Privacy Policy 120y – Our Commitment to Protecting Malaysian Players' Personal Information

1. Introduction & Policy Scope

This Privacy Policy explains how 120y collects, uses, stores, protects and discloses personal information gathered from players and users of our platform. This document applies to all individuals who register an account, visit the 120y website or interact with any of the services we offer.

At 120y, we believe trust is the foundation of every good relationship. The trust you place in us when you register and use our platform is something we never take lightly. That is why we invest in the latest security technology, train our team on data privacy best practices, and maintain clear policies governing how your information is handled.

120y operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and all related legislation currently in force. We are committed to ensuring that the processing of your personal data always has a valid legal basis and is carried out in a manner that is fair, transparent and accountable.

---

2. Data We Collect

2.1 Information You Provide Directly

When you register an account with 120y or use our services, you provide the following personal information directly:

• Identity information – Full name, identification card number (MyKad) or passport, date of birth and gender
• Contact information – Email address, mobile number and residential address in Malaysia.
• Account eligibility – The username and password you choose (passwords are stored in encrypted form and cannot be read by our staff).
• Financial information – Details of the payment method you use for deposits and withdrawals, such as your Touch 'n Go eWallet account number, GrabPay ID, DuitNow details, FPX details or any other digital wallet information you have chosen
• Verification documents – A copy of your MyKad, passport or other identity verification document requested during the KYC (Know Your Customer) process

2.2 Automatically Collected Information

When you use the 120y platform, our systems automatically record certain technical information to ensure the platform's security and functionality operate correctly:

• Technical log data – IP address, web browser type, device operating system, access time and date
• Gameplay activity data – Records of bets, wins, losses and transaction history within the account
• Device data – Information about the device used to access 120y, including phone model, operating system and unique device identifier
• General location data – General geographic location based on IP address (not precise GPS location).
• Cookie and session data – Information collected via cookies, web beacons, and similar tracking technologies.

---

3. How We Use Your Data

3.1 Primary Purposes of Data Use

120y uses the personal data collected for the following purposes:

• Account management – Creating, verifying and maintaining your 120y account, and confirming your identity when you log in.
• Transaction processing – Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost, ShopeePay, and other local Malaysian payment methods, as well as processing withdrawals to your account.
• Game management – Ensuring fair gameplay, maintaining game history, and resolving any disputes that may arise.
• Customer Support – To respond to enquiries, resolve issues and provide support to 120y players
• Platform security – To detect and prevent fraud, hacking, money laundering and platform abuse
• Legal compliance – Fulfil KYC, anti-money laundering (AML) and reporting obligations required under Malaysian law

3.2 Communications and Marketing

With your consent, 120y may use your email address and mobile number to send you information about new promotions, exclusive bonuses, the latest game launches and special offers we believe are relevant to your interests as a player. You may withdraw this consent at any time by contacting the 120y support team or through your account settings.

---

4. Sharing Data with Third Parties

4.1 Core Principle – No Data Selling

120y strictly does not sell, rent, trade or disclose players' personal data to any third party for their own marketing or business purposes. This is a principle we will not compromise under any circumstances.

4.2 Situations Where Data Sharing May Occur

There are limited situations in which 120y may need to share your personal data with certain parties:

• Payment service providers – Information required to process your deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost, ShopeePay and other payment methods is shared with the relevant payment processors. These providers are bound by strict confidentiality agreements and use your data solely for the purpose of processing transactions
• Game providers – Game providers whose platforms 120y uses may receive the minimum technical data required to operate the games and ensure their fairness.
• Legal requirements – If required by a court order, directive from Malaysian authorities or applicable law, 120y may be required to disclose personal data. In such situations, we will inform you if we are legally permitted to do so
• Security protection – In cases involving threats to player safety, fraud or illegal activity, certain information may need to be shared with the relevant authorities

---

5. Data Security

5.1 Technical Security Measures

120y invests seriously in security infrastructure to protect players' personal data. The technical security measures we have in place include:

• 256-bit SSL Encryption – All communications between your browser and 120y's servers are encrypted using 256-bit TLS/SSL protocol, the same standard employed by Malaysia's leading banks
• Database-level data encryption – Sensitive data stored in 120y's databases is additionally encrypted for an extra layer of protection.
• 24/7 Security Monitoring – The 120y security system is monitored continuously around the clock to detect any suspicious activity or unauthorised access attempts
• Strict access controls – Only 120y staff who require access to personal data to perform their specific duties are permitted to do so, and all access is logged and audited.
• Regular security testing – 120y's infrastructure undergoes regular penetration testing and security assessments conducted by independent security specialists.

