Rans303 Privacy Policy – Malaysian User Data Protection

rans303 is an online entertainment and betting platform operating under the domain https://rans303.click. We are committed to protecting the privacy and data security of all individuals who use our platform — including website visitors, registered members, and former members whose accounts have been closed.

This Privacy Policy is designed in accordance with the requirements of Personal Data Protection Act 2010 (PDPA) Malaysia and international data security best practices. It explains the types of data we collect, why we collect it, who may access it, how long we retain it, and how you can manage your own data.

This policy applies to all services offered by rans303 — covering the web platform, all game categories (slots, live casino, Sports Betting, e-sports, lottery), payment systems, and customer support channels. In the event of any conflict between this Privacy Policy and a product-specific policy, the product-specific policy shall apply to the relevant aspect.

rans303 only collects data that is strictly necessary to provide the platform's services to you. We do not collect excessive data that is irrelevant to our operational needs. The types of data we may collect are grouped into the following categories:

We does not collect sensitive data such as medical information, political views, religious beliefs or biometric information, except in specific situations required by law and with your explicit consent. You will be notified separately of any such collection of sensitive data.

rans303 uses collected personal data solely for legitimate and specific purposes. We do not use your data beyond the scope outlined below without obtaining your additional consent:

• Account Management: Creating, verifying, and maintaining your rans303 account in a secure and fully functional state.
• Transaction Processing: Processes deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX, and handles withdrawals of winnings to your account.
• Identity Verification (KYC): Meeting Know Your Customer (KYC) requirements to prevent fraud, money laundering and access by underage individuals.
• Customer Support: Enabling our support team rans303 resolve your enquiries, complaints, and technical issues promptly and effectively.
• Platform Security: Detecting and preventing fraudulent activity, multi-account usage, and other security threats that could compromise the integrity of the platform.
• Service Improvements: Analysing usage patterns in aggregate (not at an individual level) to improve platform performance, user interface and rans303's game offerings.
• Service Communications: Sends important account-related notifications, including transaction confirmations, security alerts, and policy updates that affect you.
• Legal Compliance: Fulfil legal and regulatory obligations applicable to the operation rans303 in Malaysia.

Should rans303 intends to use your data for purposes not stated above — such as direct marketing or sharing with new partners — we will obtain your explicit consent beforehand.

rans303 does not sell, rent, or trade members' personal data to third parties for marketing or commercial purposes. This is an unconditional commitment we uphold without exception. However, in the course of legitimate platform operations, data may be shared with the following categories of third parties — and only for the stated purposes:

• Payment Service Providers: Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay and FPX processors require basic transaction information to process your deposits and withdrawals. Data is shared solely for transaction processing purposes.
• Game Providers: Companies such as Pragmatic Play, PG Soft, Evolution Gaming, and JILI Games may receive the minimum game session data required to operate games within the rans303 platform. These providers are bound by strict data security agreements.
• Identity Verification Services: Authorised third-party KYC providers may process your identity documents to assist with account verification. All KYC providers used by rans303 comply with international data security standards.
• Legal Authorities: rans303 will disclose required data to Malaysian law enforcement agencies or regulatory bodies where mandated by a valid court order or an official request related to a criminal investigation.

rans303 implements comprehensive technical and organisational security measures to protect members' personal data from unauthorised access, disclosure, alteration or destruction. rans303's security infrastructure is built on a security-first approach, encompassing multiple layers of protection.

Key security measures implemented by rans303 including:

• Transmission Encryption: All communications between your browser and rans303's servers use TLS 1.3 with AES-256-GCM encryption.
• Storage Encryption: Sensitive data such as financial information and KYC documents is encrypted at rest within the rans303 database.
• Two-Factor Authentication: Two-factor authentication (2FA) is available for all rans303 accounts and is strongly encouraged.
• 24/7 Monitoring: An intrusion detection system (IDS) continuously monitors rans303 platform activity to identify threats in real time.
• Data Isolation: User data is stored in an isolated environment with strict role-based access controls (RBAC).
• Regular Security Audits: Penetration testing and security audits are conducted regularly by independent security firms.
• Secure Backups: Data backups are performed on a regular basis and stored in secure locations with full encryption to ensure continuity of service.

Although rans303 implements all reasonable security measures, no system can guarantee absolute security. You also play an important role in protecting your account — use a strong password, enable 2FA, and never share your login credentials with anyone.

rans303 only retains personal data for as long as necessary to fulfil the stated purpose of collection, or as required by applicable Malaysian law. When data is no longer needed, it is securely deleted or anonymised.

