Privacy Policy 123rf – Personal Data Protection for Malaysian Players

1How 123rf Collects Your Information

123rf collects your personal information through several channels when you interact with our platform. This collection is carried out transparently and solely for legitimate purposes as outlined in this privacy policy.

1.1 Information You Provide Directly

When you register a 123rf account, you provide information such as your full name, Malaysian phone number, email address, and identity verification details. This information is required to create and manage your account securely.

1.2 Automatically Collected Information

When you use the 123rf platform, our systems automatically record certain technical information including your IP address, browser type and version, device type and operating system, pages visited, session time and duration, and general usage patterns for internal analytics purposes.

1.3 Financial Transaction Information

Each time you make a deposit or withdrawal in MYR via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u, CIMB Clicks), 123rf records transaction details such as the amount, date, time, and payment method. Full bank account numbers or card details are never stored in our systems — only secure reference tokens generated by the payment provider.

2Categories of Personal Data We Hold

Below is a table of personal data categories collected and stored by 123rf, along with the purposes and legal basis for their collection:

3How We Use Your Personal Data

123rf uses your personal data only for legitimate and relevant purposes. We do not use your data beyond the scope agreed upon during registration. The primary purposes for data use are as follows:

• Account Management: Creating, verifying, and managing your 123rf account, including any required identity verification (KYC) processes.
• Transaction Processing: Processing deposits and withdrawals in Malaysian Ringgit (MYR) via your chosen local Malaysian payment methods.
• Service Delivery: Enables you to access and use all 123rf products, including Sports Betting on the Malaysia Super League, EPL, badminton, e-sports, poker, lottery, slots, and Live Casino.
• Platform Security: Detecting and preventing fraud, money laundering, unauthorised access, and platform misuse.
• Responsible Gaming: Monitoring betting patterns to identify players who may need support and providing appropriate assistance.
• Service Communications: Sending important notifications regarding your account, transactions, and policy changes via email or SMS.
• Marketing (with Consent): Sending you promotional information, bonuses, and 123rf offers — only if you have given explicit consent to receive marketing communications.

4Data Sharing with Third Parties

123rf takes your privacy very seriously. We do not sell, rent, or share your personal data with third-party advertisers or commercial entities for their own marketing purposes. However, there are specific situations where limited, purposeful data sharing is necessary:

4.1 Technical Service Providers

123rf works with vetted and accountable technical service providers — including secure cloud infrastructure providers, Malaysian payment gateway providers, and licensed betting software providers. These providers access only the data necessary for their specific tasks and are contractually bound to protect your data.

4.2 Legal & Regulatory Requirements

123rf will disclose your personal data to the relevant authorities where required by Malaysian law, including court orders, financial crime investigation requirements, or directives from a legitimate regulatory body.

4.3 Fraud Prevention

In cases involving serious fraud, money laundering, or significant security threats, 123rf may share limited information with other financial platforms or Malaysian security agencies for mutual protection purposes.

5Data Security at 123rf

123rf continuously invests in cybersecurity infrastructure to ensure your personal data is protected to the highest standards. Key security measures we have in place include:

• 256-bit SSL Encryption: All communications between your browser or app and 123rf's servers are fully encrypted.
• Two-Factor Authentication (2FA): You are encouraged — and may be required — to use 2FA for additional account security.
• 24/7 Monitoring: 123rf's security team continuously monitors systems to detect anomalies or unauthorised access attempts.
• Internal Access Controls: Only 123rf staff who require access for their specific roles are permitted to access player data, and all access is logged and audited.
• Secure Data Backups: Data is regularly backed up to secure, encrypted locations to ensure system resilience.

6Use of Cookies & Tracking Technologies

123rf uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

6.1 Types of Cookies Used

• Essential Cookies: Required for core platform functions such as session login, security, and language preferences. Cannot be disabled.
• Functional Cookies: Saving your preferences such as display settings, favourite sports, and odds preferences to enhance your experience.
• Analytics Cookies: Collecting anonymised information about how you use 123rf to help us improve our services.
• Marketing Cookies: Used only with your consent to show you relevant promotions from 123rf.

You can manage and disable certain cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the 123rf platform.

7Data Retention Period

123rf retains your personal data only for as long as necessary for the stated purposes or as required by applicable Malaysian law. The following are general data retention period guidelines:

• Active account data: For as long as your account remains active on 123rf.
• MYR financial transaction records: Minimum 7 years (as required by Malaysian tax and financial law).
• Security and audit logs: 2 years from the date of the record.
• Marketing communication data: Until you withdraw your consent.
• Data after account closure: Anonymised or deleted within 90 days, except for records required to be retained by law.

8Child Protection

The 123rf platform is strictly for individuals aged 18 and above. 123rf does not knowingly collect or process personal data from minors. Should we discover that a minor's data has been collected inadvertently, we will take immediate action to delete it and close the account in question. If you are aware that a minor has registered an account on 123rf, please contact us immediately at support@123rf.wine.

9Cross-Border Data Transfers

In certain circumstances, your personal data may be processed or stored outside Malaysia — for example, where 123rf uses international cloud infrastructure. In all such cases, 123rf ensures that any data transfers comply with Malaysia's PDPA and that an equivalent or higher level of data protection is maintained at the destination. Legally binding data processing agreements are in place with all relevant overseas service providers.

10How to Exercise Your Privacy Rights

To exercise any of your privacy rights under this Privacy Policy or Malaysia's PDPA, you may:

• Log in to your 123rf account and go to the "Privacy Settings" section for direct access to data control features.
• By emailing our privacy team at support@123rf.wine with the subject line "Data Privacy Request".
• Reaching 123rf customer support via live chat (available 24/7) for immediate assistance.

We are committed to processing privacy rights requests within 14 business days. For complex requests or those requiring additional identity verification, this period may be extended to up to 30 business days, with prior notice given to you.

11Privacy Complaints & Contact Us

If you have any concerns, queries, or complaints regarding how 123rf handles your personal data, please reach out to us via:

• Email: support@123rf.wine (Subject: Data Privacy Complaint)
• Live Chat: Available 24/7 on the 123rf platform

We hope to resolve any privacy concerns directly with you. If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP) as the relevant regulatory authority.

12Amendments to This Privacy Policy

123rf reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new Malaysian legal requirements, or changes to the services we offer. Any material amendments will be communicated to you via in-account notification or email at least 14 days before taking effect. The "Updated" date at the top of this document will always reflect the latest version of our Privacy Policy. Your continued use of the 123rf platform after any amendment takes effect will be deemed as your acceptance of the revised policy.