PDPA and all related regulations in force from time to time.

If you have any questions about how 570ms handles your personal data, we encourage you to read this Policy in full. Should anything be unclear or require further explanation, the 570ms support team is available to assist you in Bahasa Melayu via live chat or email at [email protected].

2Personal Data Collected by 570ms

570ms collects personal data through several means: directly from you during registration and platform use, automatically via standard website tracking technologies, and in certain cases, from legitimate third parties such as identity verification or payment providers.

Data you provide directly to 570ms:

• During Registration: Full name as per MyKad or passport, active Malaysian mobile number, email address, password, date of birth, and state of residence in Malaysia.
• During Identity Verification (KYC): An image or copy of your MyKad or passport, a selfie for facial verification, and a recent bank statement or proof of address if required.
• During Financial Transactions: Your Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, or DuitNow account details, or your Malaysian bank account number for FPX via Maybank2u or CIMB Clicks. 570ms does not store the PIN or password for any of your payment methods.
• When Contacting Support: The content of your communications with the 570ms support team, including live chat transcripts, email records, and case notes.

Data collected automatically:

• IP address, web browser type and version, device type (phone/tablet/desktop), operating system, and screen resolution.
• Pages you visit within the 570ms platform, session duration, actions you take (button clicks, downloads, navigation), and any technical errors that occur.
• Approximate geolocation data (state/city within Malaysia) derived from your IP address — not precise GPS location.
• Cookie data and tracking technologies are described in further detail in Section 7 of this Policy.

3How 570ms Uses Your Personal Data

570ms uses the personal data it collects solely for purposes that are lawful, necessary, and proportionate to the operational needs of our platform. The following outlines the primary purposes for which 570ms uses your data:

• Account Management: To create, verify, and maintain your 570ms account; send verification OTPs; process password changes; and enable secure login to the platform.
• Transaction Processing: To process deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX; to process winnings withdrawals; and to maintain accurate and complete financial transaction records.
• KYC & Legal Compliance: To verify member identity, prevent fraud and money laundering, comply with applicable legal requirements in Malaysia, and respond to lawful requests from law enforcement authorities.
• Service Provision: To enable you to play all 570ms games including Mahjong Ways, Samurai Drama, Triple Pandas, and more; to track your game history and account balance; and to process eligible bonuses and promotions.
• Customer Support: To resolve enquiries, complaints, and technical issues that you submit via live chat, email, or other 570ms support channels.
• Security & Fraud Prevention: To identify and prevent unauthorised access, fraud, system abuse, and suspicious activity that could harm you or the 570ms platform.
• Responsible Gaming: To monitor gaming patterns and issue appropriate alerts or take action where signs of problem gambling are identified, in line with 570ms's commitment to responsible gaming.
• Marketing Communications (with consent): To send information about 570ms promotions, bonuses, new games, and special offers — only to members who have given consent to receive marketing communications. You may withdraw this consent at any time.

570ms does not use your personal data to make automated decisions that materially affect you (such as rejecting withdrawals or suspending accounts) without human involvement in the final decision. All significant decisions are subject to review by the relevant 570ms team.

4Data Sharing with Third Parties

570ms does not sell, rent, or trade members' personal data to any third party for commercial or marketing purposes. However, in the normal course of platform operations, there are certain circumstances where 570ms needs to share data with selected third parties:

• Payment Provider: 570ms shares the necessary transaction information with payment providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX financial institutions to process deposits and withdrawals. Only the minimum required data is shared, and these providers are bound by strict financial security standards.
• Identity Verification Provider: For KYC purposes, 570ms may engage accredited third-party identity verification service providers. Data shared is strictly limited to the information required for verification only.
• Game Software Providers: Game providers used by the 570ms platform may receive anonymised gameplay data (not personally identifiable information) for statistical and RNG audit purposes.
• Legal Authority: 570ms will disclose members' personal data to the police, courts, or relevant Malaysian regulatory authorities when required to do so by a valid court order or applicable legal provision. Where permitted by law, 570ms will endeavour to notify the member concerned of any such request.

570ms does not share members' personal data with affiliates or business partners for cross-marketing purposes without first obtaining explicit consent from the member concerned. Should 570ms ever wish to share data for such purposes in the future, we will seek your consent separately and clearly.

5570ms Data Security Measures

570ms continually invests in the latest security technologies and processes to protect the personal data of every Malaysian member. The following are the key security measures we have in place:

• 256-bit SSL Encryption: All communications between your browser or app and 570ms servers are encrypted using TLS/SSL 256-bit protocol, the same standard used by Maybank, CIMB, and world-class financial institutions.
• Data Encryption at Rest: Sensitive personal data stored in the 570ms database — including identity information, financial details, and hashed passwords — is encrypted at rest using the strongest current encryption algorithms.
• Two-Factor Authentication (2FA): All 570ms account logins can be secured with OTP verification sent via SMS to your registered Malaysian mobile number.
• Real-Time Security Monitoring: 570ms's automated monitoring system detects suspicious activity — such as login attempts from unusual locations, irregular transaction patterns, or anomalous usage behaviour — and automatically triggers the appropriate security response.
• Regular Security Audits: 570ms's technical infrastructure undergoes regular penetration testing and security audits conducted by certified independent specialists, to identify and address potential vulnerabilities before they can be exploited.
• Staff Training: All 570ms staff with access to members' personal data are required to undergo regular data protection and information security training.

