Privacy Policy – Your Personal Data Protection at 123rf

This Privacy Policy explains how 123rf ("kami", "platform", "123rf.run") collects, uses, stores, and protects your personal information when you use our online gaming platform, including all websites, mobile applications, and related services.

This policy applies to all users of the 123rf – termasuk pengunjung yang hanya melayari laman web, calon ahli yang sedang dalam proses pendaftaran, dan ahli berdaftar yang aktif. Dengan menggunakan platform 123rf, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy should be read together with the Terms & Conditions 123rf which together form the entire agreement between you and us. In the event of any conflict between these two documents on matters of data protection, the provisions in this Privacy Policy shall prevail.

2.1 Data yang Anda Berikan Secara Langsung

When you register an account or use our services 123rf, you provide us with the following information directly:

• Identification Data: Nama penuh, tarikh lahir, nombor kad pengenalan (MyKad), dan gambar dokumen pengenalan untuk tujuan pengesahan KYC
• Data Hubungan: Alamat e-mel, nombor telefon bimbit, dan alamat surat-menyurat (jika berkenaan)
• Account Data: Username, password (stored as a non-reversible hash), and security questions
• Data Kewangan: Your e-wallet account details (Touch 'n Go, GrabPay, Boost, ShopeePay) or Malaysian bank account information used for deposits and withdrawals in MYR (RM)
• Additional Verification Information: Selfie with your identity document or proof of address (utility bill, bank statement) for further KYC verification

2.2 Automatically Collected Data

When you use the 123rf, we automatically collect the following technical data:

• IP address and geolocation information (city/state level only)
• Device type, model, operating system, and browser version
• Access logs including date, time, and pages visited
• Game session data – including games played (slots, baccarat, roulette, poker, Malaysia Super League or EPL football betting), total wagers in RM, and game outcomes
• Information on cookies and related tracking technologies

123rf collecting your personal data through the following channels:

• Registration Form: Semasa anda membuat akaun baharu di 123rf
• KYC Process: Through our identity verification system when certain thresholds are reached
• Financial Transactions: Apabila anda melakukan deposit menggunakan TNG eWallet, GrabPay, FPX Maybank2u, DuitNow, CIMB Clicks, Boost atau ShopeePay – penyedia pembayaran akan berkongsi maklumat yang diperlukan untuk memproses transaksi RM anda
• Platform Activities: Automatically via cookie technology, tracking pixels, and server logs
• Customer Support: When you contact our support team 123rf melalui live chat atau e-mel
• Permitted Third-Party Sources: From authorised identity verification service providers or fraud prevention agencies, where required for security purposes

123rf uses your personal data for the following purposes, each of which has a valid legal basis:

4.1 Service Provision & Management

• Creating and managing your account on the 123rf
• Processing RM deposits and withdrawing winnings to your Malaysian e-wallet or bank account
• Allows you to access and play all games including slots, live casino, poker, roulette, virtual sports, and Sports Betting
• Menyediakan sokongan pelanggan dalam Bahasa Melayu dan menyelesaikan sebarang pertanyaan atau pertikaian

4.2 Security & Legal Compliance

• Identity and age verification (18+ requirement) as required by law
• Pencegahan penipuan, pengubahan wang haram (AML), dan aktiviti haram lain
• Compliance with KYC (Know Your Customer) requirements set by regulatory authorities
• Rekod untuk tujuan audit dan laporan kepada pihak berkuasa berkaitan jika dikehendaki oleh undang-undang

4.3 Penambahbaikan Platform

• Analysis of usage patterns to improve the experience of Malaysian users
• Menguji dan membangunkan ciri baharu yang relevan untuk pemain tempatan
• Technical performance monitoring and system troubleshooting

4.4 Marketing Communications (With Your Consent)

If you have given your consent, we may send you information about bonus offers, promotions, or new games at 123rf. Anda boleh menarik balik kebenaran ini pada bila-bila masa melalui tetapan akaun atau menghubungi sokongan kami.

123rf does not sell, rent, or disclose your personal data to third parties except in the following limited circumstances:

• Trusted Service Providers: Companies we engage to support platform operations — including payment service providers (gateways for TNG, GrabPay, FPX), identity verification service providers, and cloud infrastructure providers — are all bound by strict confidentiality agreements and may only use your data for purposes we specify
• Game Providers: Companies such as Evolution Gaming and Pragmatic Play may receive game session data necessary to provide live casino games and slots to you.
• Legal Requirements: Where required by Malaysian law, court order, or a lawful request from law enforcement authorities
• Fraud Prevention: Dengan badan pencegahan penipuan dan syarikat pengesahan identiti yang bertauliah bagi melindungi anda dan platform 123rf daripada aktiviti penipuan

123rf invests seriously in security infrastructure to ensure your personal data is always protected. The technical and organisational security measures we implement include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers 123rf
• Data encryption at rest (at-rest encryption) for all sensitive data stored in our database
• Two-factor authentication (2FA) for administrative access and for member accounts that have opted in
• Pemantauan keselamatan 24/7 by a dedicated cybersecurity team
• Penetration testing yang dijalankan secara berkala oleh pakar keselamatan bebas
• Role-based access control (RBAC) which ensures staff can only access the data necessary for their role
• Access log auditing which logs all access to sensitive data
• Incident response plan on standby to respond swiftly in the event of any security breach

While we take all reasonable steps to protect your data, no system is 100% secure. In the event of a data security breach that affects you, 123rf akan memberitahu anda dan pihak berkuasa berkaitan dalam masa yang ditetapkan oleh undang-undang.

Platform 123rf uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. The types of cookies we use are as follows:

• Essential Cookies (Required): Required for core platform functions such as maintaining your login session, security, and language preferences. These cookies cannot be disabled.
• Performance Cookies: Membantu kami memahami bagaimana pengguna berinteraksi dengan platform – halaman mana yang paling kerap dilawati, berapa lama pengguna berada di platform, dan di mana masalah teknikal berlaku. Semua data dikumpul secara agregat dan tanpa nama.
• Functional Cookies: Saving your preferences such as language (Bahasa Melayu), display settings, and gaming preferences for a more personalised experience.
• Session Cookies: Automatically deleted when you close your web browser.

Sebagai subjek data di bawah Akta Perlindungan Data Peribadi 2010 (PDPA) Malaysia, anda mempunyai hak-hak berikut berkaitan data peribadi anda yang dipegang oleh 123rf:

Untuk menggunakan mana-mana hak di atas, sila hubungi kami di support@123rf.run. We will verify your identity before processing your request and will provide a response within 21 business days. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

Dalam menjalankan operasi platform, 123rf may need to transfer your personal data to servers or service providers located outside Malaysia. This may arise in the following contexts:

• Cloud computing infrastructure used for hosting and content delivery
• International game providers such as Evolution Gaming and Pragmatic Play, which supply live casino, slots, and other games to 123rf
• Data backup systems stored across multiple locations to ensure uninterrupted service continuity

In all cases, 123rf ensures that all such data transfers are carried out with protections that meet or exceed the standards set by Malaysia's PDPA. All overseas service providers we engage are subject to strict data processing agreements and are required to comply with our privacy policy.

123rf reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer.

When we make material changes to this Privacy Policy, we will:

• Updating the "Last updated" date at the top of this page
• Displaying a prominent notice on the platform 123rf selama sekurang-kurangnya 14 hari
• Sending email notifications to all registered members for significant changes

Continued use of the platform 123rf after an amendment takes effect will be considered your acceptance of the revised Privacy Policy. If you do not agree with any changes, you have the right to close your account and request deletion of your data.