Official Documents

Privacy Policy Golden3 – Personal Data Protection for Malaysian Players

This Privacy Policy explains how Golden3 collects, uses, stores, and protects your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). Your privacy is not fine print at the bottom of the page — it is a core commitment we make to every member.

Last updated: 1 January 2026 Version 3.1
Privacy Policy Contents
Data We Collect Purpose of Data Use Data Sharing with Third Parties Data Security & Encryption Your Rights as a Member Cookies & Tracking Technologies Cross-Border Data Transfers Data Retention Period

Golden3's Six Privacy Commitments to You

The core principles governing how we handle the personal data of every Golden3 Malaysia member

Full Malaysia PDPA Compliance

Golden3 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA) across all aspects of collecting, processing, storing, and transferring members' personal data. This is not optional — it is a legal obligation we take seriously.

256-bit SSL Encryption

All data transmitted between your device and Golden3's servers is protected by 256-bit SSL encryption — the same security standard used by leading banking institutions in Malaysia. Your data cannot be intercepted in transit.

No Sale of Data to Third Parties

Golden3 has never sold, rented, or shared members' personal data with any third party for marketing purposes without your explicit consent, and never will. Your data is not a product we trade in — it is personal information we are entrusted to protect.

Minimise Data Collection

Golden3 only collects data that is genuinely necessary to operate our services for you. We do not collect excessive information irrelevant to the purpose of our service — a "data minimisation" principle we apply consistently.

Full Control in Your Hands

You have the right to access, correct, or request deletion of your personal data at any time. Golden3 provides a straightforward, transparent process for exercising these rights — no lengthy bureaucratic hoops to jump through.

Prompt Data Breach Notification

In the event of any security incident that may involve members' personal data, Golden3 is committed to notifying affected members and the relevant authorities within the timeframe required by law — with no attempt to conceal the incident.

Your Rights as a Golden3 Member

Under Malaysia's PDPA, you have the following rights regarding your personal data at Golden3

Right of Access

You have the right to request and receive a copy of all personal data held by Golden3 in relation to your account. Such requests will be processed within 21 business days.

Right to Rectification

If the personal data Golden3 holds about you is inaccurate or out of date, you have the right to request a correction. Updates can be made through your account settings or by contacting support.

Right to Erasure

You have the right to request deletion of your personal data where it is no longer required for the original purpose for which it was collected, subject to any applicable legal retention requirements.

Right to Object

You have the right to object to the processing of your personal data for specific purposes such as direct marketing. Your objection will be respected and acted upon promptly.

Right of Data Access

You have the right to receive the personal data you have provided to Golden3 in a machine-readable format and to transmit that data to another service provider if you wish.

Right to Withdraw Consent

Where the processing of your data is based on consent you have provided, you have the right to withdraw that consent at any time without affecting your other rights.

To exercise any of the rights above, contact us by email at privacy@golden3.asia or via the Golden3 platform live chat. We will process your request within the timeframe stipulated by law.

1

Introduction

This Privacy Policy ("Policy") is published by Golden3 ("We", "Platform", "Company") and describes how we collect, use, process, store, and protect your personal data when you use the golden3.asia website and all services offered on it.

Golden3 operates as an online Sports Betting and casino platform built specifically for players in Malaysia. All personal data processing activities we carry out are subject to and fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA) as the primary data protection legislation governing our operations.

By registering a Golden3 account or using any of our services, you confirm that you have read and understood this Privacy Policy. If you disagree with how we handle your personal data as described in this Policy, you should not use Golden3's services.

Important Note: This Privacy Policy is to be read together with Terms & Conditions Golden3. In the event of any conflict between the two documents regarding data privacy, this Privacy Policy shall prevail.
2

Personal Data We Collect

Golden3 collects personal data from several sources and across several categories. Below is a full breakdown of the types of data we collect:

Identity Data

Full name, MyKad or passport number, date of birth, gender. Required for identity verification and AML compliance.

Contact Data

Email address, Malaysian phone number, residential address. Used for account communications and verification.

Financial Data

Payment method details (Touch 'n Go, GrabPay, DuitNow, FPX), deposit and withdrawal transaction history.

