Gen3 Privacy Policy – Our Commitment to Protecting Malaysian Players' Personal Data

This Privacy Policy is published by gen3 ("we", "platform") and applies to all users who access or use gen3's services via the gen3.games website or any related applications operated by gen3. This Policy comprehensively outlines our privacy practices — the types of data we collect, why we need it, how we protect it, and your rights in relation to that data.

gen3 fully committed to protecting the privacy of all its members. We adhere to internationally recognised data protection principles and strive to ensure that every aspect of our data handling is transparent, responsible, and respectful of your right to privacy as an individual.

If you have any questions, concerns, or requests relating to the privacy of your data at gen3, you can reach our team via 24/7 live chat within the platform or by email at [email protected]. We will respond to all privacy-related enquiries in Bahasa Melayu as promptly as possible.

gen3 collects personal data through various methods depending on how you interact with our platform. The following are the main categories of data we may collect:

Data you provide directly:

• During account registration: Full name, email address, Malaysian mobile number, encrypted password, and date of birth.
• During identity verification (KYC): A copy of your MyKad or valid identification document, a facial photograph (selfie) for verification purposes, and proof of address if required.
• During financial transactions: Details related to your chosen payment method (e.g., eWallet account name, bank account number for FPX via Maybank2u or CIMB Clicks), along with a full record of every transaction in MYR (RM).
• During customer support interactions: The content of your enquiries, complaints, or communications with the gen3 support team.

Automatically collected data:

• IP address, web browser information, operating system, and the type of device you use to access gen3.
• Platform usage data including pages visited, games played, duration of each session, and general interaction patterns with the gen3 interface.
• Cookie data and similar tracking technologies that help gen3 remember your preferences and improve your overall user experience.

gen3 uses the personal data collected for limited and legitimate purposes. Every use of data is grounded in a solid legal basis — whether that is your consent, a contractual requirement, gen3's legitimate interests, or a legal compliance obligation. The following are the primary purposes for which data is used at gen3:

• Service Delivery: Creating and maintaining your gen3 account, processing deposits and withdrawals in MYR, providing access to all games in the gen3 catalogue, and managing the bonus programmes and promotions you participate in.
• Identity Verification (KYC): Verifying your identity and age to ensure compliance with applicable legal requirements and to prevent use of the platform by ineligible individuals.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, unauthorised account access, and any conduct that violates gen3's Terms & Conditions.
• Customer Support: Handling enquiries, resolving complaints, and providing technical assistance to gen3 members in Bahasa Melayu via live chat and email.
• Platform Enhancement: Analysing overall usage patterns (not individual behaviour) to help gen3 improve platform design, enhance technical performance, and develop new features that are more meaningful to Malaysian players.
• Marketing Communications: Sending you information about gen3 promotions, bonus offers, and the latest updates — only where you have given your consent to receive such communications. You may withdraw this consent at any time through your gen3 account settings.
• Legal Compliance: Complying with reporting requirements, record-keeping obligations, and other duties imposed by applicable laws and authorised regulatory bodies.

gen3 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, in the course of operating the platform, gen3 may need to share certain data with selected third parties in the following situations:

• Licensed Payment Processors: To process your deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks), gen3 shares only the minimum necessary transaction information with licensed payment gateways that comply with PCI DSS security standards.
• Technical Service Providers: Companies that assist gen3 with the technical operation of the platform, such as server hosting, platform analytics, and cybersecurity services. All such providers are bound by strict data confidentiality agreements and may only process your data in accordance with gen3's instructions.
• Regulatory Bodies & Authorities: Where required by Malaysian law, a court order, or a directive from an authorised regulatory body, gen3 will disclose the necessary information to the relevant parties. gen3 will endeavour to inform you of any such disclosure where permitted by law.
• With Your Consent: In other situations where gen3 wishes to share your data with a third party, we will obtain your explicit consent before any such disclosure is made.

gen3 implementing comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures we have in place include:

• 256-bit SSL Encryption: All data communications between your web browser or app and gen3's servers are encrypted using the latest TLS protocol with 256-bit encryption keys — the same standard used by Malaysia's major banks.
• Two-Factor Authentication (2FA): An added layer of security via SMS OTP, ensuring that only you can access your gen3 account even if your password falls into the wrong hands.
• Real-Time Security Monitoring: An intrusion detection system and account activity monitoring solution that operates 24 hours a day to promptly identify and respond to any security threats.
• Stored Data Encryption: Sensitive data stored in gen3's databases — including passwords and financial information — is encrypted using irreversible hashing algorithms.
• Internal Access Controls: Only gen3 staff who require access to specific data in order to carry out their duties are permitted to access it, with every instance of access logged and closely monitored.
• Regular Security Audits: gen3 conducts regular security assessments and penetration testing to identify and address any vulnerabilities in our security infrastructure before they can be exploited.

