5rt Privacy Policy – Your Player Data Protection

When you register and use the 5rt platform, we collect various types of information necessary to provide a safe, seamless service that meets your needs as a player in Malaysia. This data collection is carried out transparently and for legitimate purposes only.

Information you provide directly:

• Identity information: Full name, national ID (MyKad) or passport number, date of birth and gender.
• Contact information: Email address, mobile phone number and residential address in Malaysia.
• Financial information: Bank account number, bank name, e-Wallet account number (TNG, Boost, GrabPay) used for deposits and withdrawals.
• Verification documents: MyKad or passport copy, proof of address, and any other KYC documents required for identity verification.
• Login credentials: Username and encrypted password (5rt never stores passwords in plain text).

Information collected automatically when you use the platform:

• Technical data: IP address, browser type, device operating system, screen resolution and device identifier.
• Game activity data: Records of all game sessions, wagering, wins, losses, and transaction history.
• Location data: General location information based on IP address for eligible region verification and fraud prevention purposes.
• Cookie and session data: Login session details, language preferences, account settings, and in-platform navigation data.

Every piece of data we collect is used for a specific, legitimate, and transparent purpose. 5rt does not use your data for any purpose beyond the scope stated below without first obtaining your consent.

You may withdraw consent for promotional communications at any time through your account settings or by contacting our support team. Withdrawing consent will not affect your right to use the 5rt platform or process transactions.

5rt takes a strict and limited approach to sharing player data. We only share your personal information in the following situations and with carefully selected parties:

• Payment service providers: Transaction information is shared with FPX, DuitNow, TNG eWallet, Boost, and GrabPay providers solely to process your deposits and withdrawals. All these providers are bound by strict confidentiality agreements.
• Game software providers: Game session data is shared with the game software providers used on the 5rt platform for technical and game fairness audit purposes. This data is anonymised and contains no personally identifiable information.
• Identity verification companies: For the KYC process, your verification documents may be reviewed through a licensed and regulated third-party identity verification service.
• Legal authorities: 5rt fully complies with lawful requests from Malaysian authorities, regulatory bodies or court orders requiring disclosure of player information. In such situations, 5rt will notify the player in advance unless prohibited from doing so by law.
• Auditors and legal advisors: Information required for financial audit or legal advisory purposes may be shared with professional parties bound by confidentiality obligations.

Data security is a core investment at 5rt. We employ a combination of technologies, procedures, and policies designed to protect your personal data from unauthorized access, breaches, alteration, or destruction.

Technical security measures we implement:

• 256-bit SSL/TLS Encryption: All communications between your device and 5rt's servers are encrypted using the latest TLS 1.3 protocol, providing robust protection for data in transit.
• Data-at-rest encryption: Sensitive data stored in our databases, including identity and financial information, is encrypted using AES-256 — an internationally recognised military-grade encryption standard.
• Two-factor authentication (2FA): Players are encouraged to enable 2FA for an added layer of account protection via an authenticator app or SMS OTP.
• Real-time threat monitoring: Our SIEM (Security Information and Event Management) system continuously monitors the platform for suspicious activity, 24 hours a day, 7 days a week.
• Strict access controls: Access to player data by 5rt staff is granted on a "need-to-know" basis only. All access is logged and audited regularly.
• Regular penetration testing: 5rt conducts regular security tests by independent third parties to identify and close any system vulnerabilities before they can be exploited.

5rt uses cookies and similar tracking technologies to enhance user experience, maintain session security, and help us understand how players use our platform.

Types of cookies we use:

• Essential Cookies: Required for the platform to function properly. This includes session authentication cookies, security tokens, and language preferences. Without these cookies, you will not be able to log in or use the platform securely.
• Functional Cookies: Remembers your preferences such as account settings, favourite game selections, and display settings. These cookies enhance your overall platform experience.
• Analytics Cookies: Helps us understand how players interact with our platform. Data collected is anonymized and used solely for platform improvement.
• Security Cookies: Used to detect suspicious login attempts, identify bots, and prevent CSRF attacks and other cyber threats.

You can manage your cookie preferences through your browser settings. However, disabling essential cookies may affect platform functionality. Analytics and functional cookies can be disabled without affecting your ability to play on 5rt.

5rt retains your personal data only for as long as necessary for the purposes stated in this policy or as required by applicable Malaysian law. We have a clear data retention policy for each category of information.

• Active account data: Retained for the duration your account remains active at 5rt and continuously used to provide the services you have subscribed to.
• KYC and identity data: Retained for a minimum of 5 years after account closure in compliance with Malaysia's anti-money laundering (AML) legal requirements.
• Financial transaction records: Retained for a minimum of 7 years for financial audit, tax compliance, and regulatory requirements.
• Customer support communication logs: Retained for 2 years after case resolution for quality control and dispute resolution purposes.
• Analytics cookie data: Automatically deleted after 13 months in line with industry best practices.

Once the designated retention period expires, your data will be securely deleted or anonymised using methods that ensure it cannot be recovered or re-linked to your identity.

Under Malaysia's Personal Data Protection Act (PDPA) 2010 and global data protection best practices, you as a 5rt player hold the following rights regarding your personal data:

To exercise any of the above rights, you may submit a request through the customer support section on the 5rt platform. We will process your request within 30 business days from the date of receipt. For complex cases, this period may be extended with prior notification to you.

The 5rt platform is strictly for adult users aged 18 years and above. We do not intentionally collect, store or process any personal data of individuals under the age of 18.

As part of our registration and KYC verification process, every player is required to verify their age using a valid identity document. The 5rt system is designed to detect and reject registrations by individuals below the minimum age requirement.

5rt may contain references or links to third-party websites or services, including payment providers, game suppliers, and affiliated business partners. This Privacy Policy applies solely to the 5rt platform.

When you access third-party services through our platform, the respective third party's privacy policy will apply and we are not responsible for their privacy practices. We encourage you to read each third party's privacy policy before providing them with any personal information.

5rt carefully selects third-party partners and only works with providers that uphold high security and privacy standards. However, 5rt cannot guarantee the practices of those third parties and recommends that players exercise caution when interacting with any party outside the official 5rt platform.

5rt reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements or platform improvements. All changes take effect upon publication of the updated version on our website.

For material or significant changes that affect your privacy rights, we will notify you via:

• In-platform notification on 5rt when you next log in.
• An email will be sent to the address registered in your account at least 14 days before changes take effect.
• A clear statement on the 5rt website's main page.

Continued use of the 5rt platform after an updated Privacy Policy takes effect constitutes your acceptance of the changes. If you disagree with any changes, you have the right to close your account in accordance with the procedures set out in our Terms and Conditions.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how 5rt handles your personal data, our privacy team is ready to assist you.

How to contact the 5rt Data Protection Officer (DPO):

• Official Email: [email protected] (please indicate "Privacy Inquiry" in the subject line)
• Live Chat: Available on the 5rt platform, 24 hours a day, 7 days a week.
• Response time: Within 2 business days for general enquiries; 30 business days for formal player rights requests.

You also have the right to lodge a complaint with the Personal Data Protection Department under the Malaysian Ministry of Communications and Digital if you believe your privacy rights have been violated. We do, however, encourage you to contact us first so we can resolve any issues promptly and to your satisfaction.