Gaming Activity Data

Betting history, games played, wins and losses, sports and casino preferences.

Technical Data

IP address, device type, operating system, web browser, access logs, session data. Used for security and technical maintenance.

Usage Data

Pages visited, features used, clicks and in-platform interactions. Helps us improve the user experience.

Golden3 does not collect sensitive personal data such as health information, religious beliefs, or political views unless it is directly relevant to a service requirement, such as a responsible gambling programme involving mental health information voluntarily shared by a member.

3

Purpose of Personal Data Use

Golden3 uses the personal data we collect for the following purposes:

Purpose Types of Data Used
Member account management and verification Identity data, contact data
Processing deposits and withdrawals Financial data, identity data
AML & KYC compliance Identity data, financial data, transaction data
Fraud detection and prevention Technical data, activity data, financial data
Customer support and complaint resolution Identity data, activity data, communication data
Marketing and promotions (with consent) Contact data, gaming preference data
Product improvement and user experience Usage data, activity data (anonymised)
Responsible gaming and member protection Gaming activity data, financial data
Regarding Marketing: Golden3 will only send you marketing communications if you have given your consent at registration or at a later stage. You may opt out of marketing communications at any time via the unsubscribe link in any email or by contacting our customer support team.
4

Legal Basis for Data Processing

Under Malaysia's PDPA 2010, Golden3 processes your personal data on lawful grounds. Depending on the purpose of processing, we rely on the following bases:

  • Contract Performance: Processing necessary to fulfil the service contract between you and Golden3 — including account management, payment processing, and the provision of the betting services you use.
  • Legal Obligation: Processing necessary to comply with legal obligations applicable to Golden3, including AML (Anti-Money Laundering), KYC (Know Your Customer), and reporting to authorities where required.
  • Legitimate Interests: Processing necessary for the legitimate interests of Golden3 or third parties, such as fraud detection, platform security, and service improvement — provided these interests do not override your own interests or fundamental rights.
  • Consent: For certain activities such as direct marketing and optional analytics, we rely on the consent you provide. You may withdraw this consent at any time.
5

Data Sharing with Third Parties

Golden3 does not sell, rent, or trade members' personal data. We only share personal data in the following limited and specific circumstances:

  • Payment Service Providers: To process deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks), we are required to share the necessary data with the relevant payment providers. All such providers are bound by strict confidentiality agreements.
  • Game Providers: To deliver live casino, slots, and Virtual Sports, we work with world-class providers. Only the minimum data necessary is shared to ensure these games function correctly.
  • Relevant Authorities: When required by law, court order, or a legitimate request from Malaysian government authorities — including for AML and fraud prevention purposes.
  • Technology Providers: Companies that help us operate the platform's technical infrastructure, including cloud computing, analytics, and cybersecurity services — all of which are bound by strict data processing agreements.
  • Business Transfers: In the event of a company merger, acquisition, or asset transfer, member personal data may be transferred as part of the business assets, subject to notice being given to affected members.
Our Commitment: All third parties who receive personal data belonging to Golden3 members are bound by contractual agreements requiring them to protect that data to a standard equal to or exceeding Golden3's own, and to use it solely for the specified purposes.
6

Data Security & Protection Measures

Golden3 implements comprehensive technical and organisational security measures to protect members' personal data against unauthorised access, loss, destruction, or accidental disclosure:

  • Data Encryption in Transit: All data transmitted between your device and Golden3's servers is protected by TLS 1.3 (Transport Layer Security) encryption — the most current security protocol available.
  • Data Encryption in Storage: Sensitive data stored in Golden3's databases — including passwords (stored as non-reversible hashes) and financial information — is encrypted using AES-256.
  • Layered Access Controls: Access to members' personal data within Golden3's internal systems is restricted to staff who genuinely require it to carry out their duties, based on the principle of minimum privilege.
  • 24/7 Security Monitoring: Golden3's cybersecurity team continuously monitors all system activity to detect any unauthorised access attempts or suspicious behaviour.
  • Regular Security Audits: Golden3 conducts regular internal and external security audits, including independent penetration testing, to identify and address vulnerabilities before they can be exploited.
  • Staff Training: All Golden3 staff who handle personal data receive regular privacy and data security training.

