Privacy Policy 10gram — Personal Data Protection for Malaysian Members

10gram (referred to as "we", "our platform" or "10gram") is an online casino and slots platform operating in Malaysia. We take member privacy extremely seriously and are committed to protecting your personal data in line with international best practices in data protection.

This Privacy Policy explains what personal data we collect from you when you use the 10gram platform, how we use and store that data, the limited circumstances under which it may be shared, and your rights as the owner of that personal data.

This Privacy Policy applies to all users of the 10gram platform — including website visitors, prospective members, and registered members — regardless of how they access the platform, whether via the website, mobile app, or any other digital interface provided by 10gram.

The types of personal data 10gram collects depend on how you interact with our platform. In general, the data we may collect includes:

Identity Data:

• Full name as stated on your identity card (MyKad)
• Date of birth and age
• National identity card number (MyKad) or passport number
• Current residential address
• Active mobile phone number
• Email address

Financial Data:

• E-wallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay) used for deposits and withdrawals
• Bank account number (for withdrawal purposes via FPX or bank transfer)
• Deposit and withdrawal transaction history
• Betting records and gaming activity

Technical & Usage Data:

• Your device's IP address
• Type and version of web browser or application used
• Device operating system
• Login and logout timestamps
• Gaming session data (games played, session duration, bet values)
• Cookie data and similar tracking technologies

10gram collects your personal data through various means as you interact with our platform:

• Account Registration: When you register a new account at 10gram, you voluntarily provide personal identification details such as your name, date of birth, email address and phone number.
• KYC Verification: During the Know Your Customer (KYC) process, you submit identity documents and proof of address to 10gram for age and identity verification purposes.
• Financial Transactions: When you make a deposit or withdrawal using Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, FPX, Maybank2u or CIMB Clicks, the financial information required to process those transactions is collected.
• Platform Usage: When you use the 10gram platform, technical data such as your IP address, browser type, and activity logs are automatically collected by our platform systems.
• Interactions with Customer Support: When you contact the 10gram support team via live chat, email or other means, the content of those communications may be stored for reference and service quality training purposes.
• Cookies & Tracking Technologies: The 10gram platform uses cookies and similar technologies to collect usage data that helps us improve the user experience and analyse platform performance.

10gram uses the personal data collected for the following purposes, each of which is legally justified and operationally necessary for the platform:

• Account Management: To create, manage, and operate your member account on the 10gram platform, including the login process, account settings, and account security.
• Identity Verification (KYC): To verify that you meet 10gram's membership eligibility requirements — in particular, age verification (21 years and above) and confirmation that you are who you claim to be.
• Transaction Processing: To smoothly and securely process deposits, withdrawals, and other financial transactions you carry out on the 10gram platform.
• Fraud Prevention: To detect, investigate and prevent fraudulent activity, money laundering, bonus abuse and violations of the platform's terms of use.
• Service Communications: To send you important information regarding your account, transactions, policy changes and platform updates via email or in-app notifications.
• Customer Support: To provide you with effective assistance and support whenever you contact the 10gram support team.
• Responsible Gaming: To monitor your gaming patterns and provide timely intervention if any signs of concerning gaming behaviour are detected, in line with 10gram's commitment to responsible gaming.
• Legal Compliance: To comply with applicable legal obligations, regulations and court orders governing 10gram's platform operations in Malaysia.
• Platform Improvement: To analyse aggregated usage patterns (without identifying individuals) for the purpose of improving 10gram platform features, performance and user experience.

10gram takes a strictly limited and cautious approach to data sharing. We do NOT sell your personal data to third parties. Your data may be shared only in the following limited and necessary circumstances:

• Payment Service Providers: To process your deposits and withdrawals, the required transaction information is shared with the relevant payment service providers, such as Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and FPX providers. This sharing is strictly limited to the information necessary to process the transaction.
• Game Software Providers: Game providers that partner with 10gram (such as Evolution Gaming, Pragmatic Play Live, and others) may receive the session data required to operate their games. All such sharing is governed by strict data protection agreements.
• Regulatory Authority: Where we are required by law, court order, or directive from a competent authority in Malaysia to disclose data, 10gram will comply with that obligation.
• Fraud Prevention: In certain circumstances, information may be shared with fraud prevention agencies or relevant authorities to prevent and investigate financial crime.

In all instances of data sharing described above, 10gram ensures that recipients are bound by confidentiality and data protection obligations equivalent to our own standards. All agreements with third parties include clear and binding data protection clauses.

