Start385 Privacy Policy – Data Protection for Malaysian Players

Start385 ("we", "the platform", or "start385.click") is an online gambling entertainment platform operating exclusively for Malaysian users. We understand that the trust of Malaysian players is our most valuable asset – and that trust cannot exist without full transparency about how we handle your personal information.

This Privacy Policy applies to all users who access or use the start385 platform via start385.click, including mobile web browsers, any applications we may provide in the future, and all interactions with our customer support team. It also applies to individuals who visit our website without registering an account.

This document is written in Bahasa Melayu because we are committed to serving Malaysian users and believe that a privacy policy should be understood by the people it most directly affects – not buried in technical language that is difficult to follow. If any section is unclear, our team is happy to help explain it.

Start385 only collects information that is genuinely necessary to operate the platform, process transactions, and meet our legal obligations. We do not collect excessive or irrelevant data beyond the stated purposes. The following are the categories of data we collect:

Account Registration Information:

• Full name as shown on your identification document
• An active Malaysian phone number (used for OTP and communications)
• Email address (optional, for promotional notifications and account recovery)
• Date of birth (for age verification – minimum 18 years old)
• Passwords stored in irreversible hashed form

Financial Transaction Information:

• Payment methods used (e.g. Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, Maybank2u, CIMB Clicks via FPX)
• Total deposit and withdrawal amounts
• In-platform transaction history records
• Transaction reference number from the payment provider

Platform Activity Information:

• Gaming records – game type, session duration, total wagers placed
• Sports betting history including Liga Super Malaysia, EPL, and other leagues
• Game preferences and account settings
• Communications with the customer support team

Technical Information (collected automatically):

• The IP address of the device used to access the platform
• Browser or application type and version
• Device operating system (Android, iOS, Windows, etc.)
• Session data including login time, logout time, and session duration
• Cookie and web analytics data (see Section 7)

Start385 collects information through several different methods, depending on the type of information and the context in which it is used:

Directly from You: This is our primary method of data collection. When you register a start385 account, complete your profile, contact customer support, or participate in promotions and contests, you are actively providing information to us. We only request information that is strictly necessary for the purpose stated on the relevant form.

Automatically While You Use the Platform: When you browse the start385 website or use our platform, our systems automatically record certain technical information. This includes data about your device, browser, IP address, and platform usage patterns. This information is essential for ensuring the platform runs smoothly and for detecting any unauthorised access attempts.

From Third-Party Payment Providers: When you make a deposit or withdrawal using Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX (including Maybank2u and CIMB Clicks), the respective payment provider may share certain transaction details with us for verification and fraud prevention purposes. This information is handled in accordance with each payment provider's own privacy policy.

From Identity Verification Service Providers: In situations where we need to verify your identity – such as for large withdrawal requests or when suspicious activity is detected – we may use third-party identity verification services that comply with established KYC (Know Your Customer) standards.

Start385 uses the information collected for specific, legitimate purposes. We do not use your data for purposes unrelated to the provision of our services or that you would not reasonably expect. These purposes are as follows:

• Account Management: Creating and maintaining your start385 account, processing your registration, and enabling you to log in securely using OTP two-factor authentication.
• Financial Transaction Processing: Processing deposits via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX; processing withdrawals to your chosen method; and maintaining accurate transaction records.
• Provision of Gaming Services: Gives you access to slots, sports betting (Liga Super Malaysia, EPL, La Liga, UCL, and more), blackjack, live casino, e-sports, and all other games on the start385 platform.
• Customer Support: Enables our team to understand the context of your query or complaint and provide accurate, effective assistance.
• Fraud Prevention and Security: Detecting and preventing fraud, money laundering, multi-account usage, bonus abuse, and any activity that violates start385's Terms & Conditions.
• Legal Compliance: To fulfil the reporting and regulatory compliance obligations applicable to online gaming platforms, including mandated AML (Anti-Money Laundering) requirements.
• Platform Improvements: Analysing usage patterns in aggregate (not at an individual level) to understand which features Malaysian users prefer and to improve the overall platform experience.
• Promotional Communications: With your consent, to send you information about start385 promotions, bonuses, and the latest offers. You may opt out of marketing communications at any time through your account settings or by contacting us.

Start385 does not sell, rent, or trade your personal information to any third party for marketing or commercial purposes. This is an absolute commitment. However, there are limited situations where we need to share certain information with other parties:

Service Providers Supporting Platform Operations: We work with a number of third-party companies that help us deliver our services – including payment gateway providers (for processing Touch 'n Go, DuitNow, GrabPay, and other transactions), game providers (such as Pragmatic Play, PG Soft, and others), as well as IT and cloud computing service providers. All these providers are bound by strict confidentiality and data protection agreements and are only permitted to use your data for the specific purpose of delivering the services assigned to them.

Legal & Regulatory Requirements: start385 will disclose personal information when required by Malaysian law, a valid court order, or a directive from a competent regulatory authority. We will also share information with law enforcement agencies where necessary to investigate financial crimes, money laundering, or fraud involving our platform.

Business Transfers: In the event of a merger, acquisition, or sale of start385's assets, user information may be transferred as part of the business transaction. In such circumstances, we will provide reasonable notice to affected users and ensure that the recipient of the data commits to maintaining an equivalent or higher level of privacy protection.

With Your Consent: In any other situation not covered above, we will obtain your explicit consent before sharing your personal information with any third party.

Data security is more than technology – it is part of the culture at start385. We continuously invest in security infrastructure and staff training to ensure your data is protected at every level.

