Official Document

3star Privacy Policy – Personal Data Protection for Malaysia Players

3star takes your privacy seriously. This Privacy Policy clearly explains what information we collect, how it is used, who can access it, and your rights as the owner of that data. We believe you deserve full transparency on how your personal information is managed on the 3star platform.

Updated: 1 January 2026 Language: English (en-MY) Applicable: Malaysia

3star's Privacy Commitment to Malaysian Players

Six core principles that underpin how 3star manages your personal data

Full 256-bit SSL Encryption

All data transmitted between your device and 3star's servers is protected by 256-bit SSL encryption — the same standard used by major financial institutions in Malaysia. Your personal information and transaction data cannot be intercepted by any third party during transmission.

No Data Sales to Third Parties

3star has never sold, and will never sell, your personal information to any third party for marketing purposes. Your data belongs to you — it is not a business asset we trade in. Data sharing only occurs in very limited circumstances, as explicitly stated in this Privacy Policy.

Full Control in Your Hands

As a 3star member, you have the right to access, amend, or request deletion of your personal data at any time. Such requests will be processed within 14 business days. You may also withdraw consent for marketing communications directly from your account settings, effective immediately.

Secure Data Storage

Your personal data is stored on servers protected by multi-layered access controls, 24/7 security monitoring, and regular encrypted backups. Only 3star staff who require access to perform their duties are authorised to access sensitive member data.

Malaysian Legal Compliance

The 3star Privacy Policy is designed to comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We collect only the data necessary for legitimate operational purposes and ensure every instance of data collection has a clear legal basis.

Data Breach Notification

In the event of any data security breach affecting your personal information, 3star is committed to notifying you within 72 hours of the breach being detected — along with the steps being taken to protect you.

This Privacy Policy ("Policy") describes how 3star ("Platform", "we", "us") collects, uses, stores, discloses, and protects your personal information ("Personal Data") when you use the 3star platform — including the website, Sports Betting services, Live Casino, slots, virtual sports, e-sports, and the VIP Rewards Programme.

This Policy applies to all registered 3star members in Malaysia and any individual who visits or uses any part of our platform. By registering a 3star account or using our platform, you confirm that you have read and understood this Privacy Policy.

Quick Summary: 3star only collects data necessary for platform operations, never sells your data to third parties for marketing purposes, protects all data with 256-bit SSL encryption, and respects your right to access, correct, or request deletion of your data at any time.

Section 01

Personal Information We Collect

1.1 Data You Provide Directly

When you register a 3star account or use our services, you provide the following information directly:

Data Category Example Information Primary Purpose
Identity Information Full name, identification card number, date of birth Identity verification (KYC), fraud prevention
Contact Information Malaysian phone number, email address Account communications, OTP verification, customer support
Financial Information Payment method name (Touch 'n Go, GrabPay, DuitNow, FPX, etc.), account number for withdrawals Deposit and withdrawal processing
Verification Documents Copy of national ID or driving licence (if requested) Enhanced identity verification for high-limit accounts
Profile Information Username, password (encrypted), language preferences Account management and personalisation

1.2 Automatically Collected Data

When you use the 3star platform, our systems automatically collect the following technical information for security, performance, and platform improvement purposes:

  • Device Data: Device type, operating system, model, and unique device identifier
  • Network Data: IP address, internet service provider, geographic location at state or city level (not your exact address)
  • Usage Data: Pages visited, session duration, features used, access time and date
  • Betting Data: Betting history, games played, wagering amounts — all required for VIP cashback calculations, fairness audits, and fraud detection
  • Cookie Data: Session information and preferences stored through your web browser cookies

Important Note: 3star does not collect your precise location (GPS) without your explicit consent. We only use your IP address to determine your country or state for compliance and security purposes.

Section 02

How 3star Uses Your Personal Data

3star processes your personal data on lawful legal grounds under Malaysia's Personal Data Protection Act 2010 (PDPA). Every use of your data serves a specific purpose and does not extend beyond the scope outlined below:

2.1 Platform Operations and Account Management

This is the primary basis for our data collection. Your information is used to create and manage your account, process deposits via Touch 'n Go, GrabPay, DuitNow, FPX, Boost, and ShopeePay, process withdrawals to the same account, automatically calculate and credit weekly cashback under the VIP Rewards Programme, and maintain betting history for dispute resolution and audit purposes.

