Privacy Policy to303 — Member Personal Data Protection

To303 is an online entertainment platform operating in Malaysia, fully committed to protecting the privacy of every member who uses our services. We understand that your trust is our most valuable asset, and we never take this responsibility lightly.

This Privacy Policy applies to all information collected through the to303 website, mobile app, live chat, support email, and any other communication channels operated by to303. This document is written to ensure it is easy to understand for all our members in Malaysia.

Each time you register a new account, make a deposit, play games, or contact our support team, certain information may be collected to ensure the services we provide run smoothly, securely, and in line with your needs as a to303 member.

To303 collects various types of information depending on how you interact with our platform. Generally, information falls into two main categories: information you provide directly and information collected automatically while you use the platform.

Information You Provide Directly:

• Full name as it appears on your official identification document.
• Active email address and mobile phone number.
• Date of birth for age verification purposes.
• Current residential address.
• Bank account or e-wallet details for processing deposits and withdrawals.
• Identity verification documents (national ID, passport) during the KYC process.
• Communication history with the to303 support team.

Automatically Collected Information:

• IP address and general geographic location.
• Device type, operating system, and browser used.
• Gaming activity history and transaction records within the platform.
• Login session timestamps and duration.
• Cookie data and similar tracking technologies (see Section 6).

All information collected by to303 is used for specific, legitimate purposes and will not be used beyond the scope stated here. The following are the primary purposes for which your personal data is used:

• Account Management: Processing registrations, verifying identity, managing logins, and ensuring your account security.
• Transaction Processing: Facilitating deposits, withdrawals, and account balance management accurately and securely.
• Service Delivery: Ensuring all games, promotions, and platform features run smoothly for you.
• Service Communications: Sending important notifications related to your account, transactions, or policy changes that affect you.
• Platform Improvements: Analyzing usage patterns to improve the quality of the gaming experience at to303.
• Fraud Prevention: Identifying and preventing suspicious activity, money laundering, or platform abuse.
• Legal Compliance: Meeting legal and regulatory obligations applicable to to303 operations.
• Customer Support: Providing effective and accurate assistance when you contact the to303 support team.

To303 does not sell, rent, or disclose members' personal data to third parties for their own marketing purposes. However, there are certain situations where sharing information is necessary to enable us to deliver services to you:

• Payment Service Providers: Payment gateways and financial institutions that process your deposits and withdrawals — all these providers have undergone rigorous security checks and are bound by confidentiality agreements.
• Game Software Providers: Third-party game software companies providing game content on the to303 platform may receive minimal session data for game functionality purposes.
• Technical Service Providers: Hosting companies, CDN providers, and infrastructure partners that help us operate the platform securely and reliably.
• Regulatory and Law Enforcement Authorities: to303 will disclose required information if mandated by law or a valid court order.
• Fraud Prevention: In cases involving fraud investigations or money laundering, relevant information may be shared with the appropriate authorities.

Your personal data security is the absolute top priority at to303. We continuously invest in the latest security infrastructure to ensure your information is always protected from unauthorized access, loss, or misuse.

Key Security Measures:

• 256-bit SSL Encryption: All data transmitted between your device and to303 servers is encrypted using the latest TLS protocol.
• Secure Server: Data is stored in data centres equipped with multi-layered physical and digital security.
• Internal Access Controls: Only specifically authorised to303 staff may access member personal data, and every access is logged for audit purposes.
• 24/7 Monitoring: Our threat detection system operates around the clock to identify and respond to any suspicious access attempts.
• Regular Data Backups: Data is backed up regularly to prevent information loss due to technical failures.

Data Retention Period: to303 retains members' personal data for as long as the account is active and for the period required by law following account closure — typically between 5 to 7 years for financial records for regulatory compliance purposes. Data that is no longer required will be securely deleted or anonymised.

To303 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyse platform performance. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use:

• Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled without affecting key functionality.
• Preference Cookies: Storing your personal settings such as preferred language and display configuration for ease of use.
• Analytics Cookies: Helping us understand how members use the platform — which pages are visited most, where users spend their time, and more. This data is used in aggregate form and cannot identify individuals.
• Security Cookies: Used to detect suspicious login attempts, maintain valid sessions, and protect your account from unauthorised access.

You can manage or delete cookies through your browser settings. However, disabling essential cookies may affect the functionality of the to303 platform. For more information on managing cookies in your browser, please refer to your browser's help section.

As a to303 member and an individual whose personal data we handle, you have the following rights under Malaysia's Personal Data Protection Act 2010 (PDPA). to303 is committed to facilitating the exercise of these rights without undue obstacles.

To303 is an adult entertainment platform that does not accept registrations from individuals under 18 years of age. We do not knowingly collect or store personal data from minors.

If we discover that personal data of an individual under the age of 18 has been collected without our knowledge, we will take immediate steps to delete that information and close the relevant account. Parents or guardians who become aware that their child has registered on to303 are advised to contact our support team immediately.

The to303 platform may contain links or integrations with third-party services such as game providers and payment gateways. This Privacy Policy applies solely to the to303 platform and does not cover the privacy practices of those third parties.

To303 is not responsible for the privacy policies or data handling practices of any third parties involved. We encourage members to read the privacy policy of each third-party platform they use separately to understand how their data is handled.

All third-party providers partnering with to303 have undergone security assessment processes and are bound by data protection agreements to ensure a consistent level of protection for our members' data.

To303 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, new legal requirements, or improvements in the way we protect your data.

• The latest update date is always displayed at the top of this page.
• For amendments involving significant changes to your privacy rights, to303 will endeavour to provide advance notice via email or in-platform notification.
• Continued use of the to303 platform after the effective date of any amendments constitutes your acceptance of the updated Privacy Policy terms.

We encourage you to revisit this page periodically to stay informed about how to303 protects your information. If you disagree with any amendments, you have the right to close your account by contacting our support team.

If you have any questions, concerns, or complaints regarding to303's Privacy Policy or how we handle your personal data, our team is ready to listen and assist:

• Live Chat: The fastest option — available 24/7 directly on the to303 platform for an immediate response.
• Privacy Email: [email protected] — for complaints or detailed enquiries related to data privacy.
• General Support: [email protected] — for general questions regarding your account or services.
• FAQ: Visit page FAQ us for answers to the most frequently asked privacy questions.

To303 is committed to responding to all privacy-related enquiries within 5 business days. For cases requiring deeper investigation, we will keep you informed of progress within a reasonable timeframe.