Privacy Policy 650r – How We Protect the Personal Data of Malaysian Members

This Privacy Policy describes the practices of 650r in handling the personal data of its members residing in Malaysia. We understand that your trust in us depends in large part on your confidence that the personal information you share with 650r handled with complete integrity and responsibility.

When you register an account, make a deposit via Touch 'n Go, GrabPay, DuitNow or FPX, play slots such as Crystal Caverns or Tiger Slam, or simply browse the platform 650r, you entrust us with certain information about yourself. This Privacy Policy explains exactly what we do with that information — and more importantly, what we do not do with it.

This document takes effect from the date stated above and applies to all registered members on the platform 650r. By continuing to use our services after that date, you confirm your acceptance of the terms of this Privacy Policy. This Privacy Policy should be read together with Terms & Conditions and Responsible Gaming Policy ours.

650r collects members' personal data through several means — directly from you during registration and platform use, automatically through tracking technologies, and in certain cases, from trusted third parties.

Data you provide directly to 650r:

• Registration Information: Full name, Malaysian mobile number, email address, and the password you created when registering your account 650r.
• Identity Verification Information: A copy of your MyKad or passport may be requested during the account verification process, particularly before your first withdrawal is processed.
• Financial Information: Bank account details, e-wallet numbers (Touch 'n Go, GrabPay, Boost, ShopeePay), or DuitNow information you have registered for deposit and withdrawal purposes. 650r does not store full credit or debit card numbers.
• Communications: Any messages, complaints or feedback you submit to the 650r via email or live chat.
• Self-Limit Information: Deposit limits, time limits, or self-exclusion options you have set within your account settings as part of the responsible gaming programme 650r.

Data collected automatically when you use the 650r platform:

• Technical Data: IP address, device type (Android phone, iPhone, etc.), browser type (Chrome, Safari, Firefox), operating system, and language settings.
• Usage Data: Pages visited, time spent in each section of the platform, game preferences, betting history, and session logs.
• Cookie Data: Information collected through cookies and similar technologies that help us personalise your experience at 650r. Further details on cookies are outlined in Section 6.

650r use collected personal data solely for the purposes stated below, and for no other purpose without your explicit consent:

• Account Operations: Creating and managing your account at 650r, process secure logins, and deliver a personalised gaming experience for you.
• Transaction Processing: Processing all deposits (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX) and paying out winnings quickly and securely to your bank account or e-wallet.
• Identity Verification & Compliance: Conducting Anti-Money Laundering (AML) checks and verifying member identities in accordance with applicable Malaysian legal requirements.
• Platform Security: Detecting and preventing fraudulent activity, hacking attempts, account abuse, and any activity that violates Terms & Conditions 650r.
• Customer Support: Resolving enquiries, complaints, and support requests you submit to our support team 650r.
• Service Enhancement: Analysing aggregated usage patterns (without identifying individuals) to improve the interface, performance, and overall gaming experience at 650r.
• Service Communications: Sending important account-related notifications — such as deposit confirmations, withdrawal alerts, or changes to terms — via email or SMS. These are not marketing communications and cannot be fully opted out of, as they are critical to your account security.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate support to members who need assistance.

If 650r intends to use your data for any new purpose not stated above, we will seek your consent separately before such processing begins.

650r does not sell your personal data to anyone. However, there are limited circumstances in which we need to share certain information with trusted third parties, and we do so only in the following situations:

• Payment Service Providers: To process your financial transactions, we share the necessary information with e-wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay) and online banking platforms (DuitNow, FPX, Maybank2u, CIMB Clicks). These providers are bound by strict confidentiality agreements and may only use your data for payment processing purposes.
• Technology Service Providers: Companies that provide technology infrastructure, cloud hosting services, or cybersecurity systems for 650r. All of these providers are carefully vetted and bound by strict data processing agreements.
• Legal Compliance: When required by a court order, direction from a relevant Malaysian authority, or other valid legal obligation. In such cases, 650r will disclose only the minimum information required by law.
• Rights & Security Protection: In cases involving fraud, money laundering, or serious security threats, relevant information may be shared with the authorities to protect other members and the integrity of the platform 650r.

650r continually invests in security infrastructure to protect your personal data from unauthorised access, alteration, disclosure, or destruction. The technical and organisational security measures we implement include:

• 256-bit SSL Encryption: All communications between your browser or app and the 650r is encrypted using the latest TLS 1.3 standard. Financial data relating to Touch 'n Go, GrabPay, DuitNow, and similar transactions is processed through fully encrypted channels.
• Secure Password Storage: Your account password is stored as a one-way hash that cannot be reversed to its original form. Even the 650r itself cannot view your password.
• Two-Factor Authentication (2FA): OTP verification via SMS is mandatory for sensitive actions such as withdrawals and changes to account information.
• 24/7 Security Monitoring: Automated monitoring systems are continuously active to detect suspicious access patterns, repeated failed login attempts, and any anomalies that may indicate an intrusion attempt.
• Internal Access Controls: Only staff 650r who genuinely require access to specific data to carry out their authorised duties — in accordance with the least privilege principle.
• Regular Security Testing: 650r conducts regular penetration testing and security audits by independent third parties to ensure our systems are resilient against the latest cyber threats.