2.2 Identity Verification and Fraud Prevention

3star uses your personal data to verify your identity before approving withdrawals above certain thresholds, detect and prevent fraudulent activity such as duplicate accounts, bonus abuse, or money laundering, comply with applicable KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements, and ensure that only individuals aged 18 and above use our platform.

2.3 Customer Support

When you contact the 3star support team via live chat or email, records of those conversations are retained so we can provide better service in the future, resolve disputes based on interaction history, and train our support team to improve service quality.

2.4 Service Communications

3star uses your phone number and email address to send important account-related notifications — deposit and withdrawal confirmations, security alerts such as logins from new devices, notices regarding changes to our Terms & Conditions or Privacy Policy, and information about promotions and the VIP Programme relevant to your account status. Marketing communications are optional and can be unsubscribed from at any time.

3star does not use your data to make fully automated decisions that significantly affect your rights without human involvement. Any significant decisions, such as account suspension, are always reviewed by 3star staff.

Section 03

Sharing Data with Third Parties

3star does not sell, lease, or share your personal data with third parties for marketing purposes without your explicit consent. However, there are limited situations where data sharing is necessary for legitimate platform operations:

3.1 Payment Service Providers

To process your deposits and withdrawals, 3star is required to share the minimum necessary transaction details with local Malaysian payment service providers such as Touch 'n Go, GrabPay, DuitNow, FPX processors, Boost, and ShopeePay. Only the information strictly needed to complete the transaction is shared, and all these providers are bound by strict data protection agreements with 3star.

3.2 Game Providers

To provide Live Casino and slots games, 3star works with licensed game providers. These providers may receive your member ID number (not your name or actual personal details) for technical integration and game fairness auditing purposes. Your name and contact information are never shared with game providers.

3.3 Authorities and Legal Compliance

3star may be required to disclose your personal data to Malaysian authorities if compelled to do so by a court order, warrant, or valid legal requirement. In such circumstances, 3star will disclose only the minimum information necessary and will notify you if permitted to do so under the law.

3.4 Auditors and Professional Advisors

Independent third-party auditors who verify the RNG fairness of 3star's casino games may access anonymised game statistical data. 3star's legal and financial advisors may access data as required, subject to strict professional confidentiality obligations.

Our Commitment: Every third party that receives data from 3star is bound by a data processing agreement requiring them to protect your information to the same or higher standard as 3star itself. We do not permit any third party to use your data for their own purposes.

Section 04

Data Security and Protection Measures

Protecting your personal data is a core technical and operational priority at 3star. We continuously invest in our security infrastructure to ensure your information remains safe at all times.

4.1 Transmission Encryption & Security

All communications between your device and 3star's servers are protected by Transport Layer Security (TLS) 1.3 encryption with 256-bit SSL certificates. This means every piece of data you transmit — from passwords to your identification number — is fully encrypted and unreadable to anyone who may attempt to intercept it.

4.2 Data Storage Security

3star member personal data is stored on servers protected by multi-layered access controls, including two-factor authentication for all staff accessing the systems, real-time security monitoring and intrusion detection, audit logs tracking every instance of access to sensitive data, encrypted backups stored at physically separate locations, and regular penetration testing by independent security experts.

4.3 Internal Access Controls

Within the 3star organisation, access to member personal data follows a strict "need-to-know" principle — only staff who require access to carry out their specific duties are authorised. The customer support team can only view the information needed to assist with your enquiry, not your full financial records or verification documents.

4.4 Your Responsibilities in Account Security

The security of your 3star account also depends on your own actions. We encourage you to use a strong, unique password that you don't use on other platforms, enable two-factor authentication (2FA) in your account settings, never share your password with anyone including family members, log out when using a shared device, and contact 3star immediately if you suspect any suspicious activity on your account.

Important Notice: 3star will never ask for your password or OTP via email, SMS, or phone. If you receive any such request claiming to be from 3star, it is a fraudulent attempt — please do not respond and report it to us immediately.

Section 05

Cookies and Tracking Technologies

The 3star platform uses cookies and similar tracking technologies to ensure the platform functions correctly and to deliver a better user experience. Below is an overview of the types of cookies we use:

5.1 Essential Cookies (Required)

These cookies are essential for the 3star platform to function and cannot be disabled without affecting core platform functionality. They include session login cookies that maintain your logged-in status as you browse the platform, security tokens that prevent CSRF attacks, and your saved language and region preferences. These cookies do not contain personal information that can be used to identify you directly.

