Rush333 Privacy Policy – Our Commitment to Protecting Your Personal Data

Rush333 ("we", "the platform") is an online entertainment platform operating in Malaysia and serving members nationwide. In the course of these operations, we collect and process members' personal data ("you") for the purposes set out in this policy.

This Privacy Policy is written in Malay to ensure Malaysian members can understand it easily without relying on translations. We believe every member deserves a clear picture of what happens to their information — not just through dense legal documents that are difficult to follow.

Rush333 acts as the data controller responsible for all personal data collected through our platform. We are committed to complying with internationally recognised data protection standards across all our data handling practices.

Rush333 collects several categories of data from our members. The table below outlines the data types, how they are collected, and their purposes:

Rush333 uses members' personal data solely for the following legitimate purposes:

• Account Management: Creating and maintaining member accounts, processing verification requests, and resolving technical issues related to your Rush333 account.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as withdrawals of your winnings to your registered payment method.
• Security & Identity Verification: Verifying member identities to prevent fraud, money laundering, duplicate account registrations, and platform abuse.
• Customer Support: Responding to enquiries, resolving complaints, and providing technical assistance to members who need support.
• Platform Enhancements: Analysing aggregated usage data (with no personal information included) to understand how members use Rush333 and identify areas for improvement.
• Legal Compliance: Fulfilling reporting and compliance obligations required by applicable laws and regulations.
• Service Communications: Sending important notifications regarding your account, policy changes, or security issues that require your attention.

Rush333 does not process your data for any purposes not stated above without first obtaining your additional consent.

Member data security is Rush333's top priority. We implement multiple layers of technical and organisational protection:

• Data Encryption in Transit: All data transmitted between your browser and Rush333's servers is secured by TLS 1.3 with AES-256 encryption. The padlock icon in your browser's address bar confirms this secure connection.
• Data Encryption at Rest: Sensitive data stored in Rush333's databases is encrypted at rest using AES-256, meaning the data remains unreadable even to anyone with physical access to the servers.
• Role-Based Access Control: Each Rush333 team member only has access to the data required for their specific role. Customer support managers, for example, do not have access to detailed financial data — that is restricted to the finance team only.
• 24/7 Monitoring: A round-the-clock security monitoring system is in place to detect any suspicious activity, unauthorised access attempts, or anomalies in data usage patterns.
• Regular Security Audits: Rush333 conducts regular internal and external security audits to identify and patch any vulnerabilities before they can be exploited.
• Secure Server Environment: Rush333 servers are housed in data centres that comply with stringent physical and digital security standards, with multiple layers of physical access controls.

Rush333 maintains a strict policy on sharing data with external parties. In short: we do not sell or share your data for third-party marketing purposes. That said, there are operational situations where data must be shared with specific parties:

• Payment Processors: Service providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX receive the minimum transaction data required to process your payment. This data is governed by each provider's own privacy policy.
• Game Software Providers: Game providers such as Pragmatic Play, Habanero, and others receive only the session data necessary to run the games. They do not receive your personal identity information.
• Statutory Authorities: Rush333 may be required to disclose certain data to government authorities or law enforcement when compelled by a valid court order or applicable law. We will notify you of any such request if permitted to do so by law.
• Technical Service Providers: Third-party vendors providing technical infrastructure (such as cloud services) may process your data as part of delivering their services. All such vendors are subject to strict data protection agreements with Rush333.

Rush333 uses cookies and similar tracking technologies to enhance the user experience and platform security. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as maintaining your login session and saving language preferences. Without these cookies, the platform cannot function properly. These cookies cannot be disabled.
• Security Cookies: Used to detect suspicious login attempts, identify bot activity, and protect your account from unauthorised access. These cookies operate silently in the background for your security.
• Preference Cookies: Saving your display preferences such as interface theme, preferred language, and odds display settings. This ensures you do not have to reconfigure your preferences each time you log in to Rush333.
• Analytics Cookies: Helps us understand how members use the platform — which pages are visited most frequently, where users encounter issues, and general usage patterns. This data is analysed in aggregate and contains no personally identifiable information.

