Privacy Policy cashsweep1 — Malaysian User Data Protection

1Information We Collect

Cashsweep1 collects your personal data through several channels as you interact with our platform. This data collection is necessary to ensure you enjoy a safe, fair, and seamless gaming experience. The following are the categories of data we collect:

Data You Provide Directly:

• Registration information: Full name, date of birth, email address, mobile number, username, and password you choose when opening a cashsweep1 account.
• KYC verification documents: A copy of your identity document (MyKad), passport, or other valid ID; proof of address such as a bank statement or utility bill; and a selfie for liveness verification if required.
• Financial information: Bank account details, FPX account numbers, or digital wallet information you use for deposits and withdrawals. Full credit/debit card numbers are never stored on our servers.
• Communications: Records of your correspondence with our customer support team, including live chat transcripts, emails, and support tickets.

Automatically Collected Data:

• Technical data: IP address, device type, operating system, browser version, screen resolution, and unique device identifiers.
• Usage data: Pages you visit, games you play, session duration, click actions, and account settings preferences.
• Transaction data: Full history of deposits, withdrawals, wagering, wins, and bonus usage on your account.
• Location data: General location information based on IP address for legal compliance and fraud detection purposes.

2How We Use Your Data

Collected data is used responsibly for the following purposes only. cashsweep1 will not use your data for any other purpose not stated here without first obtaining your consent.

• Identity verification and KYC: Ensuring only eligible users — aged 18 and above with valid identification — can access the cashsweep1 platform.
• Payment processing: Verifying and completing all deposit and withdrawal transactions securely and accurately.
• Service provision: Managing your account, delivering important updates, sending transaction notifications, and providing effective customer support.
• Fraud prevention and security: Identifying suspicious activity, preventing unauthorized access, and protecting platform integrity against misuse.
• Legal compliance: Fulfilling obligations under PDPA 2010, anti-money laundering laws (AMLA), and reporting requirements of relevant authorities.
• Platform improvement: Analyzing usage patterns in aggregate (not individually) to improve the performance, interface, and user experience of the cashsweep1 platform.
• Relevant marketing: Sending promotional offers and bonuses relevant to your gaming preferences — only if you have opted in to receive marketing communications.

You may opt out of marketing emails at any time by clicking the "unsubscribe" link in any promotional email or by contacting our support team directly.

3Legal Basis for Data Processing

Cashsweep1 processes your personal data on valid legal bases under the Malaysia Personal Data Protection Act 2010 (PDPA). We ensure every data processing activity has a solid justification:

• Contract: Processing necessary to fulfil the service agreement between you and cashsweep1 — such as processing payments and managing your account.
• Legal obligations: Processing necessary to comply with applicable Malaysian laws, including KYC requirements and anti-money laundering reporting obligations.
• Legitimate interests: Processing for fraud prevention, network security, and service improvement purposes, provided these interests do not override your fundamental rights.
• Consent: For direct marketing and opt-in activities, we rely on your explicit consent. You may withdraw this consent at any time.

4Data Sharing With Third Parties

Cashsweep1 does not sell, rent, or disclose your personal data to any third party for their own commercial purposes. However, to operate the platform effectively, we may share your data with this limited category of third parties:

• Payment service providers: Local banks, FPX payment gateway, DuitNow, and digital wallet providers used to process your deposits and withdrawals. They receive only the data necessary to complete the transaction.
• KYC service providers: The third-party identity verification company we use to verify identity documents and meet compliance requirements. They are bound by strict confidentiality agreements.
• Game providers: Gaming software companies that provide casino, slot, and live game content on our platform. Data shared is limited to play session identifiers only.
• Legal authorities: Government agencies, law enforcement bodies, or regulatory authorities where we are required to do so under applicable Malaysian law.
• Professional advisors: Lawyers, accountants, and auditors bound by professional confidentiality obligations.

All third parties we work with have undergone a thorough security assessment process. They are required to comply with data protection standards equal to or higher than those we maintain at cashsweep1.

5Data Storage & Deletion

Cashsweep1 retains your personal data only for as long as necessary for the purposes stated in this privacy policy, or as required by applicable Malaysian law.