Technical Security:

• 256-bit SSL/TLS Encryption: All communications between your browser or app and the start385 servers are encrypted using the latest SSL/TLS protocols. This ensures that data in transit cannot be intercepted or read by unauthorised parties.
• Secure Password Storage: Your password is never stored in plain text. We use a strong cryptographic hashing algorithm with a unique salt for each password — meaning that even in the event of a server breach, your password will not be exposed.
• Two-Factor Authentication (2FA): Every login attempt from a new device requires verification via an OTP sent to your registered Malaysian phone number. This prevents unauthorised access even if someone knows your password.
• Continuous Security Monitoring: Our systems are monitored around the clock to detect suspicious activity, intrusion attempts, and usage pattern anomalies that may indicate a security compromise.
• Payment Data Segregation: Your card or bank account details are not stored on start385 servers. All payment processing is handled entirely through secure, PCI-DSS compliant payment gateways.

Organisational Security:

• Access to user data is restricted to staff with a legitimate business need only
• All staff undergo regular data protection and information security training
• Internal and external security audits are conducted on a regular basis
• Clear, tested incident response procedures to address any security breach swiftly

Start385 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you browse our website. They help us recognise you when you return to the platform and remember your preferences.

Types of Cookies We Use:

• Strictly Necessary Cookies (Session): Required for core platform functionality – including verifying your login and keeping your session active while you play. Without these cookies, the platform cannot function properly. They are deleted when you close your browser or log out.
• Preference Cookies: Stores your chosen preferences such as display language, favourite betting markets, and interface configuration — so you do not have to reconfigure the platform every time you log in.
• Analytical Cookies: Helps us understand how Malaysian users interact with the platform – the most visited pages, the most popular games, and where users encounter difficulties. This data is analysed in aggregate and is not used to identify any individual personally.
• Security Cookies: Used to detect suspicious login attempts, store information about trusted devices, and protect your account from unauthorised access.

Managing Cookies: You can manage or delete cookies through your browser settings. Please note that disabling essential cookies will affect the functionality of the start385 platform and may prevent you from accessing certain features. For guidance on managing cookies in your browser, please refer to your browser's help section.

As a start385 user, you have certain rights regarding your personal data, all of which we take seriously. Below are your rights and how to exercise them:

Start385 is a platform intended exclusively for individuals aged 18 and above. We do not knowingly collect or process personal information from individuals under the age of 18.

At the point of registration, all users are required to confirm that they are at least 18 years of age. start385 also reserves the right to request age verification via identity documents at any stage of platform use. If we determine that a person under the age of 18 has registered an account, that account will be closed immediately and all associated data will be deleted.

As an online platform, some services we use — such as cloud computing infrastructure, international game providers (Pragmatic Play, PG Soft, Habanero, and others), and certain technical services — may involve the processing or storage of data outside Malaysia.

In such situations, start385 ensures that any data transfers are safeguarded with adequate protections, including:

• Data transfer agreements that require recipients to comply with data protection standards equivalent to or exceeding those established in Malaysia
• Strict data processing agreements that limit the use of your data by third-party providers to the specified purposes only
• Selecting providers with a strong privacy compliance track record and recognised security certifications

Start385 does not transfer Malaysian users' personal data to jurisdictions that lack an adequate level of data protection without appropriate additional safeguards in place.

Start385 retains your personal data for as long as necessary to fulfil the purposes set out in this Privacy Policy, or for as long as required by applicable laws and regulations.

As a general guide, our retention guidelines are as follows:

• Active account data: Stored for the duration that your account remains active on start385. Once the account is closed, basic account information (name, date of birth, phone number) is retained for a further 5 years for audit and fraud prevention purposes (such as re-registration using the same identity).
• Financial transaction records: Retained for 7 years in accordance with Malaysian legal requirements on financial records and anti-money laundering. This includes deposit and withdrawal history via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX.
• Gaming activity records: Retained for 3 years for audit, dispute resolution, and regulatory compliance purposes.
• Technical and security logs: Retained on a rolling 12-month basis. Older logs are automatically deleted once the retention period is reached.
• Customer support communications: Retained for 2 years from the date of communication for training, service quality, and dispute resolution purposes.

Once the retention period expires, data is securely deleted or anonymised using methods that ensure it cannot be recovered or re-identified.

Start385 may update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or changes to the services we offer. We are committed to providing clear notice of any material changes.

When we make material changes to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this document
• Displaying an in-platform notice on start385 the next time you log in
• Sending a notification to your registered phone number or email if any changes fundamentally affect the way we use your data
• Maintaining previous versions of this document, available upon request through customer support

Your continued use of the start385 platform after a revised Privacy Policy takes effect will be considered your acceptance of those changes. We encourage you to review this page periodically to stay informed about how we protect your personal data.

The current version of this Privacy Policy takes effect from January 2026.

If you have any questions, concerns, or requests regarding the privacy of your data at start385, please do not hesitate to get in touch. We take every privacy-related enquiry seriously and will provide a thorough and accurate response.

You can reach us through:

• Live Chat: Available 24/7 within the start385 platform. This is the fastest way to reach us for urgent queries – average response time is under 3 minutes.
• Email: support@start385.click – for formal requests regarding data access, correction, or deletion, email is the preferred channel as it allows you to include all necessary information in full. We aim to respond to privacy-related enquiries within 5 business days.

For privacy rights requests (access, correction, deletion), please include in your email: your full name, start385 account number, the type of request, and a brief reason where applicable. We will verify your identity before processing any request to safeguard your data.