Last Updated: 1 January 2026 | Version 2.4 | Applicable to all cas3.click members
This Privacy Policy outlines cas3's commitment to protecting your personal information. By using the cas3 platform, you agree to the data collection and usage practices described in this document. If you have any questions, contact us at support@cas3.click.
1 Introduction – cas3's Privacy Commitment
Cas3 ("we", "the Platform") is an online casino and sports betting platform operating in Malaysia via cas3.click. We understand that trust is the foundation of our relationship with every member, and one of the most important ways we build that trust is by taking full responsibility for the personal data you entrust to us.
This Privacy Policy is written in plain, easy-to-understand language — not complex legal jargon — so that every cas3 member across Malaysia can clearly understand what happens to their information. From account registration and deposits via DuitNow or Touch 'n Go eWallet, to betting on Malaysian Super League football or spinning your favourite slots, cas3 handles every piece of your data with the utmost responsibility.
Cas3 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and all relevant privacy legislation. We continuously update our privacy practices to keep pace with the latest developments in data protection law and information security technology.
cas3 Privacy Commitment Summary: We only collect what is necessary. We protect it to the highest standard. We never sell it to anyone. You can request deletion at any time.
2 Personal Data We Collect
Cas3 only collects data that is genuinely necessary to provide a safe, fair, and responsible service. The following are the categories of data we may collect:
| Data Category |
Example Information |
Primary Purpose |
| Identity |
Full name, date of birth, identification card number (MyKad) |
Age & identity verification |
| Contact |
Email address, Malaysian phone number |
Account communications & support |
| Finance |
Bank name, account number (partial), transaction records |
Deposit & withdrawal processing |
| Technical |
IP address, device type, web browser, operating system |
Security & fraud detection |
| Behaviour |
Games played, session duration, bets placed |
Personalised experience & responsible gaming |
| Communication |
Live chat conversation records, support emails |
Customer service improvement |
Cas3 no storing credit card numbers, debit card numbers, or full bank account details on our servers. All financial transactions are processed through third-party payment providers that are certified and compliant with PCI DSS standards.
You may choose not to provide certain information, though this may limit your access to specific features on cas3, such as the identity verification process required for withdrawals above a certain limit.
3 How cas3 Uses Your Data
Every piece of data we collect serves a clear and legitimate purpose. cas3 uses your personal information for the following:
- Account Management: Registering your account, verifying your identity, processing logins, and managing your cas3 account's personal settings;
- Transaction Processing: Processing deposits via DuitNow, FPX (Maybank2u, CIMB Clicks), Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and withdrawal requests to your Malaysian account;
- Service Provision: Enabling you to play slots, Live Casino, place bets on EPL football or the Malaysian Super League, BWF badminton, e-sports, and all other services on cas3;
- Security & Fraud Prevention: Detecting and investigating suspicious activity, preventing fraud, money laundering, and platform abuse;
- Communications: Sending important notifications related to your account, transactions, security updates, and relevant promotional information;
- Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate assistance;
- Platform Upgrade: Analysing usage patterns to improve the player experience, enhance the interface, and develop better new features;
- Legal Compliance: To fulfil reporting obligations to Malaysian authorities as required under applicable law.
cas3 does not use your data to make fully automated decisions that materially affect your rights without the opportunity for human review. Any significant decisions relating to your account involve assessment by the cas3 team.
4 Data Sharing & Disclosure
Cas3 does not sell, rent, or trade members' personal information to third parties for marketing purposes. This is a non-negotiable commitment. That said, there are limited circumstances in which cas3 may need to share your data:
- Payment Service Providers: DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay providers receive only the minimum transaction data required to process your payment. All providers are bound by strict data protection agreements;
- Game Providers: Companies such as Pragmatic Play, PG Soft, and Habanero may receive anonymised player identifiers for game integrity purposes and the resolution of technical disputes;
- Regulatory Authorities: cas3 will disclose the necessary information to the Royal Malaysia Police, Bank Negara Malaysia, or other authorities when required by law, court order, or financial crime investigation;
- Auditors & Legal Consultants: Third parties involved in auditing cas3's operations or managing legal matters, all of whom are bound by strict confidentiality obligations;
- Business Transfer: In the event of a merger, acquisition, or transfer of cas3 assets, player data may be transferred as part of that process, with prior notice given to all members.
