mycs3 Official Data Protection Document

Mycs3 Privacy Policy – Personal Data Protection for Malaysian Members

Mycs3 respects the privacy of every member and visitor to our platform. This Privacy Policy document clearly explains how we collect, use, store, and protect your personal information — all in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010. We believe transparency is the foundation of trust.

Updated: 1 January 2026 Version: Bahasa Melayu PDPA Malaysia Compliant
This document contains
10
Main Sections
Your data is protected by 256-bit SSL encryption and managed in full compliance with Malaysia's PDPA.
PDPA Compliant
256-bit SSL
Data Not Sold
24×7 Support
Secure KYC
Officially Licensed

Mycs3's Commitment to Your Privacy

Six core principles that shape our approach to managing members' personal data

Malaysia PDPA Compliance

Mycs3 fully complies with Malaysia's Personal Data Protection Act (PDPA) 2010. All our data collection, processing, and storage procedures are designed in accordance with this local legislation.

Data Is Never Sold or Shared

Mycs3 will not sell, rent, or share your personal data with any third party for marketing or commercial purposes without first obtaining your explicit consent.

Industry-Grade Encryption

All data transmitted between your device and mycs3 servers is protected by 256-bit SSL encryption — the same standard used by leading banking and financial institutions in Malaysia.

Minimum Data Collection

Mycs3 collects only the data that is strictly necessary to provide our services. We do not collect irrelevant or excessive information beyond what is required for the platform's operations.

Right of Access & Correction

You have the full right to access, review, and request corrections to the personal data we hold about you. This process can be initiated easily through mycs3 customer support.

Policy in Bahasa Melayu

The mycs3 Privacy Policy is written in plain, easy-to-understand Bahasa Melayu. We believe every Malaysian member has the right to clearly understand how their data is managed, without having to wade through confusing legal text.

Important Note: This Privacy Policy forms part of your agreement with mycs3. By registering an account or using the mycs3 platform, you confirm that you have read and understood how we manage your personal data as described in this document. Please revisit this page from time to time, as we may update it.
1
Introduction & Scope of the mycs3 Privacy Policy

Mycs3 is an online casino and Sports Betting platform operating exclusively for users in Malaysia. We understand that your trust in our platform depends not only on the quality of our games and the security of financial transactions, but also on how we manage the personal information you provide to us.

This Privacy Policy sets out in detail how mycs3, as data controller, collects, uses, discloses, transfers, and stores your information when you use the mycs3.com website, the mycs3 mobile app, or any other services we offer. This Policy applies to all users of the mycs3 platform — whether you are simply browsing the site, a registered member actively playing, or an individual considering signing up.

The mycs3 Privacy Policy is drafted and updated in accordance with the requirements of Malaysia's Personal Data Protection Act (PDPA) 2010 and its subsidiary regulations. As a company operating with a focus on the Malaysian market, we prioritise compliance with local law and respect the privacy rights guaranteed to Malaysians under that legislation.

If you have any questions about how mycs3 handles your personal data, or wish to exercise any of your privacy rights, please contact our Data Protection Officer by email at privacy@mycs3.com or via mycs3 customer support, available 24 hours a day.

2
Types of Personal Data Collected by mycs3

Mycs3 collects your personal data through several means — directly when you register or interact with our platform, and automatically when you use our services. The following are the categories of data we collect:

Identity Data

Full name, date of birth, gender, and identification number (MyKad) — collected during registration and the KYC process.

Contact Data

Malaysian phone number, email address, and residential address — for account communications and identity verification.

Financial Data

E-wallet account information (Touch 'n Go, GrabPay, Boost), FPX bank account numbers, and the history of deposits and withdrawals on mycs3.

Gaming Activity Data

Game history, betting records, wins and losses, game preferences (slots, baccarat, poker, sports, e-sports), and playing habits.

Technical Data

IP address, device type and web browser, operating system, cookie information, login session data, and platform activity logs.

Communication Data

Records of Live Chat conversations with mycs3 customer support, emails you have sent to us, and feedback you have provided.

Data Minimisation Principle: mycs3 only collects data that is strictly necessary to provide the services you request. We do not collect sensitive personal information such as biometric data, health information, or political affiliations unless required by law.

3
How Your Personal Data Is Used

Mycs3 uses the personal data you provide solely for legitimate purposes related to the provision of our platform services. The following are the primary purposes for which your data is used:

  • Account Management: To register your mycs3 account, verify your identity, process secure logins, and manage all aspects of your account including balance, transaction history, and security settings.
  • Financial Transaction Processing: To process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, and to process withdrawal requests to your Malaysian bank account or e-wallet.
  • AML/KYC Compliance: To conduct Anti-Money Laundering (AML) checks and Know Your Customer (KYC) procedures as required by Malaysian law for financial and online gambling platforms.
  • Gaming Services Provision: To operate all games available on mycs3 — whether slots, live baccarat, roulette, poker, Sports Betting on the Malaysia Super League or EPL, e-sports, lottery, or cricket — and to accurately record game outcomes.
  • Service Communications: To send account-related notifications such as deposit confirmations, withdrawal notices, security alerts, and important updates regarding mycs3's terms or policies.
  • Relevant Marketing: With your consent, to keep you informed about the latest promotions, bonuses, and offers from mycs3 that are relevant to your interests and playing habits. You may withdraw this consent at any time.
  • Platform Improvement: To analyze usage patterns at an aggregate level (not individual) in order to improve the user experience, enhance mycs3 platform performance, and develop new features that are more useful for members in Malaysia.
  • Security and Fraud: To detect and prevent fraudulent activity, money laundering, bonus abuse, and other security threats that could compromise the integrity of the mycs3 platform or the interests of other members.

