60he Privacy Policy – Personal Data Protection for Malaysian Players

Personal Data We Collect

60he collects various categories of personal data from users of our platform. This data is gathered through several methods, including registration forms, interactions with our services, financial transactions, and general platform usage. Below is a detailed explanation of each category of data we collect:

Please note that 60he does not store your full credit card number or bank account details on our servers. All financial transactions are processed through certified, secure payment gateways. The payment methods we accept are tailored specifically for Malaysia: Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, Maybank2u, CIMB Clicks, and FPX Online Banking.

How We Use Your Personal Data

60he uses collected personal data solely for legitimate, specific, and stated purposes. We do not use your data for any other purpose without first obtaining your additional consent. The primary purposes for which data is used are as follows:

• Account Management: Creating and managing your 60he member account, including identity verification, password setup, and profile settings management.
• Transaction Processing: Securely and promptly processes all your deposits and winnings withdrawals in Malaysian Ringgit (MYR) via available local payment methods.
• Fraud Prevention and Security: Detecting and preventing fraudulent activity, money laundering, multi-accounting, and other unlawful conduct that could compromise the integrity of the 60he platform and its members.
• Service Communications: Sending important account-related notifications, including transaction confirmations, security updates, bonus alerts, and changes to our Terms & Conditions or Privacy Policy.
• Responsible Gaming: Monitoring gambling patterns to identify members who may need support related to responsible gaming, in line with 60he's commitment to player wellbeing.
• Platform Improvement: Analyses usage data in aggregated form (without identifying individuals) to improve the design, performance, and overall experience of the 60he platform.
• Legal Compliance: Complying with the reporting and compliance requirements set out under applicable Malaysian law, including anti-money laundering obligations.
• Marketing Communications: With your consent, we may send you information about promotions, bonuses and new games at 60he that may interest you. You can unsubscribe from marketing communications at any time.

Sharing Data with Third Parties

60he strictly does not sell, rent, or trade members' personal data to any third party for their own commercial purposes. This is a non-negotiable principle and a fundamental part of our platform's core identity.

However, in certain limited and lawful circumstances, 60he may share your personal data with the following parties:

• Payment Service Provider: Payment gateways and e-wallet providers such as Touch 'n Go, DuitNow, GrabPay, and others that process your financial transactions. Such sharing is limited strictly to the information required to complete the transaction.
• Technology Service Providers: Companies that provide 60he with technical infrastructure, hosting services, security analytics, and operational support. All such providers are bound by strict confidentiality agreements.
• Legal Authorities: When required by court order, requests from relevant authorities, or other legal obligations under Malaysian law. In such situations, 60he will disclose only the minimum data necessary and will endeavour to notify you in advance where permitted by law.
• Game Providers: Game development companies that provide slots, live casino and other games on the 60he platform may receive limited technical data necessary for the maintenance of their gaming services.

Data Security Measures at 60he

Protecting your personal data is the highest operational priority for 60he. We continually invest in the latest security technologies and procedures to ensure your data is always protected against unauthorised access, disclosure, alteration, or destruction.

The technical and organisational security measures we employ at 60he include:

• 256-bit SSL Encryption: All communications between your browser or app and the 60he servers are protected by 256-bit TLS/SSL encryption — the same security standard used by leading international banking institutions.
• Secure Password Storage: Member account passwords are never stored in plain text. We use strong cryptographic hash functions with a unique salt for each account to keep your password secure even in a worst-case scenario.
• Two-Factor Authentication (2FA): 60he offers two-factor authentication via SMS OTP or an authenticator app to provide an additional layer of security for your account.
• 24/7 Security Monitoring: Our automated security monitoring system operates around the clock to detect suspicious activity, unusual login attempts, and potential cyber threats.
• Regular Security Audits: 60he's security infrastructure is regularly audited by internationally certified independent cybersecurity experts to identify and address any potential vulnerabilities.
• Internal Access Controls: Access to members' personal data within 60he is restricted on a need-to-know basis — only staff who require access to carry out their duties are granted permission.

Personal Data Retention Period

60he only retains your personal data for as long as necessary to fulfil the purposes set out in this Privacy Policy, or for as long as required by applicable Malaysian law — whichever is longer.

• Active Account Data: For as long as your account remains active with 60he, all associated data will be retained to ensure seamless service delivery and a consistent gaming experience.
• Financial Transaction Data: Financial transaction records are retained for a minimum of 7 years in accordance with applicable anti-money laundering and tax legislation in Malaysia.
• Data After Account Closure: When an account is closed at your request or by 60he, identity and transaction data will still be retained for the period prescribed by law before being securely deleted.
• Cookie Data: Session cookies expire automatically when you close your browser, while preference cookies are stored for 12 months unless you delete them earlier.
• Communication Data: Communication logs between members and the 60he support team are retained for 2 years for service quality purposes and to assist in resolving any disputes that may arise.

