01 Introduction
This Privacy Policy ("Policy") describes how free365 ("Company", "we", "us", "our"), the operator of the online gaming platform at https://free365.cam, collects, processes, stores, and protects personal data provided by or relating to users ("Player", "you", "your") who access or use our platform.
free365 is committed to responsible data stewardship. We process personal data in accordance with applicable data protection principles including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality. This Policy is written in plain English to ensure that every player — whether based in Kuala Lumpur, Penang, Johor Bahru, or elsewhere in Malaysia — can clearly understand how their information is handled.
By registering an account on free365, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not accept this Policy, please discontinue use of the Platform immediately.
ℹ️ Related Documents: This Privacy Policy should be read alongside our Terms & Conditions. Together, these documents form the complete legal framework governing your relationship with free365.
02 Definitions
The following definitions apply throughout this Privacy Policy:
- "Personal Data" — Any information relating to an identified or identifiable natural person, including name, email address, NRIC number, IP address, device identifiers, and financial transaction records.
- "Processing" — Any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction.
- "Data Controller" — free365, as the entity that determines the purposes and means of processing personal data collected through the Platform.
- "Data Processor" — Any third party that processes personal data on behalf of free365 pursuant to a contractual instruction, including payment processors and KYC service providers.
- "Consent" — A freely given, specific, informed, and unambiguous indication of the Player's agreement to the processing of their personal data for a specified purpose.
- "Cookies" — Small text files placed on your device by the Platform to remember preferences, session states, and to support analytics and fraud detection functions.
- "KYC" — Know Your Customer; the identity and document verification process conducted by free365 to comply with anti-money laundering obligations and to confirm player eligibility.
03 Data We Collect
free365 collects personal data across several categories depending on how you interact with the Platform. The table below summarises the main data categories and specific data points we process:
| Category | Data Points Collected |
|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, NRIC / MyKad number, passport number, or driver's licence number as provided during KYC verification. |
| Contact Data | Email address, mobile phone number, and residential address (including postcode, city, and country — e.g., Kuala Lumpur, Penang, Johor Bahru). |
| Account Data | Username, encrypted password hash, account registration date, VIP tier status, preferred language and currency settings, and promotional opt-in preferences. |
| Financial Data | Deposit and withdrawal history, payment method identifiers (last four digits of card or bank account, e-wallet account identifier for Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong), cryptocurrency wallet addresses (USDT, BTC), and transaction timestamps. |
| Gaming Activity Data | Bet history, game session logs, wagering amounts, win/loss records, bonus utilisation, and responsible gambling tool usage (deposit limits, self-exclusion periods). |
| Technical Data | IP address, device type and operating system, browser type and version, screen resolution, session duration, pages visited, referring URL, and approximate geolocation derived from IP. |
| Communication Data | Records of live chat conversations, support ticket content, email correspondence, and any feedback or complaints submitted to free365. |
| KYC Documents | Scanned or photographed copies of identity documents, proof of address documents, and selfie images submitted during the KYC verification process. |
⚠️ Sensitive Data: free365 does not intentionally collect special categories of sensitive personal data (such as racial origin, religious beliefs, or health information) unless specifically required by a regulatory authority. If you voluntarily disclose such information (for example, in a support message), it will be handled with enhanced protection and will not be used for profiling purposes.
04 How We Collect Data
free365 collects personal data through the following channels:
- When you register an account and complete the registration form.
- When you complete KYC verification by uploading identity and address documents.
- When you make or receive a payment through any supported payment method.
- When you contact our support team via live chat, email, or any other channel.
- When you respond to a survey, promotion, or any other marketing communication.
- Session and navigation data collected via server logs and analytics tools as you browse and play on free365.
- Device and browser fingerprinting data collected for fraud detection and security purposes.
- Cookies and similar tracking technologies as described in Section 8 of this Policy.
- Game interaction logs generated automatically each time a bet is placed, a game is launched, or a session is closed.
- Identity verification data from licensed KYC service providers used to cross-reference submitted documents.
- Fraud risk scores and indicators from payment processing partners and anti-fraud services.
- Publicly available information used to verify player identity or screen against sanction lists where required by law.
05 Data Processing & Use
free365 processes your personal data for the following specific purposes, each of which has a defined lawful basis described in Section 6:
- Account Management — Creating, maintaining, and securing your player account; managing login credentials and account preferences.
- Identity Verification (KYC) — Verifying your age (21+ requirement), identity, and eligibility to use the Platform in compliance with anti-money laundering regulations.