You can manage your cookie settings through your browser. However, disabling certain cookies may affect the functionality of the Rush333 platform. For guidance on managing cookies in your specific browser, please refer to the official documentation for Chrome, Safari, Firefox, or Edge.

As Rush333 involves financial transactions, we apply additional layers of protection to members' financial data:

• All deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, and CIMB Clicks are processed through fully encrypted payment channels.
• Rush333 does not store your full bank account details, card numbers, or e-wallet passwords. We only retain the information necessary to verify your registered payment method.
• Your transaction history is available anytime under the "Transaction History" section in your Rush333 account — giving you full transparency over all financial activity on your account.
• Any unrecognised transaction activity in your account should be reported to Rush333 support immediately. We have dedicated security procedures in place to handle such cases.
• Financial transaction reports may be required to be submitted to the relevant statutory authorities as part of Rush333's compliance obligations.

As a Rush333 member and the owner of your own personal data, you have the following rights, which you may exercise at any time:

• Right of Access: You may request a copy of all personal data Rush333 holds about you. This request will be processed within 14 business days.
• Right to Rectification: If any information in our records is inaccurate or outdated, you have the right to request an immediate correction. Basic details such as your phone number can be updated directly in your account settings.
• Right to Erasure: You may request the deletion of your account and personal data. Rush333 will process this request subject to any legal obligations that may require us to retain certain records for a minimum period.
• Right to Restriction of Processing: In certain circumstances, you may request that Rush333 restrict how we process your data while still allowing you to continue using your account.
• Right to Data Portability: You may request a copy of your personal data in a structured, reusable format for your own purposes.
• Right to Object: You have the right to object to the processing of your data for certain non-mandatory purposes, such as promotional communications.

Rush333 retains member data for the minimum period necessary, depending on the type of data and applicable legal requirements:

• Active Account Data: Your data is retained for as long as your Rush333 account remains active. You may request account closure at any time.
• Financial Transaction Data: Financial transaction records are retained for the minimum period required under applicable financial and anti-money laundering laws — typically between 5 and 7 years from the date of the transaction.
• Support Communication Logs: Live chat session records and support emails are retained for 2 years for service quality and dispute resolution purposes.
• Technical Data (Server Logs): Technical logs such as IP addresses and system access records are retained for a maximum of 90 days before being automatically deleted.
• After Account Closure: Data no longer required for legal obligations will be deleted within 30 days of account closure. Data that must be retained for legal compliance will be stripped of personal identifiers wherever possible.

While Rush333 implements robust technical protections, the security of your account also depends on your own actions. We encourage the following practices:

• Use a strong, unique password for your Rush333 account — a mix of uppercase letters, lowercase letters, numbers, and symbols. Avoid reusing passwords from other accounts.
• Do not share your Rush333 account login details with anyone, including family members or friends. Every individual should have their own account.
• Log out of your Rush333 account after every session, especially when using a shared device or public Wi-Fi network.
• Regularly review your login history and account activity via your Rush333 account settings. Report any activity you do not recognise to support immediately.
• Be cautious of emails or messages claiming to be from Rush333 that ask for your login details. The Rush333 team will never ask for your password via email or chat.

Rush333 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, technology, or legal requirements:

• Significant changes that affect how we use or share your data will be communicated via an in-platform notification at least 14 days before the changes take effect.
• Minor updates such as language corrections, clarifications to existing procedures, or additional information that does not affect your rights may be made without prior notice.
• The "updated" date at the top of this policy will always reflect the date of the most recent version.
• Continued use of the Rush333 platform after any changes take effect will be considered acceptance of the updated policy.
• If you do not agree with the changes, you have the right to close your account and request data deletion before the effective date.

For any privacy or data protection enquiries, concerns, or requests, please reach us through the following channels:

• 24/7 Live Chat: The fastest channel — available directly within the Rush333 platform in Bahasa Malaysia at all times.
• Email: support@rush333.click — for detailed privacy-related enquiries, use the subject line "Data Privacy Enquiry". Responses are provided within 24 hours on business days.
• For Official Data Rights Requests: Use the subject line "Data Rights Request – [Your Username]" in your email to help expedite processing.