5.2 Performance & Analytics Cookies

3star uses analytics cookies to understand how members use the platform — which pages are visited most, where users encounter difficulties, and which features are most useful. This data is collected in aggregate and anonymised form — we cannot identify you individually from this analytics data. The goal is to continuously improve the 3star platform experience for all users.

5.3 Managing Your Cookie Preferences

You can manage or delete cookies through your web browser settings at any time. Popular browsers such as Google Chrome, Firefox, and Safari all provide options to delete existing cookies or block new ones. Please note that disabling all cookies may affect the functionality of certain parts of the 3star platform, including potentially requiring you to log in again each time you visit.

Clarification: 3star does not use third-party tracking cookies for targeted advertising or sell your browsing behaviour data to advertising networks. The cookies we use are solely for platform operations and improving the user experience.

Section 06

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding personal data held by 3star. We are committed to respecting and facilitating the exercise of these rights:

Right of Access

You have the right to request a copy of all personal data 3star holds about you. Requests will be processed within 14 business days and data will be provided in a readable format.

Right to Rectification

If the personal data 3star holds about you is inaccurate or out of date, you have the right to request a correction. Much of your profile information can be updated directly in your account settings.

Right to Erasure

You may request the deletion of your personal data when it is no longer required for the original purpose of collection, subject to applicable legal retention obligations.

Right to Object

You may object to the processing of your personal data for marketing communications at any time by disabling the marketing preferences in your account settings or by contacting us.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format so that it can be transferred to another service provider should you wish.

Right to Restriction of Processing

In certain circumstances, you have the right to request a restriction on the processing of your data while a correction request or objection is being handled by 3star.

To exercise any of the rights above, email us at support@3star.casino with the subject line "Personal Data Rights Request", specifying the right you wish to exercise along with the details needed to verify your identity. We will respond within 14 business days.

Section 07

Data Retention and Deletion

3star does not retain your personal data longer than necessary for the purposes set out in this Privacy Policy. Retention periods depend on the type of data and applicable legal requirements:

7.1 Active Account Data

For as long as your 3star account remains active, we retain all personal data necessary for account operations — profile information, transaction history, betting history, and customer support communication records. This data is required to ensure continuity of service, resolve any disputes, and meet applicable reporting obligations.

7.2 Data After Account Closure

When your account is closed at your request or by 3star, we retain certain data for the period required under Malaysian law — typically between 5 and 7 years for financial and transaction records for AML compliance and tax audit purposes. After this mandatory retention period, your data will be permanently deleted or anonymised.

7.3 Deletion Upon Request

You may request deletion of your data at any time. However, 3star is unable to delete data required to fulfil legal obligations (such as financial transaction records) or data needed to resolve outstanding disputes. We will clearly inform you of what can and cannot be deleted, along with the legal basis for any retention, when you submit a deletion request.

When 3star deletes data, it is securely erased using methods that ensure the data cannot be recovered — not merely "archived" or "hidden" from view.

Section 08

Children's Privacy & Protection of Young Persons

The 3star platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18. This policy is absolute and admits no exceptions under any circumstances.

Should 3star become aware that personal data belonging to a minor has been collected without proper age verification, we will take immediate steps to delete that data and close the associated account. Any balance in an account confirmed to belong to a minor will be handled in accordance with established protocols and may require verification from a parent or legal guardian.

If you are a parent or guardian who believes that a minor under your care has registered an account with 3star, please contact us immediately at support@3star.casino. We will handle all such cases with the highest priority and complete confidentiality.

For Parents: We encourage the use of parental control software on shared devices to prevent unauthorised access to online gambling platforms. If you need guidance on this, the 3star support team can direct you to appropriate resources.

Section 09

Changes to This Privacy Policy

3star reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes in how our platform operates. We are committed to informing you of any material changes in a clear and transparent manner.

9.1 Material Change Notifications

For any changes that materially affect how we collect, use, or disclose your personal data, 3star will send a notification to your registered email address and display a prominent notice on the platform at least 14 days before the changes take effect. This gives you sufficient time to review the changes and make an informed decision about your continued use of the platform.

9.2 Minor Updates

Language corrections, clarifications that do not alter the substance of the policy, or minor technical changes may be implemented without prior notice but will always be reflected in the latest version of this document with an updated revision date.

9.3 Periodic Review Recommended

We encourage you to review this Privacy Policy periodically — at least once every three months — to stay informed about how 3star manages your personal data. The "Updated" date at the top of this page always reflects the currently effective version.