In general, our data retention policy is as follows:

• Active account data: Retained for the duration your account remains active on cashsweep1.
• After account closure: Personal data and transaction records are retained for 5 years after account closure to fulfil the legal requirements of AMLA and PDPA.
• Support communication logs: Retained for 2 years from the date of last interaction.
• System log data: Technical and security logs are retained for 12 months for audit and investigation purposes.
• Marketing data: Retained until you withdraw consent or request deletion, whichever comes first.

Upon expiry of the designated retention period, your data will be securely deleted or permanently anonymised using industry-recognised methods. The deletion process is carried out periodically and automatically by our systems.

6Data Security

Protecting your data from unauthorized access, loss, or disclosure is cashsweep1's highest priority. We implement a multi-layered security framework encompassing the following technical and organizational measures:

• Encryption in transit: All data transmitted between your device and cashsweep1 servers is protected using TLS 1.3 protocol with 256-bit SSL encryption.
• Encryption at rest: Sensitive data such as passwords and financial information is stored in encrypted format using industry-standard encryption algorithms — passwords are never stored in plain text.
• Strict access controls: Access to user data is restricted to staff who require it to perform their duties, based on the principle of least privilege.
• 24/7 monitoring: Threat detection systems and security monitoring operate around the clock to detect and respond to any suspicious activity.
• Regular security audits: cashsweep1 conducts regular penetration testing and independent security audits to identify and address any system vulnerabilities.
• Two-factor authentication (2FA): We support and encourage the use of 2FA on all accounts for an added layer of security.

In the event of a data breach involving your personal data, cashsweep1 will notify you within the timeframe required by law and take all necessary steps to limit its impact.

7Cookies & Tracking Technologies

Cashsweep1 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device by your web browser when you visit our site.

Types of cookies we use:

• Strictly necessary cookies: Required for the platform to function properly, including login session cookies and security cookies. These cookies cannot be disabled.
• Functional cookies: Saving your preferences such as language, display settings, and saved login details — enabling a more personalized and seamless experience.
• Analytics cookies: Helping us understand how players interact with the platform — this data is collected in aggregate and anonymized form for improvement purposes only.
• Performance cookies: Used to monitor page load speeds and the platform's technical performance to ensure a smooth experience for all users.

You can manage cookie settings through your browser preferences. Please note that disabling certain cookies may affect the functionality of some parts of the cashsweep1 platform.

8Your Rights Under PDPA

As a cashsweep1 user based in Malaysia, you have the following rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA):

To exercise any of the above rights, please contact our Data Protection Officer (DPO) by email at [email protected] stating the right you wish to exercise and the information required to verify your identity. We will process your request within 14 working days.

9Children's Data

Cashsweep1 is a platform restricted to users aged 18 years and above only. We do not intentionally collect, store, or process personal data of individuals under the age of 18.

Should we discover that personal data of a minor has been collected without valid parental or guardian consent, we will take immediate steps to delete that data and close the account in question. Cases involving underage registration will be referred to the relevant authorities.

10Privacy Policy Amendments

Cashsweep1 reserves the right to update or amend this privacy policy from time to time to reflect changes in our privacy practices, applicable legislation, or platform service improvements.

When there are material changes to this privacy policy, we will:

• Updating the "Last Updated" date at the top of this page.
• Displaying a clear notice on the cashsweep1 platform homepage at least 7 days before the changes take effect.
• Sending notifications via your registered email or in-account notifications if the changes directly affect your rights.

Your continued use of the cashsweep1 platform after the effective date of any such amendment constitutes your acceptance of the updated privacy policy. If you disagree with any amendment, you have the right to close your account and request data deletion in accordance with the procedure set out in Section 8.

We encourage you to review this privacy policy page periodically to stay informed about how we protect your data.

11Contact Us

If you have any questions, concerns, or complaints regarding this privacy policy or how we handle your personal data, please do not hesitate to reach out. The cashsweep1 Data Protection Officer (DPO) team is here to assist you.

You also have the right to lodge a complaint with Department of Personal Data Protection Malaysia if you believe that the processing of your personal data does not comply with applicable law.