Rans303's data retention guidelines are as follows:

• Active Account Data: Retained for the duration of the active account and up to 2 years after account closure upon member request.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's financial reporting and anti-money laundering legal requirements.
• KYC Documents: Retained for the duration of account operation and up to 5 years after account closure for regulatory compliance purposes.
• Activity & Security Logs: Retained for 12 months for fraud detection and security incident investigation purposes.
• Support Communication Records: Retained for 2 years for service quality and complaints reference purposes.
• Non-Essential Cookie Data: Deleted according to the cookie's set expiry period — typically ranging from session-only to 12 months, depending on the cookie type.

Once the specified retention period has elapsed, data is securely deleted using methods that ensure it cannot be recovered. You may contact rans303 at any time to enquire about the specific data retention periods that apply to you.

As a member rans303 and data subjects under Malaysia's PDPA, you have important rights regarding your personal data. rans303 is committed to respecting and facilitating the exercise of these rights:

To exercise any of the rights above, submit a written request by email to privacy@rans303.click or via live chat within the platform rans303. Please include your full name and account number to help us process your request faster. We will respond within 14 working days.

rans303 uses cookies and similar tracking technologies to keep the platform running properly, enhance your experience, and gather aggregated analytics that help us understand how the platform is used. The following are the categories of cookies in use:

You can manage your cookie preferences through your web browser settings at any time. Disabling certain cookies may affect the functionality of some parts of the platform rans303. Essential cookies cannot be disabled without affecting core platform functionality, such as the ability to log in.

rans303 does not use third-party cookies for advertising or cross-site tracking purposes. All cookies used are strictly for the operational needs and improvement of the rans303 platform itself.

Member financial data rans303 receive a higher level of protection compared to other general data, in line with the sensitivity of such information. This covers your payment method details — whether that's Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or an FPX account via Maybank2u and CIMB Clicks.

The core principles governing the handling of financial data at rans303:

• rans303 does not store full credit or debit card numbers. Where such methods are used, processing is carried out directly by authorised payment processors, and rans303 receives only a reference token that cannot be reused for new transactions.
• The e-wallet or bank account number linked to your rans303 account is stored in encrypted form and used solely to process transactions you initiate.
• Complete transaction records — including amounts, dates, methods, and statuses — are retained for the period required under Malaysia's financial reporting regulations.
• All withdrawal requests require verification via email or OTP to your registered phone number before processing, as an added layer of security.

If you suspect any unauthorised transactions on your account rans303 contact our support team immediately via live chat. Your account can be frozen right away while the investigation is underway.

rans303 is a platform designed and intended exclusively for adults aged 21 and above. We do not knowingly collect or process personal data from individuals under the age of 21.

Measures implemented by rans303 to prevent access by minors:

• Mandatory age verification during account registration, including date of birth confirmation.
• A KYC process that requires verification of an official Malaysian identity document (MyKad) to confirm age.
• Proactive monitoring to detect usage patterns that may indicate access by minors.

Should rans303 finds that personal data has been collected from a minor without our knowledge, we will take immediate steps to delete that data and close the associated account. If you believe someone under the age of 21 may be using this platform, please contact us immediately at privacy@rans303.click.

rans303 reserves the right to update or amend this Privacy Policy at any time to reflect changes in practices, technology, or applicable legal requirements. The date of the most recent update is always displayed at the top of this page.

For significant amendments that affect how we use your data, rans303 will notify you via email to your registered address or through an in-platform notification at least 14 days before the changes take effect. Your continued use of the rans303 platform after the effective date of any amendment constitutes your acceptance of the revised policy.

For any enquiries, concerns, or requests relating to this Privacy Policy or the handling of your personal data by rans303, please contact our Data Protection Officer (DPO) through the following channels:

• Privacy Email: privacy@rans303.click — for official requests relating to data rights, privacy complaints or PDPA-related inquiries.
• Support Email: support@rans303.click — for general account and privacy enquiries.
• Live Chat: Available 24/7 within the platform rans303 — for urgent inquiries.

We are committed to responding to all privacy-related requests within 14 working days. For complex requests that require further review, we will inform you of any additional time needed in our initial response.

If you are not satisfied with rans303's response to your privacy concern, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP) as provided under the Personal Data Protection Act 2010.