Current Version: This Privacy Policy is effective from 1 January 2026 and supersedes all previous versions. Continued use of the 3star platform following any Privacy Policy update constitutes acceptance of the latest version.

Section 10

Contact Us About Your Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or how 3star handles your personal data, we encourage you to contact us directly. The 3star team responsible for data privacy matters is here to help:

10.1 How to Contact Us

  • Email (Privacy Enquiries): support@3star.casino — use the subject line "Privacy Policy Inquiry" to ensure your message reaches the right team
  • Live Chat: Available 24 hours a day, 7 days a week via the chat icon within the 3star platform
  • Platinum VIP Member: Through your personal account manager, reachable directly via WhatsApp

10.2 Response Timeframes

For general privacy enquiries, we will respond within 3 business days. For formal requests such as data access, correction, or deletion, we will provide an initial response within 5 business days and fully resolve the request within 14 business days. If your request requires additional time due to technical complexity, we will proactively keep you informed of the progress and expected resolution timeline.

10.3 Complaints to the Authorities

If you are not satisfied with how 3star has handled your privacy request or complaint after contacting us, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia under the Personal Data Protection Act 2010 (PDPA). We encourage you to reach out to us first so we have the opportunity to resolve the issue directly.

3star Privacy Commitment Summary
256-bit SSL encryption for all transmitted data
No sale of data to third parties for marketing
Rights to access, correct & delete your data are available
Compliance with Malaysia's Personal Data Protection Act 2010
Data breach notification within 72 hours
Data is not retained longer than necessary

FAQ – 3star Privacy Policy

Answers to the most frequently asked questions about privacy and data security at 3star

No, absolutely not. 3star has never sold, leased, or shared your personal data with any third party for marketing or advertising purposes, and never will. Your personal data is used solely for 3star's own platform operations — account management, transaction processing, customer support, and legal compliance. Any third parties working with 3star (such as payment providers) receive only the minimum information required to perform their technical functions, and all are bound by strict data protection agreements.

Identity verification documents such as copies of your national ID or driving licence submitted for the KYC process are stored in a system separate from your regular account data, with stricter access controls. Only authorised KYC personnel may access these documents, and all access is fully audited. Documents are encrypted at rest using AES-256 encryption and will be deleted after the mandatory retention period stipulated under Malaysian law — typically 5 years from the date of verification. 3star does not share images of your identity documents with any party unless lawfully required to do so by Malaysian authorities.

Yes, this is your right under Malaysia's Personal Data Protection Act 2010 (PDPA). To request a copy of your personal data, send an email to support@3star.casino with the subject line "Personal Data Access Request" and state that you wish to exercise your data access right. We will verify your identity before releasing any data to ensure it is delivered to the correct person. The process takes up to 14 working days. Data will be provided in a readable format such as PDF or another suitable format.

3star uses location data only at the IP address level to determine your country or state — this is used for compliance and security purposes (e.g., detecting logins from unusual locations). We do not access or use your device's precise GPS location without your explicit consent. If the 3star app or website requests access to your device location, you may decline without affecting the platform's core functionality — Sports Betting, Live Casino, and slots all work fully without location access.

When you close your 3star account, we will delete or disable access to your personal data that is no longer needed for operations. However, certain financial transaction records and account history must be retained for a period prescribed by Malaysian law — typically between 5 and 7 years — for AML compliance, tax audit, and the resolution of any disputes that may arise after account closure. Once this mandatory retention period has elapsed, all remaining data will be permanently deleted or fully anonymised so that it can no longer be linked to you.

The 3star platform uses 256-bit SSL encryption for all communications, meaning your data remains encrypted even when you are on an unsecured public WiFi network — any attacker intercepting network traffic will not be able to read your information. That said, we still recommend exercising caution on public WiFi: avoid logging in to financial accounts (including 3star) over untrusted public networks where possible, and consider using a trusted VPN on public networks. These are good general security practices for all online activity, not just for 3star.

Your Data Is Safe at 3star — Play with Peace of Mind

3star is built on a foundation of trust and transparency. Your privacy and data security are not just promises — they are technical and operational commitments we uphold every day. Create a free account today and enjoy a safe betting experience alongside more than 500,000 Malaysian players.

Touch 'n Go GrabPay DuitNow FPX ShopeePay Boost
Bahasa Melayu