123 Liga Privacy Policy — Personal Data Protection for Malaysian Players

1 Introduction & Privacy Commitment of 123 Liga

123 Liga is an online Sports Betting and casino platform operating exclusively for the Malaysian market. In the course of providing daily sports betting, Live Casino, slots, Baccarat, Poker, e-sports, and table game services to more than 120,000 active members across the country — from Kuala Lumpur to Kota Kinabalu, from Johor Bahru to Kuching — interacting with your personal information is an unavoidable part of what we do.

We understand that your trust in 123 Liga depends not only on the safety and fairness of our games, but also on how we handle the data you entrust to us. Your full name, Malaysian phone number, email address, and e-wallet account details such as Touch 'n Go and GrabPay — all of this is sensitive information that we take full responsibility for protecting.

This Privacy Policy is written in plain, easy-to-understand language — not lengthy, confusing legal jargon — because we believe every 123 Liga player deserves to know exactly what we do with their data. If anything remains unclear after reading this document, feel free to reach us at support@123liga.net.

2 Personal Information We Collect

123 Liga collects various types of personal information when you interact with our platform. The type of information collected depends on how you use our services:

Account Registration Information:

• Full name as stated on your Malaysian Identity Card (MyKad)
• An active Malaysian mobile number (for OTP verification)
• A valid and active email address
• The username and password you create (passwords are stored in encrypted form)
• Date of birth (for age verification — you must be 18 years of age or older)

Identity Verification (KYC) Information:

• Image or copy of an identity document such as a MyKad or Malaysian passport
• Proof of current address (utility bill or recent bank statement)
• Information related to payment methods for ownership verification purposes (no card numbers or e-wallet passwords are stored)
• A selfie photograph for biometric identity verification where required

Platform Activity Information:

• Sports Betting history — market types, amounts, results for Liga Super Malaysia, EPL, badminton and more
• Casino game history — Baccarat, Blackjack, slots, Dragon Tiger and other games played
• Deposit and withdrawal records, including amounts, methods (Touch 'n Go, GrabPay, FPX, etc.) and dates
• Customer support interaction history, including live chat transcripts and emails

Technical Information:

• IP address and estimated geographic location (state within Malaysia)
• Device type, operating system, and browser version
• Cookie data and session identifiers
• Platform access logs including login and logout times

3 How We Collect Your Personal Data

123 Liga collects your personal information through several key channels:

• Directly from You: This is the primary way we obtain your information — through the account registration form, the KYC identity verification process, deposit and withdrawal forms, interactions with customer support via live chat or email, and any feedback or surveys you choose to complete voluntarily.
• Automatically During Platform Use: When you access 123 Liga — whether via a web browser or mobile app — our systems automatically record technical information such as your IP address, device type, login sessions, and in-platform navigation activity. This is done for security purposes, fraud detection, and user experience improvement.
• Via Cookies and Similar Technologies: We use cookies and similar tracking technologies to remember your preferences, maintain your login session, and analyse how you use the platform. Further details on cookies are set out in Section 7 of this document.
• From Legitimate Third Parties: In certain circumstances, we may receive information from third-party identity verification service providers that we use for our KYC process, or from payment service providers such as e-wallet and FPX gateways that process your transactions.

4 How We Use Your Personal Data

123 Liga uses collected personal information for legitimate and specific purposes. We do not use your data for purposes beyond the scope outlined below without first obtaining your consent:

5 Data Sharing with Third Parties

123 Liga does not sell, rent, or trade your personal information to third parties for their own marketing purposes. This is an unwavering commitment that we take seriously.

However, there are certain situations where we need to share your information with selected third parties, solely to enable us to provide services to you:

• Payment Service Providers: Payment gateways that process your deposit and withdrawal transactions — including integration providers for Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks). Only the minimum information necessary to process each transaction is shared.
• Game Software Providers: Companies such as Pragmatic Play and Microgaming that supply the slots and table game software you play on 123 Liga. They receive the game session data needed to run the games, but not your personal identifying information.
• Identity Verification Providers: Third-party KYC services that help us verify player identities — primarily for age verification and fraud prevention. These providers are bound by strict data protection agreements.
• Cloud Service Providers: Technology infrastructure providers that host the 123 Liga platform and databases. All agreements with these providers include comprehensive data protection clauses.
• Legal Authorities: Malaysian law enforcement agencies, courts, or regulatory bodies where we are required to do so under applicable law. We will notify you of such requests unless we are prohibited from doing so by law or court order.

All third parties with whom we share data are bound by data processing agreements that require them to protect your information to a standard equal to or higher than that which we apply at 123 Liga. They are only permitted to use your data for the specific purposes we have set out and for no other purpose.

6 Data Security & Protection Measures

Protecting your personal information from unauthorised access, use, disclosure, modification or destruction is a core technical and operational priority at 123 Liga. We continually invest in our security infrastructure to ensure your data remains protected at all times.

Technical Security Measures:

• 256-bit SSL/TLS Encryption: All communications between your device and 123 Liga's servers are protected by 256-bit SSL/TLS encryption. This means that data in transit — including login credentials and transaction details — cannot be read by any party attempting to intercept the connection.
• Database Encryption: Sensitive data stored in our databases — including passwords (stored as one-way hashes that cannot be decrypted) and identity information — is encrypted using industry-standard encryption algorithms.
• Data Segregation: Your payment information (such as your e-wallet account number or bank details) is not stored directly on 123 Liga's servers. Transactions are processed through a PCI-DSS certified payment gateway that handles all sensitive payment data processing.
• Access Controls: Access to user data among internal 123 Liga staff is restricted on a need-to-know basis. Only personnel who require it to perform their duties may access your personal data.
• Continuous Security Monitoring: Our systems are continuously monitored to detect intrusion attempts, suspicious activity, and other security threats in real time.
• Two-Factor Authentication: 123 Liga uses OTP verification via your Malaysian phone number for sensitive actions such as registration, password recovery, and in certain situations during the withdrawal process.