That said, no system is 100% secure. We encourage you to play your part in protecting your account by using a strong password, enabling two-factor authentication (2FA), and never sharing your login credentials with anyone.

7

Cookies & Tracking Technologies

Golden3 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

  • Essential Cookies: These cookies are required for the platform to function properly — including maintaining your login session, remembering language preferences, and ensuring security. They cannot be disabled without affecting core platform functionality.
  • Preference Cookies: Saves your preferences such as display layout, notifications, and other settings, allowing the platform to remember your configuration between sessions.
  • Analytics Cookies: Helps us understand how players use the platform — which pages are visited most, which features are most popular, and where players encounter issues. This data is used in aggregated, anonymised form for improvement purposes.
  • Security Cookies: Used by our fraud detection system to identify suspicious sessions and protect your account from unauthorised access.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality of the Golden3 platform. For more information on managing cookies in your browser, refer to your browser's help documentation.

Note: Golden3 does not use third-party cookies for external advertising purposes. All analytics cookies we use are solely for internal platform improvement.
8

Cross-Border Data Transfers

Some of the third-party service providers we work with — such as international casino game providers, cloud computing services, and payment processing systems — may process or store data outside Malaysia.

When Golden3 members' personal data is transferred to another country, we ensure that such transfers are carried out with adequate safeguards through one or more of the following mechanisms:

  • Data processing agreements incorporating standard contractual clauses that safeguard members' rights.
  • Transfers to countries recognised as having an adequate level of data protection.
  • Other approved safeguard mechanisms under applicable data protection legislation.

You may request further details about specific cross-border data transfers by contacting us at privacy@golden3.asia.

9

Data Retention Period

Golden3 retains your personal data only for as long as it is needed for the stated purposes or as required by law. Our general retention period guidelines are as follows:

Data Category Retention Period
Active account data (name, email, phone) Throughout active account + 7 years
Financial transaction records (AML) 7 years from the transaction date
Identity verification documents (KYC) 7 years from account closure
Customer support communication logs 3 years from the date of communication
Technical & security log data 2 years from the log date
Usage analytics data (anonymised) Unlimited (no personal data)
Marketing data (with consent) Until consent is withdrawn

Once the applicable retention period expires, personal data will be securely deleted or fully anonymised so that it can no longer be linked to your identity. Deletion is carried out using methods that ensure the data cannot be recovered.

10

Children's Policy

Golden3's services are not intended for individuals under the age of 18. Golden3 does not knowingly collect or process personal data from minors.

If we discover that we have collected personal data from a minor without adequate age verification, we will take immediate steps to delete that data and close the account in question. Parents or guardians who find that their underage child has registered a Golden3 account should contact us immediately at privacy@golden3.asia.

Golden3's Commitment: We invest in effective age verification technology and KYC processes to prevent minors from registering or accessing the platform. Child protection is a priority we do not compromise on.
11

How to Exercise Your Rights

To exercise any of your privacy rights under Malaysia's PDPA, you may contact us through the following channels:

  • Privacy Email: Submit a written request to privacy@golden3.asia. Please state the type of right you wish to exercise and include your account details to help us locate your records.
  • Live Chat: For general enquiries about your privacy and personal data, Golden3's customer support team is available via 24/7 live chat within the platform.

Golden3 will process your rights request within:

  • Right of Access: 21 working days from receipt of request.
  • Right to Rectification: 14 working days from receipt of request.
  • Right to Erasure: 30 working days from receipt of request (subject to statutory retention requirements).
  • Right to Object: Immediately for direct marketing; 21 days for other types.

We may require you to verify your identity before processing your rights request — this is to protect your data from being accessed by unauthorised parties. Verification can be completed through the account login process and additional confirmation steps if necessary.

If you are dissatisfied with how Golden3 has handled your personal data or a rights request, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant Ministry of Communications and Digital Malaysia.