Once the retention period expires, your personal data will be securely deleted using methods that ensure it cannot be recovered by any party.

Cookies & Tracking Technologies at 60he

Platform 60he uses cookies and similar tracking technologies to enhance the user experience, ensure account security and analyse platform performance. Below is an explanation of the types of cookies we use:

• Essential Cookies (Required): These cookies are essential for the basic operation of the 60he platform — they maintain your login session, process transactions securely and keep the platform running smoothly. They cannot be disabled, as they are critical to the platform's security and functionality.
• Preference Cookies: These cookies store your preferences such as language settings, game selections and display configurations, ensuring a more personalised and comfortable experience every time you log in to 60he.
• Analytics Cookies: We use analytics cookies to understand how members interact with the 60he platform in aggregate — this information helps us improve the platform's design, performance, and content. Analytics data does not contain information that can identify you as an individual.
• Security Cookies: These cookies are used to detect suspicious login activity, prevent unauthorised access attempts, and protect your account against cyber threats such as CSRF (Cross-Site Request Forgery).

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the 60he platform. For guidance on managing cookies in popular browsers such as Chrome, Safari or Firefox, please refer to the relevant browser's help documentation.

Your Rights as a Data Subject under Malaysia's PDPA

As a Malaysian player using the 60he, you have rights protected under the Personal Data Protection Act 2010 (PDPA) of Malaysia. 60he is committed to respecting and facilitating the exercise of all these rights:

• Right of Access: You have the right to request a copy of the personal data we hold about you. 60he will provide this information within 21 days of receiving your request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request an immediate correction. 60he will process correction requests within 14 days.
• Right to Erasure: In certain circumstances permitted by law, you have the right to request the deletion of your personal data from 60he's systems. This right may be subject to data retention requirements mandated by law.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time, and 60he will cease such processing immediately upon receiving your objection.
• Right to Withdraw Consent: Where data processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing that took place prior to the withdrawal.
• Right to Complain: If you believe that 60he has violated your privacy rights, you have the right to lodge a complaint directly with us or with the Personal Data Protection Commissioner of Malaysia.

To exercise any of the above rights, please contact our support team 60he by email at [email protected] with the subject line "PRIVACY RIGHTS REQUEST". We will process your request within the stipulated timeframe and provide a written response.

Protection of Children's Data

Platform 60he is exclusively for individuals aged 18 and above. We do not knowingly collect or process any personal data from individuals under the age of 18.

All new account registrations at 60he undergo a strict age verification process. Should we discover or suspect that a person under the age of 18 has registered an account or is using our platform, the account will be suspended immediately, all balances will be frozen pending the outcome of an investigation, and any related data will be handled in accordance with the procedures prescribed by law.

If you are a parent or guardian and discover that your underage child has registered an account at 60he, please contact our support team immediately at [email protected]. We will take prompt action to address the situation with full responsibility and discretion.

Cross-Border Data Transfers

In the operation of the platform 60he, there are situations where members' personal data may be processed or stored on servers located outside Malaysia. This may occur when we utilise international cloud computing services or global technical service providers.

When cross-border data transfers occur, 60he ensuring that:

• The recipient country or territory maintains a level of data protection equivalent to or higher than Malaysian standards.
• Appropriate data transfer agreements have been put in place with recipient parties, including internationally recognised standard data protection clauses.
• Only data strictly necessary for the specific operational purpose will be transferred, and access to that data is tightly restricted.
• All cross-border data transfers comply with the requirements of Malaysia's PDPA 2010 and any other applicable regulations.

Changes to 60he's Privacy Policy

60he reserves the right to modify or update this Privacy Policy from time to time. Changes may be necessary to reflect developments in Malaysian data protection law, shifts in industry practice, new technological advancements, or changes in the way we operate.

When we make significant changes to this Privacy Policy, we will:

• Sending email notifications to all registered members at least 14 days before the changes take effect.
• Displaying clear notices on the 60he platform's homepage regarding upcoming changes.
• Updating the "Last Updated" date at the top of this document to reflect the date of the most recent changes.
• Maintaining an archive of previous versions of the Privacy Policy for members who need to refer to them.

Continued use of the platform 60he after the updated Privacy Policy takes effect will be considered your acceptance of the revised terms. If you do not agree with any changes, you have the right to close your account before they come into effect.

Contact the 60he Data Protection Officer

For any enquiries, concerns or requests relating to the Privacy Policy and personal data management at 60he, you may reach us through the following channels:

• Privacy Email: [email protected] (subject: "DATA PRIVACY ENQUIRY")
• Live Chat: Available directly within the 60he platform 24 hours a day, 7 days a week
• Support Languages: Bahasa Melayu and English
• Response Time: Within 48 hours for privacy-related enquiries

The 60he takes every privacy enquiry seriously. We are committed to providing a meaningful and helpful response to every query we receive — not just an automated reply that leaves you no better off.