Cbr150 Privacy Policy – Personal Data Protection for Malaysian Members in Accordance with PDPA 2010

1 Introduction & Scope of CBR150's Privacy Policy

Cbr150 is an online entertainment platform operating in Malaysia, fully committed to protecting the privacy of all individuals who interact with our platform. This Privacy Policy applies to all users of the cbr150.my website, registered members, and any party that contacts or communicates with cbr150 through any available channel.

The primary purpose of CBR150's Privacy Policy is to provide you with full transparency on how your personal data is handled within our platform ecosystem. We believe that trust is the foundation of a strong relationship between CBR150 and each of our members, and transparency in data handling is a key element in building that trust. CBR150 never treats members' personal data as a business asset — instead, we regard it as a sacred responsibility that must be upheld with the utmost integrity.

This cbr150 Privacy Policy is drawn up in accordance with the provisions of Malaysia's Personal Data Protection Act 2010 (PDPA), the primary legislation governing the processing of personal data in the commercial sector in Malaysia. All data processing activities at cbr150 are designed and implemented to ensure full compliance with the data protection principles enshrined in PDPA 2010, including the general principle, the notice and choice principle, the disclosure principle, the security principle, the data integrity principle, the access principle, and the accountability principle.

2 Personal Information CBR150 Collects

CBR150 collects several categories of personal information from members and users of our platform. We only collect information that is genuinely necessary to provide the services you request or as required by applicable law. The principle of data minimisation is central to CBR150's approach to data collection.

Information You Provide Directly

During the CBR150 account registration process, we collect information that you voluntarily provide, including:

• Full name as stated in your official identification document (Malaysian Identity Card or Passport)
• An active and reachable email address
• A Malaysian mobile number registered in your name
• Date of birth for minimum age verification (18 years and above)
• Payment method details used for deposits and withdrawals, including bank account numbers or e-wallet account numbers (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay)
• A copy of your identification document when the KYC identity verification process is carried out

Information CBR150 Collects Automatically

When you access and use the CBR150 platform, our systems automatically collect several categories of technical data necessary for the smooth and secure operation of the platform:

• Your device's IP address and associated location information (country and region only)
• Device type, operating system, and web browser used
• Platform activity logs, including login times, games played, and transaction history
• Game session data including bets placed and game outcomes, for security and dispute resolution purposes
• Cookie data and similar tracking technologies — see Section 7 for more details.

3 How CBR150 Uses Your Personal Information

CBR150 uses the personal information collected solely for legitimate and necessary purposes. We never use your data for purposes unrelated to the provision of CBR150's services or legal compliance without your prior consent.

The primary purposes for which cbr150 uses your personal data are as follows:

• Account Management: Creating and maintaining your cbr150 account, processing registrations, and managing secure logins
• Service Provision: Enables you to play games available on CBR150, including Thai HiLo, Mega Hot, Dragon Dance, Live Sic Bo, Lucky Powerball, Wild Beach Party, and Wild Walker.
• Financial Transaction Processing: Processing deposits made via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, CIMB Clicks, and more; as well as processing withdrawals of your winnings
• Identity Verification (KYC): Verifying your identity to meet anti-money laundering (AML) legal requirements and to confirm the minimum age requirement
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, multi-account usage, and any security threats to the cbr150 platform
• Legal Compliance: Meeting the reporting and compliance obligations required under applicable Malaysian law
• Service Communications: Sending important notifications regarding your account, changes to our terms or policies, and security-related information.
• Customer Support: Resolving enquiries and complaints submitted to the cbr150 team
• Platform Improvement: Analysing aggregated usage patterns (without identifying individuals) to improve the cbr150 user experience
• Marketing Communications: Sending promotional information, bonus offers, and CBR150 news only if you have given your consent to receive them.

4 Legal Basis for Data Processing at CBR150

Every personal data processing activity at CBR150 has a sound legal basis in accordance with Malaysia's PDPA 2010. CBR150 processes your personal data on one or more of the following bases, depending on the context of the processing:

• Consent: You have provided clear and informed consent for your data to be processed for a specific purpose, particularly in relation to marketing communications
• Contract Performance: Data processing is necessary to fulfil the contract between you and CBR150, including the processing of financial transactions and the provision of gaming services.
• Legal Obligations: Data processing is necessary for CBR150 to fulfil its legal obligations, including KYC and AML requirements as prescribed under Malaysian law
• Legitimate Interest: Data processing is necessary for the legitimate interests of CBR150 or third parties in ensuring platform security, preventing fraud, and maintaining transaction records.

5 Sharing & Disclosure of Personal Data

Cbr150 does not sell, rent, or disclose members' personal data to third parties for their own marketing purposes. This is an absolute commitment that cannot be compromised. However, there are limited situations in which cbr150 may need to share your personal data with certain parties to ensure our services function properly or to meet legal requirements.

