golden3 Privacy Policy

1. Who We Are

golden3 is an online casino and sports betting platform accessible at golden3.club, operated by its licensed entity ("golden3", "we", "us", or "our"). golden3 operates under international gaming authority standards and serves players in Malaysia and other permitted jurisdictions.

golden3 is the data controller in respect of personal data collected through the golden3 platform. If you have questions about how your data is handled, please contact us at [email protected].

2. Personal Data We Collect

golden3 collects the following categories of personal data:

2.1 Identity Data

• Full legal name (as appearing on your MyKad, passport, or other government-issued identity document)
• Date of birth (to verify the 21+ age requirement)
• Identity document number and copies (for KYC verification)
• Nationality and country of residence
• Profile photograph (where submitted as part of KYC)

2.2 Contact Data

• Email address
• Malaysian mobile phone number
• Residential address (for correspondence and address verification)

2.3 Financial Data

• Payment method details (e.g. registered Touch n Go eWallet account, Boost account, Maybank account number, CIMB account number, Hong Leong Bank account number, GrabPay account, USDT TRC20 wallet address)
• Deposit and withdrawal transaction history
• Account Wallet balance and transaction records

2.4 Gaming & Betting Data

• Bets placed, game sessions played, and outcomes
• Bonus and promotion usage records
• Responsible gaming tool settings (e.g. deposit limits, self-exclusion status)

2.5 Technical Data

• IP address and geolocation data
• Device identifiers, browser type, and operating system
• Session logs, login timestamps, and access records
• Cookies and similar tracking technology data (see Section 9)

2.6 Communications Data

• Records of customer support interactions (live chat, email)
• Your responses to surveys, feedback forms, and promotional communications

3. How We Collect Your Data

golden3 collects personal data through the following means:

• Direct submission: When you register a golden3 Account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion.
• Automated technical collection: Through cookies, server logs, and session tracking technology as you use the golden3 platform.
• Third-party payment processors: When you transact via Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, Hong Leong Bank, 7-Eleven Cliqq, or USDT TRC20, transaction confirmation data is shared with golden3 by the respective processor.
• Identity verification providers: golden3 may use third-party KYC service providers to verify identity documents submitted during account registration. These providers supply verification results to golden3.
• Fraud prevention services: golden3 may receive risk signals from fraud prevention and AML compliance service providers.

4. Purposes of Processing

golden3 processes your personal data for the following purposes:

• Account registration and management: Creating and maintaining your golden3 Account, verifying your identity and age, and administering your Wallet.
• Service provision: Enabling you to place bets, access games, participate in promotions, and use all golden3 Services.
• Payment processing: Processing deposits and withdrawals via your registered payment methods.
• KYC and AML compliance: Verifying your identity and monitoring transactions in accordance with international gaming authority anti-money laundering requirements.
• Responsible gaming: Administering deposit limits, self-exclusion, cool-off periods, and other responsible gaming tools; identifying players who may require support.
• Customer support: Responding to your enquiries, complaints, and disputes.
• Security: Detecting and preventing fraud, unauthorised account access, and cheating.
• Legal compliance: Meeting obligations under applicable law, regulatory requirements, and court orders.
• Marketing (where consented): Sending you promotional offers, game announcements, and bonus notifications by email or SMS, where you have opted in. You may withdraw consent at any time.
• Platform improvement: Analysing aggregated usage data to improve golden3 Services, game selection, and user experience.

5. Legal Basis for Processing

golden3 relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing required to deliver the golden3 Services you have contracted for — account management, payment processing, and game provision.
• Legal obligation: Processing required by applicable law, including KYC verification, AML transaction monitoring, and regulatory reporting obligations under international gaming authority requirements.
• Legitimate interests: Fraud detection, platform security, responsible gaming monitoring, and internal analytics — provided these interests are not overridden by your rights.
• Consent: Direct marketing communications, where you have provided explicit consent. Consent may be withdrawn at any time by contacting [email protected] or by using the opt-out link in any marketing communication.

6. Disclosure of Personal Data

golden3 does not sell your personal data to third parties. We may share your data in the following circumstances:

• Payment processors: Transaction data is shared with Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, Hong Leong Bank, 7-Eleven Cliqq, and USDT TRC20 processors as necessary to complete your payment instructions.
• KYC and identity verification providers: Identity documents and verification data are shared with authorised KYC service providers for the purpose of identity verification only.
• Game studios: Golden3 partners with independent game studios (including Pragmatic Play, PG Soft, Evolution Gaming, and others). Your gaming session data is shared with the relevant studio as technically necessary to deliver the game.
• Fraud and AML service providers: Risk signals and transaction data may be shared with fraud prevention and AML compliance service providers under strict data processing agreements.
• Regulatory and law enforcement authorities: Where required by law, court order, or international gaming authority regulatory directive, golden3 will disclose personal data to competent authorities.
• Group entities and successors: Personal data may be transferred to group entities or a successor entity in the event of a corporate restructuring, merger, or acquisition, subject to equivalent privacy protections.

