Privacy Policy Emas44 —
Malaysia User Data Protection

Emas44 is committed to protecting the privacy of all platform users. This Privacy Policy is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards.

This policy applies to all information collected when you access the Emas44 website, use our mobile app, register an account, make deposits or withdrawals, participate in promotions, and any other interaction you have with our platform.

By registering an account or using any Emas44 service, you consent to the collection and processing of your personal data as described in this document. If you do not agree, please stop using the platform and contact us to request account deletion.

Emas44 collects several categories of data to ensure the platform operates safely, fairly, and delivers the best experience to users. Below is a summary of the data we collect:

We do not collect any information unnecessary for platform operations. Sensitive data such as passwords is stored in hashed form (hashed) and cannot be accessed by any Emas44 staff in its original form.

Every piece of data we collect is used for a clear and legitimate purpose. We will not use your information for purposes not stated in this policy without first obtaining your consent. The primary purposes for using your data are as follows:

• Identity verification and KYC — to verify that you meet eligibility requirements and to prevent use of the platform by underage individuals or unauthorised parties.
• Transaction processing — to accurately and securely process deposits, withdrawals, and all financial transactions in your account.
• Platform security — to detect and prevent fraud, money laundering, hacking, and other illegal activities.
• Customer support — to enable our team to identify your account and provide effective assistance when needed.
• Experience personalisation — to present relevant promotions, games, and content based on your preferences and gaming habits.
• Platform communications — to send important notifications regarding your account, transactions, latest promotions, and system updates.
• Analytics & improvement — to understand how users engage with the platform for product and service improvement.
• Legal compliance — to fulfil legal obligations, licensing regulations, and directives from relevant authorities.

Emas44 does not sell, rent, or trade your personal data to any third party for commercial purposes. However, in certain circumstances, we may need to share your information with the following parties:

• Payment service providers — including FPX, Touch 'n Go eWallet, GrabPay, Boost, and USDT payment processors integrated with our platform for transaction processing purposes only.
• Technical service providers — hosting companies, cloud services, and software vendors that help us operate the platform securely.
• Regulatory authorities — licensing authorities, law enforcement agencies, or courts when lawfully required by law or court order.
• Analytics service providers — aggregated data that cannot identify individuals is used for platform analytics and service improvement purposes.

All third parties who receive your data are bound by strict confidentiality agreements and are only permitted to use that information for the specified purposes. emas44 is not responsible for the privacy practices of third parties beyond our control.

Emas44 invests seriously in cybersecurity infrastructure to ensure your data is always protected against evolving threats. Key security measures we employ include:

• 256-bit SSL/TLS Encryption — all data transmitted between your device and our servers is protected with military-grade encryption.
• Layered data storage — sensitive data is stored on secure servers isolated from public systems with strict access controls.
• Two-factor authentication (2FA) — an additional layer of protection is available for all user accounts to prevent unauthorised access.
• 24/7 Monitoring — our threat detection system continuously monitors for suspicious activity around the clock.
• Regular security audits — our platform undergoes regular independent security assessments by external experts.
• Internal access control — only specifically authorised staff may access user data, and every access is automatically logged.

While we take all reasonable precautions, no system can be guaranteed 100% secure. In the event of a data breach affecting your information, we will notify you within the timeframe required by applicable law.

The emas44 platform uses cookies and similar tracking technologies to enhance the user experience and help us understand how the platform is used. The types of cookies we use are:

• Necessary cookies — required for core platform functions such as login sessions and security. These cookies cannot be disabled.
• Preference cookies — stores your preferences such as language settings, display theme, and personal configurations.
• Analytics cookies — helps us understand which pages are most visited and how users interact with the platform for improvement purposes.
• Session cookies — deleted automatically when you close your browser. Used to maintain login status during active sessions.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect platform functionality. The Emas44 mobile app also uses similar tracking mechanisms to ensure a seamless experience across all devices.

Under Malaysia's PDPA and international data protection principles, you have the following rights regarding your personal data held by Emas44:

To exercise any of the rights above, please contact our privacy team via email at [email protected] or via the platform's live chat. Requests will be processed within 14 business days. We may require identity verification before processing your request.

Emas44 retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by law. Our general retention guidelines are:

• Active account data — retained for the lifetime of your account while it remains active on the platform.
• Financial transaction data — retained for a minimum of 7 years in accordance with accounting and anti-money laundering legal requirements.
• KYC and identity verification data — retained for a minimum of 5 years after account closure for compliance purposes.
• Support communication logs — retained for 2 years for reference and dispute resolution.
• Technical log data — retained for 90 days before being automatically deleted.

Once the retention period has ended, your data will be securely deleted or anonymised so it can no longer be associated with you as an individual.

Emas44 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or technological developments. When significant amendments are made, we will:

• Displaying a clear notice on the platform's home page for at least 7 days before the amendment takes effect.
• Sending notifications via registered email or in-app notifications to all registered users.
• Updating the "Last Updated" date at the top of this document.

Your continued use of the emas44 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account and discontinue use of the platform.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, our Data Protection Officer (DPO) team is ready to assist.

We take every privacy enquiry and complaint seriously. If you believe your privacy rights have been violated and are unsatisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant authority.