Mycs3 will not use your personal data for any purposes not stated here without obtaining your consent first, except where such use is required or permitted by applicable law.

4
Data Storage & Retention Period

Mycs3 retains your personal data only for as long as necessary to fulfil the original purpose of collection, or to meet applicable legal, regulatory, or accounting requirements. Retention periods vary depending on the type of data and relevant legal obligations:

  • Active Account Data: For as long as your mycs3 account remains active, we will retain all data associated with your account to ensure the continued provision of our services.
  • Financial Transaction Data: Records of all deposit and withdrawal transactions on mycs3 are retained for a minimum of 7 years in accordance with Malaysia's accounting and AML legal requirements.
  • KYC and Identity Verification Data: Identity verification documents and KYC records are retained for 5 years following account closure, in compliance with regulatory requirements.
  • Communication Log Data: Customer support chat records and emails are retained for 2 years for reference and the resolution of any disputes that may arise.
  • Technical Data & Logs: System logs and technical data are retained for 12 months for security purposes and cyber threat detection.

Once the applicable retention period has expired, mycs3 will securely delete or anonymise your personal data so that it can no longer be linked to you individually. Anonymised data may be retained indefinitely for statistical analysis and research purposes.

All data stored by mycs3 is maintained on secure servers with strict access controls. Access to members' personal data is granted only to mycs3 staff who require it to carry out their legitimate job functions.

5
Data Sharing with Third Parties

Mycs3 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, there are limited situations where we need to share your information with certain parties to enable the smooth operation of our platform:

  • Payment Service Providers: mycs3 shares the necessary transaction data with Malaysian payment service providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX processors solely for the purpose of processing your deposits and withdrawals. These providers are bound by strict confidentiality agreements.
  • Game Providers: To provide the casino games, slots, and Sports Betting available on the mycs3 platform, we work with licensed international game providers. Data shared is limited to game session information required to run those games.
  • Legal Authorities: mycs3 will disclose your personal data to Malaysian law enforcement agencies, tribunals, or regulatory bodies when required by law, court order, or valid legal process. In such situations, we will endeavour to notify you in advance where permitted by law.
  • Auditors and Professional Consultants: In the context of audits, legal advice, or financial consulting related to mycs3's operations, certain information may be shared with professionals who are bound by strict confidentiality obligations.

In all instances of data sharing described above, mycs3 ensures that the receiving party is bound by data protection obligations equivalent to or stricter than those set out in this Privacy Policy. We do not permit third parties to use your data for any purpose other than those we have specified.

International Data Transfers: Where your personal data needs to be transferred outside Malaysia (for example, to international technology providers), mycs3 ensures that adequate data protection standards exist at the destination and that all Malaysian PDPA requirements relating to international data transfers are met.

6
mycs3 Data Security Measures

Mycs3 continuously invests in cybersecurity infrastructure to ensure your personal data is protected against unauthorized access, unauthorized disclosure, modification, or destruction. The following are the key security layers we have implemented:

256-bit SSL Encryption

All communications between your device and mycs3's servers are encrypted using TLS 1.3 with a 256-bit key length — the same standard used by Malaysia's major banks. This means that even if someone were to intercept your network traffic, they would not be able to read its contents.

Stored Data Encryption

Sensitive personal data such as passwords, financial information, and KYC documents are stored in encrypted form within mycs3's databases. Passwords are never stored as plain text — they are processed using a one-way hashing function that cannot be reversed.

Two-Factor Authentication (2FA)

Mycs3 offers two-factor authentication for your account — an added layer of security that requires verification via your phone number in addition to your password. We encourage all members to enable 2FA for maximum protection.

Regular Security Audits

Mycs3 conducts internal security audits every month and engages independent cybersecurity firms for external assessments annually. Any vulnerabilities identified are addressed promptly in accordance with our incident response protocol.

24-Hour Monitoring

Mycs3's automated monitoring system operates 24 hours a day to detect and flag any suspicious activity, unauthorized access attempts, or patterns that indicate a potential security threat.

While mycs3 takes all reasonable steps to protect your data, no system is entirely free from risk. You also play an important role in keeping your account secure — never share your password with anyone, use a strong and unique password for your mycs3 account, and enable 2FA.

7
Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act (PDPA) 2010, you have certain rights regarding the personal data held by mycs3. We fully respect and facilitate the exercise of these rights:

Right to Access

You have the right to request a copy of the personal data we hold about you and information on how it is being used.

