Privacy Policy hot321 – Our Commitment to Protecting Your Personal Information

This Privacy Policy is published by hot321 ("we", "the hot321 Platform", or "hot321.best") and applies to all individuals who access or use our platform, including website visitors, registered members, and former members whose personal data remains stored in our systems.

Hot321 understands that trust is the foundation of our relationship with every member. When you register and use our platform — whether to play slots, live casino baccarat, place Sports Betting on the Malaysia Super League, or any other game — you are entrusting us with your personal information. We do not take that trust lightly.

This Privacy Policy is written in plain language so that every hot321 Malaysia member can clearly understand what happens to their data. We don't want you to wade through pages of complex legal text just to grasp your basic rights. That said, this document remains legally binding as part of the agreement between you and hot321.

Hot321 collects your personal information through several means — directly when you provide it to us, automatically as you use the platform, and in some cases through legitimate third-party sources. Below are the details of the information we collect:

Hot321 does not collect unnecessary categories of sensitive data such as medical information, religious beliefs, or political views. We only collect what is strictly required to operate the platform and fulfil our legal obligations.

Hot321 uses the personal information collected for the following purposes, and only for these purposes:

• Account Management: Creating and maintaining your account, verifying your identity, and processing account-related requests such as password changes or information updates.
• Payment Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, and managing withdrawals to your eWallet or bank account.
• Service Delivery: Grants you access to all games and features on the hot321 platform, including slots, Live Casino, and Sports Betting.
• KYC & AML Compliance: Fulfilling the Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements mandated by industry regulations and applicable law.
• Security & Fraud Prevention: Detecting and preventing fraud, multi-account usage, bonus abuse, and any other suspicious activity on the platform.
• Customer Support: Responding to enquiries, resolving technical issues, and providing effective assistance to members via live chat and email.
• Service Communications: Sending important account-related notices, policy updates, security information, and required service messages.
• Platform Improvements: Analysing usage data in aggregate (not individual data) to understand how members use the platform and drive continuous improvements.
• Promotions & Offers: Sending information about hot321 promotions, bonuses, and offers — but only to members who have consented to receive marketing communications.
• Responsible Gaming: Monitoring gameplay patterns to identify members who may need responsible gaming support and offering appropriate assistance.

Hot321 only processes your personal data where there is a sufficient lawful basis to do so under Malaysia's PDPA. The lawful bases we rely on are:

• Consent: For activities such as sending marketing communications and promotions, we rely on the explicit consent you provided during registration or subsequently through your account settings. You may withdraw this consent at any time.
• Contract Performance: Processing necessary to fulfil our contractual obligations to you — including handling deposits and withdrawals, providing access to games, and managing your account.
• Legal Obligations: Processing required to comply with applicable legal requirements, including KYC and AML obligations.
• Legitimate Interest: Processing for purposes that serve our legitimate interests or those of a third party, provided those interests do not override your fundamental rights — such as preventing fraud, maintaining platform security, and analysing usage data to improve our services.

Hot321 does not sell members' personal information to any third party. However, in the course of operating the platform, we are required to share certain data with the following parties under limited and controlled circumstances:

• Payment Providers: Required transaction information is shared with Malaysian eWallet and banking service providers (Touch 'n Go, GrabPay, DuitNow, FPX, etc.) solely for the purpose of processing your deposits and withdrawals.
• Game Providers: Minimum required data is shared with licensed game providers such as Evolution Gaming and Pragmatic Play Live to enable access to their games. These providers are bound by confidentiality agreements and strict data security standards.
• Identity Verification Services: Identity data is shared with third-party KYC service providers for identity verification and AML compliance purposes. All such providers are recognised organisations that adhere to international data protection standards.
• Regulatory Authority: hot321 will disclose personal data to government authorities or law enforcement when required by law, court order, or valid legal process.
• Technical Support Services: IT and infrastructure service providers that assist us in operating the platform — such as cloud computing and cybersecurity services — may have limited access to data in their technical capacity. All such providers are bound by strict data processing agreements.

Hot321 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• Data Encryption in Transit: All communications between your device and hot321's servers are encrypted using TLS 1.3 with AES-256 encryption.
• Data Encryption at Rest: Sensitive data such as passwords and financial information is encrypted in our databases using secure hashing algorithms.
• Firewall & Intrusion Detection: The hot321 infrastructure is protected by multi-layered firewalls and intrusion detection and prevention systems (IDS/IPS) operating 24/7.
• Two-Factor Authentication: Two-factor authentication (2FA) is available for member accounts and is mandatory for all internal staff accessing systems that contain user data.
• Regular Security Audits: hot321 conducts regular security assessments and penetration testing to identify and address vulnerabilities before they can be exploited.
• Role-Based Access Control: Internal staff only have access to the data necessary for their role. Access to sensitive data is logged, monitored, and audited on a regular basis.

While hot321 takes all reasonable steps to protect your data, no digital security system can be guaranteed 100% foolproof. In the unlikely event of a security breach involving your personal data, hot321 will notify you and the relevant authorities as required by law within the prescribed timeframe.

Hot321 uses cookies and similar tracking technologies to enhance your experience on our platform. Here is an overview of the types of cookies we use:

• Essential Cookies: These cookies are required for the hot321 platform to function properly. They include login session cookies, security cookies, and cookies that store your language preferences. Disabling this type of cookie is not possible without affecting the core functionality of the platform.
• Performance Cookies: These cookies collect information about how visitors use our website — which pages are visited most often, error messages encountered, and so on. This information is used in aggregate to improve the hot321 platform. No individual user is identified.
• Functional Cookies: These cookies allow the platform to remember the preferences you set — such as your favourite game types, display settings, and currency preferences — to deliver a more personalised experience on the hot321 platform.
• Analytics Cookies: We use analytics data to understand platform usage patterns in aggregate. This helps us make better decisions about the design and new features to be added to the hot321 platform.

You can manage your cookie settings through your web browser settings. However, disabling certain types of cookies may affect the functionality and your overall experience on the hot321 platform.

Hot321 does not retain your personal data longer than necessary to fulfil its original purpose or to meet legal obligations. The following is a guide to our data retention periods:

When data is no longer needed and there is no legal obligation to retain it, hot321 will securely delete or destroy that data using methods that ensure it cannot be recovered.

As a hot321 member and an individual whose personal data we process, you hold the following rights, which we are committed to respecting and facilitating:

• Right of Access: You have the right to request a copy of the personal data we hold about you. hot321 will provide this information within 30 days of receiving your request.
• Right to Rectification: If you find that the personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. You can also update most profile information directly in your hot321 account settings.
• Right to Erasure: Under certain circumstances, you have the right to request that hot321 delete your personal data. However, this right is not absolute — we may need to retain certain data to fulfil legal obligations even after a deletion request has been received.
• Right to Object: You have the right to object to the processing of your personal data for certain purposes, particularly for direct marketing.
• Right to Withdraw Consent: Where our data processing relies on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing that took place prior to the withdrawal.
• Right to Lodge a Complaint: If you are dissatisfied with how hot321 handles your personal data, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

To exercise any of the above rights, please contact the hot321 support team via live chat within the platform or by email at support@hot321.best by clearly stating your request. We may need to verify your identity before processing any personal data-related requests.

If you have any questions, concerns, or requests relating to this Privacy Policy or how hot321 handles your personal data, we encourage you to contact us directly. Our team is ready to assist and committed to addressing every concern promptly and seriously.

Hot321 may also update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or platform changes. The "Updated" date at the top of this page always indicates the latest version of this policy. If any significant changes are made that affect your rights, we will notify you via your registered email address before those changes take effect.