Privacy Policy liga365 –
Malaysia User Personal Data Protection

1. Introduction and Scope of Privacy Policy

This Privacy Policy explains how liga365 ("we", "the platform") collects, uses, stores, discloses, and protects your personal information when you register and use our services. It applies to all users who access the liga365 platform through our official website or mobile app.

By registering a liga365 account or continuing to use our platform after this policy is updated, you consent to the data collection and usage practices described in this document. This consent is voluntary, and you have the right to withdraw it at any time — though this may affect our ability to provide certain services to you.

2. Types of Personal Data We Collect

Liga365 collects your personal information through several means — directly when you register or use the platform, and automatically through tracking technologies built into the platform.

Data you provide directly:

• Full name, MyKad or passport number, date of birth and gender.
• Email address, mobile number, and residential address.
• Bank account or eWallet information for deposit and withdrawal purposes.
• Identity verification documents uploaded for the KYC process.
• Additional information you provide when contacting customer support.

Automatically collected data:

• IP address, device type, operating system, and browser version.
• In-platform activity data including games played, bets placed, and session duration.
• General location data (state/region level, not precise GPS location).
• Access logs and technical diagnostic information for troubleshooting purposes.

3. How We Use Your Data

Liga365 uses collected personal data solely for legitimate, stated purposes. We do not use your data for unrelated purposes without first obtaining fresh consent from you.

Permitted purposes for data use:

• Service Provision: Managing your account, processing deposits and withdrawals, and providing access to liga365 games.
• Identity Verification: Carrying out mandatory KYC processes to ensure financial security and prevent fraud.
• Service communications: Sending important notifications about your account, transactions, service changes and security updates.
• Fraud prevention: Monitoring suspicious activity and protecting your account from unauthorised use.
• Platform Improvements: Analysing usage patterns on an aggregate (not individual) basis to improve the user experience.
• Responsible Gaming: Detecting gaming patterns that may indicate a need for intervention to protect users.
• Legal compliance: Meeting reporting and record-keeping obligations required by applicable law.

4. Data Storage and Security Measures

Liga365 continuously invests in security infrastructure to ensure your personal data is always protected against both external and internal threats.

Technical security measures we employ:

• 256-bit SSL/TLS encryption for all communications between your device and liga365 servers.
• Static data encryption for sensitive information stored in our database.
• Role-based access control — only authorised staff may access sensitive user data.
• Regular security audits by independent third parties to identify and address vulnerabilities.
• An intrusion detection system that monitors suspicious activity in real time.
• Two-factor authentication for access to liga365 internal systems.

5. Data Sharing with Third Parties

Liga365 does not sell your personal data to any third party. However, there are limited situations where we need to share certain information with other parties to enable us to provide services to you.

Third parties that may receive limited data from you:

• Payment processors and financial institutions: Information required to process your MYR deposits and withdrawals — such as bank details for DuitNow transfers or eWallet account information.
• Technology Service Providers: Vendors who assist us in operating the platform — subject to strict data protection agreements.
• Regulatory bodies and law enforcement: When required by a valid court order or official investigation.
• Identity Verification Service Providers: For KYC purposes to verify your identity.

6. Cookies and Tracking Technologies

The liga365 platform uses cookies and similar tracking technologies to ensure the platform functions properly and to deliver a better experience for you.

Types of cookies we use:

• Essential cookies: Required for the platform to function — such as maintaining your login session. Cannot be disabled.
• Preference cookies: Saving your settings and preferences such as language and display theme.
• Analytical cookies: Collecting aggregate data on how users interact with the platform to help us improve it.
• Security cookies: Helping us detect and prevent fraudulent activity and unauthorised access.

Liga365 does not use third-party cookies for advertising purposes or to track your activity on other websites outside our platform.

7. KYC Process and Identity Document Handling

The KYC (Know Your Customer) process is a non-negotiable requirement at liga365 before your first withdrawal is permitted. This is not merely about fulfilling licensing requirements — it is your primary protection against identity theft and unauthorized use of your account.

Documents you upload for KYC are handled with the highest level of security protection:

• All documents are stored in a fully encrypted, protected system.
• Access to KYC documents is restricted to liga365's specially trained verification team.
• Documents are not shared with any third party unless required by law enforcement via a valid court order.
• Upon successful verification, a copy of the documents is retained for a prescribed period in accordance with compliance requirements.

8. Your Rights Over Personal Data

As a registered liga365 user, you have the following rights over the personal data we hold about you:

9. Children's Data Protection

Liga365 services are exclusively for individuals aged 18 and above. Our platform is not designed for minors, and we do not knowingly collect personal data from individuals under the age of 18.

Should we discover that we have unknowingly collected data from a minor, we will take immediate steps to delete that data and close the account in question. Parents or guardians who discover that their underage child has registered an account at liga365 are requested to contact us immediately.

10. Data Retention Period

Liga365 retains your personal data for as long as necessary to fulfil the purposes stated in this policy, or for as long as required by applicable laws and regulations.

• Active account data: Retained for the duration your account is active and for a reasonable period after account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with standard financial compliance requirements.
• KYC Documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Support communication logs: Retained for 3 years for reference and dispute resolution purposes.
• Technical data and logs: Retained for a shorter period based on technical operational requirements.

Once the prescribed retention period expires, data will be securely deleted or anonymized in accordance with liga365's standard procedures.

11. Amendments to the Privacy Policy

Liga365 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or technological developments. Any changes will be published on the liga365 website and app.

For material changes — those that significantly affect how we use your data — we will provide clearer notice, including via email to the address registered on your account or through an in-platform notification at least 14 days before the changes take effect.

12. How to Contact Us Regarding Privacy

For any inquiries, concerns, or requests regarding your personal data at liga365, you may reach us through the following channels:

• Live Chat: Available on the liga365 platform — the fastest and easiest way to get privacy-related assistance.
• Email: Contact our privacy team at [email protected] — we aim to respond within 3 business days.

When submitting a privacy rights request, please provide sufficient information for us to verify your identity and ensure we only disclose or modify data to the rightful individual.