Right to Rectification

You have the right to request corrections to any personal data we hold that is inaccurate, incomplete, or out of date.

Right to Withdraw Consent

You may withdraw consent given for data processing for marketing purposes at any time.

Right to Object

You have the right to object to the processing of your data for certain purposes, including direct marketing.

Right to Enquire

You have the right to ask mycs3 whether we are processing your personal data and to receive an explanation of how it is being used.

How to Submit a Request

Contact us at privacy@mycs3.com. We will respond within 14 business days.

To exercise any of the above rights, please contact the mycs3 Data Protection Officer by email at privacy@mycs3.com by stating the type of request and the relevant account information. We will process your request within 14 business days and may require additional identity verification before disclosing or modifying any personal data.

8
Use of Cookies & Tracking Technologies

The mycs3 platform uses cookies and similar tracking technologies to enhance your experience, ensure the platform functions correctly, and help us understand how our platform is being used. The following are the types of cookies used by mycs3:

  • Essential Cookies: Cookies required for the platform to function properly — including login session cookies, security cookies, and cookies that store your language preferences. These cookies cannot be disabled as they are critical to the operation of the mycs3 platform.
  • Performance Cookies: Cookies that help us understand how visitors interact with the mycs3 platform — such as the most frequently visited pages, time spent on site, and errors encountered. This data is collected in aggregate form and without personal identification.
  • Functional Cookies: Cookies that store your preferences such as display settings, game preferences, and auto-fill information for your convenience. This allows mycs3 to offer a more personalized experience.

You can manage or delete cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the mycs3 platform and prevent you from accessing certain sections. mycs3 does not use third-party cookies for advertising purposes that track your activity across other websites.

9
Protection of Children's Data

Mycs3 is a platform designed exclusively for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

During registration, we require age verification from all prospective members. Any account found to belong to an underage individual will be closed immediately, and all associated data will be securely deleted in accordance with our procedures.

If you believe a child has registered an account on mycs3 or has provided us with personal data without appropriate consent, please contact us immediately at privacy@mycs3.com so that we may take appropriate action without delay.

Parents & Guardians: We encourage parents and guardians to monitor their children's online activity and ensure they do not access gambling platforms such as mycs3. If you suspect your child has accessed this platform, contact us immediately for further action.

10
Contact mycs3 for Privacy-Related Matters

Mycs3 takes every query, concern, or complaint relating to how we handle your personal data seriously. If you have any questions about this Privacy Policy or wish to exercise your privacy rights, here is how to reach us:

  • Privacy Email: privacy@mycs3.com — for data access requests, corrections, or privacy-related complaints. Response time: 14 business days.
  • General Support Email: support@mycs3.com — for general enquiries about our privacy policy.
  • Live Chat: Available 24 hours a day through the mycs3 platform for immediate enquiries.

If you are not satisfied with how mycs3 has handled your privacy complaint, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia, the authority responsible for overseeing PDPA compliance in the country.

Mycs3 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Any material changes will be communicated to registered members via email or in-platform notification at least seven (7) days before taking effect. The "Updated" date at the top of this document will always reflect the latest version.

FAQ – mycs3 Privacy Policy

No. mycs3 does not sell, rent, or share your personal data with any third-party advertising or marketing companies for their own purposes. Your data is only shared with the limited parties specified in this Privacy Policy — namely Malaysian payment service providers (Touch 'n Go, GrabPay, DuitNow, FPX), licensed game providers, and legal authorities where required by law. In all such cases, data sharing is strictly limited to what is necessary for the stated purpose.

You may request the deletion of your personal data by contacting us at privacy@mycs3.com. Please note, however, that there are limitations to the right of erasure under Malaysia's PDPA. mycs3 may be required to retain certain data to fulfil legal obligations, such as the 7-year financial and transaction record retention requirement under Malaysian accounting and AML laws. Data not subject to such legal retention obligations will be securely deleted within 30 business days of a verified request.

mycs3 does not directly store your full bank card or e-wallet details in our systems. All financial transactions are processed through secure, certified payment gateways provided by recognised payment providers in Malaysia. The information we retain is limited to partially masked account numbers (e.g. last four digits only) and transaction metadata required for record-keeping purposes. This data is stored in encrypted form and is accessible only to authorised personnel for customer support and legal compliance purposes.

When you close your mycs3 account, we will anonymise or delete your personal data in accordance with the established retention schedule. Identity data and general account information will be anonymised (rather than immediately deleted) as we are required to maintain records to prevent unauthorised re-registration. Financial and transaction records will be retained for the period prescribed by Malaysian law (a minimum of 7 years). Data not subject to any legal retention requirement will be securely deleted within 90 days of account closure being confirmed.
Your Data Is Safe with mycs3

Play with Confidence on a Platform That Protects Your Privacy

Mycs3 is built on trust. Register for free today and enjoy an online casino experience that is secure, fair, and fully respectful of your privacy in accordance with Malaysia's PDPA standards.

For new members only. 18+ only. By registering, you agree to the Terms & Conditions and the mycs3 Privacy Policy.

Bahasa Melayu