7 Cookies & Tracking Technologies

123 Liga uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your browser when you visit our website.

Types of Cookies We Use:

• Strictly Necessary Cookies: These cookies are required for the 123 Liga platform to function properly. They maintain your login session, remember your language preference, and ensure security features work as intended. Disabling these cookies will affect core platform functionality.
• Performance & Analytics Cookies: We use analytics technology to gather information about how visitors use the 123 Liga platform — which pages are visited most frequently, how long play sessions last, and where technical errors occur. This information is collected in aggregate and does not identify you personally.
• Functional Cookies: These cookies allow the platform to remember the preferences you have set — such as your preferred game categories, display settings, or betting limits you frequently use — to deliver a more personalised experience.
• Security Cookies: Used to detect and prevent fraudulent activity, monitor suspicious login attempts, and protect your account from unauthorised access.

You can manage cookie settings through your browser preferences. However, disabling all cookies may affect the functionality of the 123 Liga platform, including your ability to stay logged in or use certain features. For guidance on managing cookies in your browser, please refer to your browser's help documentation.

8 Data Storage & Transfers

Data Retention Period:

123 Liga retains your personal data for as long as your account remains active or as long as it is needed to provide services to you. Following account closure, we retain your data for periods determined by applicable Malaysian legal and compliance requirements:

• Financial transaction records (deposits and withdrawals) — retained for a minimum of 7 years in accordance with Malaysian tax and financial regulatory requirements
• KYC identity verification records — retained for a minimum of 5 years after account closure
• Gaming and betting activity logs — retained for 3 years for audit and dispute resolution purposes
• Customer support communication records — retained for 2 years
• Cookie and session data — deleted in accordance with each cookie's expiry period

Once the applicable retention period has lapsed, data will be securely deleted or anonymised so that it can no longer be linked to you as an individual.

Cross-Border Data Transfers: In certain circumstances, your personal data may be processed or stored on servers located outside Malaysia — for example, by cloud infrastructure providers or international gaming software suppliers. When this occurs, 123 Liga ensures that such transfers comply with Malaysia's PDPA requirements and that equivalent protections are in place at the destination.

9 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a data subject have certain rights in relation to the personal data held by 123 Liga. We are committed to respecting and facilitating these rights:

To exercise any of the above rights, please contact the 123 Liga privacy team by email at support@123liga.net with the subject line "Data Subject Rights Request", specifying the right you wish to exercise along with sufficient details for us to identify your account. We will process your request within the timeframe prescribed by the Malaysia PDPA and will notify you of any delay or if we are unable to fulfil your request, together with the reasons.

10 Children's Data

123 Liga's services are intended exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data from children or individuals under the age of 18.

Every 123 Liga account registration requires age verification through the date of birth provided and, in certain cases, identity document verification. Should we discover that we have inadvertently collected personal data from someone under 18 years of age, we will take immediate steps to delete that information, close the relevant account, and where appropriate, bring the matter to the attention of the relevant guardian.

11 Links to Third-Party Sites

The 123 Liga platform may contain links to third-party websites or services that are not operated by us. These may include sports news websites, e-sports platforms, or other relevant information sites.

This Privacy Policy applies only to data collected and processed by 123 Liga through our own platform. When you click a link to a third-party website, you will be entering an environment governed by its own privacy policy, which may differ from ours. 123 Liga is not responsible for the privacy practices or content of any third-party websites.

We recommend reading the privacy policy of every website you visit, especially before providing any personal information. If you come across a link on the 123 Liga platform that leads to a website that appears unsafe or inappropriate, please notify us at support@123liga.net.

12 Amendments to This Privacy Policy

123 Liga reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new or updated Malaysian legal requirements (including any amendments to the PDPA 2010), or changes in the services we offer to players.

When material changes are made to this Privacy Policy, 123 Liga will:

• Updating the "Last Updated" date shown at the top of this document
• Displaying a prominent notice on the platform's main page at least 7 days before the changes take effect
• Sending email notifications to all registered members regarding material changes
• For significant changes, seeking fresh consent from users where required

Continued use of the 123 Liga platform after the effective date of the amended Privacy Policy will be deemed as your acceptance of those changes. If you do not agree with the changes made, you have the right to stop using the platform and close your account by contacting our support team.

The latest version of this Privacy Policy is always available on this page. We recommend checking back periodically to stay informed of 123 Liga's current privacy practices.

13 Contact Us — Privacy Enquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or how 123 Liga handles your personal data, we encourage you to reach out to us directly. The 123 Liga privacy and compliance team is ready to assist you:

• Email: support@123liga.net — use the subject line "Privacy Policy Enquiry" for faster processing. We aim to respond within 2 hours during business hours.
• Live Chat: Access via the live chat button on the 123 Liga platform — our Malaysian-speaking support team is available 24 hours a day, 7 days a week for general privacy enquiries.
• WhatsApp: A WhatsApp support number is available once you log in to your 123 Liga account, for brief enquiries related to privacy and account security.

For formal requests exercising your PDPA rights (access, rectification, erasure, and others), please submit a written request by email with the subject line "Data Subject Rights Request — [Type of Right]", along with your full name and 123 Liga account number, so we can process your request promptly and accurately.

If you are dissatisfied with how 123 Liga has handled your privacy request or complaint, you have the right to escalate the matter to the Department of Personal Data Protection (JPDP) Malaysia, the regulatory body responsible for enforcing the PDPA 2010 in Malaysia.