Parties that may be granted limited access to your personal data in permitted contexts:

• Payment Service Providers: E-wallet and banking providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX — only the information required to process your specific transaction
• Technology Service Providers: Companies that provide technical infrastructure for CBR150 (such as cloud services and security systems) — subject to strict data protection agreements.
• Regulatory Bodies & Law Enforcement: When required by Malaysian law or a valid court order.
• Independent Auditors & Inspectors: For compliance and game fairness verification purposes – limited to aggregated data that does not identify individuals.

In all instances of data sharing, cbr150 ensures that the receiving party is bound by confidentiality and data protection obligations equivalent to or stricter than the standards we uphold at cbr150. No personal data will be transferred outside Malaysia except with adequate safeguards in line with PDPA 2010.

6 Data Storage & CBR150's Security Measures

CBR150 makes serious investments in security infrastructure to protect our members' personal data from unauthorised access, alteration, disclosure, or destruction. For CBR150, data security is more than regulatory compliance — it is part of our identity as a responsible platform.

CBR150's Technical Security Measures

• 256-bit SSL encryption for all data transmitted between your device and CBR150's servers
• Encryption of sensitive data stored in the cbr150 database using the latest industry standards
• Strict role-based access controls — only CBR150 staff who require access to specific data are granted that permission
• Round-the-clock security monitoring, 24 hours a day, 7 days a week, with automated intrusion detection systems
• Regular independent security testing (penetration testing) to identify and address system vulnerabilities
• Frequent data backups and tested disaster recovery procedures

Data Retention Period

CBR150 retains your personal data for as long as your account remains active and for the period required after account closure to meet legal obligations. Generally, financial transaction records are kept for a minimum of 7 years in accordance with Malaysian legal requirements. Data that is no longer needed will be securely deleted or anonymised using methods that ensure it cannot be recovered.

7 Cookies & Tracking Technologies

The CBR150 platform uses cookies and similar technologies to enhance the user experience, ensure core platform functionality runs smoothly, and gather analytical data that helps us understand how users interact with the platform. Below are the types of cookies used by CBR150:

Cookies marked as "Optional" can be managed through your web browser settings. However, disabling "Required" cookies may affect the core functionality of the CBR150 platform and prevent you from logging in or using our services fully. CBR150 does not use any third-party cookies for third-party advertising purposes.

8 Your Rights Regarding Personal Data

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by CBR150. CBR150 is committed to respecting and facilitating the exercise of all these rights without unnecessary obstacles.

Your rights that CBR150 fully recognises and supports include:

• Right of Access: You have the right to request and receive a copy of your personal data held by cbr150 in a readable format
• Right to Rectification: You have the right to request the correction of any inaccurate, incomplete, or outdated personal data that cbr150 holds about you
• Right to Withdraw Consent: You have the right to withdraw any consent previously given for specific data processing at any time, without affecting the validity of processing carried out prior to the withdrawal
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes
• Right to Restrict Processing: Under certain circumstances provided for by PDPA 2010, you have the right to restrict the way CBR150 processes your data.

To exercise any of the rights above, please contact cbr150 via email [email protected] with the subject line "Personal Data Rights Request". CBR150 will respond to your request within 21 working days from the date of receipt of a complete request. No fee is charged for reasonable requests. CBR150 reserves the right to decline requests that lack a sound legal basis or that may infringe upon the rights and freedoms of others.

9 Children's Privacy & Protection of Young Persons

CBR150 takes the protection of young persons very seriously. The CBR150 platform is strictly intended for individuals aged 18 and above. CBR150 does not knowingly collect or process personal data of individuals under the age of 18. Should we discover that we have collected data from someone under 18, we will take immediate steps to delete that data and close the account in question.

Parents or guardians who believe their child or ward under the age of 18 may have registered for or used CBR150 are advised to contact us immediately at [email protected]. cbr150 will process such reports with the highest priority and take appropriate action as swiftly as possible.

10 Amendments to CBR150's Privacy Policy

Cbr150 reserves the right to amend, update, or replace this Privacy Policy from time to time to reflect changes in our privacy practices, applicable legislation, or the technologies we use. The latest version of the cbr150 Privacy Policy will always be available on this page, with the date of the most recent update clearly stated at the top of the document.

For amendments we consider material – meaning those that could significantly affect your privacy rights – cbr150 will endeavour to provide reasonable notice via email or in-platform notification before the changes take effect. Your continued use of the cbr150 platform after the effective date of any amendment to this Privacy Policy will be deemed as your acceptance of those changes. We therefore encourage you to review this Privacy Policy page periodically.

11 Contact cbr150 Regarding Privacy

If you have any questions, concerns, or complaints regarding CBR150's Privacy Policy or how we handle your personal data, please do not hesitate to get in touch. CBR150's privacy and data protection team is ready to assist you and will respond to all enquiries with full professionalism and care.

Cbr150 is committed to responding to all privacy-related enquiries within 7 business days of receipt. For more complex requests, such as data access or data correction requests, the response period may be up to 21 business days. We will keep you informed of the status of your request throughout the entire process.