12

Changes to This Privacy Policy

Golden3 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, the technology we use, legal requirements, or other operational reasons.

When we make material changes to this Policy:

  • The "Last Updated" date at the top of this document will be revised accordingly.
  • We will notify all active members via an in-platform notice or email at least 14 days before any changes take effect.
  • For particularly significant changes, we may seek your consent again.

Your continued use of the Golden3 platform after the effective date of any amendments will be deemed your acceptance of the updated Privacy Policy.

13

Contact Golden3's Privacy Officer

Golden3 has appointed a Privacy Officer responsible for ensuring the platform's compliance with Malaysia's PDPA and all applicable data privacy obligations. You may contact our Privacy Officer directly for any queries, concerns, or complaints relating to your personal data privacy:

  • Email: privacy@golden3.asia
  • General Support Email: support@golden3.asia
  • Response Time: Within 3 business days for privacy enquiries.

We take every privacy-related enquiry and complaint seriously. Any privacy issue you raise with us will be handled with high priority and complete confidentiality.

Our Final Commitment: Your privacy is more than a legal compliance obligation for Golden3 — it is part of the trust you place in us when you register and use our platform. We are committed to honouring that trust by upholding the highest data privacy standards in every aspect of Golden3's operations.
Related Documents

This Privacy Policy is to be read together with Terms & Conditions and Responsible Gambling Golden3 for a complete overview of your rights and responsibilities as a platform member.

For any privacy-related enquiries, contact privacy@golden3.asia.

Why Golden3's Privacy Policy Matters to Malaysian Players

Most online players never read the privacy policy of the platforms they use. We all know how it feels — a long page filled with legal terminology, and a tempting "Agree" button that is all too easy to click without reading a word. But at Golden3, we believe there is a very good reason to spend a few minutes understanding how your personal data is handled — especially on an online betting platform where you deposit real money and share sensitive financial information.

When you register a Golden3 account, you provide us with fairly sensitive information — your full name, phone number, MyKad number for identity verification, and your eWallet or bank account details through payment methods such as Touch 'n Go, GrabPay, DuitNow, or FPX. This is not the kind of information you should hand over to any platform without knowing clearly how it will be used and protected. Golden3's Privacy Policy addresses these questions directly and transparently — not in impenetrable legal language, but in plain, accessible English.

One thing we want to make absolutely clear to all Malaysian players is how we handle financial data. When you make a deposit via Touch 'n Go eWallet or GrabPay, we receive the information needed to verify and process the transaction — but we do not store your eWallet account number or eWallet login credentials. Information shared during a payment transaction is processed through certified, secure payment gateway systems, and only data required for AML compliance (verification of fund origin) is retained in our internal records. This is standard practice in the financial services industry, and one we follow strictly.

Golden3 takes Malaysia's PDPA obligations seriously. The Personal Data Protection Act 2010 requires all companies operating in Malaysia to process personal data in a lawful, fair, and transparent manner. It gives Malaysian individuals the right to know what data is held about them, to correct inaccurate data, and in certain circumstances to request its deletion. Golden3 does not merely meet the minimum requirements under the PDPA — we actively go beyond them by providing a straightforward, transparent process for you to exercise these rights whenever you need to.

One concern commonly raised by Malaysian players is whether online betting platforms will sell their data to advertisers or external companies. Golden3's answer is clear and unequivocal: no. We do not sell, rent, or trade member personal data to any third party for marketing purposes. Your data is not a commodity to us. The only reason we share data with third parties is to operate the services you use — such as game providers powering the live casino, or payment systems processing your deposits and withdrawals — and all such sharing is governed by strict confidentiality agreements.

On the technical security front, Golden3 consistently invests in robust data protection infrastructure. 256-bit SSL encryption is not just a marketing tagline — it is a genuine technical requirement that ensures all communications between your device and Golden3's servers cannot be intercepted by third parties. Your password is never stored in plain text; it goes through a one-way cryptographic hashing process, meaning that even if our database records were accessed without authorisation, your password could not be recovered. Sensitive financial data such as bank account numbers is stored in encrypted form and can only be decrypted by systems that require a separately stored key.

