Privacy Policy phlbest —
Malaysian User Data Protection

1 Introduction

Welcome to the phlbest Privacy Policy page. We, the management of the phlbest platform, take the privacy and security of every user's personal data seriously. This document is designed to clearly and transparently explain how we collect, store, use, and protect your information when you use the phlbest online gaming platform at https://phlbest.vin.

This Privacy Policy applies to all registered users, website visitors and anyone who interacts with our platform. By registering an account or continuing to use the phlbest platform, you are deemed to have read, understood and agreed to all terms stated in this Privacy Policy.

Phlbest operates in full compliance with Malaysia Personal Data Protection Act 2010 (PDPA). We believe transparency is the foundation of trust — that's why we've written this document in plain language that Malaysian users can easily understand, rather than confusing legal jargon.

2 Personal Data We Collect

Phlbest only collects data that is strictly necessary to operate the platform, ensure your account security, and meet legal requirements. We do not collect irrelevant or excessive data. The following are the categories of data we collect:

We also collect third-party data that you voluntarily provide to us, such as additional verification information during the KYC process. All collected data is stored securely and accessed only by authorized personnel.

3 How We Use Your Data

The data we collect is used solely for legitimate, clearly stated purposes. phlbest will not use your data for unrelated purposes without first obtaining your consent. The following are the primary purposes for data use:

• Account Management: Creating, verifying, and maintaining your user account securely.
• Transaction Processing: Processing deposits, withdrawals, and bonus payments quickly and accurately.
• Identity Verification (KYC): Ensuring the security of your account and complying with anti-money laundering (AML) regulations.
• Customer Support: Handling enquiries, complaints, and technical support requests more effectively.
• Platform Security: Detecting and preventing fraud, unauthorised access, and platform abuse.
• Legal Compliance: Fulfilling legal obligations under the PDPA 2010, financial regulations, and directives from relevant authorities.
• Service Improvements: Analysing usage patterns to improve overall platform quality and user experience.
• Service Communications: Sending important account-related notifications, promotions you have opted in to receive, and policy updates.

4 Data Sharing & Disclosure

Phlbest sell, rent, or trade your personal data to any third party for marketing purposes. However, there are limited situations where we need to share your data with trusted external parties, namely:

• Payment Service Providers: Authorised payment processors such as FPX, Touch 'n Go, and other financial service providers to enable transactions to be processed securely.
• Game Providers: Third-party game partners who provide game content on our platform, strictly to the extent necessary to run the games properly.
• KYC Verification Services: Third-party identity verification service providers that help us verify documents faster and more securely.
• Legal Authority: Law enforcement agencies, courts or regulatory bodies when we are required to do so by law or court order.
• Technical Infrastructure Services: Cloud and hosting service providers that store our data, subject to strict data protection agreements.

All third parties working with phlbest are required to comply with data protection standards no less stringent than our own. Data sharing is conducted on a need-to-know basis and with adequate contractual safeguards in place.

5 Security & Data Protection

We continuously invest in the latest security technologies to ensure your personal data remains protected at all times. The security measures we have implemented include:

• 256-bit SSL Encryption: All data transmitted between your device and phlbest servers is encrypted using 256-bit TLS/SSL protocol — the same standard used by leading banking institutions.
• Stored Data Encryption: Sensitive data such as financial information and identity documents is encrypted at rest using modern encryption algorithms.
• Strict Access Controls: Only authorized personnel with a legitimate business need may access user data. All access is logged and monitored.
• Periodic Security Scanning: Our systems undergo regular penetration testing and security audits conducted by independent security experts.
• Two-Factor Authentication (2FA): Additional verification is required for sensitive operations to prevent unauthorized access.
• 24/7 Monitoring: Our cybersecurity team monitors systems around the clock to detect any suspicious activity.

6 Cookies & Tracking Technologies

Phlbest uses cookies and similar tracking technologies to enhance the user experience and analyze platform performance. The following are the types of cookies we use:

• Essential Cookies: These cookies are required for core platform functions such as login authentication and session security. They cannot be disabled.
• Preference Cookies: Saving your preferences such as language, display theme, and account settings for a seamless ongoing experience.
• Analytics Cookies: Helping us understand how users interact with the platform for service improvement purposes. This data is processed anonymously.
• Security Cookies: Used to detect suspicious activity and prevent fraud, including protection against CSRF attacks.

You can manage cookie settings through your web browser. Please note that disabling certain cookies may affect platform functionality. For more information on managing cookies, please refer to your web browser's documentation.

7 Your Rights as a User

Under the Malaysia Personal Data Protection Act 2010 and phlbest's internal policies, you have the following rights regarding your personal data:

8 Children's Data Protection

Phlbest is a gaming platform exclusively dedicated to adult users aged 18 years and above. We do not intentionally collect, process or store personal data from individuals under the age of 18.

If we discover that a child's personal data has been collected unintentionally, we will take immediate action to delete that data and close the associated account. Parents or guardians who are concerned that their child has registered on our platform are encouraged to contact us right away.

9 International Data Transfers

In operating the phlbest platform, a limited portion of your data may be stored or processed outside Malaysia, primarily through cloud infrastructure and international-grade technical service providers. Such transfers are only carried out when:

• The recipient country has data protection laws that are equivalent to or stricter than ours.
• Data transfer agreements compliant with PDPA 2010 have been signed with all relevant parties.
• Adequate technical and organisational protection measures have been implemented.

Phlbest ensures that any transfer of data outside Malaysia is carried out with protections no less than those provided under Malaysian law. You may request further information about the data transfer mechanisms we use by contacting our support team.

10 Data Retention Period

Phlbest retains your personal data for as long as your account is active and for the period required by law after account closure. Our data retention guidelines are as follows:

• Active Account Data: Retained for as long as your account remains active on the phlbest platform.
• Financial Transaction Records: Retained for a minimum of 7 years after the transaction, in accordance with Malaysia's tax and financial regulatory requirements.
• KYC Documents: Retained for a minimum of 5 years after account closure in accordance with AML/CFT regulatory requirements.
• Communication Logs: Support chat records and emails are retained for 2 years for reference and quality control purposes.
• Technical Log Data: System logs and access data are retained for 12 months for security and troubleshooting purposes.

After the designated retention period has elapsed, your data will be securely deleted or anonymized in accordance with industry-standard data disposal procedures.

11 Links to Third-Party Websites

The phlbest platform may contain links to third-party websites or services, including game providers and technology partners. Please note that the phlbest Privacy Policy not applicable to those third-party websites or services.

We encourage you to read the privacy policy of every third-party website you visit. phlbest is not responsible for the privacy practices or content of third-party websites, even where a link to those sites exists on our platform.

12 Contact Us & Policy Amendments

Phlbest reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new technology, or updated legal requirements. Any significant amendments will be communicated to you via:

• In-platform notification at least 7 days before changes take effect
• Email notifications to your registered email address
• Update the "Last Updated" date at the top of this page

Continued use of the phlbest platform after the effective date of any changes means you accept the amended Privacy Policy. If you do not agree, please close your account before the effective date.

For any inquiries, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact the phlbest Data Protection Officer via our support email or through the live chat available 24/7 on the platform. We are committed to responding to all inquiries within 5 business days.