Last updated: 1 January 2026

Mycs3 Privacy Policy – Our Commitment to Protecting the Personal Data of Malaysian Players

At mycs3, your privacy is not just a line in a document — it is a genuine responsibility we take seriously. This Privacy Policy clearly sets out what data we collect, how it is used, how we protect it, and the rights you hold as a mycs3 player. All our data protection practices comply with Malaysia's Personal Data Protection Act 2010 (PDPA 2010).

Protected & Secure
Your data is stored with 256-bit SSL encryption and managed in full compliance with Malaysia's PDPA 2010.
Versionv3.1
CompliancePDPA 2010
Encryption256-bit SSL

Mycs3's Six Core Privacy Principles

This is the foundation of how mycs3 handles the personal data of every Malaysian player on our platform.

Bank-Grade Encryption

All data transmitted between your device and mycs3's servers is protected with 256-bit SSL encryption — the same security standard used by Maybank, CIMB and other major Malaysian financial institutions. No one can intercept your data in transit.

PDPA 2010 Compliance

Mycs3 operates in full compliance with Malaysia's Personal Data Protection Act 2010. This means we have a legal obligation to protect your data, and you have rights that are protected by law in the management of your personal data.

No Sharing Without Consent

Your personal data will not be sold, shared, or transferred to any third party without your explicit consent, except where required by Malaysian law or the relevant regulatory authority.

Minimal Data Collection

Mycs3 only collects data that is strictly necessary to operate the platform, process financial transactions, fulfil KYC requirements, and provide customer support. No data is collected in excess or for unrelated purposes.

Player Access Rights

You have the right to access, correct, and request the deletion of your personal data held by mycs3. Such requests can be submitted to our support team at any time and will be processed within the timeframe stipulated by PDPA 2010.

Financial Transaction Privacy

Your deposit and withdrawal records via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX are stored privately and securely. Your financial information is never shared with any third party and is deleted in accordance with the established retention schedule.

Key Summary: This Privacy Policy explains how mycs3 collects, uses, stores, and protects your personal data. By registering for or using the mycs3 platform, you agree to the data processing practices described in this document. If you do not agree, please discontinue use of mycs3 services. For enquiries, contact us at support@mycs3.net.

1Introduction & Scope of Privacy Policy

Mycs3 ("we", "the Platform") is an online entertainment platform operating in Malaysia, offering slots, Live Casino, poker, Sports Betting, cricket, virtual sports, and lottery services. We are fully committed to protecting the privacy of every player who registers and uses our platform.

This Privacy Policy applies to all personal data collected through the mycs3.net website, any mobile applications we release, and all interactions with our customer support team. It also applies to data collected through supported payment methods including Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX via Maybank2u or CIMB Clicks.

Mycs3 is a "data controller" under Malaysia's Personal Data Protection Act 2010 (PDPA 2010), meaning we are responsible for ensuring your personal data is processed lawfully, fairly, and transparently in accordance with that legislation. We take this responsibility seriously and continually invest in our systems and training to maintain full compliance.


2Types of Personal Data Collected

Mycs3 collects several categories of personal data depending on how you interact with our platform:

2.1 Data You Provide Directly

Data Categories Specific Examples Primary Purpose
Identity Data Full name (as per MyKad), date of birth, MyKad/passport number Identity verification (KYC), fraud prevention
Contact Data Malaysian phone number, email address Account communications, OTP, customer support
Financial Data Payment methods used, transaction history, account balance Deposit & withdrawal processing, financial audits
Verification Data Copies of identity documents, verification selfie (if requested) Enhanced KYC, anti-money laundering (AML)
Communication Data Live chat conversation records, support emails, complaint tickets Customer support, service improvement

2.2 Automatically Collected Data

  • Gaming Activity Data: Records of all games played, bets placed, wins and losses, and gaming sessions — retained for audit purposes, fraud detection, and responsible gambling monitoring.
  • Technical Data: IP address, device type, operating system, browser version, and screen resolution — collected to optimise your platform experience across your devices.
  • Approximate Location Data: Country/region inferred from your IP address — used to confirm service availability in your area and to ensure regulatory compliance.
  • Cookie Data: Session information, language preferences, analytics cookies, and functional cookies — described in further detail in Section 9.

