Pop303 Privacy Policy — Your Personal Data Protection

1 Introduction and Scope of Privacy Policy

Pop303 ("we", "Platform", or "Company") takes the responsibility of protecting personal data seriously. This Privacy Policy ("Policy") describes our practices for collecting, processing, storing, and safeguarding the personal information you provide to us when using the pop303 platform.

This policy applies to all individuals who access the pop303 website at pop303.vu, using the pop303 mobile app, registering as a member, making any financial transactions, or interacting with any of the services we offer.

By using the pop303 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any provision herein, please discontinue use of our platform. We recommend that you review this Policy from time to time as it may be updated to reflect changes in our practices or applicable legal requirements.

2 Types of Personal Data We Collect

Pop303 collects various types of personal information depending on your interactions with our platform. Below is a detailed breakdown of the data categories we collect:

We only collect data that is strictly necessary to provide our services. You are not required to provide optional information, but doing so allows us to deliver a more personalized experience and better service.

3 How We Collect Personal Data

Pop303 collects your personal information through various transparent and responsible channels:

• Account registration: When you register a new account at pop303, you provide basic information such as your name, email, phone number, and date of birth.
• Identity verification (KYC): During the verification process, you may be asked to upload a copy of your official identification document and proof of address.
• Financial transactions: Every time you make a deposit or withdrawal, transaction details including the payment method and amount are automatically recorded.
• Platform usage: Our system automatically records your gaming activity, clicks, session duration, and interactions with the pop303 interface.
• Cookies and tracking technologies: pop303 uses session cookies, preference cookies, and other tracking technologies to improve the user experience and analyse website traffic.
• Support interactions: When you contact our support team via live chat, email, or Telegram, those communications are stored for reference and service improvement purposes.
• Trusted third parties: In some cases, we may receive information from payment processors or third-party KYC service providers for identity verification purposes.

4 Purpose of Your Personal Data Usage

Every piece of data we collect has a clear and legitimate purpose. pop303 uses your personal information for the following:

• Account management: Creating and maintaining your account, processing registration, verifying identity, and managing account settings.
• Payment processing: Securely processing deposits and withdrawals via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, and Boost.
• Service delivery: Ensuring you can seamlessly access all games, promotions, and features on the pop303 platform.
• Security and fraud prevention: Detecting and preventing unauthorized access, financial fraud, money laundering, and platform abuse.
• Legal compliance: Fulfilling regulatory obligations, KYC requirements, and reporting as required by applicable law.
• Customer support: Responding to inquiries, resolving complaints, and providing technical assistance effectively.
• Personalized marketing: Sending you promotional information, exclusive offers, and relevant platform updates (subject to your communication preferences).
• Analytics and improvement: Analyzing usage patterns to improve platform design, speed, and overall user experience.
• Responsible gaming: Monitoring gaming patterns to identify early signs of problem gambling and provide appropriate support.

5 Data Sharing with Third Parties

Pop303 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, we may share your information in the following limited circumstances:

• Payment processors: Authorized payment service providers such as DuitNow, FPX, and e-wallet processors to facilitate your financial transactions.
• KYC service providers: Accredited third-party identity verification companies authorised to conduct the required KYC checks.
• Game providers: Game developers and providers supplying game content to the pop303 platform, limited to data required for game operations.
• Legal authority: When required by law, court order, or a competent law enforcement agency.
• Infrastructure providers: Cloud computing and server hosting providers that process data on our behalf under strict confidentiality agreements.
• Corporate activities: In the event of a merger, acquisition, or asset sale, personal data may be transferred as part of the business assets, with prior notice provided to you.

All third parties that receive your data from pop303 are bound by legally enforceable data protection agreements. They are only permitted to process your data for the specific purposes defined and may not use it for any other purpose.

6 Data Security Measures

Protecting your personal data is pop303's top priority. We implement multiple layers of technical and organizational security to ensure your information remains safe at all times:

• 256-bit SSL encryption: All data transmitted between your device and pop303 servers is encrypted using the latest SSL/TLS protocols, ensuring no third party can intercept or read your information.
• Two-factor authentication (2FA): An additional security layer that requires a second verification via SMS or authenticator app each time you log in from a new device.
• Strict access controls: Only pop303 staff with legitimate operational needs are authorized to access member personal data, and all access is logged in detail.
• Real-time monitoring: A sophisticated intrusion detection system that monitors all unusual activity and instantly alerts our security team.
• Secure data storage: Data is stored in certified data centres with physical security, redundancy, and regular backups to prevent data loss.
• Regular security audits: Independent penetration testing and security audits are conducted on a regular basis to identify and patch any vulnerabilities.

7 Cookies and Tracking Technologies

Pop303 uses cookies and similar technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Session Cookies: Required to maintain your login status during an active session. These cookies are deleted automatically when you close your web browser.
• Preference Cookies: Saving your settings such as preferred language and display preferences for a more comfortable experience on future visits.
• Analytics Cookies: Collecting anonymous information about how you use our platform to help us understand usage patterns and improve our services.
• Security Cookies: Used to detect and prevent fraudulent activity and protect your account from unauthorised access.

You can manage and delete cookies through your web browser settings. Please note, however, that disabling certain cookies may affect the functionality of the pop303 platform, including the ability to stay logged in.

8 Your Rights Regarding Personal Data

As a pop303 member, you have certain rights regarding your personal data, all of which we fully respect:

To exercise any of the above rights, please contact the pop303 customer support team via live chat or email. We will process your request within 30 business days. We may need to verify your identity before processing any request relating to personal data rights.

9 Data Retention Period

Pop303 retains your personal data only for as long as necessary to fulfil the purposes stated in this Policy, or as required by applicable law. The following is a general guide to our retention periods:

• Active account data: Retained for the duration your account is active and for up to 7 years after account closure for regulatory compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years in compliance with Malaysia's Anti-Money Laundering (AML) legal requirements.
• Support communication logs: Retained for 3 years from the date of last interaction for reference and dispute resolution purposes.
• Anonymous analytics data: May be retained for a longer period in aggregated, non-personally identifiable form.
• KYC data: Retained in accordance with regulatory requirements, typically for at least 5 years after the business relationship ends.

When personal data is no longer required, we will delete or anonymise it in a secure and thorough manner in accordance with industry standards.

10 Links to Third-Party Websites

The pop303 platform may contain links or references to third-party websites or services, such as game providers or payment partners. This Privacy Policy applies solely to the pop303 platform.

Pop303 is not responsible for the privacy practices or content of third-party websites. We recommend reviewing the privacy policy of each third-party website you visit before providing any personal information. The presence of a link to a third-party website does not imply that pop303 endorses or validates their content or privacy practices.

11 Child Protection

Pop303 is an online entertainment platform designed exclusively for adults aged 18 and above. We do not knowingly collect, process, or store personal data from individuals under the age of 18.

All prospective members are required to confirm they are at least 18 years of age during the registration process. Should we discover that personal data has been collected from an individual under the age of 18, we will immediately delete that information and close the account in question without notice.

12 How to Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 via the live chat icon at the bottom right of the pop303 platform. Response time within 5 minutes.
• Email: Send your privacy inquiries to [email protected]. We respond to all emails within 24 hours on business days.
• Telegram: Contact our support agents via the official pop303 Telegram channel for a fast response.

When contacting us regarding privacy, please provide your full name, account username, and specific details of your request to expedite the process. We will verify your identity before processing any request related to personal data.

Pop303 is committed to resolving all privacy complaints fairly and in a timely manner. If you are not satisfied with our response, you have the right to refer your complaint to the relevant data protection authority.