Colourhe Privacy Policy – Malaysia Player Personal Data Protection

Colourhe ("we", "our platform") operates a website and mobile app providing online casino gaming services to players in Malaysia. As a responsible platform operator, we recognize the importance of privacy to every user and are committed to protecting your personal information in a transparent and professional manner.

This Privacy Policy describes our practices regarding the collection, use, disclosure, and protection of personal data for colourhe users. It applies to all platform users, including those accessing via the colourhe website or mobile app.

By registering an account or using colourhe's services, you confirm that you have read and understood this Privacy Policy. If you disagree with any part of this policy, please discontinue use of the platform and contact us to close your account.

Colourhe collects various types of information depending on how you interact with our platform. The following are the main categories of data we collect:

Account Registration Data:

• Full name as it appears on your identification document.
• Date of birth — for age verification purposes (18 years and above).
• Email address and mobile phone number.
• Current residential address.
• Username and encrypted password.

Identity Verification Data (KYC):

• Copy of your national ID, passport or other valid identity document.
• Proof of address such as a utility bill or recent bank statement.
• A selfie photo for identity verification if required.

Financial Data:

• Bank account or e-wallet details registered for deposits and withdrawals.
• Deposit and withdrawal transaction records.
• Wagering history and game activity records.

Technical Data:

• IP address, device type, and operating system.
• Browser information including type and version.
• Login data including access time and location.
• Cookie data and similar tracking technologies.

Data collected by colourhe is used solely for legitimate purposes directly related to delivering platform services. We will not use your data for any other purpose without your explicit consent.

For marketing communications, you may unsubscribe at any time through the notification settings in your account or by contacting our support team. Unsubscribing from marketing does not affect important operational communications such as withdrawal notices or security alerts.

Colourhe does not sell your personal data. However, in the context of service delivery, we may need to share certain information with trusted third parties. All data sharing is carried out under strict controls and only to the extent necessary.

Third parties that may receive your data:

• Payment service providers — to process deposits and withdrawals. They receive only the data necessary to complete the transaction.
• Game providers — basic game data is shared with providers integrated with colourhe to ensure games function correctly.
• Identity verification services — third-party KYC providers that assist in verifying player documents in accordance with compliance requirements.
• Analytics services — anonymized data is shared with analytics tools to help us understand usage patterns and improve the platform.
• Legal authorities — in cases where disclosure is required by law, court order or a valid request from a law enforcement agency.

Your personal data is stored on secure servers with strict access controls. colourhe uses a combination of physical and technical security measures to ensure your data is always protected against unauthorised access, loss, or damage.

Data retention periods vary depending on the type of data and applicable legal requirements:

• Active account data — retained for the duration of the active account and for a reasonable period after account closure.
• KYC records and identity verification — retained to meet anti-money laundering (AML) compliance requirements, which typically require retention of between 5 and 7 years.
• Financial transaction records — retained for audit and tax reporting purposes in accordance with Malaysian law.
• Customer support communication data — retained for the period required for reference purposes and dispute resolution.
• Cookie and analytics data — retention period varies by cookie type, as stated in our cookie policy.

Once the retention period expires or data is no longer needed, colourhe will securely delete or anonymise that data.

As a colourhe player protected under Malaysia's PDPA and international data protection standards, you have the following rights regarding your personal data:

Colourhe uses cookies and similar tracking technologies to enhance the user experience, analyze usage patterns and deliver relevant content. Cookies are small text files stored on your device when you access our platform.

You can manage cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of the colourhe platform, including the ability to log in and use security features.

Colourhe implements a range of technical and organizational security measures to protect your personal data from unauthorized access, loss, alteration or accidental disclosure.

Key security measures we implement include:

• 256-bit SSL Encryption for all data transmitted between your device and our servers.
• Two-factor authentication (2FA) available to all player accounts as an additional security layer.
• 24/7 security monitoring to detect and respond to any suspicious activity.
• Multi-layer access control ensuring only authorized personnel can access sensitive data.
• Regular security audits conducted by our internal security team and third-party auditors.
• Incident response plan enabling us to respond quickly in the event of a security breach.

As part of colourhe's global operations, your personal data may be transferred to or processed in countries other than Malaysia. This occurs primarily when we use the services of game providers or payment gateways that operate internationally.

Any cross-border data transfers are carried out in compliance with applicable legal requirements. colourhe ensures that all data recipients outside Malaysia provide a level of protection equivalent to Malaysia's PDPA through:

• Legally binding data processing agreements.
• Use of companies that comply with internationally recognised data protection standards.
• Regular assessments of our partners' data protection practices.

The colourhe platform is strictly for individuals aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. Should we discover that we have collected data from a child or underage individual without valid parental or guardian consent, we will take immediate steps to delete that data and close the account in question.

If you believe your child has registered a colourhe account, please contact our support team immediately. We will investigate and take appropriate action as quickly as possible.

Colourhe reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or user feedback. The "Updated" date at the top of this page indicates the latest version currently in effect.

For significant changes, we will notify you by email or in-platform notice before the changes take effect. Continued use of the colourhe platform after the effective date of any changes constitutes your acceptance of the revised policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, you may contact the colourhe privacy team through the following channels:

• Live Chat: Available 24/7 directly within the colourhe platform or app.
• Email: [email protected] — include the subject "Privacy Inquiry" for faster processing.
• FAQ: Visit page FAQ us for answers to the most frequently asked privacy questions.

We are committed to addressing all privacy-related inquiries seriously and transparently. A response will be provided within 30 business days from the date your inquiry is received.