Privacy Policy fa chai —
Your Data, Our Protection

Fa Chai collects various types of personal information from our Malaysian players to ensure our platform services operate securely and efficiently. The information we collect can be grouped into the following categories:

Fa Chai collects only the information genuinely necessary to provide our services. We do not request excessive or irrelevant information from our players.

Fa Chai collects your information through the following methods:

• Account Registration: Information you provide directly when creating a new account on the fa chai platform.
• Platform Usage: Data automatically generated when you play slots, Live Casino, bet on football, badminton, cricket, or use any other feature on our platform.
• Financial Transactions: Relevant information when you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u / CIMB Clicks).
• Communications with Us: Information you provide when contacting our customer support team via Live Chat, WhatsApp, or email.
• Cookies and Similar Technologies: Technical data collected automatically via cookies, tracking pixels, and similar technologies when you browse the Fa Chai platform.
• Identity Verification (KYC): Documents submitted for identity verification purposes, such as a copy of your MyKad or other supporting documents.

Fa chai uses your personal information for the following legitimate and necessary purposes:

• Account Management: Creating, verifying, and maintaining your player account on the fa chai platform.
• Transaction Processing: Processing your deposits and withdrawals in MYR via your chosen e-wallet or FPX method.
• Security & Fraud Prevention: Identifying and preventing fraudulent activity, money laundering, bonus abuse, and unauthorised access to your account.
• Legal Compliance: Fulfilling our obligations under the PDPA 2010, Malaysia's anti-money laundering laws, and requirements from relevant regulatory authorities.
• Service Improvements: Analysing platform usage patterns to improve the gaming experience, platform speed, and the variety of games we offer.
• Service Communications: Sending important notifications relating to your account, security, changes to our terms, and technical information you need to be aware of.
• Marketing Communications: Sending promotional information, bonus offers, and platform updates — only where you have given your consent for this.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and offer appropriate support to players who may need it.

Fa Chai will not use your data for any purpose other than those stated here without first obtaining your renewed consent.

Fa chai does not sell your personal data to any party. However, there are specific situations where we may need to share certain information with trusted parties:

• Payment Providers: We share the necessary transaction information with payment service providers such as Touch 'n Go, GrabPay, Boost, and FPX providers to facilitate smooth processing of deposits and withdrawals in MYR.
• Game Software Providers: Third-party game providers that supply games on the Fa Chai platform may receive session data necessary for game operation. They are bound by strict confidentiality agreements.
• Regulatory Bodies & Authorities: Fa Chai will disclose information to Malaysian authorities when required by law, court order, or official investigations into unlawful activities.
• Independent Auditors: Auditing firms that verify the fairness of games and Fa Chai's operational compliance may access limited data strictly for audit purposes.

Fa chai invests seriously in security infrastructure to protect the personal data of all our Malaysia players. The following are the technical and organisational measures we have in place:

• Data Encryption in Transit: All communications between your web browser and fa chai servers are protected by 256-bit TLS/SSL encryption, ensuring your data cannot be intercepted in transit.
• Data Encryption at Rest: Sensitive data such as passwords and financial information is stored in encrypted form using the latest hashing algorithms.
• Strict Access Controls: Only authorised fa chai employees whose job roles require it are permitted to access player data. All access is automatically logged and monitored.
• 24/7 Security Monitoring: Our intrusion detection system continuously monitors the Fa Chai platform to identify and respond to any security threats.
• Regular Penetration Testing: Fa Chai engages independent cybersecurity experts to conduct regular penetration testing to identify and address any system vulnerabilities.
• Two-Factor Authentication (2FA): fa chai provides and encourages the use of 2FA on all accounts for an additional layer of security.

While no system can be guaranteed 100% secure, fa chai takes all reasonable steps to minimise the risk of a data breach and to fully protect our players' information.

Fa chai retains your personal data only for as long as necessary for the purposes stated in this privacy policy or as required by applicable Malaysian law.

• Active Account Data: Retained for the duration your account remains active on the Fa Chai platform.
• Data After Account Closure: Financial records and legally required compliance data are retained for a minimum of 7 years after account closure, in accordance with Malaysian legal requirements.
• Log & Technical Data: Server logs and technical data are retained for a maximum of 2 years before being automatically deleted.
• Communication Data: Customer support conversation records are retained for 3 years for reference and dispute resolution purposes.

When data is no longer needed, fa chai ensures it is securely deleted or anonymised using approved procedures that do not allow for the recovery of deleted data.

The fa chai platform uses cookies and similar technologies to enhance the user experience, enable certain features, and analyse platform usage. Below are the types of cookies we use and the controls available to you:

You can manage your cookie settings through your web browser settings or via the privacy settings panel in your fa chai account. Note: Disabling certain cookies may affect the functionality of some parts of the platform.

As a fa chai Malaysia player, you have the following rights regarding your personal data under the Personal Data Protection Act (PDPA) 2010:

To exercise any of the above rights, please contact us at support@fachai-khelo.com. Fa Chai will respond to your request within 14 working days. In complex cases, this period may be extended by up to 30 days with notice to you.

The fa chai platform is exclusively for adults aged 18 years and above. We do not knowingly collect or process any personal data from individuals under the age of 18.

If we discover that personal data belonging to a minor has been collected without our knowledge, Fa Chai will take immediate action to delete that data and close the associated account. Parents or guardians who believe their child has registered on our platform are urged to contact support@fachai-khelo.com without delay.

Fa Chai may update this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or platform improvements. When material amendments are made:

• The "Last Updated" date at the top of this page will be revised
• A notice will be displayed on your account dashboard
• A notification email will be sent to all registered members for significant amendments

We encourage you to review this Privacy Policy page periodically. Your continued use of the fa chai platform following the publication of any amendments constitutes acceptance of the revised terms.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by fa chai, we would love to hear from you.

• Email: support@fachai-khelo.com (Subject: "Privacy Enquiry")
• Live Chat: Available 24 hours a day, 7 days a week via the Fa Chai platform
• Response Time: Within 5 business days for general enquiries; 14 business days for formal data rights requests

For more information about your rights under Malaysian data protection law, you may also refer to the official website of the Department of Personal Data Protection Malaysia.