Data We Collect
We collect registration details, identity documents, payment method information, device and session data, and transaction history. We collect only what is necessary to deliver the service.
Legal document — effective 1 January 2026
Privacy Policy for test3198
This Privacy Policy explains what personal data test3198 collects, why we collect it, how it is used, who it may be shared with, and what rights you have over your information as a user of the platform.
Privacy at a Glance
What this policy covers
These summary cards highlight the most important points. The full binding policy text begins in the section below. Malaysian users are encouraged to read every clause, particularly those on data processing and user rights.
Why We Collect It
Personal data is processed for account creation, identity verification, payment processing, regulatory compliance, fraud prevention, responsible gambling monitoring and customer support.
Who We Share It With
Data may be shared with payment processors, identity verification providers, regulatory bodies and, in limited circumstances, law-enforcement authorities. We do not sell personal data.
How We Protect It
test3198 uses encrypted connections (HTTPS/TLS), access controls, pseudonymisation and secure storage practices to reduce the risk of unauthorised access or disclosure.
Your Rights
Depending on your location, you may have rights to access, correct, delete or restrict your data, object to certain processing, and withdraw consent where it is the lawful basis for processing.
Data Retention
Personal data is retained for as long as your account is active, and for a minimum of five years after closure to meet anti-money laundering and regulatory record-keeping obligations.
📅 Last updated: 1 January 2026
Introduction
This Privacy Policy ("Policy") is issued by the operators of the test3198 platform ("test3198", "we", "us" or "our"), accessible at https://test3198.cam. It describes how we collect, use, disclose, store and protect the personal data of individuals ("you", "your" or "the User") who register accounts, browse the platform or otherwise interact with our services.
By creating an account or continuing to use test3198, you acknowledge that you have read and understood this Policy. If you do not accept these terms, you must not use the platform. This Policy should be read alongside the test3198 Terms & Conditions, which govern your use of the platform generally.
test3198 is committed to protecting the privacy of its users, including Malaysian users who may benefit from protections available under the Personal Data Protection Act 2010 (PDPA). Where the PDPA applies, we acknowledge our obligations as a data processor and/or data user under that legislation.
This Policy may be updated from time to time. Where material changes are made, registered users will be notified via the contact details held on their account. Continued use of the platform after the effective date of any revision constitutes acceptance of the updated Policy.
Definitions
The following definitions apply throughout this Privacy Policy:
| Term | Meaning |
|---|---|
| Personal Data | Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information and device identifiers. |
| Processing | Any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure or deletion. |
| Data Controller | The entity that determines the purposes and means of processing personal data. For the purposes of this Policy, that entity is test3198. |
| Third-party Processor | An external service provider that processes personal data on behalf of test3198 under a contractual arrangement imposing appropriate data protection obligations. |
| Sensitive Data | A subset of personal data that warrants heightened protection, including identity document numbers, biometric data, financial account details and health-related information such as responsible gambling self-assessments. |
| Cookie | A small data file stored on a user's device by the platform to support session management, preference storage and analytics. |
| PDPA | The Personal Data Protection Act 2010 of Malaysia, governing the processing of personal data in commercial transactions. |
Personal Data We Collect
test3198 collects personal data through several channels: directly from you during registration and account management, automatically through your use of the platform, and from third parties as part of identity verification or regulatory compliance processes. The categories of data collected include:
3.1 Registration and Identity Data
- Full legal name as it appears on a valid Malaysian identification document (MyKad, Passport or Driving Licence).
- Date of birth (used to verify the 21+ age requirement).
- Residential address, including city references where provided (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam).
- Email address and contact telephone number.
- Username and encrypted password credentials.
3.2 Identity Verification (KYC) Data
- Copies of government-issued identification documents (MyKad, Passport, Driving Licence).
- Proof of address documents (utility bills, bank statements issued within the preceding three months).
- Selfie photographs submitted during identity confirmation procedures.
- Source-of-funds documentation where required by applicable anti-money laundering obligations.
