Privacy Policy tar503 – Malaysia User Data Protection

Introduction

Tar503 values the privacy of every user who registers and uses our platform. We understand that personal information is sensitive and are committed to handling it responsibly, transparently, and in accordance with Malaysia's Personal Data Protection Act (PDPA) and applicable data protection laws in the jurisdictions where we operate.

This Privacy Policy clearly explains the types of data we collect, the purposes for collection, how we use and protect that data, and the rights you hold as a data owner. We encourage you to read this document in full and contact us if any section is unclear.

This policy applies to all users of the tar503 platform, including the tar503.win website, iOS and Android mobile apps, and all digital services operating under the tar503 brand.

Personal Data We Collect

Tar503 follows a data minimization principle – we only collect information that is strictly necessary to provide a safe, compliant, and high-quality service to our users.

Directly Provided Data

• Identity information: Full name, date of birth, identity card number or passport number.
• Contact information: Email address, mobile phone number.
• Account information: Username, password (stored in encrypted hash form).
• Financial information: Bank account number or e-wallet details used for deposit and withdrawal transactions.
• Verification documents (KYC): Copy of identity card, passport, or other supporting documents requested during the identity verification process.

Automatically Collected Data

• Device data: Device type, operating system, phone model, unique device identifier.
• Network data: IP address, estimated location based on IP, internet service provider name.
• Usage data: Pages visited, session duration, games played, in-platform transaction history.
• Cookie data: Session cookies, language and region preference cookies, anonymous analytics identifiers.

How We Use Your Data

Every piece of data collected is used for a specific and legitimate purpose. Below is a summary table of data usage purposes:

For marketing communications, you may withdraw your consent at any time by adjusting the notification settings in your account or by contacting our support team.

Data Sharing with Third Parties

Tar503 does not sell, rent, or trade your personal data to any party for their own marketing purposes. However, in the course of operating the platform, we share limited data with the following parties on a legitimate-need basis:

• Payment providers: FPX, DuitNow, Touch 'n Go eWallet, GrabPay, and Boost require transaction information necessary to process your payments securely.
• Game software providers: Game platform providers receive only the data necessary to run the games – no financial information is shared.
• Regulatory authorities: tar503 complies with all lawful requests from regulatory bodies and law enforcement agencies when required by law.
• Technical service providers: Server hosting companies, transactional email services, and anonymized analytics tools that help us operate the platform – all bound by strict confidentiality agreements.

Data Storage and Security Measures

Your data security is our top technical priority. tar503 implements multiple layers of protection to ensure your personal information remains safe at all times.

Security Infrastructure

• All data transmissions between your device and tar503 servers are protected with 256-bit SSL/TLS encryption.
• Account passwords are stored in cryptographic hash form that cannot be decrypted — even by tar503 staff.
• Data servers are hosted in certified data centres with strict physical access controls, redundant cooling systems, and automated backup systems.
• Enterprise-grade intrusion detection systems (IDS) and firewalls operate 24 hours a day to monitor and block suspicious activity.
• Two-factor authentication (2FA) is available and encouraged for all user accounts.

Data Retention Period

Tar503 retains your personal data for the duration your account remains active, plus any additional period required by law or regulatory obligations (typically 5 to 7 years for financial records). When data is no longer needed, it is securely deleted using methods that ensure it cannot be recovered.

Cookies and Tracking Technologies

Tar503 uses cookies and similar tracking technologies to enhance the user experience, maintain login session security, and understand how users interact with the platform.

Types of Cookies Used

• Essential cookies: Required for core platform functions such as login verification and session security. Cannot be disabled.
• Functional cookies: Saves your preferences such as language, time zone, and display settings for a more comfortable experience.
• Analytics cookies: Collects anonymous usage data to help us understand popular pages and improve the platform. This data is not linked to your personal identity.
• Performance cookies: Helps us identify technical issues and optimise platform speed.

You can manage or disable non-essential cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of some platform features.

Your Rights as a Data Owner

Under applicable data protection laws, you have the following rights regarding your personal data held by tar503:

• Right to access: You may request a copy of all personal data we hold about you at any time.
• Right to rectification: If any of your information is inaccurate or outdated, you may request an immediate correction.
• Right to erasure: You may request the deletion of your personal data, subject to our legal obligations to retain certain records.
• Right to object: You may object to the processing of your data for direct marketing purposes at any time.
• Right to data portability: You may request your data in a machine-readable format for transfer to another service provider.
• Right to withdraw consent: For processing that relies on your consent, you may withdraw that consent at any time without affecting the validity of prior processing.

Child Data Protection

The tar503 platform is exclusively for individuals aged 18 years and above. We do not knowingly collect personal data from children under the age of 18. If you believe a child has registered an account on our platform, please contact us immediately so the account can be closed and all related data deleted.

All account registrations require age verification through the KYC process. Any account found to have been registered by an underage individual will be closed immediately and all transactions will be voided.

Amendments to the Privacy Policy

Tar503 reserves the right to modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technologies we use. Users will be notified of any material changes via in-platform notifications or email at least 14 days before the changes take effect.

The "Updated" date shown at the top of this page reflects the date of the latest version of this Privacy Policy. Continued use of the tar503 platform after the effective date of any amendment constitutes acceptance of the revised policy.

Contact Us About Privacy

If you have any questions, concerns, or complaints regarding how tar503 handles your personal data, we encourage you to reach out to us directly:

• Live Chat: Available 24/7 directly on the tar503 platform – the fastest way to get a response.
• Email: [email protected] – response within 24 business hours.
• FAQ: Visit FAQ page for answers to common questions about privacy and account security.

Our privacy team understands the importance of your personal data and will ensure every inquiry is handled with full professionalism and within the stipulated timeframe.