- Payment Processing — Facilitating deposits and withdrawals via supported MYR and cryptocurrency payment channels; maintaining financial records for audit and compliance purposes.
- Gaming Services — Enabling access to casino games, sports betting, live dealer tables, and all other Platform features; maintaining fair gaming records.
- Responsible Gambling — Monitoring gaming behaviour to identify patterns consistent with problem gambling; applying and administering deposit limits, cool-off periods, and self-exclusion requests.
- Customer Support — Responding to enquiries, complaints, and disputes; maintaining support records to improve service quality.
- Fraud Prevention & Security — Detecting and investigating suspicious activity, account breaches, bonus abuse, and money laundering attempts.
- Marketing Communications — Sending promotional emails and in-platform notifications about bonuses, new games, and platform updates, where you have opted in to receive such communications.
- Analytics & Platform Improvement — Analysing aggregated usage data to improve platform performance, user experience, and product development.
- Legal & Regulatory Compliance — Fulfilling obligations imposed by applicable gaming regulations, tax authorities, anti-money laundering frameworks, and court orders.
06 Legal Basis for Processing
free365 relies on the following legal bases to process your personal data in accordance with applicable data protection law:
- Contractual Necessity — Processing required to perform the contract between you and free365 (i.e., to provide the gaming services you have registered for), including account management, payment processing, and KYC verification.
- Legal Obligation — Processing required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, taxation reporting, and court orders.
- Legitimate Interests — Processing necessary for free365's legitimate interests, including fraud prevention, security monitoring, platform analytics, and responsible gambling monitoring, where those interests are not overridden by your privacy rights.
- Consent — Processing based on your freely given consent, including optional marketing communications and the use of non-essential cookies. You may withdraw consent at any time without prejudice to prior processing.
07 Third-Party Sharing
free365 does not sell, rent, or trade your personal data. We share data with third parties only in the following limited and controlled circumstances:
- Payment Processors — We share transaction data with payment processing partners (including FPX network participants, e-wallet providers such as Touch 'n Go eWallet, Boost, and GrabPay, and cryptocurrency network validators) to facilitate deposits and withdrawals.
- KYC & Identity Verification Providers — We share identity document data with licensed third-party verification services to fulfil our age and identity verification obligations.
- Game Software Providers — Game session data is transmitted to licensed game studio providers that supply the casino games, live dealer software, and sports betting engines used on the Platform. These providers process data as Data Processors under contractual obligations.
- Fraud Prevention & Security Services — Technical and behavioural data may be shared with anti-fraud service providers to detect and prevent money laundering, bonus abuse, and account takeover attacks.
- Regulatory Authorities & Law Enforcement — We may disclose personal data to gaming regulators, financial intelligence units, tax authorities, or law enforcement agencies where required by law or court order.
- Professional Advisors — We may share data with our legal, accounting, or audit advisors where strictly necessary to obtain professional advice.
All third-party Data Processors engaged by free365 are subject to contractual data processing agreements that restrict their use of your data to the specific purpose for which it was shared.
08 Cookies & Tracking Technologies
free365 uses cookies and similar technologies to operate the Platform effectively and to improve your experience. The categories of cookies we use are as follows:
| Cookie Type | Purpose | Consent Required? |
|---|---|---|
| Strictly Necessary | Maintain session state, authentication tokens, and security settings. Required for the Platform to function. Cannot be disabled. | No |
| Functional | Remember your preferences (language, currency display, responsible gambling settings) to personalise your experience. | Yes |
| Analytics | Collect aggregated data about Platform usage (pages visited, session duration, feature interactions) to improve performance and UX. | Yes |
| Security & Fraud | Fingerprint device characteristics, detect bots, and identify anomalous access patterns consistent with account takeover or bonus abuse. | No |
You can manage your cookie preferences through the Cookie Settings panel accessible from the Platform footer. Note that disabling non-essential cookies will not affect your ability to access core Platform features. Most modern web browsers also offer independent controls to manage or delete cookies stored on your device.
09 Data Security
free365 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:
- 256-bit Transport Layer Security (TLS) encryption for all data transmitted between your device and our servers.
- Encryption at rest for all stored personal data, including identity documents and financial records.
- Role-based access controls ensuring that only authorised personnel with a genuine operational need can access specific data categories.
- Multi-factor authentication requirements for all internal administrative systems.
- Regular penetration testing and vulnerability assessments conducted by independent security specialists.
- Intrusion detection systems and 24/7 security monitoring for anomalous access patterns.
