Mhs3 Privacy Policy – Our Commitment to Protecting the Personal Data of Every Malaysian Member

Mhs3 (mhs3.my) is an online casino platform operating exclusively for the Malaysian market. We understand that member trust is our most valuable asset — and that trust cannot exist without robust, transparent privacy protection.

This Privacy Policy sets out in detail how mhs3 collects, uses, stores, protects and, in certain circumstances, discloses the personal data of our members. It also explains your rights as an mhs3 member with respect to your personal data and how you may exercise those rights.

Mhs3 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. We take our data protection responsibilities extremely seriously and review this Privacy Policy on a regular basis to ensure it remains relevant, accurate and sufficient to safeguard the interests of all mhs3 members across Malaysia.

Mhs3 collects various types of personal data as you interact with our platform. Below is a comprehensive breakdown of the types of data collected and the context in which they are gathered:

2.1 Data You Provide Directly

• Registration Information: Your full name, active Malaysian phone number, email address, and the password you set when registering your mhs3 account.
• Identity Verification Information: A copy of your MyKad or passport may be requested for KYC (Know Your Customer) verification purposes for withdrawals that exceed certain limits.
• Financial Information: Bank account details, phone numbers linked to Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX information used for your deposits and withdrawals.
• Communication Information: Any messages, enquiries, or complaints you send to the mhs3 support team via Live Chat or email.

2.2 Automatically Collected Data

• Platform Usage Data: Gaming session records, betting history, wins and losses, games accessed, and time spent in each session at mhs3.
• Technical Data: IP address, web browser type, device operating system, screen resolution and other technical data required to optimise your experience on mhs3.
• Transaction Data: A complete record of all deposits, withdrawals, and bonuses credited to your mhs3 account, including the date, time, and amount of each transaction.
• Cookie Data: Information collected via cookies and related tracking technologies used by mhs3 to improve the user experience and platform security.

Mhs3 uses the personal data we collect exclusively for legitimate and necessary purposes as set out below. We do not process your data for any purpose beyond what is stated here:

• Account Management & Services: To create, manage and maintain your mhs3 account, process deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, and ensure all mhs3 services run smoothly for you.
• Identity Verification (KYC): To comply with legal requirements relating to customer identity verification and to ensure that only eligible individuals — aged 18 and above with a valid identity — use the mhs3 platform.
• Security & Fraud Prevention: To detect and prevent fraudulent activity, money laundering, the use of multiple accounts and any other illegal activities that could compromise the safety of the mhs3 community and its members.
• Customer Support Provision: To enable the mhs3 support team, operating 24/7, to provide you with fast, accurate and effective assistance whenever you need it.
• Account-Related Communications: To send you important account-related notifications such as deposit confirmations, withdrawal alerts, policy updates and relevant promotional information – where you have consented to receive such communications.
• Platform Improvements: To analyse mhs3 platform usage patterns in aggregate and in a non-personally identifiable manner, for the purpose of improving the user experience, identifying technical issues and developing better new features.
• Legal Compliance: To comply with any applicable legal requirements, regulations, or valid court orders governing mhs3's operations in Malaysia.

Mhs3 does not sell, rent or share members' personal data with third parties for commercial purposes. However, in certain limited and specific situations, mhs3 may need to share data with the following parties:

• Payment Service Providers: Required transaction information is shared with authorised payment service providers such as Touch 'n Go, Grab, Boost, Shopee and banking institutions to securely process your deposits and withdrawals. These providers are bound by strict data protection agreements with mhs3.
• Game Software Providers: Minimal, non-personally identifiable technical data may be shared with mhs3's game software providers solely for technical maintenance and game dispute resolution purposes.
• Relevant Authorities: mhs3 will disclose members' personal data to Malaysian government authorities, law enforcement agencies, or courts when required to do so by applicable law or a valid court order, without needing prior member consent in such circumstances.
• Technical Service Providers: Selected technical service providers that assist mhs3 in operating the platform – such as secure cloud computing services – may have limited access to certain data, but they are bound by strict confidentiality and data protection agreements.

Mhs3 invests seriously in security infrastructure to ensure the personal data of every member is protected to the highest standard. The security measures we have implemented include:

• 256-bit SSL Encryption: All communications between your browser and mhs3's servers are encrypted using 256-bit SSL/TLS protocol — the same standard employed by Maybank2u and CIMB Clicks to safeguard their customers' online banking transactions.
• Multi-Layered Access Control: Access to mhs3 members' personal data is strictly limited to authorised personnel who require it to carry out their duties. All access is logged and audited on a regular basis.
• Continuous Security Monitoring: mhs3's security monitoring system operates 24 hours a day, 7 days a week to detect and respond promptly to any security threats or unauthorised access attempts.
• Regular Security Testing: mhs3 conducts regular penetration testing and security audits with independent third-party specialists to identify and address any security vulnerabilities before they can be exploited.
• Encrypted Password Storage: Your mhs3 account password is never stored in plain text – it is saved as a one-way hash that cannot be decrypted, meaning even mhs3 staff cannot view your actual password.

