Big 321 Privacy Policy – Malaysia Personal Data Protection

Big 321 ("we", "the big 321 platform") is an online betting platform operating under the website big321.click. We take the privacy of our members seriously and are committed to ensuring that all personal data collected is handled responsibly, transparently, and in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).

This Privacy Policy applies to all users who access or use the big 321 platform, including the big321.click website, the big 321 mobile app for Android and iOS, and all related services offered by big 321. This Policy explains the types of personal data we collect, how we use it, who we share it with, and what your rights are as the data subject.

We encourage you to read this Privacy Policy carefully and contact us at support@big321.click if you have any questions or concerns regarding the privacy of your data on the big 321 platform.

Big 321 collects various types of personal data from our members depending on how you interact with our platform. The table below summarises the categories of data we collect:

Big 321 only collects data that is strictly necessary for the stated purposes. We do not collect excessive or irrelevant data, nor do we collect sensitive data categories such as health information, religious beliefs, or political views.

Big 321 collects your personal data through several different channels:

• During account registration: You provide basic information such as your name, email address, phone number, and password when first registering a big 321 account.
• During identity verification (KYC): You submit identity documents such as a MyKad or Malaysian passport for identity verification purposes as required by law.
• During financial transactions: Information relating to payment methods (Touch 'n Go, GrabPay, DuitNow, FPX, Boost, ShopeePay) and transaction details is collected during deposits and withdrawals.
• Through your use of the platform: Behavioural and technical data is collected automatically when you use the big 321 platform, including pages visited, session duration, and betting activity.
• Through support interactions: When you contact the big 321 support team via live chat or email, we retain a record of that communication.
• Through cookies and similar technologies: The big 321 platform uses cookies and tracking technologies to automatically collect technical and behavioural data.

Big 321 uses our members' personal data for the following purposes, all on a valid legal basis under Malaysia's PDPA:

• Service provision: To process account registration, verify identity, handle deposits and withdrawals in Malaysian Ringgit (MYR), and provide access to all big 321 products.
• Security and fraud prevention: To detect and prevent fraudulent activity, money laundering, unauthorised access, and violations of the big 321 Terms & Conditions.
• Legal compliance: To fulfil our obligations under applicable Malaysian law, including KYC and AML (Anti-Money Laundering) requirements.
• Communications: To send you account notifications, transaction confirmations, big 321 promotional updates, and important platform-related announcements.
• Customer support: To process and respond to enquiries, complaints, and requests for assistance submitted to the big 321 support team.
• Platform improvements: To analyse how members use the big 321 platform and make continuous improvements to the user experience, products, and services.
• Responsible gambling: To monitor betting patterns and identify members who may require support or intervention related to responsible gaming.

Big 321 does not sell, rent, or disclose your personal data to third parties for marketing purposes without your consent. However, there are specific circumstances where big 321 may need to share your data with the following parties:

• Payment service providers: Information required to process your financial transactions via Touch 'n Go eWallet, GrabPay, DuitNow, FPX (Maybank2u, CIMB Clicks), Boost, and ShopeePay is shared with the respective providers solely for payment processing purposes.
• Technology service providers: Third-party service providers that assist us in operating the big 321 platform — including cloud services, analytics, and cybersecurity — are bound by strict confidentiality agreements.
• Legal authorities: Where required by Malaysian law, court order, or a request from an authorised law enforcement agency.
• Regulatory bodies: To relevant regulatory bodies where required for compliance, audit, or official investigation purposes.
• Business transfers: In the event that big 321 is involved in a merger, acquisition, or asset sale, member data may be transferred as part of that transaction, with prior notice given to members.

All third parties that receive big 321 members' personal data are required to uphold data protection standards equal to or exceeding big 321's own. We do not permit any third party to use your data for their own purposes beyond what we have directed.

The security of your personal data is big 321's highest priority. We implement a comprehensive range of technical and organisational measures to protect your data from unauthorised access, loss, misuse, or accidental disclosure:

• 256-bit SSL Encryption: All data transmitted between your device and big 321's servers is encrypted using industry-standard 256-bit SSL/TLS protocols.
• Two-factor authentication (2FA): big 321 members are encouraged to enable two-factor authentication for an additional layer of account security.
• 24/7 Monitoring: big 321's security monitoring system operates around the clock to detect and respond to any security threats promptly.
• Strict access controls: Only authorised big 321 personnel who require access to carry out their duties are permitted to access members' personal data.
• Secure storage: Personal data is stored in secure data centres with strict physical and digital controls, including encryption at rest.
• Regular security audits: big 321 conducts regular security audits and penetration testing to identify and address system vulnerabilities.

The big 321 platform uses cookies and similar tracking technologies to enhance the user experience, ensure smooth platform functionality, and understand how members interact with our services.

• Essential cookies: Required for core big 321 platform functions such as login authentication and session security. These cookies cannot be disabled.
• Performance cookies: Collecting information on how you use the big 321 platform to help us improve its functionality and performance.
• Functional cookies: Storing your preferences — such as language selection and display settings — to deliver a more personalised experience.
• Analytics cookies: Helps us understand platform traffic and aggregate user behaviour for product improvement purposes.

You can manage your cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of the big 321 platform and your user experience. For more information on how to manage cookies, refer to your web browser's help documentation.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by big 321:

To exercise any of the rights listed above, please contact the big 321 privacy team by email at support@big321.click. We will respond to your request within 14 business days of receipt.

Big 321 retains members' personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. In general:

• Active account data: Retained for the duration your account is active, plus any mandatory period required following account closure.
• Financial transaction records: Retained for a minimum of 7 years in compliance with Malaysian tax and financial regulatory requirements.
• KYC records: Retained for a minimum of 5 years following account closure, in compliance with Malaysia's AML (Anti-Money Laundering) requirements.
• Support communication logs: Retained for 2 years for reference and dispute resolution purposes.
• Cookie data: Stored according to cookie type — session cookies expire when you close your browser, while persistent cookies are stored until a set expiry date.

Once your personal data is no longer needed, big 321 will securely delete or anonymise it using industry-standard methods.

The big 321 platform is intended strictly for individuals aged 18 and above. We do not knowingly collect or store personal data from children or anyone under the age of 18.

Should we discover that we have collected personal data from an individual under the age of 18 without valid parental or guardian consent, we will take immediate steps to delete that data and close the account in question. If you believe your child or a minor has registered a big 321 account, please contact us immediately at support@big321.click.

Big 321 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our privacy practices, legal requirements, or the expansion of our platform services. Any changes will be published on this page with a new "last updated" date.

For significant changes that affect how we use your personal data, big 321 will notify you via an in-platform notice or an email to the address registered on your account. Your continued use of the big 321 platform after changes are published constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests regarding big 321's Privacy Policy or how we handle your personal data, please do not hesitate to contact us:

• Privacy Email: support@big321.click
• Live Chat: Available 24/7 within the big 321 platform — response within 3 minutes
• FAQ: Visit page FAQ us for a prompt response

Big 321's dedicated privacy team is available to handle all enquiries relating to your personal data in Bahasa Melayu, every day, 24 hours a day. We are committed to responding within 3 business days for privacy rights requests.