In all data-sharing instances outlined above, cas3 ensures that only the minimum necessary data is shared, and that all recipients adhere to data protection standards equivalent to or stricter than those applied by cas3.
5 Data Security – How cas3 Protects Your Information
Cas3 continually invests in the latest security infrastructure to protect the personal data of all members. The technical and organisational measures we employ include:
- 256-bit SSL/TLS Encryption: All communication between your browser and cas3 servers is encrypted using SSL/TLS protocol with 256-bit keys — the same standard used by world-class banking institutions;
- Stored Data Encryption: Sensitive data stored in the cas3 database is encrypted using robust encryption algorithms, ensuring it remains unreadable even without the correct decryption key;
- Strict Access Controls: Only authorised personnel with a legitimate business need may access member data. All access is fully logged and regularly monitored;
- 24/7 Monitoring: cas3's security monitoring system operates around the clock to detect intrusion attempts, access anomalies, and suspicious activity;
- Regular Security Testing: cas3 conducts regular penetration testing and security audits by independent third parties to identify and address vulnerabilities;
- Secure Servers: cas3 servers are hosted in certified data centres with enterprise-grade physical and digital security, including protection against disasters and unauthorised access.
While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure. You also play a role in keeping your account safe — use a strong, unique password, never share it with anyone, and contact us immediately if you suspect any unauthorised activity on your cas3 account.
256-bit SSL
Bank-grade encryption
Encrypted Data
Stored in protected format
24/7 Monitoring
Security systems active at all times
Independent Audit
Regular security audits
6 Cookies & Tracking Technologies
Cas3 uses cookies and similar tracking technologies to enhance your experience on the platform. Below are the types of cookies we use:
| Cookie Type |
Purpose |
Validity Period |
| Important |
Maintaining login sessions, account security, and core cas3 platform functionality |
Session / 7 days |
| Functionality |
Remembering your language preference, odds format, and display settings |
30 days |
| Analytics |
Understanding how members use the platform to drive continuous improvement |
90 days |
| Security |
Detecting fraud attempts, verifying location, and preventing unauthorised access |
Session / 30 days |
Cas3 does not use third-party advertising cookies that track your activity outside the cas3 platform. We do not share personally identifiable analytics data with any advertising network.
You can manage your cookie settings through your web browser's settings. However, disabling essential cookies may affect the login functionality and usability of the cas3 platform. For more information on managing cookies, refer to the help documentation for your web browser.
7 Data Storage & Deletion
Cas3 retains your personal data for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required under applicable Malaysian law.
- Active Account Data: Retained for as long as your cas3 account remains active. This includes profile information, transaction records, and betting history;
- Data After Account Closure: Upon account closure, cas3 retains certain records for a minimum period of 5 years as required under Malaysia's anti-money laundering laws;
- Security Logs: Access records and security logs are retained for 12 months for fraud detection and investigation purposes;
- Communication Records: Customer support conversations are retained for 24 months for quality control and dispute resolution purposes;
- Financial Data: Financial transaction records are retained for a minimum of 7 years in accordance with Malaysia's financial reporting requirements.
Once the designated retention period has lapsed, your data will be securely deleted or fully anonymised so that it can no longer be linked to your identity. cas3 applies industry-standard data deletion methods to ensure that deleted data cannot be recovered.
You may request early deletion of your data by contacting support@cas3.click. Requests will be processed within 30 business days, subject to cas3's legal obligations to retain certain records.
8 Your Rights as a cas3 Member
As a cas3 member residing in Malaysia, you have the following rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA):
Right of Access
Request a copy of all personal data cas3 holds about you in a readily readable format.
Right to Rectification
Request correction of any personal data in cas3's records that is inaccurate, outdated, or incomplete.
Right to Erasure
Request the deletion of your personal data, subject to cas3's applicable legal obligations.
Right to Data Portability
Request a copy of your data in a structured, machine-readable format for transfer to another party.
Right to Restrict Processing
Request that cas3 restrict the processing of your data in specific situations, such as when the accuracy of the data is in dispute.
Right to Object
Object to the processing of your data for direct marketing or other purposes based on legitimate interests.
To exercise any of the rights above, please contact the cas3 data protection team by email at support@cas3.click with the subject line "Personal Data Rights Request". Include your full name, registered email address, and details of your request. cas3 will respond to and process your request within 30 business days of receipt.
If you are not satisfied with cas3's response to your privacy request, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia or the relevant authority.
