X44my Privacy Policy — Personal Data Protection for Malaysia Members

1Introduction & Scope of This Privacy Policy

This Privacy Policy is published by x44my ("we", "Platform") and applies to all users who register, access, or use any services provided through the x44my.best website ("Platform"). It sets out our data protection practices in full.

We understand that trust is the foundation of the relationship between a betting platform and its users. When you trust x44my with your personal information — your phone number, deposit records via Touch 'n Go eWallet or GrabPay, betting history on Malaysia Super League football or your favourite slots — we take that responsibility seriously.

This policy is in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards. By using the x44my, you agree to the collection and use of data as described in this document.

2Personal Data We Collect

x44my collect several categories of data across different contexts as you use our platform. Below is a detailed breakdown:

2.1 Data You Provide Directly

• Malaysian phone number used during account registration
• Full name (required for identity verification and withdrawal processing)
• Date of birth (for age verification, 18+ requirement)
• Malaysian bank or e-wallet account information registered for withdrawals (account name and number only — not passwords)
• Information you provide when contacting customer support

2.2 Automatically Collected Data

• IP address of the device used to access x44my
• Device type, operating system and browser version
• In-platform browsing history (pages visited, time spent)
• Technical log data including login times, logout times and in-session activity
• Platform performance data for technical troubleshooting purposes

2.3 Gaming Activity Data

• Betting and game history — including slots, Live Casino, poker, Sports Betting (EPL, Malaysia Super League, badminton), virtual sports and table games
• Deposit and withdrawal transaction history
• Records of claimed bonuses and wagering status
• Responsible gambling controls you have activated (deposit limits, loss limits, temporary breaks)

3How Your Data Is Used

x44my using personal data collected solely for the legitimate and stated purposes below. We do not use your data for any other purpose without your consent:

1. Account Management: Creating and managing your account, verifying your identity and age, and processing account-related requests.
2. Service Provision: Gives you access to all games and services at x44my — from Live Casino and slots to Malaysia Super League football betting and virtual sports.
3. Financial Transaction Processing: Processing deposits (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX) and withdrawals accurately and securely.
4. Platform Security: Detecting and preventing fraud, collusion, bot usage, duplicate accounts and activities that violate our Terms & Conditions.
5. Customer Support: Addressing enquiries, resolving complaints, and providing technical assistance through 24/7 Bahasa Malaysia live chat support.
6. Service Communications: Sending important account-related notifications — security updates, transaction confirmations, terms changes, and operational notices.
7. Platform Improvements: Analysing usage patterns in aggregate (without identifying individuals) to improve platform performance, design and features.
8. Responsible Gaming: Monitoring usage patterns to identify signs of problematic gambling and managing the self-exclusion programmes you have activated.
9. Legal Compliance: To fulfil applicable legal and regulatory obligations, including financial record-keeping and anti-money laundering compliance requirements.

If x44my intend to use your data for any purpose not listed above, we will obtain your explicit consent beforehand.

4Data Sharing with Third Parties

x44my does not sell, rent or disclose your personal data to third parties for advertising or marketing purposes without your consent. However, in the following limited circumstances, data may be shared with necessary parties:

All third parties we work with for platform operations are bound by strict non-disclosure agreements (NDAs) and are not permitted to use the data x44my for their own purposes. x44my is responsible for ensuring these third parties uphold the same data protection standards we hold ourselves to.

5Data Security — How We Protect Your Information

x44my implements multiple layers of technical and operational security to protect members' personal data from unauthorised access, alteration, disclosure or destruction:

• 256-bit SSL Encryption: All communications between your device and our servers x44my encrypted using the latest TLS protocol with 256-bit keys — making it impossible to intercept or read by any unauthorised party.
• Encryption of Stored Data: Sensitive data stored in our databases is encrypted using strong encryption algorithms — even if a server were to be physically accessed, the data cannot be read without the appropriate encryption key.
• Role-Based Access Control: Only staff x44my who require access to specific data to carry out their authorised duties are permitted to do so — the principle of least privilege is strictly enforced.
• 24/7 Security Monitoring: An automated threat detection system continuously monitors the platform for any suspicious activity or unauthorised access attempts.
• Regular Security Audits: x44my conducting regular security audits, including penetration testing, to identify and address vulnerabilities before they can be exploited.
• Secure Data Backup: Data is backed up regularly to a secure, separate location to ensure availability and data integrity even in the event of a technical failure.

While we take all reasonable steps to protect your data, no security system can guarantee absolute 100% protection against all cyber threats. Should a security breach occur that may affect your data, x44my will notify you promptly through the appropriate channels.

