Privacy Policy Fortuna333 – Personal Data Protection for Malaysia Members

1Introduction

Fortuna333 ("we", "Platform") takes our responsibility to the privacy of every member and user seriously. This Privacy Policy describes our practices regarding the collection, use, disclosure, and protection of your personal information when you use the fortuna333.net website and related mobile applications.

This document is prepared in accordance with the provisions of Malaysia's Personal Data Protection Act 2010 (PDPA). We are committed to ensuring your personal data is processed in a fair, lawful, and transparent manner.

If you disagree with any part of this policy, please stop using our platform and contact us for further discussion.

2Types of Personal Data Collected

Fortuna333 collects various types of personal data depending on your interaction with the platform. Below is a summary of the data we collect:

We do not collect credit/debit card numbers directly — all financial transactions are processed through PCI-DSS certified third-party payment gateways.

3How We Collect Data

Your personal data is collected through various means as you interact with the Fortuna333 platform:

• Account Registration: Information you fill in during the new member registration process.
• KYC Verification: Documents you upload for identity verification purposes, as required by anti-money laundering legislation.
• Financial Transactions: Information shared during the deposit or withdrawal process through your chosen payment method.
• Platform Usage: Data collected automatically via cookies, server logs, and tracking technologies when you use our website or app.
• Customer Support: Information you provide when contacting our support team via live chat, email, or Telegram.
• Promotions & Surveys: Data shared when you participate in our competitions, satisfaction surveys, or VIP programme.

4Purpose of Using Your Personal Data

Fortuna333 uses your personal data for the following purposes:

• Account Management: To create, verify, and manage your member account.
• Transaction Processing: To process deposits, withdrawals, and any financial transactions carried out on the platform.
• Identity Verification (KYC): To comply with Anti-Money Laundering (AML) and Counter Financing of Terrorism (CFT) legal requirements.
• Platform Security: To detect and prevent fraud, unauthorised access, and other unlawful activities.
• Customer Support: To provide assistance and resolve any enquiries or complaints you may have.
• Communications: To send important notifications related to your account, promotions, and platform updates (you may unsubscribe from marketing communications at any time).
• Service Improvement: To analyse usage patterns and continuously improve the quality of the platform.
• Legal Compliance: To fulfil applicable legal obligations, regulations, or court orders.

5Data Sharing With Third Parties

Fortuna333 do not sell or rent your personal data to any party. However, we share your data with the following parties under certain circumstances:

• Payment Service Providers: Payment gateways and banks that process your financial transactions – only data necessary for the transaction is shared.
• Gaming Service Providers: Companies that supply games to our platform — minimum data required to operate the games.
• Analytics Services: Third-party analytics providers that help us understand platform usage patterns — in aggregated and anonymised form.
• Authorities: Law enforcement agencies, regulatory bodies, or courts when we are legally required to do so.
• Professional Advisors: Lawyers, accountants, or auditors subject to professional confidentiality obligations.

All third-party providers we work with are required to comply with the data security standards set by Fortuna333 and applicable legislation.

6Data Security Measures

Fortuna333 implements a range of technical and organisational security measures to protect your personal data:

• 256-bit SSL encryption for all data communications between users and servers.
• Data-at-rest encryption for all files and databases containing sensitive information.
• Role-based access control (RBAC) – only authorised personnel with a clear operational need may access specific data.
• 24/7 security monitoring with an active intrusion detection system (IDS).
• Regular security audits by an independent third party to identify and address vulnerabilities.
• Secure Data Backup to ensure service continuity and recovery in the event of an incident.

While we take all reasonable measures, no system can be guaranteed 100% secure. We therefore also encourage you to take personal protective steps, such as using a strong password and not sharing your login credentials.

7Data Retention Period

Fortuna333 retains your personal data for as long as your account is active or as long as needed for the purposes stated in this policy. After account closure, we will retain your data according to the following periods:

• Financial transaction data: 7 years from the transaction date, in accordance with accounting and anti-money laundering legal requirements.
• KYC Records: 5 years after the business relationship ends, in accordance with AMLA 2001 requirements.
• Customer support communication logs: 3 years for complaint resolution and audit purposes.
• Technical log data: 12 months for security purposes and technical troubleshooting.

Once the retention period expires, your personal data will be securely deleted or anonymised in accordance with established procedures.

8Cookies & Tracking Technologies

Fortuna333 uses cookies and similar tracking technologies to enhance the user experience on our platform. Types of cookies used:

• Essential Cookies: Required for core platform functions such as login session verification and security settings. These cookies cannot be disabled.
• Performance Cookies: Collect information on how users use the website to help us improve the platform.
• Functional Cookies: Store your preferences such as language and display settings for a more personalised experience.
• Analytics Cookies: Help us understand platform traffic patterns and usage in aggregate form.

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality and user experience of the Fortuna333 platform.

9Your Rights Under PDPA 2010

As a Fortuna333 member and data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights:

To exercise any of the above rights, please contact our data protection team at [email protected]. We will respond within 14 business days from the date your request is received.

10Cross-Border Data Transfers

In certain circumstances, your personal data may be transferred to or processed in countries outside Malaysia, particularly when involving technical service providers or international gaming platforms.

Fortuna333 ensures that any such data transfers are carried out with adequate safeguards, including:

• Data processing agreements (DPA) binding third-party providers to data protection standards equivalent to Malaysia's PDPA.
• Use of standard contractual data protection clauses recognised in data transfer agreements.
• Data protection risk assessment prior to any new data transfer being implemented.

11Special Protection for Children

Fortuna333 services are for users aged 18 years and above only. We do not knowingly collect any personal data from individuals under the age of 18.

If you believe that someone under the age of 18 has registered an account on our platform, please contact us immediately at [email protected]. We will investigate the matter and take appropriate action, including deleting the account and any related data.

12Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the Fortuna333 Data Protection Officer via:

• Email: [email protected] (please state the subject: "Privacy Enquiry")
• Live Chat: Available 24/7 via the Fortuna333 platform

We are committed to resolving any privacy concerns you have within a reasonable timeframe. If you are not satisfied with our response, you have the right to file a complaint with the Department of Personal Data Protection Malaysia.

This Privacy Policy was last updated on June 2026 and will be reviewed periodically to ensure it remains relevant and compliant with the latest legal requirements.