Privacy Policy pl4yace — Malaysia User Data Protection

This Privacy Policy is published by pl4yace Operations Ltd ("pl4yace", "we") and applies to all users of the pl4yace platform, including the official website at pl4yace.org and our mobile app. This document outlines our privacy practices and how we handle your personal data as a member or visitor of the platform.

We understand that privacy is deeply personal. You trust us with your information every time you register, make a deposit, or simply browse our platform. We take that trust seriously — and this Privacy Policy is how we put that commitment in writing.

This policy is formulated in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection. In the event of any conflict between a translated version and the original Bahasa Malaysia version, the Bahasa Malaysia version shall prevail.

Pl4yace collects your personal data through several means — directly when you complete a registration form, automatically as you use the platform, and via trusted third parties for identity verification purposes.

We only collect data that is strictly necessary for the stated purposes. We do not collect sensitive data such as health information, political views, or religious beliefs unless required by law.

Every piece of data we collect has a clear purpose. pl4yace uses your personal data for the following:

• Account Management: Process registrations, verify identity via KYC, manage secure logins, and maintain your account.
• Financial Transactions: Process deposits, manage withdrawals, verify payment methods, and detect any suspicious financial activity.
• Platform Services: Provide access to all games, personalise your experience, and keep the platform running smoothly at all times.
• Communications: Send important account notices, platform updates, relevant promotional offers, and customer support responses.
• Security & Fraud Prevention: Detect and prevent unauthorised access, identity fraud, and money laundering activity.
• Legal Compliance: Fulfil applicable legal and regulatory obligations under Malaysian law.
• Platform Improvements: Analyse usage patterns in an aggregated, anonymised manner to improve our services and user experience.

We do not use your data to make automated decisions that significantly affect you without human review. Any important decisions regarding your account will involve review by qualified pl4yace staff.

Pl4yace does not sell your personal data. However, there are certain situations where we need to share your data with trusted third parties to keep the platform running properly:

• Payment Providers: To process deposits and withdrawals via FPX, DuitNow, local banks and eWallets — the required financial data is shared securely with licensed payment processors.
• KYC Providers: Identity information is shared with licensed identity verification partners to complete the KYC process as required by law.
• Game Providers: Minimum usage data required for game functionality is shared with third-party game providers integrated with our platform.
• Legal Authorities: When required by court order, law enforcement investigation, or valid regulatory obligation.

In the event of a takeover, merger or sale of company assets, user data may be transferred as part of the business assets. In such situations, you will be notified in advance and given the option to close your account before the transfer takes place.

Pl4yace invests seriously in security infrastructure to protect your data. The technical and organisational security measures we implement include:

• 256-bit SSL/TLS encryption for all data transmissions
• Encryption of personal data at rest
• Role-based access control — staff can only access data relevant to their responsibilities
• Two-factor authentication for all staff access to internal systems
• Periodic independent security audits by third-party firms
• Round-the-clock suspicious activity monitoring
• A comprehensive data incident response plan
• Mandatory data security awareness training for all staff

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure against cyber threats. In the event of a data breach affecting your information, we will notify you and the relevant authorities within the timeframe required by law.

Pl4yace retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following are general data retention guidelines:

• Active Account Data: Retained for the duration your account is active and for 7 years after account closure for legal compliance purposes.
• Transaction Records: Retained for 7 years in accordance with Malaysian financial and tax legal requirements.
• Communication Logs: Customer support chat records are retained for 2 years for quality assurance and complaint resolution purposes.
• Cookie Data: Session cookies are deleted when you close your browser; optional cookies are stored for 12 months.
• Marketing Data: Retained until you withdraw your consent or close your account.

Once the designated retention period has elapsed, your data will be securely deleted or anonymised in accordance with our certified data deletion procedures.

As a pl4yace user and data subject under Malaysia's PDPA, you have several important rights regarding your personal data:

To exercise any of the above rights, contact our privacy team via in-platform live chat or email [email protected]. We will respond within 30 days of receiving your request.

Pl4yace uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session security, and cart memory. These cookies cannot be disabled.
• Preference Cookies: Save your preferences such as language, theme, and platform settings for a more convenient experience.
• Analytics Cookies: Helps us understand how users interact with the platform through aggregated, anonymised data.
• Security Cookies: Used to detect suspicious activity and protect your account from unauthorized access.

You can manage and delete cookies through your web browser settings. However, disabling essential cookies may affect certain features of the pl4yace platform.

The pl4yace platform is exclusively for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we discover that personal data belonging to someone under the age of 18 has been collected unintentionally, we will take immediate steps to delete that data and close the relevant account.

Pl4yace reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements or business operations. Any material amendments will be communicated to you through:

• Email notice to all registered members at least 14 days before amendments take effect
• In-platform pop-up notification on the first login after an amendment
• Update the "Last Updated" date at the top of this document

Continued use of the pl4yace platform after amendments take effect constitutes your acceptance of the updated policy. If you do not agree with the amendments, you may close your account before they take effect by contacting our support team.

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer through the following channels:

We are committed to addressing every privacy enquiry seriously and within a reasonable timeframe. If you are not satisfied with our response, you have the right to file a complaint with Malaysia's Department of Personal Data Protection (JPDP) under the provisions of PDPA 2010.