- Formal incident response procedures with defined notification timelines in the event of a confirmed data breach.
⚠️ Your Responsibility: While free365 takes all reasonable measures to protect your data, the security of your account also depends on you maintaining strong, unique passwords and enabling two-factor authentication. Do not share your login credentials with anyone. Contact support immediately if you suspect unauthorised access to your account.
10 Data Retention
free365 retains personal data only for as long as necessary to fulfil the purposes set out in this Policy or as required by applicable laws and regulations. The following retention periods apply as general guidelines:
- Active Account Data — Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, to satisfy anti-money laundering record-keeping obligations.
- KYC Documents — Retained for a minimum of five (5) years following account closure or the date of the last transaction, whichever is later, in line with AML regulatory requirements.
- Financial Transaction Records — Retained for seven (7) years to satisfy tax, audit, and financial reporting obligations.
- Support & Communication Records — Retained for three (3) years following the closure of the relevant support case or account, whichever is later.
- Marketing Preferences & Consent Records — Retained for the duration of the account relationship plus two (2) years, to demonstrate compliance with consent requirements.
- Analytics Data — Retained in aggregated, anonymised form indefinitely. Individual-level session data is anonymised after twelve (12) months.
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not technically feasible (e.g., backup systems), data is isolated from active processing until scheduled deletion cycles.
11 Your Rights
As a data subject, you hold the following rights with respect to your personal data held by free365. To exercise any right, contact us via the details in Section 15. We will respond to all verified requests within thirty (30) calendar days:
Right to Access
Request a copy of the personal data we hold about you and information about how it is processed.
Right to Rectification
Request correction of inaccurate or incomplete personal data held in your account.
Right to Erasure
Request deletion of your personal data where we no longer have a lawful basis to retain it. Regulatory retention obligations may limit this right in certain cases.
Right to Restrict Processing
Request that we limit how we use your data in specific circumstances, for example while the accuracy of your data is under dispute.
Right to Data Portability
Receive a copy of your personal data in a structured, machine-readable format for transfer to another service provider where technically feasible.
Right to Object
Object to processing of your personal data where we rely on legitimate interests as the legal basis, including objecting to direct marketing communications at any time.
Right to Withdraw Consent
Withdraw previously given consent to processing at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
Right to Lodge a Complaint
Lodge a complaint with a relevant data protection supervisory authority if you believe your rights have been violated.
12 Minors & Age Restriction
The free365 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. During the registration process, we require all Players to confirm that they are at least 21 years of age, and we verify this through our KYC process.
If we become aware that we have inadvertently collected personal data from a person under the age of 21, we will immediately suspend the associated account, delete all collected data, and refund any net deposits made by the underage user. Any winnings accrued on an underage account will be forfeited.
We encourage parents and guardians to monitor their children's online activity. If you believe that a minor has accessed free365 or provided personal data to us without your knowledge, please contact our support team immediately at [email protected] so that we can take prompt action.
13 International Data Transfers
As an online gaming platform serving Malaysian players with international technology infrastructure, free365 may transfer personal data to servers or third-party processors located outside of Malaysia. Such transfers occur only where:
- The transfer is necessary to perform the contract between you and free365 (e.g., processing a payment via an international payment gateway).
- The recipient jurisdiction provides an adequate level of data protection as assessed by free365's data protection team.
- Appropriate contractual safeguards (such as data processing agreements incorporating standard contractual clauses) are in place with the receiving party.
free365 will not transfer personal data to a jurisdiction where we have reasonable grounds to believe that the transfer would expose your data to a materially lower standard of protection than that described in this Policy.
14 Policy Amendments
free365 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, technology, regulatory requirements, or business operations. When we make material changes to this Policy — those that substantively affect your rights or how your data is used — we will notify you via the email address associated with your account at least fourteen (14) calendar days before the changes take effect.
Minor updates (such as grammatical corrections, clarifications that do not alter the substantive meaning of any clause, or addition of new data categories with equivalent protection) may be made without prior notification. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.
Your continued use of the free365 Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must cease using the Platform and request Account closure in accordance with our Terms & Conditions.
15 Contact Us
If you wish to exercise any of your data rights, have a question about this Privacy Policy, or have a concern about how free365 is handling your personal data, please contact our Data Protection team using the following channels:
We aim to acknowledge all data rights requests within five (5) business days and to resolve them in full within thirty (30) calendar days. Where a request is particularly complex, we will notify you of an extension and provide reasons within the initial 30-day window.