6Personal Data Retention Period

570ms retains members' personal data only for as long as necessary for the purposes stated in this Policy, or as required by applicable Malaysian law. Our principle is straightforward: we do not keep data longer than necessary.

• Active Account Data: For as long as your 570ms account remains active and you continue to use our services.
• Data After Account Closure: After you close your 570ms account, we retain basic account and transaction records for 7 years to meet Malaysian financial reporting and legal compliance requirements (including anti-money laundering obligations).
• KYC Data: Identity verification documents are retained for 5 years after account closure or the date of the last transaction, whichever is later, in compliance with the requirements of AMLA (Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001).
• Customer Support Data: Support communication records are retained for 3 years for reference purposes and future dispute resolution.
• Marketing Data: Data used for marketing communications is retained until you withdraw your consent, or until we update our recipient list — whichever comes first.

Once the relevant retention period has expired, 570ms will delete or anonymise the personal data in question in a secure and irreversible manner. If you wish to request early deletion of your data ahead of the stipulated period (subject to legal requirements), please contact us through the channels set out in Section 11.

7Cookies, Tracking & Similar Technologies

The 570ms platform uses cookies and similar tracking technologies to enhance the user experience, ensure account security, and understand how members use our platform. Below is an explanation of the types of cookies we use:

• Essential Cookies (Required): These cookies are essential for the core functionality of the 570ms platform — including maintaining your login session, saving session settings, and enabling security features. The platform cannot function properly without them, and they cannot be disabled.
• Performance & Analytics Cookies: Used to understand how members interact with the 570ms platform — which pages are most visited, where members encounter difficulties, and how long gaming sessions last. This data is used solely to improve our platform.
• Functional Cookies: Stores your preferences such as preferred language, display settings, and game preferences so you do not need to reconfigure them each time you log in to 570ms.
• Security Cookies: To help 570ms identify and prevent suspicious activity, fraud, and unauthorised access by tracking unusual usage patterns.

You can manage and delete cookies through your web browser settings. Please note, however, that disabling certain cookies may affect the functionality of the 570ms platform and your overall gaming experience. For guidance on managing cookies in your specific browser, please refer to that browser's official documentation.

8Your Rights Under the 570ms Privacy Policy

In accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and 570ms's own privacy commitments, you have the following rights with respect to the personal data we hold about you:

• Right of Access: You have the right to request a copy of the personal data 570ms holds about you. We will provide this information in a readable format within 14 business days of receiving your request.
• Right to Rectification: If you find that the personal data 570ms holds about you is inaccurate or outdated, you have the right to request a correction. For certain details such as your name and phone number, you can update these directly through your 570ms account settings.
• Right to Deletion: You may request that 570ms delete your personal data under certain circumstances — for example, if you close your account and the data is no longer needed for a legitimate purpose. Such requests are subject to our legal obligations to retain certain records.
• Right to Restrict Processing: Under certain circumstances, you may request that 570ms restrict the way we process your data — for example, if you dispute its accuracy or are in the process of verifying whether we have a lawful basis for processing it.
• Right to Withdraw Consent: For data processed on the basis of your consent (such as marketing communications), you may withdraw that consent at any time without affecting your eligibility to continue using the 570ms platform.
• Right to Lodge a Complaint: If you believe that 570ms has violated your privacy rights, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (PDPA) or the relevant data protection authority.

To exercise any of the rights above, please contact the 570ms privacy team by email at [email protected] with the subject line "Privacy Rights Request". We may need to verify your identity before processing the request, in order to protect your data from unauthorised access.

9Protection of Minors & Vulnerable Individuals

The 570ms platform is EXCLUSIVELY for individuals aged 18 and above. 570ms does not knowingly collect, process, or store any personal data from anyone under the age of 18.

If you are a parent or guardian and believe that a child under your care has provided personal information to 570ms without your consent, please contact us immediately by email at [email protected]. 570ms will take immediate steps to:

• Promptly verify the situation.
• Closing any associated account where verification confirms the user is underage.
• Deleting all related personal data collected without valid consent.
• Refund any deposits made, subject to the appropriate verification process.

10Changes to the 570ms Privacy Policy

The technology landscape and data protection legal framework are constantly evolving. 570ms reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, applicable legislation, or improvements in how we protect member data.

When significant changes are made to this Privacy Policy, 570ms will:

• Updating the "Last Updated" date displayed at the top of this document.
• Notifying all active members via their registered email address at least 14 days before any changes take effect, except where immediate changes are required for legal or security reasons.
• Displaying clear notices within the 570ms platform regarding upcoming changes and their effective dates.

Your continued use of the 570ms platform after the effective date of an updated Privacy Policy will be considered acceptance of the new terms. If you do not agree with the proposed changes, you may close your account before they take effect, and 570ms will process the closure and deletion of your data in accordance with the Privacy Policy currently in force.

11Contact the 570ms Privacy Officer

For any questions, concerns, or requests relating to the 570ms Privacy Policy and the handling of your personal data, please contact our Privacy Officer through the following channels:

• Email: [email protected] – use the subject line "Privacy Enquiry" or "Privacy Rights Request"
• Live Chat: Via the chat icon within the 570ms platform — available 24/7 in Bahasa Melayu
• Response Time: We aim to respond to all privacy enquiries within 5 business days, and to formal rights requests within 14 business days.

If you are not satisfied with 570ms's response to your privacy enquiry or complaint, you have the right to refer the matter to Malaysia's Department of Personal Data Protection (PDPA) under the Ministry of Communications and Digital.