Privacy Policy esp32 – Personal Data Protection for Malaysian Members

Introduction & Scope of Privacy Policy

This Privacy Policy is published by esp32, an online gaming platform operating exclusively for Malaysian users. This policy explains how esp32 collects, uses, discloses, stores and protects your personal information when you use our services.

This policy applies to all registered members, website visitors, and any individual who interacts with the esp32 platform through any channel — including the official website, mobile app (where applicable), and communication channels such as live chat and customer support email.

Esp32 is committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection. Every decision we make regarding member data is guided by the principles of lawful purpose, data minimisation and full transparency.

Types of Personal Data Collected

Esp32 collects various types of personal data necessary to operate our services effectively and securely. The data collected can be grouped into the following categories:

Registration & Identity Data:

• Full name as stated on official identification documents.
• MyKad or passport number (for age verification and identity purposes).
• Date of birth.
• An active Malaysian mobile phone number.
• A valid email address.
• Passwords are stored as hashed values that cannot be reversed or decoded.

Financial & Transaction Data:

• Records of deposits and withdrawals in Malaysian Ringgit (RM).
• E-Wallet account information used for transactions — such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, or DuitNow.
• Bank account information for FPX transactions via Maybank2u or CIMB Clicks.
• Complete transaction history for audit and customer support purposes.

Activity & Platform Usage Data:

• Records of games played, bets placed and winnings received.
• The time and duration of each gaming session at esp32.
• Your game preferences and account settings as configured by you.
• Records of interactions with the esp32 customer support team.

Technical & Device Data:

• The IP address of the device used to access esp32.
• Web browser type and device operating system.
• Cookie data and similar tracking technologies used to enhance the user experience.
• Technical error logs for platform troubleshooting purposes.

Purpose of Data Collection & Use

Esp32 uses members' personal data solely for the legitimate and stated purposes below. We do not use your data for any other purpose without first obtaining fresh consent from you:

There is one point esp32 wants to make absolutely clear: we do not use your gaming activity data for advertising purposes with third parties. Records of Koi Gate, Mega Fishing, Caishen Wins or any other games you play on esp32 are protected personal data and are never shared for third-party marketing purposes.

Data Sharing with Third Parties

Esp32 recognises the sensitivity of members' personal information and does not share your data broadly. However, there are limited situations where sharing data is necessary to operate our services or to meet legal requirements:

Payment Service Providers: When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u, CIMB Clicks), the necessary transaction details are shared with the respective payment service provider solely for the purpose of processing that transaction. These providers are bound by their own privacy policies and security standards.

Gaming Software Providers: Minimal technical data required to run games is shared with game software providers that partner with esp32. This sharing is strictly limited to data genuinely necessary for game functionality.

Legal Requirements: esp32 may be required to disclose member information to relevant authorities such as the police, the Malaysian Anti-Corruption Commission (MACC) or applicable regulatory bodies, where mandated by Malaysian law or pursuant to a valid court order.

Business Transfers: In the event of any merger, acquisition or asset transfer involving esp32, member data may be transferred as part of that process. In such circumstances, members will be notified and equivalent privacy protections will be ensured by the acquiring party.

Use of Cookies & Tracking Technologies

Esp32 uses cookies and similar tracking technologies to enhance the user experience on our platform. This is standard practice within the online services industry. The following are the types of cookies used by esp32:

• Essential Cookies: Required for core platform functions such as maintaining your login session. These cookies cannot be disabled as they are essential to your account security.
• Preference Cookies: Saves your preferences such as your chosen language, preferred bet size, and display settings to ensure a more comfortable experience every time you use esp32.
• Analytical Cookies: Helps the esp32 team understand how members use the platform — for example, which games are most popular, where members encounter difficulties, and how the user interface can be improved. Analytics data is processed in aggregate and is not linked to any individual's identity.
• Security Cookies: Used to detect and prevent suspicious activity such as multiple unauthorised login attempts or signs of fraudulent behaviour on the esp32 platform.

You can manage cookie settings through your web browser's settings. However, disabling essential cookies may affect the functionality of the esp32 platform. For more information on managing cookies, please refer to your web browser's help documentation.

Data Retention Period

Esp32 does not retain your personal data for longer than is necessary for the stated purposes or as required by Malaysian law. General data retention guidelines are as follows:

• Active Account Data: Retained for the duration your account remains active, plus any additional period required for audit purposes or the resolution of outstanding claims.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with applicable Malaysian financial and taxation legal requirements.
• Gaming Activity Log: Retained for 3 years for customer support and dispute resolution purposes.
• Support Communication Data: Customer support conversation records are retained for 2 years to allow historical context to be used in assisting members more effectively.
• Following Account Closure: Personal data will be deleted or anonymised within 90 days of account closure, unless a longer retention period is required by law.

Your Rights as a Data Subject

As an esp32 member and data subject under Malaysia's PDPA, you have several important rights regarding your personal data. esp32 is committed to ensuring these rights can be exercised easily and without undue obstacles:

These rights may be exercised by contacting the esp32 support team via live chat or email at [email protected]. We endeavour to process all requests within 14 business days.

Data Security & Technical Measures

Esp32 continuously invests in a comprehensive security infrastructure to protect members' personal data against unauthorised access, loss, modification or accidental disclosure. The technical security measures implemented include:

• Data in transit is encrypted using 256-bit TLS/SSL protocol.
• Sensitive data stored in the database is encrypted using industry-recognised encryption algorithms.
• A role-based access control system ensuring that only authorised personnel can access member data — and only the data relevant to their specific duties.
• Continuous 24/7 security monitoring and anomaly detection by esp32's automated systems and security team.
• Regular penetration testing by independent third parties to identify and patch security vulnerabilities.
• A clear incident response procedure to address any data security breaches promptly and effectively.

It is important to note, however, that no security system in the world can be guaranteed 100% foolproof. esp32 will always strive to employ the latest available security measures, but we also need your cooperation in keeping your own account login credentials secure.

Transfer of Data Outside Malaysia

In the course of operating esp32's services, it may be necessary for members' personal data to be transferred to or processed outside of Malaysia — for example, when data is shared with international game software providers or cloud computing infrastructure located abroad.

When such data transfers occur, esp32 ensures that protection equivalent to Malaysia's PDPA standards is upheld through:

• Legally binding data processing agreements with all third parties involved.
• Selecting vendors that comply with internationally recognised data protection standards.
• Periodic reviews of vendor privacy practices to ensure ongoing compliance.

Privacy Policy Amendments

Esp32 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, Malaysian legislative changes or developments in the technologies we use.

Any material changes to how we handle your personal data will be communicated to you via platform notification or email at least 14 days before those changes take effect. It is your responsibility to read each such notification carefully.

If you do not agree with any proposed changes, you have the right to close your esp32 account before the changes take effect. Continued use of the platform after the effective date of any changes will be deemed acceptance of the amended Privacy Policy.

Contact the esp32 Privacy Officer

If you have any questions, concerns or complaints regarding esp32's Privacy Policy or the way we handle your personal data, we encourage you to contact us directly:

• Privacy Email: [email protected] (please mark the email subject as "Privacy Enquiry")
• Live Chat: Available 24/7 in Bahasa Malaysia, directly from the esp32 platform
• Response Time: We aim to respond to all privacy enquiries within 14 business days