279rc Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how 279rc ("the Platform", "we", "us", "our") collects, processes, stores, shares, and protects personal data provided by or gathered about individuals ("User", "Player", "you", "your") who visit, register on, or otherwise interact with the 279rc website and any associated subdomains (collectively, "the Platform").

279rc is committed to handling personal data responsibly and in accordance with applicable data protection principles. This Policy applies to all Malaysian players and visitors, including those accessing the Platform from Kuala Lumpur, Selangor, Penang, Johor Bahru, Shah Alam, Petaling Jaya, and all other locations within Malaysia.

By accessing the Platform or creating an Account, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform.

This Policy should be read together with our Terms & Conditions and our Responsible Gambling Policy, each of which is incorporated by reference.

2. Definitions

For the purposes of this Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information that identifies or can reasonably be used to identify a natural person, directly or indirectly, including name, identification number, contact details, financial information, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data — in this case, 279rc.
• "Data Processor" means any entity that processes Personal Data on behalf of 279rc under a written agreement.
• "KYC Data" means identity and address verification documents collected pursuant to Know Your Customer obligations, including MyKad (NRIC), Passport, Driver's License, and proof of address.
• "Cookies" means small data files stored on a User's device by the Platform for the purposes of session management, analytics, and personalisation.
• "MYR" means Malaysian Ringgit, the currency used for all Account transactions on 279rc.

3. Personal Data We Collect

279rc collects the following categories of Personal Data in the course of providing its services to Malaysian players:

3.1 Registration Data

• Full legal name as it appears on a government-issued identity document;
• Date of birth (to verify the 21+ age requirement);
• Malaysian mobile number or email address;
• Preferred username and encrypted account password;
• Residential address, including city (e.g., Kuala Lumpur, Penang, Johor Bahru, Shah Alam).

3.2 Identity Verification (KYC) Data

• Scanned or photographed copy of MyKad (NRIC), Passport, or Malaysian Driver's License;
• Proof of residential address (bank statement or utility bill issued within 3 months);
• Selfie photograph holding identification document, where requested;
• Source-of-funds declaration, where required under applicable compliance procedures.

3.3 Financial and Transaction Data

• Malaysian bank account number and registered bank name (Maybank, CIMB, Public Bank, Hong Leong, or other supported institutions);
• E-wallet identifiers for DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay;
• Deposit and withdrawal history, transaction amounts in MYR, and timestamps;
• Payment method type used per transaction.

3.4 Gaming and Behavioural Data

• Game play history, wager amounts, session duration, and bet outcomes;
• Sports betting market selections, including Liga Super Malaysia, EPL, UFC, and other markets;
• Bonus and promotion redemption records;
• Self-imposed responsible gambling limits and self-exclusion requests.

3.5 Technical and Device Data

• IP address and approximate geographic location at time of access;
• Device type, operating system, and browser version;
• Session identifiers and authentication tokens;
• Platform interaction logs, including pages visited and features used.

3.6 Communications Data

• Content of support queries, live chat transcripts, and email correspondence submitted to 279rc;
• Survey responses, feedback submissions, and promotional opt-in preferences.

4. How Personal Data Is Collected

279rc collects Personal Data through the following means:

• Directly from you — when you register an Account, complete KYC verification, make a deposit or withdrawal, place a wager, contact support, or respond to a survey;
• Automatically — through cookies, server logs, and tracking technologies when you navigate the Platform;
• From payment providers — transaction confirmation data passed from DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and connected Malaysian banking institutions;
• From identity verification services — third-party KYC providers that assist in validating identity documents against official registers;
• From fraud prevention partners — device fingerprinting and risk-scoring data used to detect suspicious account activity.

5. Data Processing & Use

279rc processes Personal Data for the following purposes:

Purpose	Data Categories Used
Account creation and management	Registration Data, KYC Data
Identity verification and age confirmation (21+)	KYC Data, Registration Data
Processing MYR deposits and withdrawals	Financial Data, KYC Data
Delivering gaming and sports betting services	Gaming Data, Technical Data
Fraud prevention and platform security	Technical Data, Financial Data, Gaming Data
Anti-money laundering (AML) compliance	KYC Data, Financial Data
Responsible gambling monitoring and intervention	Gaming Data, Communications Data
Customer support and dispute resolution	Communications Data, Account Data
Marketing communications (where consent given)	Registration Data, Gaming Data
Platform analytics and service improvement	Technical Data, Gaming Data

6. Legal Basis for Processing

279rc processes Personal Data on the following legal grounds:

• Contractual necessity: Processing required to perform the service contract with you — including account management, payment processing, and delivery of gaming services;
• Legal obligation: Processing required to comply with applicable laws including anti-money laundering regulations, age verification requirements, and regulatory reporting obligations;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gambling monitoring, and service improvement, where such interests are not overridden by your rights;
• Consent: Processing for direct marketing communications, non-essential cookies, and personalisation features, where you have provided explicit, freely given consent that may be withdrawn at any time.

7. Data Sharing and Disclosure

279rc does not sell Personal Data to third parties under any circumstances. Personal Data may be shared with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment processors and Malaysian banking partners — including DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, and GrabPay — for the purpose of processing MYR deposits and withdrawals;
• Identity verification (KYC) service providers — contracted third parties that assist in validating identity documents and performing age and address checks;
• Fraud prevention and security vendors — partners providing device intelligence, IP analysis, and risk-scoring services to protect the integrity of the Platform;
• Game content providers — studios supplying casino game software or sports data feeds, who may receive limited technical and gameplay data necessary to deliver their products;
• Regulatory and law enforcement authorities — where disclosure is required by applicable law, court order, or regulatory instruction;
• Professional advisers — legal counsel, auditors, and accountants bound by professional confidentiality obligations.

