Privacy Policy – How a321 Protects Your Personal Data

A321 values the privacy of every member who uses our platform. This Privacy Policy explains in detail how a321 collects, uses, stores, and protects your personal data when you register and use our online casino, lottery, baccarat, Sports Betting, and other digital services.

This policy applies to all ways in which you interact with a321 — including through the a321.site website, the a321 mobile app for Android and iOS, and any official a321 communication channels such as support email and in-platform live chat. By registering for or continuing to use a321's services, you agree to the terms set out in this Privacy Policy.

A321 operates in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. We are committed to ensuring that the personal data you provide is processed in a transparent, fair, and secure manner. If you have any questions or concerns about how a321 handles your personal data, please reach out to us at support@a321.site at any time.

A321 collects personal data necessary to provide our members with a safe, accurate, and high-quality service. We only collect data that is genuinely required for platform operations and do not collect excessive or irrelevant information.

A321 uses collected personal data solely for legitimate purposes necessary to operate our digital entertainment platform. Every use of data has a clear justification, and we do not use your data for unrelated purposes.

• Identity verification and account registration: Your name, phone number, and email address are used to create and verify your a321 account and to ensure the security of your login.
• Financial transaction processing: Your e-wallet and bank account details are used solely to process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, and to facilitate withdrawal of winnings to your account.
• Legal compliance and fraud prevention: a321 uses transactional and identity data to fulfil legal obligations, including anti-money laundering (AML) requirements, and to detect and prevent fraud and platform abuse.
• Personalise your user experience: Your gameplay activity data helps a321 tailor game recommendations, display relevant odds (such as badminton and Malaysia Super League football for members who frequently bet on those sports), and offer promotions that match your interests.
• Customer support: Communication records and account data are used by a321's support team to resolve issues, respond to enquiries, and handle complaints efficiently in Bahasa Malaysia.
• Marketing communications: With your consent, a321 uses your email address and phone number to send promotional notifications, new bonuses, and platform updates. You may opt out of marketing communications at any time via your account settings.
• Responsible Gaming: Gameplay activity data helps a321 identify betting patterns that may be of concern and offer appropriate self-control tools to members who need them.
• Platform improvements: Technical data and aggregated activity data (without personal identifiers) are used to improve a321's platform performance, identify technical issues, and plan new features.

A321 does not sell, rent, or disclose your personal data to third parties for their own marketing or commercial purposes. This is a non-negotiable commitment and forms the foundation of the trust we build with a321 members.

However, there are limited situations where a321 may need to share certain data with carefully selected third parties, and only to the extent required for operational purposes:

• Payment service providers: Payment gateways supporting Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX transactions receive the transaction information required to process your deposits and withdrawals. All such providers are bound by strict confidentiality agreements.
• Game software providers: Live casino and slots game providers integrated with the a321 platform may receive anonymised game identifiers for statistical purposes. They do not receive your personally identifiable information.
• Legal authorities: a321 may be required to disclose your personal data to legitimate Malaysian authorities when mandated by law, court order, or directive from a relevant regulatory body. In such cases, a321 will notify you unless prohibited from doing so by law.
• Security and anti-fraud services: a321 may share limited technical details (such as IP patterns) with approved cybersecurity service providers for the purpose of detecting and preventing fraud, money laundering, and unauthorized access.

A321 invests seriously in data security infrastructure to ensure our members' personal information is always protected. Data security is not an added feature at a321 — it is the foundation of the trust our members place in us.

• 256-bit SSL Encryption: All communication between your device and a321's servers is protected by 256-bit SSL encryption — the same standard used by Malaysia's leading banks, including Maybank and CIMB. This ensures that your data cannot be intercepted while in transit.
• Two-factor authentication (2FA): a321 offers and encourages the use of two-factor authentication for all accounts. With 2FA enabled, logging in requires an additional verification code sent to your phone number, on top of your password.
• Secure password storage: Your a321 account password is never stored in plain text. We use strong cryptographic hashing algorithms with a unique salt for each password, meaning your actual password cannot be recovered — not even by a321's own technical team.
• 24/7 security monitoring: a321's security systems automatically monitor all account activity around the clock to detect unauthorized access attempts, unusual activity, and potential security threats. Any anomalies are identified and addressed in real time.
• Internal access control: Access to member personal data within a321 is restricted to staff who genuinely require it for their duties. All access is logged and periodically audited by our internal security team.
• Secure server infrastructure: a321 data is stored in data centres that meet international security standards, with physical access controls, system redundancy, and comprehensive disaster recovery protocols.

