Privacy Policy f900 Malaysia – Protecting Our Members' Personal Data

1Introduction & Scope of the f900 Privacy Policy

F900 is an online casino entertainment platform operating in Malaysia, accessible at f900.my. We understand that privacy is a fundamental right, and we take this responsibility seriously. This Privacy Policy applies to all personal data collected through the f900 platform — including the f900.my website, any associated mobile applications (where applicable), and all interactions you have with our customer support team.

F900 operates as a personal data controller responsible for determining the purposes and means of processing your personal data, as defined under Malaysia's Personal Data Protection Act 2010 (Act 709). This means f900 is accountable for ensuring that such processing is carried out lawfully, fairly, and transparently.

This Policy does not apply to third-party websites or services that may be accessible via links on the f900 platform — including payment provider websites such as Maybank2u, CIMB Clicks, or digital wallet providers such as Touch 'n Go eWallet and GrabPay. We encourage you to read the privacy policies of those third-party services separately.

2Personal Data We Collect

F900 collects your personal data through various points of interaction with our platform. The following are the categories of data we collect:

A. Registration & Account Data

• The username you chose during registration.
• An active Malaysian phone number for account verification and security-related communications.
• Passwords are stored in hashed form and are not human-readable.
• Additional profile information you voluntarily provide, such as your full name (required for identity verification on certain withdrawals) and date of birth for age verification purposes.

B. Financial & Transaction Data

• Records of all deposit and withdrawal transactions in Malaysian Ringgit (RM), including the amount, date, time, and payment method used — whether DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, or FPX via Maybank2u or CIMB Clicks.
• Identification details associated with your payment method (such as the phone number registered to your e-wallet) — f900 does not store your full credit card details or online banking passwords.
• Bonus and promotion usage history.

C. Gaming Activity Data

• Records of games played, bets placed, winnings and losses.
• Gaming session duration, platform usage frequency, and overall playing patterns.
• Your game preferences and account settings.

D. Technical & Device Data

• The IP address of your device when accessing f900.my.
• The type of web browser, operating system and device used.
• Cookie data and session identifiers to enable the platform's functions to operate correctly.
• Access logs and technical error records that help us detect and resolve platform issues.

E. Communications Data

• The content and records of your interactions with the f900 customer support team via Live Chat and email.
• Feedback, complaints or suggestions you submit to us.

3Purpose of Data Collection & Processing

F900 collects and processes your personal data solely for legitimate purposes that are necessary for the operation of the platform. These purposes are as follows:

• Account Management: To create, manage, and maintain your f900 member account, process new registrations, and enable you to log in securely.
• Payment Processing: To process deposits and withdrawals in MYR via supported local payment methods, and to maintain accurate financial transaction records.
• Identity Verification & Compliance: To meet legal requirements relating to age verification (18+), anti-money laundering (AML) and Know Your Customer (KYC) obligations that apply to the platform.
• Security & Fraud Prevention: To detect, investigate and prevent any fraudulent activity, multi-accounting or use of the platform that violates f900's Terms & Conditions.
• Responsible Gambling: To monitor gameplay patterns in order to identify signs of problem gambling and provide appropriate assistance or limits to members who need support.
• Service Communications: To send you important notifications relating to your account, transactions, policy changes or relevant security information.
• Platform Improvements: To analyse aggregated usage patterns with the aim of improving the overall quality, performance, and user experience of the f900 platform.
• Customer Support: To enable our support team to provide effective and relevant assistance whenever you contact us.

F900 does not use your personal data for third-party marketing or to generate advertising revenue. Any marketing communications we send you relate solely to f900's own products and promotions, and you may opt out at any time.

4Legal Basis for Data Processing

Under Malaysia's Personal Data Protection Act 2010, f900 processes your personal data on the following legal bases:

• Consent: For processing that is not operationally required but is of benefit to you, such as sending promotional notifications about new offers on f900. You may withdraw this consent at any time.
• Performance of a Contract: For processing required to fulfil the platform usage agreement between you and f900, such as processing deposits, managing account balances and crediting winnings.
• Legitimate Interests: For the purposes of platform security, fraud prevention, service improvement, and compliance with responsible gaming requirements.
• Legal Obligations: To comply with applicable Malaysian legal requirements, including financial reporting obligations, anti-money laundering prevention, and adherence to directives from relevant authorities.

