Privacy Policy Credit Free – Personal Data Protection for Malaysian Members

This Privacy Policy is published by Credit Free ("we", "platform", or "Credit Free") to explain how we collect, use, store, and protect the personal information of members who use creditfree.xyz and all related services.

Credit Free operates as an online entertainment platform offering live casino games, Sports Betting, baccarat, roulette, badminton, and virtual sports to users in Malaysia. In delivering these services, we need to process certain members' personal data for legitimate, clearly defined purposes.

This policy applies to all Credit Free platform users, including visitors who browse our website without registering an account. It is binding on all parties involved in processing data on behalf of Credit Free.

Credit Free only collects data that is necessary to provide the services you request. We do not collect excessive or irrelevant data. The following are the categories of data we may collect:

Account Registration Data:

Financial & Transaction Data:

Platform Usage Data:

Identity Verification Data (KYC):

• A copy of your identity card (MyKad) for age verification and identity authentication purposes.
• Proof of payment method (e.g., a screenshot of your Touch 'n Go eWallet account or FPX account).
• Biometric data is not collected by Credit Free.

Credit Free uses your personal data only for legitimate, clearly stated purposes. We do not process data for any purpose unrelated to the services you use.

• Account management: Creating, maintaining, and securing your Credit Free account — including login verification, suspicious activity monitoring, and password recovery.
• Transaction processing: Processing deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX (Maybank2u, CIMB Clicks), and other accepted payment methods, as well as processing your winnings withdrawals promptly.
• Gaming service provision: Enabling you to access and play Live Casino games, baccarat, roulette, badminton, Sports Betting, and virtual sports on the Credit Free platform.
• Identity verification (KYC): Verifying that you meet the minimum age requirement of 18 years and confirming your identity prior to processing withdrawals, in line with industry standards and legal requirements.
• Fraud prevention: Detecting and preventing fraud, money laundering, multiple-account abuse, and other unauthorised activities that could compromise the security of the platform and its members.
• Service communications: Sending you important account notifications, transaction confirmations, policy updates, and security information via SMS or email.
• Platform improvements: Analysing usage patterns in aggregate (not at an individual level) to improve the user experience, platform performance, and new product offerings.
• Legal compliance: Meeting our legal obligations under Malaysia's PDPA 2010 and any other applicable regulatory requirements.

Credit Free takes a highly cautious approach to sharing members' personal data. As a general rule, we do not share your personal data with outside parties without your consent. However, there are limited exceptions you should be aware of.

• Payment service providers: Necessary transaction information is shared with payment processors including Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and banks supporting FPX, strictly for transaction processing purposes. All such providers are bound by strict confidentiality agreements.
• Technical service providers: We may engage third-party companies to provide infrastructure, analytics, or technical support services. They are granted access only to the data necessary for their function and are not permitted to use it for any other purpose.
• Legal requirements: Where required by law, court order, or a legitimate enforcement agency in Malaysia, Credit Free may be obligated to disclose certain information. We will notify you of any such request unless prohibited from doing so by law.
• Protection of Credit Free's rights: In cases of suspected fraud, litigation, or investigations involving breaches of our terms of use, relevant data may be shared with appropriate parties for legal protection purposes.

Credit Free uses cookies and similar tracking technologies to enhance your experience on our platform. Below is an explanation of the types of cookies we use and their purposes.

• Session cookies: Required to keep you logged in during your gaming session. These cookies are automatically deleted when you close your web browser.
• Preference cookies: Saving your settings and preferences — such as your interface language and display options — so your experience feels just right on every return visit.
• Analytics cookies: Helping us understand, in aggregate, how users interact with the Credit Free platform — including the most visited pages, time spent, and any technical issues. This data is not linked to any individual's identity.
• Security cookies: Used to detect suspicious login activity and fraud attempts, and to maintain the integrity of your session.

You can manage or disable cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the Credit Free platform. Session cookies, for example, are required for a normal gaming experience.

Credit Free retains your personal data only for as long as it is needed for the stated purpose, or as required by law.

• Active account data: Retained for as long as your account remains active with Credit Free, plus any additional period required to resolve outstanding disputes or legal obligations.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian legal requirements relating to financial records and anti-money laundering.
• Security log data: Retained for 90 days for the purpose of security incident and fraud investigations.
• Closed account data: Upon account closure, personal data will be deleted within 30 days unless there is a legal requirement to retain it for a longer period.
• KYC Documents: Retained for the duration of the active account and for up to 5 years after account closure, in line with anti-money laundering compliance requirements.

Credit Free maintains a strict policy on the protection of children and minors. Our platform is intended for users aged 18 and above only, with no exceptions.

• Credit Free does not knowingly collect any personal data from individuals under the age of 18.
• Should we discover that personal data belonging to a minor has been collected, we will take immediate steps to delete that data and close the associated account.
• Parents or guardians who suspect their child has registered a Credit Free account are urged to contact us immediately at support@creditfree.xyz so that prompt action can be taken.

Credit Free continuously invests in security infrastructure to ensure that members' personal data is always protected from any threat.

• Encryption in transit: All data transmitted between your device and Credit Free's servers is protected by TLS 1.3 protocol with AES-256 encryption.
• Encryption at rest: Data stored in the Credit Free database is also encrypted at rest, ensuring protection even in the event of unauthorized physical access.
• Tiered access controls: A role-based access control system ensures that Credit Free staff can only access the data required for their specific duties. All access is logged and monitored.
• Two-factor authentication (2FA): Credit Free encourages all members to enable 2FA for an added layer of protection on their accounts.
• Continuous threat monitoring: Our automated monitoring system operates 24 hours a day to detect and respond to any suspicious activity or intrusion attempts.
• Periodic penetration testing: Credit Free conducts regular security testing to identify and address system vulnerabilities before they can be exploited.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and Credit Free's policy, you have the following rights regarding the personal data we hold about you.

• Right to access: You have the right to request a copy of the personal data we hold about you. Credit Free will provide this information within 21 business days from the date a valid request is received.
• Amendment rights: If the personal data we hold about you is inaccurate or out of date, you have the right to request a correction. You can update some of your data directly through your account settings.
• Right to erasure: You may request the deletion of your personal data under certain circumstances — for example, when the data is no longer needed for its original purpose. Such requests are subject to legal obligations that require us to retain data for a specified period.
• Right to restrict processing: Under certain circumstances, you may request that we restrict the processing of your personal data while a dispute or enquiry is being resolved.
• Right to object to direct marketing: You may object to the use of your personal data for direct marketing purposes at any time by contacting our support team.
• Right to withdraw consent: Where your data is processed on the basis of consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the validity of any processing carried out prior to that withdrawal.

To exercise any of the rights above, please contact us at support@creditfree.xyz with the subject line "Privacy Rights Request" and specify which right you wish to exercise. We will respond within 21 business days.

Credit Free reserves the right to amend this Privacy Policy from time to time to reflect changes in practices, technology, or legal requirements. Any amendments will be published on this page with an updated date.

We will notify members of material changes via in-platform notifications or email before the changes take effect. Continued use of the Credit Free platform following any amendments constitutes acceptance of the updated policy.

For any enquiries, concerns, or requests relating to this Privacy Policy, please contact the Credit Free data protection team via:

• Email: support@creditfree.xyz (please state "Privacy Inquiry" in the subject line)
• Live Chat: Available 24 hours a day, 7 days a week via the Credit Free platform