Privacy Policy

This Privacy Policy ("Policy") describes how my365 ("Company", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at my365.cam ("Platform"), collects, uses, stores, discloses, and protects the personal data of individuals ("Player", "User", "you", "your") who register for or use our services.

This Policy applies to all personal data collected through the Platform, our customer support channels, and any related communications. It should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy.

By creating an account on my365, you confirm that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not register or use the Platform.

The following terms carry the meanings ascribed to them below throughout this Policy:

my365 collects the following categories of personal data in the course of providing its services:

3.1 Account Registration Data

• Full legal name
• Date of birth (used for 21+ age verification)
• Residential address, including city and postcode
• Email address
• Mobile phone number
• Username and encrypted password

3.2 Identity Verification (KYC) Data

• Government-issued photo identification — Malaysian MyKad (IC), driver's licence, or passport
• Proof of residential address — utility bill, bank statement, or official government letter dated within three months
• Selfie photograph holding the identity document

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment channels used
• Payment instrument identifiers — e-wallet account references (Touch 'n Go eWallet, Boost, GrabPay), bank account numbers (Maybank, CIMB, Public Bank, Hong Leong, RHB), or cryptocurrency wallet addresses (BTC, USDT)
• Wagering history and account balance records

3.4 Technical & Device Data

• IP address and approximate geolocation
• Browser type and version
• Device type, operating system, and screen resolution
• Session timestamps, page visit logs, and platform interaction events
• Cookie identifiers and session tokens

3.5 Communications Data

• Live chat transcripts and support ticket records
• Email correspondence with the my365 support team
• Feedback, complaints, and dispute records

my365 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or voluntarily provide information through Platform features.
• Automatically — through cookies, web beacons, and session tracking technologies as you interact with the Platform.
• From third parties — including identity verification service providers engaged for KYC processing, and payment processors who confirm transaction status and associated account references.
• From publicly available sources — in limited circumstances where we are required to verify the accuracy of information provided to us for fraud prevention or regulatory compliance purposes.

my365 processes your personal data only where a legitimate legal basis exists. The following table summarises the primary purposes of data processing and the corresponding legal basis:

my365 processes personal data in accordance with the following principles:

• Lawfulness, fairness and transparency: Data is processed on a clear legal basis, and you are informed of how your data is used through this Policy.
• Purpose limitation: Data collected for one purpose will not be repurposed for an incompatible use without your knowledge or consent.
• Data minimisation: Only data that is necessary for the stated purpose is collected and processed.
• Accuracy: my365 takes reasonable steps to ensure that personal data held is accurate and, where necessary, kept up to date. You can update your registered details at any time through the account settings panel.
• Storage limitation: Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law.
• Integrity and confidentiality: Appropriate technical and organisational measures are implemented to protect personal data against unauthorised access, loss, or destruction.

my365 does not sell, rent, or trade your personal data. We may share personal data with the following categories of third parties only to the extent strictly necessary:

• Payment Service Providers: To process deposits and withdrawals via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Malaysian bank networks, and cryptocurrency gateways. Only the data required to execute and verify a transaction is shared.
• KYC & Identity Verification Providers: To conduct mandatory identity and age verification in compliance with anti-fraud and regulatory requirements.
• Regulatory Authorities: Where required by applicable law, court order, or licensing authority mandate. my365 will comply with legally valid requests and will, where legally permissible, notify you of any such disclosure.
• IT Infrastructure Providers: Hosting, cloud storage, and security service providers engaged under strict data processing agreements that prohibit independent use of your data.
• Fraud Prevention Services: To identify and prevent fraudulent activity, money laundering, and abuse of the Platform.

All third-party processors engaged by my365 are bound by contractual obligations to process personal data only in accordance with our instructions and applicable data protection standards.

my365 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we use are:

You may manage or disable non-essential cookies through your browser settings. Note that disabling strictly necessary cookies may impair your ability to log in to or use the Platform. my365 does not use cookies for targeted third-party advertising.

my365 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform
• Encrypted storage for sensitive data at rest, including KYC documents and payment details
• Two-factor authentication (2FA) available for all accounts
• Role-based access controls restricting internal access to personal data on a need-to-know basis
• Regular security audits and penetration testing of Platform infrastructure
• Automated anomaly detection for suspicious login attempts and transaction patterns

While my365 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and should notify us immediately if you suspect any unauthorised access to your account via our 24/7 live chat.

my365 retains personal data for as long as is necessary to fulfil the purposes outlined in this Policy or as required by applicable regulatory and legal obligations. The following indicative retention periods apply:

Following the applicable retention period, personal data is either securely deleted or anonymised in a manner that prevents re-identification.

Subject to applicable law, you have the following rights in relation to your personal data held by my365. To exercise any of these rights, contact our support team via 24/7 live chat or at the email address in Section 15. We will respond within 30 calendar days of receiving a verified request.

Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

The my365 Platform is strictly intended for individuals aged 21 years and above. my365 does not knowingly collect personal data from individuals under the age of 21. Age verification checks are performed during the registration and KYC processes to enforce this requirement.

If we become aware that personal data has been collected from an individual under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you have reason to believe that a minor has registered on the Platform, please notify us immediately via the contact details in Section 15.

In the course of providing our services, your personal data may be transferred to and processed in jurisdictions outside of Malaysia — for example, by our cloud infrastructure or KYC verification service providers.

Where personal data is transferred internationally, my365 ensures that appropriate safeguards are in place to protect your data. These safeguards may include standard contractual clauses, binding corporate rules, or reliance on adequacy decisions where available.

By using the Platform and accepting this Policy, you consent to such international transfers of your personal data for the purposes described herein.

my365 reserves the right to update or revise this Privacy Policy at any time. Where amendments are material, we will provide notice on the Platform or via email to your registered address prior to the changes taking effect.

The most current version of this Policy, together with the effective date, will always be published at my365.cam/privacy-policy. Continued use of the Platform following the publication of a revised Policy constitutes your acceptance of the revised terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the my365 Data Protection team through the following channels: