Privacy Policy big321 — Your Personal Data Protection

1Introduction & Scope of This Policy

This Privacy Policy describes how big321 ("we", "our platform") collects, uses, stores, discloses, and protects your personal information when you use the website, mobile app, and any services provided by big321.

By registering or using the big321 platform, you acknowledge that you have read, understood, and agreed to the terms set out in this Privacy Policy. If you do not agree, please discontinue use of our platform.

This policy applies to all big321 platform users regardless of access method — whether via web browser, Android or iOS mobile app, or any other compatible device.

2Information We Collect

Big321 collects various types of information to provide you with a safe, seamless, and personalized service. The information we collect falls into two main categories:

Information You Provide Directly:

• Full name, date of birth, and identity information for KYC verification purposes.
• Email address and phone number for account communications.
• Payment method information such as bank account numbers or digital wallet details (stored in encrypted form).
• Identity documents such as a national ID or passport when required for account verification.
• Any information you provide when contacting our support team.

Automatically Collected Information:

• IP address, browser type, operating system, and device information.
• Activity log data including pages visited, session duration, and in-platform actions.
• Geolocation data at the country or region level for security and compliance purposes.
• Cookie and similar tracking technology information (see the Cookie section for more details).

3How We Use Your Information

The personal information we collect is used solely for legitimate and necessary purposes in operating the big321 platform. Here are the primary ways we use your information:

Big321 will not use your information for any purpose other than those stated above without obtaining your consent first.

4Information Sharing & Disclosure

Big321 does not sell, rent, or trade your personal information to any third party for marketing purposes. However, there are limited situations where we may need to share your information:

• Service Providers: We work with payment processors, cloud service providers, and technology vendors that help us operate the platform. They may only use your data for purposes we have specified.
• Legal Compliance: We may be required to disclose your information to government authorities or law enforcement when required to do so by law or court order.
• Fraud Prevention: In cases of suspected fraud or illegal activity, we reserve the right to share relevant information with the appropriate authorities.
• Business Transfer: If big321 is involved in a merger, acquisition, or asset sale, user information may be transferred as part of that transaction with equivalent privacy protections in place.

5Cookies & Tracking Technologies

Big321 uses cookies and similar tracking technologies to enhance the user experience, analyze platform traffic, and maintain your account security. There are four types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, game sessions, and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Helps us understand how users interact with our platform so we can improve your gaming experience.
• Functional Cookies: Saves your preferences such as language, denomination, and display settings so you do not need to re-enter them each time.
• Analytics Cookies: Used to analyze usage patterns in aggregate and anonymized form for platform improvement purposes.

You can manage your cookie settings through your web browser settings. However, disabling certain cookies may affect the functionality of the big321 platform.

6Data Security

Big321 continuously invests in security infrastructure to ensure your personal data is protected at all times. The technical security measures we employ include:

• Data encryption in transit using TLS 1.3 and 256-bit SSL protocols.
• Data encryption at rest using AES-256.
• Active intrusion detection and prevention systems (IDS/IPS) running at all times.
• Regular security audits conducted by independent and trusted third parties.
• Role-based access control (RBAC) for internal staff.
• Two-factor authentication (2FA) is mandatory for access to internal systems.

7Data Retention Period

Big321 retains your personal information for as long as your account is active or as long as necessary to provide services to you. After account closure, we retain certain records as follows:

• Financial transaction records: Stored for 7 years after the transaction date to comply with anti-money laundering (AML) legal requirements.
• Identity records (KYC): Stored for 5 years after account closure in line with compliance requirements.
• Support communication logs: Stored for 2 years after the last interaction.
• Technical log data: Stored for 90 days for security and troubleshooting purposes.

Once the retention period expires, your data will be permanently deleted from our systems or anonymised so it can no longer be linked to you.

8Your Rights as a User

Under Malaysia's Personal Data Protection Act (PDPA), you have several important rights regarding your personal data. big321 respects and facilitates the exercise of these rights: