Warung225 Privacy Policy – Player Data Protection in Malaysia

Introduction

Warung225 ("we", "Platform") is the data controller responsible for processing your personal data in connection with your use of the warung225.my website and all related services. We are committed to protecting the privacy of every player and ensuring that personal data is handled in a transparent, secure and responsible manner.

This Privacy Policy has been drawn up in accordance with the requirements of Personal Data Protection Act 2010 (PDPA) Malaysia and international data protection best practices. It applies to all individuals who register, browse, or use any part of the warung225 platform, including players from across Malaysia.

We encourage you to read this policy in full to understand your rights and how we manage your information. If any section is unclear, the warung225 support team is available via 24/7 live chat or email at support@warung225.my.

Personal Data We Collect

Warung225 only collects data necessary to deliver a quality and secure service. Below are the categories of data we may collect:

How Warung225 Uses Your Data

The personal data we collect is used solely for the following purposes, each of which has a valid legal basis under PDPA 2010:

• Account management: Creating, verifying, and managing your warung225 account.
• Transaction processing: Processing deposits via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost and ShopeePay, as well as withdrawals to your Malaysian bank account.
• Identity verification (KYC): Meeting legal obligations related to anti-money laundering (AML) compliance and age verification.
• Platform security: Detecting and preventing fraud, unauthorised access, and platform abuse.
• Customer support: Responding to enquiries, resolving complaints, and providing technical support.
• Marketing (with consent): Sending promotional information, bonus offers and the latest warung225 news if you have given your consent.
• Responsible gaming: Monitoring gameplay patterns to identify players who may need assistance and support.
• Legal compliance: Meeting the reporting and record-keeping obligations required under Malaysian law.

Warung225 will not use your data for any other purpose without first obtaining your consent or without a valid legal basis.

Sharing Data with Third Parties

Warung225 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Your data is only shared in the following limited circumstances:

• Payment service providers: Required data is shared with providers such as DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay solely for the purpose of processing your transactions.
• Technology service providers: Technical partners managing platform infrastructure, analytics and security, all bound by strict confidentiality agreements.
• Regulatory bodies and law enforcement: When required by a court order, legal order, or valid request from Malaysian authorities.
• Fraud prevention: Identity verification agencies that help us verify player identities and prevent fraudulent activity.

Data Security

Warung225 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure:

• Data encryption in transit: All communications between your device and warung225 servers are protected by TLS 1.3 protocol with AES-256 encryption.
• Stored data encryption: Sensitive information such as payment details and identification numbers is stored in encrypted form.
• Two-factor authentication (2FA): Warung225 offers 2FA via SMS OTP to your registered Malaysian phone number to keep your account secure.
• 24/7 security monitoring: Our intrusion detection system monitors for suspicious activity around the clock.
• Regular penetration testing: Independent security assessments are conducted periodically to identify and address vulnerabilities.
• Internal access controls: Principle of least privilege – each staff member can only access the data necessary for their role.

Cookies & Tracking Technologies

Warung225 uses cookies and similar tracking technologies to enhance your experience on our platform. Below are the types of cookies we use:

• Essential cookies: Required for core platform functions such as login, game sessions, and security. These cookies cannot be disabled.
• Performance cookies: Helps us understand how players use the platform so we can improve our services. Data is collected in aggregate and anonymised form.
• Functional cookies: Remembering your preferences such as language, favourite games and account settings for a more personalised experience.
• Marketing cookies: Used only with your consent to display relevant warung225 promotions. You may withdraw this consent at any time.

You can manage your cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of the warung225 platform.

Your Rights Under PDPA 2010

As a data subject, you have the following rights regarding your personal data processed by warung225. Warung225 is committed to making it easy for you to exercise these rights:

To exercise any of the above rights, please contact warung225 by email at privacy@warung225.my or via live chat. We will respond within 14 business days.

Data Retention Period

Warung225 retains your personal data for as long as necessary to fulfil the purpose for which it was collected and to comply with applicable legal obligations. General data retention guidelines are as follows:

• Active account data: For the entire duration that your warung225 account remains active.
• Financial records and transactions: Minimum 7 years in accordance with Malaysian tax and anti-money laundering legal requirements.
• Support communication logs: 3 years from the date of last interaction.
• Marketing data: Until you withdraw your consent or request deletion.
• Data following account closure: Certain information is retained for 5 years after account closure for legal compliance purposes.

When data is no longer needed and there is no legal obligation to retain it, warung225 will securely delete or anonymise it using internationally recognised methods.

Cross-Border Data Transfers

In operating our global services, warung225 may need to transfer your personal data to countries outside Malaysia for server hosting or technical service purposes. In all such cases:

• Transfers are only made to countries with a level of data protection equivalent to or higher than Malaysia's.
• Appropriate contractual agreements are in place to ensure your data remains protected in accordance with PDPA 2010 standards.
• Warung225 ensures that overseas partners comply with our privacy policy and applicable data protection laws.

Children & Minors

The warung225 platform is for individuals aged 21 and above only. We do not knowingly collect or process the personal data of children or minors.

If you are a parent or guardian and believe your underage child has registered on warung225 or provided us with their personal data, please contact us immediately at privacy@warung225.my. We will take immediate action to investigate and remove such information.

Warung225 uses age verification mechanisms during registration and the KYC process to prevent access by minors. Players confirmed to be underage will be suspended immediately and all related data will be handled in accordance with applicable laws.

Amendments to This Privacy Policy

Warung225 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. When material changes are made:

• The "Updated" date at the top of this page will be revised accordingly.
• A notice will be displayed on the platform when you log in.
• A notification email will be sent to your registered address for any significant changes.

We encourage you to review this page periodically. Your continued use of the warung225 platform after any amendments are published constitutes your acceptance of the updated policy.

Contact warung225's Privacy Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact the warung225 Data Privacy Officer (DPO):

You also have the right to lodge a complaint with Department of Personal Data Protection Malaysia (JPDP) if you believe that your data protection rights have been violated by warung225.