While we take all reasonable steps to protect your data, no security system is one hundred percent foolproof. You also play a role in keeping your account secure — keep your password confidential and do not share your account 650r with others, and notify us immediately if you suspect any suspicious activity.

Platform 650r uses cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files stored on your device when you visit our website.

The following are the types of cookies used by 650r:

You can manage cookie settings through your browser preferences. Please note that disabling essential cookies may affect the functionality of the platform 650r — particularly for login security and gaming sessions. Analytical and functional cookies help us deliver a better experience, though the platform remains usable without them.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by 650r. We fully respect and facilitate the exercise of these rights:

To exercise any of the above rights, send a written request to [email protected] with the subject line "Personal Data Rights Request", along with your account number and the specific right you wish to exercise. 650r will process your request within 14 business days at no charge.

Please note that the right to data erasure may not be fully fulfilled where the data in question is required for compliance with legal obligations (such as financial transaction records that must be retained under Malaysia's anti-money laundering laws). In such cases, 650r will provide a detailed explanation of why the request could not be fully fulfilled.

650r retaining your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable Malaysian law. The following are our data retention period guidelines:

• Active Account Data: Retained for the duration your account remains active at 650r plus a further 6-month period following account closure for complaints and audit purposes.
• Financial Transaction Records: Retained for 7 years from the transaction date, in accordance with the requirements of Malaysia's Anti-Money Laundering Act 2001 (AMLA).
• Support Communication Logs: Retained for 2 years from the date of last interaction, for reference and service quality improvement purposes.
• Identity Verification Data: Retained for 5 years from the date of account verification or closure, whichever is later, as required under customer identity verification (KYC) laws.
• Cookie & Session Data: Session cookies are deleted automatically when you close your browser. Persistent cookies have an expiry period as specified in their respective cookie settings.

When the retention period expires, 650r will securely delete or destroy your personal data in accordance with approved procedures — whether through secure deletion from servers or physical destruction of storage media where applicable.

In the course of operating the platform, 650r may need to store or process your personal data on servers located outside Malaysia — particularly in connection with the cloud infrastructure and technology services we use.

When such a transfer of data is required, 650r ensure that:

• The recipient country has an adequate level of data protection, or
• Data transfer agreements complying with international standards have been established between 650r and the data recipient, or
• Certain exemptions permitted under PDPA 2010 apply.

In all cases, the protection afforded to your data will not be diminished solely because it is processed outside Malaysia. The same or higher security standards will be applied to all data processing regardless of location.

650r strictly prohibits the use of the platform by individuals under the age of 21. Our platform is not designed for or directed at children or minors, and we do not knowingly collect personal data from them.

Should we discover that personal data of a minor has been collected without our knowledge, we will take immediate steps to:

• Closing the account in question immediately.
• Deleting all associated personal data from our systems 650r.
• Refunding any related deposits in accordance with established procedures.

If you become aware that someone under the age of 21 is using the 650r, please report it to us at [email protected] immediately. We value the community's help in ensuring this platform is only accessed by eligible and responsible individuals.

650r reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or service improvements. When material changes are made, we are committed to:

• Updating the "Last Updated" date at the top of this page.
• Sending email notices to all registered members 650r at least 14 days before changes take effect, for material changes.
• Displaying a prominent notice on the platform's main page for at least 7 days after the policy has been updated.
• Archives of previous versions of the Privacy Policy are maintained and available to members upon request.

We encourage you to review this page periodically to stay informed about how 650r protect your information. Continued use of the platform after any changes to the Privacy Policy take effect will be considered your acceptance of those changes.

If you have any questions, concerns or complaints regarding the Privacy Policy 650r or how we handle your personal data, please contact us through the following channels:

• Privacy Email: [email protected] — Use the subject line "Data Privacy Enquiry" for faster processing. We aim to respond within 1 business day for privacy enquiries.
• Live Chat: Available 24 hours a day, 7 days a week via the platform 650r. Our support representatives can assist with basic privacy enquiries and direct you to the relevant team for more complex matters.
• Formal Written Request: For formal data rights requests (access, correction, deletion), send an email with the subject line "Personal Data Rights Request" along with your account number and the nature of your request. We will respond within 14 business days.

If you are not satisfied with the way 650r handling your privacy complaint, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP) in accordance with the procedures set out by that authority.

We take every privacy complaint seriously. All complaints received will be thoroughly investigated, and appropriate corrective action will be taken if a breach of this Privacy Policy is confirmed.