6Cookies & Tracking Technologies

x44my uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The following are the types of cookies we use:

• Essential Cookies: Required for core platform operations — including login authentication, session management, and security. These cookies cannot be disabled as they are essential for the platform to function.
• Performance Cookies: Collects information on how members use the platform — most visited pages, page load times, error messages — to help us improve performance. x44my. This data is collected in aggregate and does not identify individual users.
• Preference Cookies: Saves your personal preferences — such as language selection, display layout and other platform settings — so you don't have to reconfigure them every time you log in.

x44my does not use third-party tracking cookies for advertising or marketing profiling purposes. You can manage your cookie settings through your browser; however, please note that disabling essential cookies may affect the functionality of the platform.

7Financial Transaction Data

Financial data processing at x44my handled with the highest level of security given its sensitive nature. Here is how we manage your financial transaction data:

When you make a deposit using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX (Maybank2u / CIMB Clicks), your payment information is processed directly by the PCI-DSS certified payment gateway we use. x44my does not store your full e-wallet account number, banking password, or PIN on our servers.

What we retain for transaction records includes:

• Unique transaction reference number
• Transaction amounts in MYR
• Date and time of transaction
• Payment method used (e.g., "Touch 'n Go eWallet") without the full account number
• Transaction status (successful, failed, processing)

These transaction records are retained for the period stipulated by applicable Malaysian legal and financial regulatory requirements. You can access your own transaction history at any time through your account panel x44my.

8Data Retention & Deletion Period

x44my does not retain your personal data longer than necessary for the purposes stated in this policy or as required by applicable law.

General guidelines for our data retention periods:

• Active Account Data: Retained for the duration your account is active, plus any legally mandated period following closure.
• Financial Transaction Records: Retained for a minimum of 7 years as required by Malaysian financial regulations for audit and legal compliance purposes.
• Security Logs: Retained for 12 months for security investigation purposes if required.
• Customer Support Data: Support session records are retained for 2 years for service improvement and complaint resolution purposes.
• Account Closure Records: Identity verification information and the reason for closure are retained for the legally required period to prevent re-registration in breach of our terms.

Once the retention period expires, data is securely deleted using methods that ensure it cannot be recovered. You may request early deletion of your data (subject to mandatory legal retention requirements) through the procedure described in the Your Rights section below.

9Your Rights Under Malaysia's PDPA

As a member x44my who are based in Malaysia, you have the following rights under the Personal Data Protection Act 2010 (PDPA) with respect to your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Requesting the correction of inaccurate or outdated data.
• Right to Withdraw Consent: Withdrawing consent for certain data processing at any time (this may affect your ability to use some of our services).
• Right to Be Informed: Knowing how your data is used — and that is exactly what this document is for.
• Right to Request Erasure: Request the deletion of your personal data (subject to mandatory legal retention requirements).
• Right to Object: Objecting to the processing of your data for purposes that are not critical to service delivery.

To submit any request relating to the rights above, please contact our support team x44my via live chat on the platform or by email at support@x44my.best. We will respond to your request within 14 business days. Identity verification may be required before we can process the request in order to protect the security of your account.

10Child Data Protection

Platform x44my is intended exclusively for adults aged 18 and above. We do not knowingly collect any personal data from individuals under the age of 18.

If you or someone you know believes that a child or underage individual has registered an account x44my, please notify us immediately at support@x44my.best. We will act promptly to investigate and close the account in question, and ensure all related data pertaining to the minor is securely deleted from our systems.

11Changes to This Privacy Policy

x44my reserves the right to update this Privacy Policy from time to time as needed — whether to reflect changes in our data practices, meet new legal requirements or clarify existing policies.

When we make significant changes to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this document
• Displaying a clear in-platform notification when you log in to your account
• For changes that significantly affect how we handle your data, we will endeavour to provide at least 14 days' notice before those changes take effect

We encourage you to review this Privacy Policy periodically. Your continued use of the x44my after changes are published constitutes your acceptance of the latest version. If you do not agree with the changes, you may close your account and request data deletion in accordance with the procedure described in Section 9.

12Contact Us About Privacy

If you have any questions, concerns or complaints regarding this Privacy Policy or how x44my handling your personal data, our Bahasa Melayu-speaking team is ready to assist through the following channels:

• Live Chat: Stay in-platform x44my — available 24 hours a day, 7 days a week in Bahasa Melayu. This is the fastest way to get a response.
• Privacy Email: support@x44my.best — include "Privacy Inquiry" in your email subject line. Typical response time is 4 to 12 hours.

For formal requests relating to your rights under Malaysia's PDPA (data access, correction, or deletion), please submit your request by email, including your account number and a clear description of your request. We will verify your identity before processing and will respond within 14 business days.

If you are not satisfied with the response x44my regarding your privacy complaint, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia in accordance with the provisions of PDPA 2010.