3.3 Payment and Transaction Data
- Payment method details, including Touch 'n Go eWallet account references, Boost account identifiers, DuitNow IDs, FPX transaction references and bank account details for Maybank, CIMB, Public Bank and Hong Leong.
- Deposit amounts, withdrawal requests, transaction timestamps and reference numbers.
- Currency information denominated in MYR.
3.4 Technical and Usage Data
- IP address and geolocation data at the time of access.
- Device type, operating system, browser version and screen resolution.
- Session duration, pages visited, game or betting activity patterns and feature interaction logs.
- Cookie identifiers and similar tracking technologies as described in Clause 8.
3.5 Responsible Gambling Data
- Self-assessment responses submitted through responsible gambling tools.
- Deposit, loss and session limits set by the user.
- Cooling-off, self-exclusion and account restriction requests and their effective dates.
Purposes and Legal Bases for Processing
test3198 processes personal data only where a valid legal basis exists. The table below sets out the principal processing activities, their purposes and the corresponding legal basis:
| Processing Activity | Purpose | Legal Basis |
|---|---|---|
| Account registration | Creating and managing user accounts, including age and eligibility verification. | Performance of a contract |
| KYC verification | Confirming user identity and address for anti-money laundering compliance. | Legal obligation |
| Payment processing | Facilitating deposits and withdrawals via Malaysian payment methods. | Performance of a contract |
| Fraud and security monitoring | Detecting suspicious transactions, multi-accounting and prohibited activity. | Legitimate interests |
| Responsible gambling monitoring | Supporting player wellbeing, enforcing limits and processing exclusion requests. | Legal obligation / legitimate interests |
| Customer support | Responding to queries, complaints and account-related requests. | Performance of a contract |
| Marketing communications | Sending promotional offers and platform updates where consent has been obtained. | Consent |
| Regulatory reporting | Fulfilling record-keeping obligations under applicable licensing frameworks. | Legal obligation |
Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Data Sharing and Disclosure
test3198 does not sell, rent or trade personal data to any third party for their own marketing purposes. We may, however, disclose personal data to the following categories of recipients where necessary and proportionate:
- Payment processors and e-wallet operators: Including providers operating Touch 'n Go eWallet, Boost, DuitNow, FPX, Maybank and other payment rails used on the platform, for the purpose of executing transactions.
- Identity verification providers: Third-party KYC service providers that perform document authentication and biometric checks on our behalf.
- Fraud prevention and security services: Providers of risk-scoring, device fingerprinting and anti-fraud tooling used to protect the platform and its users.
- Cloud infrastructure and hosting providers: Entities that provide the server infrastructure, content delivery and data storage services on which the platform operates.
- Regulatory and licensing authorities: Where required by the applicable gaming licence or international regulatory framework under which test3198 operates.
- Law enforcement and judicial authorities: Where disclosure is required by a court order, valid legal process or applicable law, including Malaysian law-enforcement requests where legally mandated.
- Professional advisors: Legal, accounting and audit professionals bound by professional confidentiality obligations.
International transfers: Some third-party processors may be located outside Malaysia. Where personal data is transferred internationally, test3198 ensures that appropriate safeguards are in place, including contractual data protection clauses equivalent to those required under the PDPA.
Data Retention
Personal data is retained only for as long as it is necessary to fulfil the purposes for which it was collected, or to comply with applicable legal, regulatory and contractual obligations. The following general retention periods apply:
- Account and registration data: Retained for the duration of the active account and for a minimum of five (5) years following account closure, in line with anti-money laundering record-keeping requirements.
- Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
- KYC documentation: Retained for the period required by applicable licensing and AML regulations, typically five (5) years after the conclusion of the business relationship.
- Responsible gambling records: Self-exclusion and restriction records are retained for the duration of the exclusion period plus five (5) years to prevent re-registration by excluded individuals.
- Marketing consent records: Retained until consent is withdrawn or the account is closed.
- Technical and session logs: Retained for up to twelve (12) months for security and platform improvement purposes.