Data Collection Note: mycs3 never collects sensitive data such as credit card information directly — all financial transactions are processed through authorised Malaysian payment providers (TNG, DuitNow, GrabPay, etc.) that maintain their own security systems. mycs3 only receives transaction confirmations, not your full card or bank account details.


3How Your Personal Data Is Used

Mycs3 uses the personal data it collects for the following purposes:

  • Account Management: Creating and managing your mycs3 account, processing registration, sending verification OTPs, and enabling secure access to the platform.
  • Service Delivery: Enables you to play slots, Live Casino, poker, Sports Betting on the Malaysia Super League and EPL, cricket, virtual sports and lottery on the mycs3 platform.
  • Financial Processing: Processing deposits via TNG, DuitNow, GrabPay, Boost, ShopeePay, and FPX, and managing winnings withdrawals to your account.
  • Legal Compliance: Meeting KYC requirements, conducting AML (Anti-Money Laundering) checks, and complying with directives from Malaysian regulatory bodies or legal authorities.
  • Platform Security: Detecting and preventing fraud, duplicate accounts, bonus abuse, bot usage, and other security threats.
  • Customer Support: Responding to enquiries, resolving technical and financial issues, and handling complaints via live chat, WhatsApp and email.
  • Responsible Gambling: Monitoring gameplay patterns to identify signs of problem gambling and reaching out to players who may need support, as well as enforcing the limits you set for yourself.
  • Marketing Communications: Sending information about promotions, new bonuses and platform updates — only where you have given consent to receive such communications.

4Legal Basis for Data Processing

Under Malaysia's PDPA 2010, mycs3 processes your personal data on the following legal bases:

  • Consent: You provide explicit consent when registering a mycs3 account by agreeing to these Terms & Conditions and this Privacy Policy. You may withdraw consent for marketing communications at any time.
  • Contract Performance: Data processing is required to fulfil the service contract between you and mycs3 — including carrying out financial transactions and providing access to games.
  • Legal Obligation: Certain data processing is required by Malaysian law, including KYC and AML requirements set by the relevant regulatory authorities.
  • Legitimate Interests: mycs3 processes certain data on the basis of legitimate business interests, such as detecting fraud, protecting platform security, and improving our services — provided these interests do not override your privacy rights.

5Data Sharing with Third Parties

Mycs3 does not sell your personal data. We do not share your information with third parties for their own marketing purposes. However, in certain limited situations, data may be shared with the following categories of parties:

5.1 Technical Service Providers

Mycs3 uses trusted third-party technical service providers to operate the platform — including cloud computing providers, email service providers, and customer support platforms. These providers are only permitted to use your data for the specific purposes directed by mycs3 and are bound by strict data protection agreements.

5.2 Malaysian Payment Providers

To process deposits and withdrawals, minimal transaction data is shared with your chosen payment provider — Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX via Maybank2u or CIMB Clicks. This sharing is technically necessary to complete the transaction and is governed by the respective provider's privacy policy.

5.3 Game Providers

Minimal gameplay data (such as player IDs without full names) may be shared with game software providers to enable the delivery of slots, Live Casino and poker. These providers do not receive your full identity information.

5.4 Legal Authorities

Mycs3 will disclose personal data when required by Malaysian law, a court order, or a legitimate request from a competent authority. In such cases, we will endeavour to notify you if permitted by law.

Fraud Warning: mycs3 will never ask for your account password via email, WhatsApp or phone. If anyone claims to be a mycs3 representative and requests sensitive information such as your password or e-wallet PIN, do not share it and report it to us immediately at support@mycs3.net. This is a third-party fraud attempt and has no connection to mycs3.


