Privacy Policy my365 login — Personal Data Protection for Malaysia Users

My365 login collects several categories of information from users to enable the platform to function properly, meet legal requirements, and provide a more personalised experience.

A. Information You Provide Directly

This is the data you actively provide to us:

• Full name as stated on official identification documents
• Malaysia Identity Card Number (MyKad No.) for verification purposes
• Date of birth for age eligibility verification
• Email address and mobile number for communications
• Current residential address
• Payment method details (account holder name, bank account number) — credit or debit card data not stored directly on our servers
• Selfie and document copies for the KYC process

B. Information Collected Automatically

While you use the my365 login platform, we also collect data automatically:

The data we collect is used for the following purposes. We do not use your data for any unrelated purpose without your consent:

• Registration and account management — ensuring every account is legitimate and owned by the rightful individual
• Identity verification (KYC) — meeting legal requirements to ensure the platform is not misused
• Processing deposits and withdrawals — ensuring all financial transactions are conducted securely and accurately
• Provision of customer support services — resolving enquiries and reported issues
• Fraud prevention and security — identifying and preventing suspicious or unauthorised activity
• Legal compliance — fulfilling legal obligations and reporting to authorities when required
• Marketing communications — only with your consent, we send promotions and the latest offers
• Platform improvement — analysing aggregated usage data to improve the user experience

My365 login does not sell or rent your personal data to any third party for their commercial purposes. However, there are limited situations where we need to share your information:

Trusted Service Providers

We share necessary data with third-party service providers who help us operate the platform — including payment processors, KYC verification providers, and cloud infrastructure companies. All providers are bound by strict data confidentiality agreements and are only permitted to use your data for specified purposes.

Legal Requirements

We may be required to disclose user information to relevant authorities, regulatory bodies, or law enforcement when mandated to do so by Malaysian law or a valid court order. In such situations, we will notify you if permitted by law.

Business Transfers

In the event of a merger, acquisition, or sale of business assets, user data may be transferred to the receiving entity. In such situations, users will be notified in advance and equivalent privacy protection will be ensured.

The security of your personal data is our top priority. my365 login continuously invests in the latest security technologies and procedures to ensure your information is always protected.

Technical Security Measures

• 256-bit SSL TLS 1.3 encryption for all data communications between users and the server
• Databases are encrypted with AES-256 encryption for stored sensitive data
• Two-factor authentication (2FA) is available and recommended for all accounts
• Real-time security threat monitoring around the clock, 24 hours a day
• Regular penetration testing by independent security experts
• Automatic data backup to multiple secure server locations

Organisational Security Measures

• Access to user data is restricted to staff who require it on a need-to-know basis
• All staff undergo background checks and data protection training
• Clear and trained incident response procedures to handle any data breaches

My365 login uses cookies and similar tracking technologies to enhance the user experience, understand how the platform is used, and deliver more relevant content.

Types of Cookies We Use

• Essential Cookies (Required): Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Performance Cookies: Collects information about how you use the website — pages visited, time spent, and errors encountered. This data is used to improve the platform.
• Functional Cookies: Saves your preferences such as language, currency, and display settings for a more personalised experience.
• Marketing Cookies: Used to display promotions relevant to your interests. This is only active if you gave consent during registration.

Cookie Controls

You can manage cookies through your browser settings. However, disabling essential cookies may affect platform functionality. For marketing cookies, you may withdraw consent via your account settings page.

My365 login retains your personal data only for as long as it is needed for the stated purposes or as required by applicable law.

• Active account data: Retained for the duration of the active account and for any additional period required by law
• KYC records: Retained for a minimum of 6 years after account closure in accordance with anti-money laundering laws
• Transaction records: Retained for 7 years for financial audit and tax compliance purposes
• Communication logs: Retained for 2 years for dispute resolution purposes
• Marketing data: Deleted within 30 days after you withdraw consent

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to your identity.

Under Malaysia's Personal Data Protection Act 2010 and our internal policies, you have the following rights regarding your personal data:

To exercise any of the above rights, contact our privacy team at [email protected]. We will process your request within 14 business days. Identity verification may be required before your request is processed.

The my365 login platform is exclusively for individuals aged 21 and above. We does not intentionally collect any personal information from children or minors. Should we find that information has been collected from a minor, immediate action will be taken to delete that information and close the associated account.

If you are a parent or guardian and believe your child has registered on our platform, please contact us immediately through our available support channels so we can take appropriate action.

My365 login reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or technological developments. When significant changes are made, we will:

• Updating the "Last Updated" date at the top of this document
• Sending a notification to your registered email address (for material changes)
• Displaying a clear notice on the platform's main page for a minimum of 14 days

Continued use of the my365 login platform after policy changes take effect will be considered your acceptance of the latest version of this Privacy Policy. If you disagree with the changes made, please stop using the platform and contact us to close your account.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please don't hesitate to contact us:

• Privacy Email: [email protected]
• General Support Email: [email protected]
• 24/7 Live Chat available on the my365 login app and website
• Target response time: within 14 business days for privacy enquiries

We are committed to addressing all privacy concerns seriously and promptly. If you are unsatisfied with our response, you have the right to lodge a complaint with the Malaysia Personal Data Protection Department or the relevant authority.