At the expiry of applicable retention periods, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.
User Rights
Subject to applicable law, including the Personal Data Protection Act 2010 where it applies, you have the following rights in relation to personal data that test3198 holds about you:
Right of Access
Request a copy of the personal data we hold about you and confirmation of how it is being processed.
Right of Rectification
Ask us to correct inaccurate or incomplete personal data without undue delay.
Right of Erasure
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to overriding retention obligations.
Right to Restrict Processing
Ask us to pause the processing of your data in certain circumstances, for example while a correction request is being assessed.
Right to Object
Object to processing based on legitimate interests or direct marketing. We will cease processing unless compelling grounds override your interests.
Right to Withdraw Consent
Where processing is based on consent, withdraw that consent at any time without affecting prior lawful processing.
To exercise any of the above rights, please submit a written request to the test3198 data enquiries contact address. We will respond within 21 calendar days of receipt, subject to identity verification. Some requests may be subject to limitations where compliance would conflict with legal obligations or the rights of other individuals.
Malaysian users: Under the PDPA, you have the right to request access to personal data held about you and to correct any inaccuracies. These rights may be exercised by contacting us at the address in Clause 11. A processing fee may apply to access requests as permitted under the PDPA.
Cookies and Tracking Technologies
test3198 uses cookies and similar technologies to support platform functionality, maintain session state, and collect aggregated analytics that help us improve the user experience. The main categories of cookies used are:
- Strictly necessary cookies: Essential for the platform to function, including session authentication, security tokens and load balancing. These cannot be disabled.
- Functional cookies: Store user preferences such as language settings and remembered login states to improve convenience.
- Analytics cookies: Collect aggregated, anonymised information about how users navigate the platform, which pages are most visited and where errors occur. Used solely for internal improvement purposes.
- Security cookies: Support fraud detection, bot prevention and rate-limiting mechanisms to protect users and the platform.
You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent certain core platform features from operating correctly. test3198 does not deploy third-party advertising or behavioural-profiling cookies.
Data Security
test3198 implements a range of technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure or destruction. These measures include:
- Transport Layer Security (TLS/HTTPS) encryption for all data transmitted between your device and the platform.
- Encryption of sensitive data fields at rest, including identity document copies and financial account references.
- Role-based access controls limiting staff access to personal data on a need-to-know basis.
- Regular security assessments and vulnerability reviews of platform infrastructure.
- Secure data deletion procedures applied upon expiry of retention periods.
- Staff training on data protection obligations and information security best practices.
Despite these measures, no method of electronic transmission or storage is completely secure. Users should also take responsibility for their own account security by using strong, unique passwords and reporting any suspected unauthorised access promptly.
Security incident notification: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, test3198 will notify affected users and, where required, relevant regulatory authorities, within the timeframe prescribed by applicable law.
Minors and Under-Age Users
The test3198 platform is intended exclusively for adults aged 21 and above. We do not knowingly collect or process personal data from individuals under this age threshold. Age verification is conducted as part of the account registration and KYC processes.
If test3198 becomes aware that personal data belonging to a person under the age of 21 has been collected without appropriate age verification, that data will be deleted promptly and the associated account will be closed. Parents or guardians who believe that a minor may have registered on the platform are encouraged to contact us immediately at the address in Clause 11.
Contact Us
If you have questions about this Privacy Policy, wish to exercise a data subject right, or wish to report a privacy concern, please contact the test3198 data enquiries team:
- Email: [email protected] (displayed as plain text — not a clickable link)
- Live Chat: Available 24 hours a day, 7 days a week via the platform interface.
- Response time: We aim to acknowledge data-related requests within 5 business days and to provide a substantive response within 21 calendar days.
For matters relating to responsible gambling, self-exclusion or account restriction, please visit the Responsible Gambling page.
Explore test3198
Return to the test3198 homepage
Discover casino entertainment information, sports betting guides, Malaysian payment options and responsible gaming tools — designed for adults aged 21 and above.