While mhs3 takes all reasonable and appropriate security measures, it is important to understand that no system can guarantee absolute security in an online environment. We therefore also encourage every mhs3 member to play an active role in protecting their own account by using a strong, unique password and never sharing their login credentials with anyone.

Mhs3 uses cookies and related tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your web browser when you visit mhs3.my. The following are the types of cookies we use:

• Essential Cookies: These cookies are essential for the basic functionality of the mhs3 platform, including login session management, security and navigation. Without them, the mhs3 platform will not function properly. Essential cookies cannot be disabled.
• Performance Cookies: These cookies help us understand how members interact with the mhs3 platform — which pages are visited most frequently, how long sessions last, and any issues users may encounter. This information is collected in aggregate form and cannot be used to identify individuals.
• Functional Cookies: These cookies allow mhs3 to remember your preferences — such as your chosen language, display settings, and saved login details — for a more convenient experience in future sessions.
• Security Cookies: Specialised cookies that help mhs3's security systems detect suspicious activity, unauthorised login attempts, and other security threats that may affect your account.

You can control and manage cookie settings through your web browser preferences. Please note, however, that disabling certain cookies may affect the functionality and your overall experience on the mhs3 platform. For the best and most secure experience, we recommend keeping the default cookie settings optimised by mhs3.

Mhs3 does not retain members' personal data for longer than is necessary for the purposes outlined in this Privacy Policy. mhs3's data retention practices are as follows:

• Active Account Data: For as long as your mhs3 account remains active and in use, your personal data will be retained to ensure seamless service delivery. This includes registration details, transaction history, and gaming records.
• Data After Account Closure: After your mhs3 account is voluntarily closed or terminated, mhs3 will retain your personal data for the minimum period required under Malaysian law – typically between 5 and 7 years – for legal compliance, dispute resolution and audit purposes.
• Financial Transaction Data: Records of all financial transactions — including deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX — are retained for a minimum of 7 years in accordance with applicable Malaysian financial legislation.
• Support Communication Data: All communications with the mhs3 support team are retained for 3 years from the date of last contact to ensure service quality and to facilitate the resolution of any disputes that may arise.

Once the relevant retention period has expired, mhs3 will delete or destroy your personal data in a secure and irreversible manner, in accordance with mhs3's established internal security procedures.

As an mhs3 member, you have certain rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA). mhs3 fully respects and facilitates the exercise of these rights:

• Right to Access: You have the right to request a copy of the personal data mhs3 holds about you. Access requests can be submitted to [email protected] and will be processed within 14 business days.
• Right to Rectification: If you find that the personal data mhs3 holds about you is inaccurate or out of date, you have the right to request an immediate correction. Simple updates can be made directly within your mhs3 account settings.
• Right to Erasure: Under certain circumstances permitted by law, you have the right to request that mhs3 delete your personal data. Such requests will be assessed in accordance with applicable legal requirements and processed within 30 days.
• Right to Restrict Processing: You have the right to request that mhs3 restrict the processing of your personal data under certain circumstances, such as while a dispute regarding the accuracy of your data is being resolved.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time by submitting a request to [email protected].
• Right to Withdraw Consent: Where mhs3 processes your data based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the validity of any processing carried out prior to the withdrawal.

Mhs3 takes the protection of minors very seriously. The mhs3 platform is intended solely for individuals aged 18 and above. mhs3 does not knowingly collect, store, or process any personal data from individuals under the age of 18.

Should mhs3 discover that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that data and close the associated account. Parents or guardians who suspect that their underage child has registered a mhs3 account without permission are encouraged to contact us promptly at [email protected] so that appropriate action can be taken without delay.

Mhs3 reserves the right to review, update or amend this Privacy Policy from time to time to reflect changes in our data protection practices, new legal requirements or the expansion of mhs3's services. Any material changes to this Privacy Policy will be communicated to mhs3 members through the following means:

• A prominent notice on the mhs3.my homepage informing members of any changes to the Privacy Policy.
• Email notifications will be sent to all registered mhs3 members before any changes take effect.
• Update the "Last Updated" date shown at the top of this Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of the mhs3 platform following the effective date of any amendments to this Privacy Policy will be considered your acceptance of the revised terms.

If you have any questions, concerns, or complaints regarding the mhs3 Privacy Policy or how we handle your personal data, we strongly encourage you to reach out to us through any of the following channels:

• Email: [email protected] – for detailed privacy-related enquiries requiring a written response. We reply to all privacy-related emails within 24 to 48 business hours.
• Live Chat: Available directly on the mhs3 platform with a response time of under 2 minutes, 24 hours a day, 7 days a week without interruption.

When contacting us regarding a privacy matter, please clearly state your mhs3 account name, the details of your query or request, and any other relevant information that may help us process your request more quickly and accurately. mhs3 is committed to addressing all privacy-related matters with full transparency, respect and in a timely manner.