Cookies and tracking technologies are a topic of growing awareness among Malaysia's digital users. Golden3 uses cookies for limited and clearly defined purposes — primarily to maintain your login session (so you are not logged out every few minutes), to remember your platform preferences, and for security systems that detect suspicious access patterns. We do not use third-party advertising cookies that track your activity across other websites. When you end your Golden3 session, session cookies are automatically cleared from your browser.

For Malaysian players who actively use multiple digital platforms every day — from Maybank2u online banking to shopping on Shopee and ordering food through GrabFood — awareness of data privacy is increasingly important. A platform that respects your privacy does not simply fulfil a legal requirement; it demonstrates the level of professionalism and trustworthiness you should rightfully expect from any platform you entrust with your money and personal information. At Golden3, we view our commitment to data privacy not as a regulatory burden, but as a core part of our brand identity as a platform Malaysian players can trust.

If you have any questions about how your personal data is handled at Golden3, or if you wish to exercise any of your privacy rights under Malaysia's PDPA, do not hesitate to contact our Privacy Officer at privacy@golden3.asia. We are committed to providing a clear, helpful, and timely response to every privacy-related enquiry we receive.

Your Data Is Protected. Join Golden3 with Confidence!

Register for a free Golden3 account and enjoy a safe, secure Sports Betting, casino, slots, and virtual sports experience. The Golden3 platform is built with Malaysia PDPA data protection as a core priority — your privacy is our responsibility.

FAQ – Golden3 Privacy Policy

Frequently asked questions about data privacy and personal information protection at Golden3

When you deposit via Touch 'n Go eWallet, GrabPay, or any other Malaysian local eWallet, the information processed is limited to the transaction data required — the deposit amount, confirmation that the payment was successful, and a unique transaction identifier. Golden3 does not receive or store your full eWallet account number, PIN, or eWallet password. All eWallet transactions are processed through a PCI-DSS certified payment gateway that acts as an intermediary between the Golden3 platform and the eWallet provider. The only financial information we retain is a transaction record (amount, date, payment method, status) for your account purposes and AML compliance.

Yes, you have the right to request deletion of your personal data, and Golden3 will honour that request in most circumstances. However, there is an important limitation: under Malaysian law, including AML (Anti-Money Laundering) requirements, Golden3 is legally obligated to retain financial transaction records and identity verification documents (KYC) for a specified period — typically 7 years — even after an account is closed. This is not a matter of discretion but a legal obligation. For any data not subject to mandatory retention requirements, your deletion request will be processed within 30 business days. To request data deletion, contact us at privacy@golden3.asia with "Data Deletion Request" in the email subject line.

Your gaming activity data — such as the sports you bet on, the casino games you play, or the slots you enjoy — is used by Golden3 for several internal purposes: to personalise in-platform game recommendations, to tailor promotional offers to your interests, and to support responsible gambling programmes (for example, identifying betting patterns that may warrant intervention). We do not sell or share your gaming behaviour profile with external advertisers or other platforms. If you prefer that your data not be used for in-platform personalisation of recommendations and promotions, you may opt out via your account settings or by contacting support.

When your Golden3 account is closed — whether at your request or by Golden3 — your personal data is not deleted immediately. This is due to the legal retention obligations outlined earlier. Closed accounts will be set to "inactive" status and access to your data for marketing purposes will cease immediately. Once the applicable legal retention period has expired (typically 7 years for financial records), your data will be permanently deleted or fully anonymised. If you would like to know exactly what data we still hold in relation to a closed account, you may submit a data access request to privacy@golden3.asia.

In the event of a security incident involving members' personal data, Golden3 has established incident response procedures in place. Our security team will promptly investigate the scope and impact of the incident. Members whose data may have been affected will be notified by email within the required timeframe — for serious incidents, notification will be issued within 72 hours of incident confirmation, in line with industry best practices. The relevant authorities in Malaysia will be informed in accordance with legal requirements. We will provide clear information about what data may have been affected, the potential risks involved, and the steps you can take to protect yourself. Transparency in situations like this is a value we will not compromise on.
Bahasa Melayu