Privacy Policy pora34 – User Data Protection

01 Information We Collect

To provide a secure, personalised service that meets legal requirements, pora34 collects several categories of information from our users. This information is collected either directly from you or automatically through your use of the platform.

a) Information you provide directly:

• Full name as stated on your identification document.
• Date of birth for age verification purposes.
• Email address and mobile phone number.
• Bank account or e-wallet details for processing deposits and withdrawals.
• A copy of your identification document (MyKad or passport) for the KYC process.
• Information you share when contacting our support team.

b) Information collected automatically:

• IP address and general location information.
• Device type, operating system and web browser used.
• Platform activity data including games played, bets placed and session duration.
• Cookie and tracking technology data as further described in section 6.
• Access logs and financial transaction records.

02 How We Use Your Data

Pora34 uses the information collected for legitimate and transparent purposes. The following is a complete list of how your data is used:

Pora34 will not use your data for any purpose not stated here without first obtaining your consent.

03 Basis for Data Processing

All personal data processing by pora34 is based on one or more of the following valid legal grounds:

• Contract Performance: Processing required to provide platform services to you, including account management and transaction processing.
• Legitimate Interests: Processing for platform security, fraud prevention, and service improvement purposes.
• Legal Obligation: Processing required to comply with Malaysian laws, including anti-money laundering (AML) and KYC requirements.
• Consent: For marketing communications and certain cookie usage, we obtain your explicit consent.

04 Sharing Information with Third Parties

Pora34 takes your data privacy seriously. We do not sell, rent, or disclose your personal information to third parties except in the following limited circumstances:

• Service Providers: Payment partners, cloud service providers, and technical solution vendors who help us operate the platform — all bound by strict confidentiality agreements.
• Authorities: We may share data when required by court order, regulatory directive, or other legal obligations.
• Fraud Prevention: In cases of suspected fraud, data may be shared with relevant financial crime prevention agencies.
• Business Transfer: In the event of a business merger or acquisition, user data may be transferred as part of the assets with appropriate notice given to users.

05 Data Security Measures

We implement multiple layers of technical and organisational security to protect your personal data from unauthorised access, loss, misuse or disclosure:

• Data Encryption in Transit: All communications between your browser and pora34 servers are secured with TLS 1.3 and 256-bit SSL certificates.
• Stored Data Encryption: Sensitive data such as financial information and identity documents are encrypted at rest using AES-256.
• Strict Access Controls: Only staff with specific authorisation may access users' personal data, and every access is recorded in an audit log.
• Two-Factor Authentication (2FA): pora34's internal systems require 2FA for all staff access to sensitive data.
• Regular Security Audits: We conduct regular penetration testing and security audits carried out by independent third parties.
• Incident Response Plan: pora34 has a clear incident response procedure to address any data breaches promptly.

06 Cookies & Tracking Technologies

Pora34 uses cookies and similar tracking technologies to enhance the user experience and analyse platform performance. The following are the types of cookies we use:

• Essential Cookies: Required for core platform operations such as login authentication and session security. These cookies cannot be disabled.
• Functional Cookies: Saves your preferences such as language, region, and display settings for a more personalised experience.
• Analytical Cookies: Helps us understand how users interact with the platform for improvement purposes. Data is collected anonymously.
• Security Cookies: Used to detect suspicious activity, prevent fraud and protect your account.

You can manage cookie settings through your web browser settings. However, disabling essential cookies may affect the functionality of the pora34 platform.

07 Cross-Border Data Transfers

In some circumstances, your personal information may be processed or stored outside Malaysia, particularly when we use cloud services or international technology providers. When this occurs, pora34 ensures:

• The recipient country or organisation maintains a level of data protection equivalent to Malaysia.
• Appropriate data transfer agreements have been implemented in accordance with PDPA 2010 requirements.
• Additional protective measures are applied to data transferred to regions with differing levels of data protection.

You may contact us for more information about cross-border data transfers involving your information.

08 Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and pora34's policy, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact the pora34 support team. We will process your request within 30 working days.

09 Children's Data

The pora34 platform is strictly for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we discover that a minor's personal data has been collected without our knowledge, we will immediately take the following steps:

• Deleting all related data from our systems.
• Closing the associated account.
• Reporting the incident to the relevant authorities if required.

10 Data Retention & Disposal

Pora34 retains your personal data only for as long as necessary to fulfil the purpose of collection or as required by Malaysian law:

• Active Account Data: Retained for the duration your account is active and for a number of years after account closure in accordance with compliance requirements.
• Financial Transaction Records: Retained for a minimum of seven (7) years in accordance with Malaysian financial legal requirements.
• KYC Documents: Retained for the period stipulated under Malaysia's AML legislation.
• Support Communication Logs: Retained for three (3) years after the last interaction.
• Anonymous Analytics Data: May be retained for a longer period as it contains no personally identifiable information.

Once the retention period expires, data will be securely disposed of using methods that ensure it cannot be recovered.

11 Contact Us

If you have any questions, concerns, or wish to exercise your rights under this Privacy Policy, please contact the pora34 Data Protection Officer via:

• Email: [email protected]
• Live Chat: Available 24/7 via the pora34 platform
• Response Time: Within 3 business days for general enquiries; 30 business days for data rights requests

This Privacy Policy may be updated from time to time. Any material changes will be communicated to you via email or a prominent notice on the platform. The effective date of the latest version is shown at the top of this page.

For more information about your rights under Malaysian law, you may refer to Terms and Conditions pora34.