All third parties with whom golden3 shares personal data are bound by data processing agreements requiring them to process your data only for the specified purpose and to maintain appropriate security standards.

7. Data Retention

golden3 retains personal data for as long as is necessary to fulfil the purposes described in this Policy and to comply with applicable legal, regulatory, and audit obligations. Specifically:

• Account and identity data: Retained for the duration of your golden3 Account and for a minimum of 5 years following Account closure, as required by international gaming authority AML record-keeping standards.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Gaming session logs: Retained for a minimum of 3 years.
• Customer support communications: Retained for 2 years from the date of resolution.
• Marketing consent records: Retained until consent is withdrawn plus 1 year for audit purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

8. Security Measures

golden3 implements the following technical and organisational security measures to protect your personal data:

• 256-bit SSL/TLS encryption for all data transmitted between your device and golden3 servers
• Encryption of sensitive data fields (including identity documents and financial data) at rest
• Access controls limiting internal access to personal data on a strict need-to-know basis
• Two-factor authentication (2FA) options for player accounts
• Automated intrusion detection and login anomaly monitoring
• Regular security audits and penetration testing by independent third parties
• Staff training on data protection and information security

While golden3 takes all reasonable steps to protect your data, no internet transmission is completely secure. You are responsible for keeping your golden3 Account credentials confidential and for promptly reporting any suspected unauthorised access to [email protected].

9. Cookies & Tracking Technologies

golden3 uses cookies and similar tracking technologies on the golden3.club website to:

• Maintain your login session and remember your preferences
• Monitor platform performance and load balancing
• Detect and prevent fraud and automated bot activity
• Measure usage patterns and game engagement for internal analytics

golden3 does not use third-party advertising cookies or share cookie data with external advertising networks. Session cookies are deleted when you close your browser. Persistent preference cookies expire after a maximum of 12 months.

You may configure your browser to refuse cookies, but doing so may affect the functionality of the golden3 platform, including your ability to maintain a login session.

10. Your Data Rights

Subject to applicable law and regulatory obligations, you have the following rights in respect of your personal data held by golden3:

• Right of access: Request a copy of the personal data golden3 holds about you.
• Right of rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to golden3's legal retention obligations.
• Right to restriction: Request that golden3 restrict processing of your data in certain circumstances.
• Right to data portability: Request a machine-readable copy of personal data you have provided to golden3.
• Right to object: Object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Withdraw consent for marketing communications at any time, without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact golden3 at [email protected] with sufficient identification to verify your request. golden3 will respond within 30 days. Some requests may be declined where processing is required by law or for the exercise of legal claims.

11. Children's Privacy

The golden3 Services are strictly intended for individuals aged 21 years and older. golden3 does not knowingly collect personal data from persons under the age of 21. If golden3 becomes aware that a person under 21 has provided personal data, the relevant Account will be closed immediately and all data deleted, subject to any mandatory legal retention obligations.

Parents and guardians who become aware that a minor has registered a golden3 Account should contact [email protected] immediately. golden3 will investigate and take appropriate action within 24 hours of notification.

12. International Data Transfers

golden3 operates internationally and your personal data may be processed in countries outside Malaysia, including by KYC verification providers, game studio partners, and technology infrastructure providers. Where personal data is transferred internationally, golden3 ensures that appropriate safeguards are in place — including contractual data processing agreements incorporating standard data protection clauses — to protect your data to a standard equivalent to Malaysian data protection requirements.

13. Changes to This Privacy Policy

golden3 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via email at the address registered on their golden3 Account at least 14 days prior to the change taking effect. The current version of this Privacy Policy is always available at golden3.club/privacy-policy. Continued use of the golden3 Services after the effective date of any update constitutes acceptance of the revised Policy.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by golden3, please contact:

• Data Protection Contact: [email protected]
• Response Target: 5 business days for general enquiries; 30 days for formal data rights requests
• Website: golden3.club/privacy-policy

All data-related correspondence should be submitted in writing to ensure a proper audit trail and timely resolution.