6Data Security Measures

Mycs3 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction or disclosure:

  • 256-bit SSL Encryption: All data in transit between your device and mycs3 servers is encrypted using 256-bit TLS/SSL protocol — the same industry standard used by Malaysia's leading banks.
  • Data-at-Rest Encryption: Sensitive data stored in the mycs3 database is encrypted at rest using strong encryption algorithms.
  • Strict Access Controls: Only authorised and verified mycs3 staff have access to players' personal data, based on the principle of minimum necessary access rights.
  • Two-Factor Authentication (2FA): mycs3's internal systems containing player data are protected with multi-factor authentication for all staff.
  • Regular Security Audits: mycs3 conducts regular internal and external security audits to identify and address potential vulnerabilities before they can be exploited.
  • 24-Hour Monitoring: The mycs3 security team continuously monitors platform activity to detect unauthorised access or suspicious behaviour.
  • Incident Response Procedure: mycs3 has a formal procedure for handling data breaches — including notifying affected players within the timeframe stipulated by PDPA 2010.

While we take all reasonable measures to protect your data, no security system can guarantee absolute 100% protection. You also play an important role — keep your account password secure, do not share your login credentials, and notify us immediately if you suspect any unauthorised access.


7Data Retention Period

Mycs3 retains your personal data only for as long as necessary for the purposes stated in this policy or as required by Malaysian law:

  • Active Account Data: For the duration your account remains active and for a specified period following account closure.
  • Financial Transaction Records: Minimum 7 years from the transaction date, in line with Malaysia's tax, financial, and AML legal requirements.
  • KYC Records: Minimum 5 years from the date of verification or account closure, in accordance with anti-money laundering regulations.
  • Game Activity Logs: Minimum 2 years for audit purposes and dispute resolution.
  • Support Communication Records: 2 years from the date of last interaction, for quality control and historical reference purposes.

When data is no longer required, mycs3 will securely delete or anonymise it using methods that ensure it cannot be recovered or reused.


8Your Rights Under PDPA 2010

As a mycs3 player residing in Malaysia, you have rights protected under the Personal Data Protection Act 2010. These rights can be exercised by contacting the mycs3 support team:

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information within the timeframe stipulated by PDPA 2010.

Right to Rectification

If any personal data held by mycs3 is inaccurate or incomplete, you have the right to request an immediate correction at no charge.

Right to Withdraw Consent

You may withdraw consent for any consent-based data processing — such as opting out of marketing emails — at any time, without affecting your access to core services.

Right to Restrict Processing

In certain circumstances, you have the right to request that we restrict how we process your data — for example, while a dispute regarding data accuracy is being resolved.

Right to Erasure

Under certain circumstances permitted by law, you may request the deletion of your personal data. Each request will be assessed in accordance with mycs3's legal obligations.

Right to Lodge a Complaint

If you believe mycs3 has violated your privacy rights, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia or the relevant regulatory authority.

To exercise any of the rights listed above, contact the mycs3 support team by email at support@mycs3.net with the subject line "PDPA Privacy Rights Request". Please include your full name and account number to help us process your request faster. mycs3 will respond within 21 business days in accordance with the requirements of PDPA 2010.


9Cookies & Tracking Technologies

The mycs3 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The following are the types of cookies we use:

You can manage your cookie preferences through your browser settings. However, disabling essential functional cookies may affect your ability to use the mycs3 platform fully. mycs3 does not use third-party cookies to target you with advertising on other websites.


10Children's Data Protection

Mycs3 is an online entertainment platform intended exclusively for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

Mycs3 enforces strict age verification during the registration process, including a requirement to enter an accurate date of birth and, in certain cases, identity document verification to confirm age. Should we determine that personal data belonging to a child under 18 has been collected inadvertently, we will take immediate steps to delete that data and close the associated account.

To Parents & Guardians: If you believe your minor child has registered an account on mycs3 without your knowledge, please contact us immediately at support@mycs3.net. We will verify and close the account without delay, and delete all associated data. The health and safety of children is our absolute top priority.


11Amendments to This Privacy Policy

Mycs3 may update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to how our platform operates. When significant changes are made, we will notify you via:

  • An in-platform notification on mycs3 the next time you log in.
  • A notification email sent to your registered email address (for significant changes).
  • Updates the "Last Updated" date at the top of this page.