While gen3 takes all reasonable steps to protect your data, no security system is entirely foolproof. You also play an important role in safeguarding your gen3 account — always use a strong, unique password, enable two-factor authentication, and never share your login credentials with anyone.

gen3 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your web browser or device when you visit the gen3 website. The following types of cookies are used:

• Essential Cookies: Cookies required for the basic operation of the gen3 platform, such as maintaining your login session, remembering your language preference, and ensuring core security functions work correctly. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting aggregated, anonymised information about how visitors use the gen3 website — such as the most frequently visited pages and error messages encountered. This data helps gen3 improve platform performance.
• Functionality Cookies: Remembers your preferences — such as your username, language selection, and display settings — to deliver a more personalised experience throughout your session on gen3.
• Analytics Cookies: Helps gen3 understand how the platform is used as a whole, informing decisions about platform improvements. Analytics data is processed in aggregate and does not identify any individual user.

You can manage and control cookies through your web browser settings. Please note, however, that disabling certain cookies may affect the functionality and your overall experience on the platform gen3. For more information on how to manage cookies in your browser, please refer to the help guide for the web browser you are using.

gen3 retains your personal data only for as long as necessary for the purposes set out in this Privacy Policy, or for a longer period where required or permitted by applicable law. The general data retention guidelines at gen3 are as follows:

• Active Account Data: For as long as your gen3 account remains active, and thereafter for as long as necessary to fulfil any outstanding legal or contractual obligations.
• Financial Transaction Records: Records of deposits, withdrawals, and all financial transactions in Malaysian Ringgit (RM) are retained for a minimum of seven years in accordance with applicable financial and tax legal requirements in Malaysia.
• Identity Verification Records (KYC): Identity verification documents such as MyKad copies are retained for the period necessary to fulfil compliance obligations and regulatory requirements, typically between five and seven years following account closure.
• Gaming Activity Data: Game history and session logs are retained for as long as required for customer support and compliance purposes, after which the data is aggregated and anonymised for platform analytics.
• Communication Records: Live chat transcripts and email records with the gen3 support team are retained for two to three years for service quality and dispute resolution purposes.

Once the relevant retention period has expired and there is no longer any legal or contractual requirement to retain the data, gen3 will securely and irreversibly delete or anonymise your data.

As a platform member gen3, you hold a range of rights over your personal data that we respect and will help you exercise with ease. Your rights include:

• Right of Access: You have the right to obtain a copy of the personal data gen3 holds about you, including the types of data collected, the purposes for which it is used, and the parties with whom it has been shared.
• Right to Rectification: If you find that the personal data gen3 holds about you is inaccurate or incomplete, you have the right to request a correction promptly. You may also update certain profile information directly in your gen3 account settings.
• Right to Erasure: In certain circumstances, you have the right to request that gen3 delete your personal data — for example, if the data is no longer needed for its original purpose, or if you withdraw the consent on which the processing was based. Please note that this right is subject to legal requirements that oblige gen3 to retain certain data for specified periods.
• Right to Restriction of Processing: In certain situations, you have the right to request that gen3 temporarily pause the processing of your data while any query or dispute is being resolved.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transfer it to another data controller where applicable.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time. Once your objection is received, gen3 will cease using your data for those purposes immediately.

To exercise any of the rights above, please contact the support team gen3 via 24/7 live chat within the platform or by email at [email protected]. We will respond to and process your request within a reasonable timeframe and will not charge any fee for legitimate and reasonable requests.

Platform gen3 is restricted to users aged 18 and above only. We do not knowingly collect, store, or process the personal data of individuals under the age of 18. Should gen3 discover that a child's personal data has been collected without the knowledge and consent of a parent or legal guardian, we will take immediate steps to delete that data from our systems.

Parents or guardians who believe their child under the age of 18 has registered for or used the gen3 platform without authorisation are encouraged to contact the gen3 support team immediately at [email protected]. We will investigate the matter and take appropriate action without delay.

Platform gen3 may contain links to third-party websites or services in certain contexts. Please note that this gen3 Privacy Policy applies solely to the platform and services operated directly by gen3. We are not responsible for the privacy practices or content of any third-party websites or services that you may access via links on the gen3 platform.

We encourage you to read and understand the Privacy Policy of any third-party websites or services you visit, including the payment gateways used to process your financial transactions, as their privacy practices may differ from those of gen3.

gen3 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform operations. When we make material changes to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this page.
• Clear notices are displayed on the gen3 platform to inform members of any significant changes.
• Sending notifications to your registered email address for any significant changes that materially affect how your data is used.

We encourage you to review this Privacy Policy page periodically to stay informed about how gen3 handles your personal data. Your continued use of the gen3 platform after any changes to this Privacy Policy take effect will be considered your acceptance of the updated policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way gen3 handles your personal data, we encourage you to reach out to us through the following channels:

• Live Chat: The fastest option — available 24 hours a day, 7 days a week, directly within the gen3 platform. Our team will respond in under 3 minutes and operates in Bahasa Melayu.
• Email: Send your privacy enquiries to [email protected]. Privacy and personal data requests are typically responded to within 24 to 48 hours on business days.

When contacting us about a privacy matter, please clearly state the full name registered to your gen3 account and the details of your request so we can process it more quickly and accurately. gen3 will verify your identity before disclosing or modifying any personal data.

If you are dissatisfied with gen3's response to your privacy concerns, you have the right to lodge a complaint with the relevant data protection authority or regulatory body in Malaysia, in accordance with applicable law.