9 Underage Players & Child Protection
Cas3 is an entertainment platform intended solely for individuals aged 18 and above. We take the protection of minors very seriously.
Cas3 does not knowingly collect or process personal data from individuals under the age of 18. Should we discover that we have collected data from a person under 18, we will promptly delete that information and close the account in question without prior notice.
Cas3 uses multiple mechanisms to verify player age, including identity document checks during the KYC (Know Your Customer) verification process. Any attempt to circumvent these age verification checks constitutes a serious violation of cas3's Terms & Conditions.
If you are a parent or guardian who suspects that a child under your care has registered a cas3 account, please contact us immediately at support@cas3.click. We will take immediate action and will not retain any data relating to the child in question.
10 Changes to This Privacy Policy
Cas3 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes in how we operate.
When material changes are made to this Privacy Policy, cas3 will:
- Updating the "Last Updated" date at the top of this document;
- Displaying a prominent notice on the cas3 platform's main page for a minimum of 14 days;
- Sending email notifications to all active cas3 members outlining the key changes made;
- In the case of highly significant changes, we may ask you to reconfirm your consent before you continue using the platform.
Your continued use of the cas3 platform after the effective date of any amended policy will be considered your acceptance of those changes. We therefore encourage you to review this Privacy Policy page from time to time, particularly before providing us with any new personal information.
11 Contact Us – Privacy & Data Protection Enquiries
For any enquiries, concerns, or requests relating to your privacy and personal data protection at cas3, please contact us through the following channels:
- Data Protection Email: support@cas3.click (include "Privacy" in the subject line)
- Live Chat: Available on the cas3 platform, 24 hours a day, 7 days a week
- Typical Response Time: Within 1–4 hours for general enquiries; formal data rights requests within 30 business days
The cas3 Bahasa Malaysia-speaking support team is on hand to assist you with any questions about privacy, account security, or your data protection rights. We treat every privacy enquiry with the seriousness it deserves, because we know how important this is to you.
This Privacy Policy should be read together with the Terms & Conditions and Responsible Gaming Policy cas3. Together, these three documents form the complete framework governing the agreement between you and cas3.
This Privacy Policy is written and governed in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. This Bahasa Malaysia version serves as the official reference document for all cas3 members in Malaysia.
Privacy FAQ
Frequently Asked Questions About the cas3 Privacy Policy
No, cas3 does not sell, rent, or share members' personal data with any advertiser or third party for marketing purposes. This is a non-negotiable policy. The only situations in which your data may be shared are with payment service providers processing your transactions, game suppliers for technical integrity purposes, and Malaysian authorities when required by law. In all such cases, only the minimum necessary data is shared.
Yes. cas3 does not store full bank account numbers, credit card numbers, or sensitive payment details on our servers. When you make a deposit via DuitNow, FPX (Maybank2u, CIMB Clicks), Touch 'n Go eWallet, GrabPay, Boost, or ShopeePay, the transaction is processed entirely by a certified third-party payment provider that complies with PCI DSS security standards. cas3 only receives confirmation that payment was successful — not your full financial details.
To request the deletion of your personal data from cas3's systems, send an email to support@cas3.click with the subject line "Data Deletion Request". In your email, include your full name, the email address registered to your cas3 account, and a statement that you are requesting data deletion under your PDPA rights. cas3 will process your request within 30 business days. Please note that certain data may need to be retained for a specified period to comply with Malaysian legal obligations, such as anti-money laundering requirements.
When you voluntarily close your cas3 account, cas3 will retain certain records for the period required under Malaysian law — typically between 5 and 7 years for financial records under the Anti-Money Laundering Act. Data not subject to legal retention obligations, such as detailed betting history and analytics data, will be deleted or fully anonymised within 90 days of account closure. You will receive an email confirmation once the account closure process is complete.
Yes, you can opt out of promotional emails from cas3 at any time. There are two ways to do this: first, click the "Unsubscribe" link at the bottom of any cas3 promotional email; or second, contact the cas3 support team via live chat or email at support@cas3.click and request to be removed from the marketing communications list. Please note that unsubscribing from promotional emails does not affect important account notification emails such as transaction confirmations and security alerts, which still need to be sent for account operational purposes.
Have questions about how cas3 handles your personal data? Our team speaks Bahasa Malaysia and is available 24/7 to help. Reach us at support@cas3.click or via live chat on the platform.