3star Privacy Policy – Our Full Commitment to Protecting the Personal Data of Malaysian Players

1 Introduction and Scope of This Privacy Policy

Welcome to the Privacy Policy of 3star. The platform 3star operating under the domain 3star-khelo.com is fully committed to protecting the privacy and personal data security of every Member and user of our platform.

This Privacy Policy applies to all personal information collected, processed, stored, and used by 3star in the context of providing our online betting and entertainment services to users in Malaysia — covering football, badminton, e-sports, poker, live casino, lottery, virtual sports, and all other related services on the platform.

We take this responsibility seriously because we understand how important your trust is to us. When you provide your personal information to 3star — whether it's a phone number, banking details, or transaction records — you're trusting us with something valuable. And we don't take that trust lightly.

This policy applies to all users of the 3star based in Malaysia, and we operate in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).

2 Types of Personal Data We Collect

3star collect several categories of personal data in the course of providing our services. Below is a breakdown of the types of data we collect:

We do not collect sensitive data categories such as health information, criminal records, or religious beliefs, unless specifically required by law or a legitimate identity verification process.

3 How We Collect Your Data

3star collects personal data through several methods, either directly or automatically:

• Directly from You: When you register a new account, you voluntarily provide information such as your name, phone number, and password. Financial information is collected when you make your first deposit or withdrawal request.
• During Platform Use: When you use the 3star — whether you choose an EPL match to bet on, play poker, or join a live casino session — our system automatically records that activity as part of your account history.
• Via Cookies and Similar Technologies: Our platform uses cookies to enhance your user experience. Please refer to Section 7 for more details on how we use cookies.
• From Payment Providers: When you transact via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, transaction information is shared with us by the respective provider for verification and security purposes.
• Identity Verification Process (KYC): For withdrawals exceeding certain limits or where required, we may request a copy of an identification document such as a Malaysian identity card for age and identity verification purposes.

4 How We Use Your Data

Personal data collected by 3star used only for legitimate and specific purposes. We do not use your data for anything beyond what is stated here:

We do not use your data for any purpose other than those listed above without first obtaining your explicit consent.

5 Data Sharing with Third Parties

3star does not sell, rent, or disclose your personal data to third parties for marketing purposes. However, under certain limited circumstances, we may share your data with the following parties:

• Payment Service Providers: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX providers — solely for the purpose of processing your financial transactions. They are bound by strict data confidentiality agreements.
• Technical Service Provider: Companies that assist us in managing platform infrastructure, data processing, and system security. They only access the data necessary for their specific roles and are bound by strict data confidentiality agreements.
• Relevant Authorities: Law enforcement agencies, financial regulators, or courts — only when required by Malaysian law or a valid court order.
• Fraud Investigators: In cases of active fraud investigations or money laundering inquiries, we may share relevant information with the appropriate authorities or authorised investigative partners.

In all of the data-sharing situations described above, we ensure that any party receiving your data is bound by confidentiality obligations that are equivalent to, or stricter than, those we impose on ourselves. Your data is never transferred to any party that does not require such access.

6 Data Retention and Security Measures

The security of your data is the top technical priority of the 3star. The following are the security measures we have put in place to protect your information:

• 256-bit SSL Encryption: All communications between your device and the 3star fully encrypted using 256-bit TLS/SSL protocols — the same standard used by Malaysia's major banks such as Maybank and CIMB.
• Data Encryption at Rest: Sensitive data stored in our databases — including passwords and financial details — is encrypted using strong encryption algorithms before being stored.
• Two-Factor Authentication (2FA): A 2FA system is available for Members who wish to add an extra layer of security to their accounts.
• Internal Access Controls: Access to Members' personal data within our organisation is restricted to staff who genuinely need it to perform their job functions. All access is logged and audited.
• Continuous Security Monitoring: Our systems are monitored around the clock to detect any unauthorised access attempts or suspicious activity.
• Regular Security Audits: Platform 3star undergoes regular security audits by independent third parties to identify and address any vulnerabilities.

Regarding data retention periods: 3star retains Members' personal data for as long as the account remains active. Following account closure, data is retained for the period required under Malaysian law (typically 7 years for financial records) before being securely deleted.

While we take all reasonable precautions, no digital security system can guarantee 100% absolute security. You also have a role to play in keeping your account safe — do not share your password, avoid logging in on public devices, and notify us immediately if you suspect any unauthorised activity.

7 Cookies Policy

Platform 3star use cookies — small text files stored on your device by your web browser — to enhance your user experience and ensure the platform functions correctly.

The following are the types of cookies we use:

You can manage cookie settings through your web browser settings. However, disabling essential cookies will affect the functionality of the 3star. For optional cookies, you may manage your preferences through the cookie settings panel available on our platform.

8 Cross-Border Data Transfers

In the context of platform operations 3star, your personal data may be processed and stored on servers located outside Malaysia. This occurs when we utilise cloud infrastructure or technical service providers that operate internationally.

In such circumstances, 3star ensures that:

• Any cross-border data transfers are carried out with adequate safeguards in place — including the use of standard data transfer agreements that comply with data protection principles equivalent to Malaysia's PDPA.
• Service providers in destination countries are bound by strict data security and confidentiality requirements through contractual agreements.
• We only transfer the minimum data necessary for specific operational purposes.

If you have any questions about the transfer of your data outside Malaysia, please contact our support team 3star via email at support@3star-khelo.com.

9 Your Rights Regarding Personal Data

As a user of the platform 3star based in Malaysia, you have certain rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA). We are committed to making it easy for you to exercise these rights:

To exercise any of the above rights, please contact our support team 3star via email at support@3star-khelo.com or through the platform's live chat. We will process your request within 5 business days. For more complex cases, we may require up to 30 days and will notify you accordingly.

10 Protection of Children's Data

Platform 3star is strictly limited to individuals aged 18 and above. We do not knowingly collect, process, or store any personal data from children or minors.

Our registration process requires age verification, and we use KYC procedures to verify Members' identities. Should we discover or become aware that personal data belonging to an individual under the age of 18 has been collected, we will take immediate steps to delete that data and close the relevant account.

If you are a parent or guardian and believe that your underage child has registered an account on the platform 3star, please contact us immediately at support@3star-khelo.com. We will take the appropriate action promptly.

11 Links to Third-Party Websites

Platform 3star does not contain links to third-party external websites in its main content. However, in situations where references to external sources do occur — for example, in the context of payment verification or technical support — we wish to make clear that:

• 3star is not responsible for the privacy practices of any website or service outside our direct control.
• You are advised to read the privacy policy of any third-party service you use in connection with transactions with 3star — including digital wallet providers such as Touch 'n Go, GrabPay, or FPX providers.
• The mention of third-party services does not imply that 3star endorses or guarantees the privacy practices of those parties.

12 Changes to This Privacy Policy

3star reserve the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or platform improvements. Whenever this Privacy Policy is updated, the "Last Updated" date at the top of the document will be revised accordingly.

For changes deemed material — meaning those that significantly affect your rights or how we use your data — we will provide clearer notice, whether through an in-platform notification, a pop-up notice at login, or via email to your registered address, at least 14 days before the changes take effect.

Continued use of the 3star following any changes to this Privacy Policy taking effect will be considered acceptance of the updated terms. If you do not agree with the changes made, you have the right to close your account before those changes come into effect.

We encourage you to review this Privacy Policy page periodically so you remain informed about how we protect your personal data.

13 How to Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy 3star or the way we handle your personal data, please do not hesitate to get in touch. We take all privacy-related feedback seriously.