5.2 Your Security Responsibilities

While 120y takes all reasonable steps to protect your data, the security of your account also depends on your own actions. We recommend that you:

• Use a strong and unique password for your 120y account – a combination of uppercase letters, lowercase letters, numbers and symbols
• Do not share your login credentials with anyone, including family members
• Log out of your 120y account whenever you use a device shared with others.
• Contact the 120y support team immediately if you suspect your account has been accessed without authorisation

---

6. Cookie Policy

120y uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the 120y website.

6.1 Types of Cookies We Use

120y uses several categories of cookies, each serving a distinct function and carrying a different level of necessity:

• Mandatory session cookies – Required for core platform functions such as staying logged in during your session, saving your betting slip details and maintaining session security. Without these cookies, the 120y platform cannot function properly
• Language preference and settings cookies – Saves your preferences, such as your display language and other display settings, so you don't have to reconfigure them each time you log in to 120y.
• Performance and analytics cookies – Collects information on how players use the 120y platform – which pages are visited most frequently, how long a person spends in each section, and so on. This information is used to improve the overall platform experience
• Security cookies – Helps detect and prevent fraudulent activity by identifying suspicious access patterns.

6.2 Managing Your Cookie Preferences

You can control and manage cookies through your web browser settings. Most modern browsers allow you to view, delete and block cookies. Please note, however, that blocking essential cookies may negatively affect the functionality of the 120y platform and may prevent you from logging in or using certain platform features.

---

7. Your Rights as a Data Subject

As a 120y player and data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several rights relating to the personal data we hold about you. 120y respects and facilitates the exercise of these rights:

• Right to access – You have the right to request and receive a copy of the personal data 120y holds about you. Requests will be processed within a reasonable timeframe, typically within 14 business days.
• Right to rectification – If any personal data we hold is inaccurate or outdated, you have the right to request its correction. You may also update certain information directly in your 120y account settings.
• Right to erasure – Under certain circumstances, you may request that 120y delete your personal data. Please be aware, however, that we may need to retain certain data to fulfil legal or regulatory requirements for periods prescribed by law
• Right to restrict processing – In certain circumstances, you may request that 120y restrict how we process your data while a dispute or concern is being resolved.
• Right to Object – You have the right to object to the processing of your data for direct marketing purposes at any time. Once your objection is received, 120y will stop using your data for that purpose.

To exercise any of the rights above, please contact the 120y support team by email at [email protected]. We will respond to your request within 14 business days with an update on its status.

---

8. Data Retention & Deletion

8.1 Data Retention Period

120y retains players' personal data for as long as is necessary to fulfil the purposes set out in this Privacy Policy. In general:

• Active account data – Retained for as long as your account remains active on the 120y platform
• Financial transaction data – Retained for a minimum of seven (7) years from the transaction date, in accordance with applicable Malaysian financial and tax legislation
• KYC and identity verification records – Retained for a minimum of five (5) years after the business relationship ends, in line with applicable AML requirements.
• Communication and customer support logs – Retained for three (3) years for reference and dispute resolution purposes.

8.2 After Account Closure

When your 120y account is closed for any reason, 120y will delete or anonymise any personal data that is no longer needed. However, certain data may need to be retained for periods specified under Malaysian law in order to fulfil legal, regulatory or contractual obligations that remain in effect.

---

9. Third-Party Links & Services

The 120y platform may contain links to third-party websites or services. 120y's Privacy Policy does not apply to those websites or services. Each third-party website or service has its own privacy policy, which you are responsible for reading and understanding before providing any personal information to them.

The use of third-party payment services such as Touch 'n Go eWallet, GrabPay, DuitNow, FPX and others is subject to the respective privacy policies of those providers. 120y is only responsible for data sent to and received from those providers in the context of transactions on our platform.

---

10. Privacy Policy Updates

120y reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements or technological developments. The "Last Updated" date displayed at the top of this page indicates when the latest version of this Privacy Policy came into effect.

For any material changes that significantly affect how we process your personal data, 120y will notify you via the email address registered to your account, or through a prominent notice on the platform, before the changes take effect. Your continued use of the 120y platform after the effective date of any amendment will be considered your acceptance of the updated Privacy Policy.