All third-party processors are contractually bound to process Personal Data only for specified purposes, in accordance with 279rc's instructions, and to maintain appropriate security standards.

8. Cookies and Tracking Technologies

279rc uses cookies and similar tracking technologies to operate the Platform, maintain session continuity, prevent fraud, and analyse usage patterns. The categories of cookies used are:

• Strictly necessary cookies: Essential for the Platform to function. These cannot be disabled and do not require consent. They include session authentication tokens and security cookies.
• Functional cookies: Remember your preferences such as language settings, display options, and last-visited game categories. These persist across sessions to improve your experience.
• Analytics cookies: Collect anonymised or pseudonymised data about how visitors use the Platform, including which pages are visited most frequently and where users encounter errors. This data is used to improve the Platform.
• Marketing cookies: Where you have consented, these cookies enable personalised promotional content and help measure the effectiveness of marketing activities.

You may manage non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may affect Platform functionality. Consent for marketing and analytics cookies may be withdrawn at any time without affecting prior processing.

9. Data Retention

279rc retains Personal Data for no longer than is necessary for the purposes for which it was collected, subject to the following retention guidelines:

• Account and KYC data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements;
• Transaction records: Retained for a minimum of seven (7) years for financial audit and regulatory compliance purposes;
• Gaming and betting history: Retained for five (5) years following the relevant activity, for dispute resolution and responsible gambling monitoring purposes;
• Support communications: Retained for three (3) years from the date of the last interaction, or longer where a formal dispute is unresolved;
• Technical logs: Retained for twelve (12) months for security and fraud analysis purposes, then deleted or anonymised.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or irreversibly anonymised.

10. Data Security

279rc implements technical and organisational security measures appropriate to the nature and sensitivity of the Personal Data it processes. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the Platform;
• Encryption at rest for sensitive data categories including identity documents and financial records;
• Role-based access controls limiting staff access to Personal Data on a strictly need-to-know basis;
• Multi-factor authentication for internal administrative systems;
• Regular security assessments, penetration testing, and vulnerability scanning;
• Incident response procedures for managing and reporting data breaches.

Whilst 279rc takes the protection of your Personal Data seriously, no method of electronic transmission or storage is completely secure. You are encouraged to use a strong, unique password for your Account, enable any available two-factor authentication, and contact support immediately if you suspect unauthorised access.

11. Your Rights

Subject to applicable law and certain conditions, you hold the following rights with respect to your Personal Data processed by 279rc:

• Right of Access: You may request a copy of the Personal Data we hold about you and information about how it is processed.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data. Certain data fields (such as registered name and date of birth) may require supporting documentation before corrections are applied.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations. Requests to erase data we are required by law to retain will be declined with explanation.
• Right to Restriction: You may request that we restrict Processing of your Personal Data in certain circumstances, for example where you contest the accuracy of the data.
• Right to Data Portability: Where Processing is based on consent or contractual necessity and carried out by automated means, you may request a structured, machine-readable copy of your Personal Data.
• Right to Object: You may object to Processing based on legitimate interests, including direct marketing. We will cease such Processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where Processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of Processing prior to withdrawal.

To exercise any of the above rights, please contact the 279rc Data Privacy team using the contact details set out in Section 15. We will respond to verified requests within thirty (30) days. Identity verification will be required before any request is processed.

12. Minors and Age Restriction

The 279rc Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect Personal Data from individuals under 21 years of age. The collection of date of birth during registration and KYC verification is conducted specifically to enforce this age restriction.

If 279rc discovers that Personal Data has been collected from an individual under the age of 21, the associated Account will be closed immediately, any balance returned to the funding source (net of any winnings, which will be forfeited), and all Personal Data of the underage individual deleted except where retention is required by law.

If you believe that a person under 21 has registered an Account on 279rc, please contact our support team immediately using the details in Section 15.

13. Third-Party Content and Services

The Platform may display content sourced from or integrated with third-party game studios, live dealer providers, and sports data suppliers. These third parties operate under their own privacy policies and data practices. 279rc is not responsible for the privacy practices of third-party providers and encourages you to review the privacy policies of any third-party services you engage with.

279rc does not include outbound links to third-party websites on public-facing pages of the Platform. Any integrations with external services (such as payment processors) are conducted through secure, regulated channels and are governed by data processing agreements that bind those processors to 279rc's data protection standards.

14. Amendments to This Policy

279rc reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, business operations, or data processing practices. Material changes will be communicated to registered users by email to the registered address or via a prominent notice on the Platform at least seven (7) days before the amended Policy takes effect.

The "Last Updated" date at the top of this page will reflect the date of the most recent revision. Your continued use of the Platform following the effective date of an amended Policy constitutes your acceptance of those changes. If you do not accept the amended Policy, you must close your Account as described in our Terms & Conditions.

15. Contact Us

For all Privacy Policy enquiries, data subject access requests, or complaints about how 279rc processes your Personal Data, please contact us through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the Platform
• Service Hours: Malaysia Standard Time (MYT, UTC+8), all day
• Response Time: We aim to acknowledge all privacy-related requests within two (2) business days and provide a substantive response within thirty (30) calendar days.
• Languages: English · Bahasa Melayu · 中文

If you are not satisfied with our response to a privacy complaint, you may have the right to escalate to the relevant data protection authority in your jurisdiction.