5Data Sharing & Disclosure to Third Parties

F900 does not sell, rent, or trade member personal data to any third party. However, there are limited circumstances in which f900 is required to share certain information with the following parties in order for the platform to function properly:

• Payment Service Providers: Information required to process your financial transactions is shared with the relevant payment providers, such as DuitNow operators, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and banks supporting FPX. Such sharing is limited to the minimum necessary to complete the transaction and is subject to the respective provider's privacy policy.
• Game Software Providers: Anonymised game statistics may be shared with game software providers for technical support and game improvement purposes.
• Relevant Authorities: f900 will disclose personal data when required to do so by Malaysian law, court order, or official request from a Malaysian government authority with valid jurisdiction.
• Technical Service Providers: The cloud infrastructure and technical service providers we use to operate the platform may have limited access to data for technical support purposes only, under strict confidentiality agreements.

6f900 Data Security Measures

F900 implements a comprehensive range of technical and organisational security measures to protect members' personal data from unauthorised access, loss, destruction, or accidental disclosure:

• Encryption in Transit: All communications between your browser and f900's servers are encrypted using TLS 1.3 with 256-bit SSL encryption — the standard adopted by leading banking institutions in Malaysia.
• Encryption at Rest: Sensitive data including passwords and financial information is stored in encrypted form within our databases. Passwords are stored using a one-way hashing algorithm that cannot be reversed.
• Access Control: Access to members' personal data by f900 staff is restricted to those who require it to carry out their job responsibilities, applying the principle of least privilege.
• Continuous Monitoring: An automated monitoring system operates 24/7 to detect any unauthorised access attempts, suspicious activity patterns, or other security threats.
• Security Audits: f900 conducts regular security audits by qualified third parties to identify and address any potential security vulnerabilities.
• Two-Factor Authentication: Members are encouraged to enable two-factor authentication for an added layer of security on their f900 account.

While f900 takes all reasonable steps to protect your data, no security system can guarantee 100% protection under every circumstance. We encourage you to take your own precautions by using a strong, unique password for your f900 account and never sharing your login credentials with anyone.

7Data Retention Period

F900 retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required under applicable Malaysian law:

• Active Account Data: For as long as your account remains active on f900, and for a reasonable period following account closure to allow for the resolution of any outstanding disputes.
• Financial Transaction Records: Retained for a minimum of seven years from the transaction date, in line with applicable financial reporting and tax requirements in Malaysia.
• Support Communication Logs: Records of interactions with the support team are retained for two years for service quality and dispute resolution purposes.
• Security Data & Access Logs: Retained for 12 months for the purpose of security threat detection and incident investigation.
• Identity Verification Data: Retained for the duration of the active account and up to five years following account closure to comply with AML and KYC requirements.

Once the specified retention period expires, data will be securely deleted or anonymised using methods that ensure it cannot be recovered. If you voluntarily close your f900 account, we will initiate the data deletion process within 30 days, subject to the mandatory retention requirements stated above.

8Your Privacy Rights as an f900 Member

Under Malaysia's Personal Data Protection Act 2010 and f900's commitment to privacy, you have the following rights in relation to your personal data:

To exercise any of the rights above, submit a written request to us at [email protected] with the subject line "Privacy Rights Request". Please include your f900 username and a clear description of your request. f900 will process the request within seven business days and will require verification of your identity before acting on any request relating to personal data.

9Cookie & Tracking Technology Policy

F900 uses cookies and similar tracking technologies to ensure the platform functions correctly and to deliver a better user experience. The following are the types of cookies we use:

You can manage your cookie preferences through your web browser settings. However, disabling essential cookies may significantly affect the functionality of the f900 platform, including your ability to log in and play games. For more information on how to manage cookies in your browser, refer to the relevant browser help documentation.

10Amendments to This Privacy Policy

F900 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer. Any material changes will be communicated to members via a prominent notice on the f900 platform or by email to the registered address at least seven calendar days before the changes take effect.

The date of the most recent update is always displayed at the top of this page. The latest version of the Privacy Policy is accessible at any time at f900.my/privacy-policy. Continued use of the platform after any amendment takes effect constitutes your acceptance of the updated policy.

We encourage you to review this Privacy Policy periodically — especially when you receive a notice about upcoming changes — to ensure you are always informed about how f900 protects your personal information.

11Contact f900's Privacy Officer

For any enquiries, concerns or requests relating to this Privacy Policy or how f900 manages your personal data, please contact our Privacy Officer:

Data privacy rights requests will be processed within seven business days of receipt. For more complex cases, we will notify you if additional time is required. For information on responsible gambling, please visit Responsible Gambling. For information on the platform's terms of use, please refer to Terms & Conditions us.