The security of members' personal data is 10gram's highest priority. We invest continuously in security infrastructure and best practices to ensure your data is always protected. Key security measures we employ include:

• 256-bit SSL Encryption: All communications between your browser or app and 10gram's servers are protected by 256-bit SSL encryption — the same level of encryption used by major banking institutions in Malaysia.
• Data-at-Rest Encryption: Sensitive data stored in the 10gram database — including financial information and identity documents — is stored in encrypted format using the latest encryption algorithms.
• Internal Access Controls: Access to members' personal data within 10gram's systems is restricted to staff who genuinely require it to perform their duties. A role-based access control system ensures that the principle of least privilege is strictly observed.
• 24/7 Monitoring: 10gram's cybersecurity team monitors the platform infrastructure continuously, 24 hours a day, 7 days a week, to detect any unauthorised access attempts or suspicious activity.
• Regular Security Testing: 10gram conducts regular penetration testing and security audits by independent third parties to identify and address any security vulnerabilities.
• Incident Response Procedure: 10gram has a comprehensive data security incident response procedure in place. In the event of any data breach, we will take immediate action and notify affected members within the shortest possible time.

The 10gram platform uses cookies and similar tracking technologies to enhance the user experience, analyse platform performance, and provide essential functionality. Cookies are small text files stored on your device when you visit the 10gram website or use the 10gram app.

The following are the types of cookies used by 10gram:

You can manage cookie usage through your web browser settings. Please note, however, that disabling certain cookies may affect the functionality of some parts of the 10gram platform, including the possibility of being unable to log in or retain your account settings.

10gram retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or to comply with applicable legal obligations. In general, our data retention principles are as follows:

• Active Account: For as long as your account remains active with 10gram, all data associated with your account will be retained to enable us to provide you with uninterrupted service.
• After Account Closure: After your account is closed (whether voluntarily or by 10gram), we will retain your personal data for the minimum period required by Malaysian law — typically 7 years for financial records — before it is securely deleted.
• Financial Transaction Data: Records of all deposit and withdrawal transactions are retained for a minimum of 7 years, in accordance with Malaysian legal requirements relating to financial records and anti-money laundering.
• Cookie Data: Cookies have varying expiry periods as specified in the cookie table above. Session cookies are automatically deleted when you close your browser.

When personal data is no longer needed and there is no legal obligation to retain it, 10gram will delete or anonymise that data securely and irreversibly.

As a 10gram member and the owner of your own personal data, you have the following rights, which we are fully committed to upholding:

• Right of Access: You have the right to request and receive a copy of the personal data held by 10gram about you, in a readable format.
• Right to Rectification: If the personal data held by 10gram about you is inaccurate or incomplete, you have the right to request immediate correction.
• Right to Erasure: Under certain circumstances, you have the right to request the deletion of your personal data (known as the "right to be forgotten"), subject to legal obligations regarding data retention.
• Right to Object: You have the right to object to the processing of your personal data for specific purposes, such as direct marketing.
• Right to Restriction: Under certain circumstances, you have the right to request that 10gram restrict the processing of your personal data.
• Data Portability Right: You have the right to receive your personal data in a structured, machine-readable format for the purpose of transferring it to another platform.

To exercise any of the rights above, please contact the 10gram support team via live chat or email at [email protected]. We will endeavour to process your request within 30 days of receipt. In some cases, we may require additional identity verification before processing your request to protect the security of your data.

In the course of operating the 10gram platform, your personal data may be transferred to and stored on servers located outside Malaysia — particularly in connection with the use of gaming software from international providers such as Evolution Gaming and Pragmatic Play Live.

Whenever data is transferred outside Malaysia, 10gram ensures that such transfers are carried out with appropriate safeguards, including:

• Ensuring that recipient countries maintain an adequate level of data protection.
• Enforcing binding data transfer agreements with recipients that require them to comply with data protection standards equivalent to those in this Privacy Policy.
• Using recognised standard contractual clauses for secure international data transfers.

For more information about cross-border data transfers carried out by 10gram, please reach out to us through our available support channels.

The 10gram platform is a service intended exclusively for individuals aged 21 and above. 10gram does not knowingly collect or store any personal data from individuals under the age of 21.

If you become aware that an individual under the age of 21 has registered for or is using the 10gram platform, please notify us immediately at [email protected]. We will take immediate action to close the account in question and delete all data associated with it.

10gram reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or platform service developments. All changes will be published on the 10gram website with a clear effective date.

For material changes — that is, changes that significantly affect how we use your personal data — 10gram will:

• Sending a notification to your registered email address at least 14 days before the changes take effect.
• Displaying a clear notice on the platform when you log in.
• In some cases, seeking your renewed consent where required by law.

Continued use of the 10gram platform after the effective date of any Privacy Policy changes will be considered your acceptance of the updated policy. We encourage you to review this Privacy Policy page periodically.

If you have any questions, concerns or complaints about how 10gram handles your personal data, or if you wish to exercise any of the privacy rights outlined in this policy, please reach out to us through the following channels:

• Email: [email protected] — We aim to respond to all privacy-related enquiries within 2 business days.
• Live Chat: Via the live chat function on the 10gram platform — available 24 hours a day, 7 days a week in Bahasa Melayu and English, with a response time of under 2 minutes.

When contacting us regarding privacy matters, please include your full name, your 10gram account username, and specific details of your query or request so we can assist you as efficiently as possible.