Great blue Privacy Policy –
Malaysia Player Data Protection

1Personal Information We Collect

To deliver great blue platform services effectively, we collect several categories of personal information. Below is a list of the data types we collect and their purposes:

2How We Collect Your Personal Data

Great blue collects your personal information through several different channels. Understanding these channels helps you know exactly when and how your information is collected:

• Account Registration: When you register a new account, you actively provide information such as your name, email address, date of birth, and phone number.
• KYC Verification: During the identity verification process, you upload documents such as a copy of your ID card or passport and proof of address.
• Financial Transactions: When you make a deposit or withdrawal, information related to the payment method and transaction is recorded automatically.
• Platform Usage: Technical data such as IP addresses, device type, and usage patterns are collected automatically while you use the platform.
• Cookies and Tracking Technologies: The great blue platform uses cookies and similar technologies to improve user experience and analyze usage patterns.
• Support Communications: When you contact our customer support team, the content of that conversation may be recorded for quality and training purposes.

3Purpose of Personal Data Use

Great blue uses your personal data for lawful and transparent purposes. Below is a full description of how your data is used:

• Account Management: Create and manage your account, process logins, update profile information, and send important account notifications.
• Transaction Processing: Securely process deposits and withdrawals, verify payment methods, and maintain accurate transaction records.
• Identity Verification (KYC): Verify user identity to meet compliance requirements and prevent fraud and money laundering.
• Fraud Detection: Analyze activity patterns to identify and prevent unauthorized access, fraud, and suspicious activity.
• Platform Improvement: Analyze usage data to understand user preferences and improve platform design, performance, and content.
• Marketing Communications: Send information about promotions, bonuses, and the latest offers to users who have agreed to receive such communications.
• Customer Support: Resolve user queries, complaints, and technical issues efficiently and effectively.

4Data Sharing with Third Parties

Great blue does not sell your personal data to any third party for marketing or commercial purposes. However, in the course of operating the platform, we may need to share certain data with the following parties:

• Payment Processing Providers: Required transaction information is shared with payment service providers used to process your deposits and withdrawals.
• Identity Verification Providers: For the KYC process, certain identity information may be shared with accredited third-party identity verification services.
• Game Providers: Limited game data may be shared with game providers for technical purposes and wins processing.
• Legal Authorities: great blue will disclose data when required by law or a valid court order, or when necessary to protect the interests of other users.
• Affiliate Companies: Certain data may be shared within the great blue group of companies for integrated operations and service improvement purposes.

5Data Security & Protection Measures

Great blue continuously invests in security infrastructure to ensure your personal data remains protected at all times. The following are the key security measures we implement:

• 256-bit SSL encryption for all data transmissions between your browser and our servers.
• Data-at-rest encryption for all personal and financial information stored in our databases.
• Two-factor authentication (2FA) system for additional account protection.
• 24/7 security monitoring by an in-house cybersecurity team.
• Strict access controls — only authorized personnel can access user data, and every access is logged and audited.
• Regular penetration testing by independent third parties to identify and patch vulnerabilities.
• A clear incident response procedure for data breach situations.

While we take all reasonable measures, no system is 100% guaranteed. You are also responsible for keeping your account secure by choosing a strong password and not sharing your login credentials with anyone.

6Cookies & Tracking Technologies

The great blue platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform runs smoothly. Cookies are small text files stored on your device by your web browser.

There are several types of cookies used on our platform:

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collect information about how users interact with the platform — most visited pages, error messages, and similar data. This information is used to improve the platform.
• Functional Cookies: Remember your preferences such as language selection and display settings to deliver a more personalized experience.
• Analytics Cookies: Helps us understand aggregate usage patterns for product improvement purposes.

7Data Storage & Cross-Border Transfers

Great blue retains your personal data for as long as necessary to fulfil the purposes stated in this policy, or for as long as required by applicable laws and regulations.

• Active account data is retained for the duration your account remains active, plus the minimum retention period required by law.
• Financial transaction records are retained for a minimum of seven years for legal compliance and audit purposes.
• Customer support communication logs are retained for two years after the last interaction.
• After an account is closed, certain data may be retained for the period required for legal or fraud prevention purposes.

In the course of global operations, your personal data may be transferred to and processed in countries with different data protection laws. great blue ensures that any such data transfers are safeguarded by appropriate protection mechanisms and comply with international standards.

8Your Rights Regarding Personal Data

As a great blue user, you have certain rights regarding your personal data. We respect these rights and make it easy for you to exercise them:

9Children's Data Protection

Great blue strictly prohibits the use of the platform by individuals under the age of 18. We do not knowingly collect, store, or process personal data of minors.

If we discover that personal data belonging to someone under the age of 18 has been collected inadvertently, we will take immediate steps to delete that data and close the account in question. Parents or guardians who find that their child has registered on our platform are advised to contact our support team immediately.

10Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how great blue handles your personal data, we encourage you to contact us directly.

Our Data Protection Team is ready to assist you through:

• Live Chat Platform: The fastest way to get an immediate response. Available 24/7 on the great blue platform.
• Email: [email protected] — for inquiries requiring a written response or involving attached documents.
• FAQ Page: Visit FAQ section us for answers to frequently asked questions about privacy and account security.

We are committed to responding to all privacy-related enquiries within three business days. For formal user rights requests (such as data access or data deletion), the response period is up to 30 calendar days in accordance with legal requirements.