We encourage you to review this page periodically. Your continued use of the mycs3 platform following any amendments to this Privacy Policy will be considered your acceptance of the updated terms. The latest version of this Privacy Policy is always accessible at mycs3.net/privacy-policy.


12Contact Us for Privacy Enquiries

If you have any questions, concerns or requests regarding this Privacy Policy or how mycs3 handles your personal data, please reach out to us through the following channels:

  • Privacy Email: support@mycs3.net (use the subject line "PDPA Privacy Enquiry" for a faster response)
  • Live Chat: Available 24 hours from any page on the mycs3 platform
  • WhatsApp: Number available after logging in to your account

The mycs3 support team operates 24 hours a day, 7 days a week in both Bahasa Malaysia and English. For enquiries specifically related to PDPA, our response time is within 21 business days in accordance with legal requirements.

Verification: By using the mycs3 platform, you confirm that you have read and understood this Privacy Policy, agree to the data collection and processing practices described herein, and trust mycs3 to manage your personal data responsibly in accordance with Malaysia's PDPA 2010. Thank you for your trust — we will not take it for granted.

Mycs3 Privacy & Data Frequently Asked Questions

Absolutely not. mycs3 does not sell, rent or trade players' personal data to any third party for marketing or other commercial purposes. Your data is only shared in limited, specific situations — with technical service providers that support our platform operations, Malaysian payment providers to process transactions, and law enforcement authorities where required by Malaysian law. In all such cases, data sharing is strictly limited to what is necessary.

All financial transactions at mycs3 — whether deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX — are processed through authorised Malaysian payment providers and protected by 256-bit SSL encryption. Importantly, mycs3 does not directly store your full bank account details or card information — we only receive transaction confirmations from the payment provider. Transaction records stored within the mycs3 system are encrypted and accessible only to authorised personnel.

Yes, you may request the deletion of your personal data by contacting support@mycs3.net. However, please be aware that mycs3 may not be able to delete all data where there is a legal obligation to retain it — for example, financial transaction records must be kept for a minimum of 7 years under Malaysian financial law, and KYC records must be retained for a minimum of 5 years under AML regulations. Data that can be deleted without any legal restrictions will be processed within the timeframe set by PDPA 2010 after your account is closed.

When you close your mycs3 account, your access to the platform is terminated immediately. However, mycs3 is required to retain certain data for periods prescribed by Malaysian law — transaction records for tax and AML purposes, KYC records for regulatory requirements, and communication records for a shorter retention period. Data that does not need to be retained by law will be deleted or anonymised in accordance with our data retention schedule. You may request further details on what we retain after account closure by contacting our support team.

You can opt out of promotional emails from mycs3 at any time using either of these methods: click the "Unsubscribe" link found at the bottom of any promotional email we send, or log in to your mycs3 account and go to Settings → Communication Preferences to disable marketing emails. Please note that even after unsubscribing from promotional emails, mycs3 may still send you important transactional emails such as deposit confirmations, account security notices, and withdrawal notifications.

Yes — as part of our responsible gambling commitment, mycs3 monitors gameplay patterns to identify signs of problem gambling, such as sudden increases in bet amounts, unusually long play sessions, or concerning loss patterns. This is done to protect player wellbeing, not for personal surveillance. If our system detects a concerning pattern, the mycs3 support team may reach out with information about available self-limitation tools. This monitoring is part of our operating licence conditions and is for your benefit.

Mycs3 Data Protection Recognised & Verified

SSL 256-Bit Encryption PDPA 2010 Compliant Licensed & Regulated Data Is Never Sold Full Transaction Privacy 24/7 Privacy Support

Register with mycs3 — A Platform That Protects Your Privacy & Keeps Your Data Safe

850,000+ Malaysian members trust mycs3 with their data. 256-bit SSL, PDPA 2010 compliant, no data selling. Minimum deposit RM 10 via TNG, DuitNow or FPX. Slots, poker, sports & Live Casino — secure 24 hours a day.

Minimum age 18. Gamble responsibly. | Responsible Gambling

Bahasa Melayu