While a321 takes all reasonable steps to protect your data, no system is 100% immune to cyber threats. We therefore also encourage you to practise good digital security hygiene — including using a strong, unique password for your a321 account and never sharing it with anyone.

A321 uses cookies and similar tracking technologies to enhance the user experience, ensure the platform functions correctly, and analyze usage patterns for continuous improvement. This section explains the types of cookies we use and how you can manage them.

• Essential cookies: These cookies are required for the a321 platform to function properly. They include login session cookies, security cookies, and language preference cookies. Without these cookies, the a321 platform will not function as intended and cannot be disabled.
• Functional cookies: These cookies remember your preferences and settings — such as your preferred game types, display ratios, and language selection — to provide a more comfortable experience each time you log in to a321.
• Analytics cookies: a321 uses aggregated analytics data (with no personal identifiers) to understand how members use our platform — which pages are most popular, time spent in each section, and navigation patterns. This information helps us improve the a321 platform.
• Security cookies: Security-specific cookies help a321 identify suspicious sessions, protect your account from CSRF (Cross-Site Request Forgery) attacks, and detect unauthorized login attempts.

You can manage your cookie settings through your web browser. Most browsers allow you to view, manage, and delete stored cookies. However, disabling essential cookies may affect the functionality of the a321 platform and could prevent you from logging in or using certain features.

A321 does not retain your personal data for longer than is necessary for the purpose for which it was collected, or longer than required under applicable Malaysian law. The principle of minimum retention is a core part of our privacy commitment.

• Active account data: Personal data of active members is retained for as long as your account remains active, and for the required period following account closure to meet relevant legal obligations.
• Financial transaction records: Records of deposits, withdrawals, and other financial transactions are retained for a minimum of 7 years from the transaction date, in line with applicable Malaysian financial and tax legal requirements.
• Support communication records: Support chat records and emails are retained for 2 years from the date of communication for reference, quality assurance, and the resolution of any disputes that may arise.
• Technical log data: Technical logs and cookie data are retained for 90 days before being automatically deleted, unless required for an ongoing security investigation.
• After account closure: When your account is closed at your own request, a321 will delete or anonymize your personal data within 30 days, except for data that must be retained under applicable law.

As an a321 member and as an individual protected under Malaysia's Personal Data Protection Act 2010 (PDPA), you have clearly defined rights regarding your personal data. a321 respects and facilitates the exercise of these rights.

To exercise any of the rights above, send a written request to support@a321.site with the subject line "Personal Data Request", along with your full name and a321 account number. a321 will process your request within 14 business days from the date of receipt. For complex requests, this period may be extended by up to 30 days, with advance notice provided to you.

The a321 platform is intended exclusively for individuals aged 18 and above. a321 does not knowingly collect, store, or process personal data from individuals under the age of 18.

If you are a parent or guardian and believe that your child under the age of 18 has registered an account with a321 or provided us with their personal data, please contact us immediately at support@a321.site. a321 will take prompt action to investigate, close the account in question, and delete all associated data as quickly as possible.

The a321 platform may contain links or references to third-party websites or services in certain contexts. a321's Privacy Policy applies solely to the a321 platform itself and does not cover any third-party websites you may access via links within our platform.

A321 is not responsible for the privacy practices of third-party websites or services. We encourage you to read the privacy policy of any third-party website you visit before providing them with your personal data. Your use of third-party websites is entirely at your own risk.

A321 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, relevant Malaysian legislation, or improvements in how we handle personal data. The latest version of the Privacy Policy is always available on this page, with the most recent update date clearly stated.

For material amendments, a321 will send a notification to your registered email address at least 14 days before the changes take effect. Continued use of the a321 platform after the effective date of any amendment will be considered your acceptance of the updated Privacy Policy.

• The "Updated" date at the top of this page indicates the version of the Privacy Policy currently in effect.
• If you do not agree with any changes to the Privacy Policy, you have the right to close your a321 account and request deletion of your data before the amendments take effect.

If you have any questions, concerns, or complaints regarding how a321 handles your personal data, or if you wish to exercise any of your personal data rights, the a321 privacy team is ready to assist through the following channels:

• Privacy email: support@a321.site – Send an email with the subject line "Privacy Enquiry" or "Personal Data Request" for a faster and more accurate response. We aim to reply within 24 business hours.
• Live chat: Available 24 hours a day, 7 days a week on the a321 platform or our mobile app. Suitable for straightforward, non-sensitive privacy enquiries. For matters involving data transfer or deletion, we recommend communicating via email for a proper written record.
• For unresolved complaints: If you are unsatisfied with a321's response to your privacy complaint after our internal process, you have the right to escalate the matter to the Department of Personal Data Protection Malaysia under the Ministry of Communications.