ComeOn Malaysia Privacy Policy – How We Protect Your Personal Data

1Introduction – ComeOn's Privacy Commitment

When you register an account at comeon, making a deposit using Touch 'n Go eWallet, GrabPay, or DuitNow, placing a bet on a Malaysia Super League match, or playing blackjack at our live tables – you are entrusting us with some of your personal information. We understand the weight of that trust, and we do not take the responsibility that comes with it lightly.

comeon is the data controller for all personal information you provide to us or that we collect through your use of this platform. This means we are responsible for ensuring your data is processed lawfully, fairly, and transparently in accordance with applicable laws in Malaysia.

This Privacy Policy clearly outlines:

• What personal data we collect from you
• Why we collect this data and the legal basis for doing so
• Who your data may be shared with and under what circumstances
• How long we retain your data
• What your rights are regarding your personal data and how to exercise them

If any part of this Privacy Policy is unclear or you would like further clarification, do not hesitate to contact the support team comeon at support@comeon-vip.net. We are happy to address any privacy enquiries in Bahasa Melayu.

2Types of Personal Data We Collect

comeon collects various types of personal data depending on your interactions with our platform. The following are the main categories of data we collect:

2.1 Identity Data

• Full name (as shown on your Malaysian identity card)
• National identification number (MyKad) or passport number
• Date of birth
• Gender
• Nationality

2.2 Contact Data

• Active Malaysian phone number
• Email address
• Residential address in Malaysia

2.3 Account & Financial Data

• Username and password (stored in encrypted form)
• Registered payment method details (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, CIMB Clicks)
• Deposit and withdrawal transaction history in MYR
• Current account balance

2.4 Gaming Activity Data

• Sports betting history (football, badminton, e-sports, and more)
• Casino game history (blackjack, roulette, slots, and more)
• Records of bonuses and promotions used
• Responsible gaming settings you have enabled

2.5 Technical Data

• IP address of the device used to access the platform
• Web browser type and version
• Device type (smartphone, laptop, tablet)
• Operating system
• Cookie data and session identifiers
• Login and logout timestamp logs

2.6 Communication Data

• Records of conversations with the support team comeon via live chat and email
• Feedback, complaints, and inquiries you submit to us

3How We Collect Your Personal Data

comeon collects personal data through the following channels:

3.1 Directly from You

The majority of data we hold was provided directly by you — during the account registration process, during identity verification for withdrawals, when registering a new payment method, or when contacting our support team comeon. You have full control over the information you share directly.

3.2 Automatically Through Platform Use

When you use the comeon – whether via web browser or mobile app – our systems automatically record technical data such as your IP address, device type, navigation activity, and session data. This is done through cookies, server logs, and similar technologies described in Section 11.

3.3 From Legitimate Third Parties

In certain circumstances, comeon may receive your personal data from legitimate third parties – for example, from identity verification service providers we use for the KYC (Know Your Customer) process, or from payment providers when processing transactions via FPX, DuitNow, or other Malaysian digital wallets. This data is used solely for the purposes described in this Policy.

4Purposes for Which We Use Your Personal Data

comeon uses the personal data we collect for the following purposes:

4.1 Account Management & Services

• Creating and managing your account comeon your
• Verifying your identity during login and transactions
• Processing MYR deposits and withdrawals via Malaysian payment methods
• Managing bonus claims and rewards programmes
• Providing responsive and relevant customer support

4.2 Security & Fraud Prevention

• Detecting and preventing fraud, money laundering, and platform abuse
• Meeting AML (Anti-Money Laundering) and KYC compliance obligations
• Protecting your account from unauthorised access
• Investigating suspicious activity

4.3 Legal Compliance

• Fulfilling compliance obligations under applicable Malaysian law
• Complying with instructions from competent authorities, courts, or regulatory bodies
• Maintaining records as required by law for the prescribed period

4.4 Service Improvement

• Analysing usage patterns to improve the platform's user experience comeon
• Testing new features prior to full launch
• Optimising platform performance for Malaysian users

4.5 Marketing Communications (with Consent)

With your consent, comeon may send information about promotions, new bonuses, or platform updates via email or in-app notifications. You can withdraw this consent at any time by updating your notification settings in your account or by contacting us at support@comeon-vip.net. Withdrawing consent does not affect your eligibility to use the platform.

5Legal Basis for Data Processing

Under Malaysia's Personal Data Protection Act 2010 (PDPA), comeon processes your personal data on the following legal bases:

• Contract Performance: Processing required to provide platform services comeon to you – including account management, transaction processing, and game delivery. This is the primary legal basis for our data processing.
• Legal Obligation: Processing required to fulfil legal obligations comeon under Malaysian law – including applicable AML, KYC, and tax compliance requirements.
• Legitimate Interests: Processing for legitimate interest purposes comeon that do not infringe on your fundamental rights – including platform security, fraud prevention, and service improvement.
• Consent: For marketing communications and certain data uses that fall outside the categories above, we will request your explicit consent beforehand.

6Sharing Data with Third Parties

comeon does not sell your personal data to any third party for marketing or other commercial purposes. However, in the course of operating the platform, we may need to share your personal data with the following categories of third parties:

6.1 Trusted Service Providers

We work with selected service providers who help us operate the platform – including payment providers for processing transactions via DuitNow, FPX, Touch 'n Go eWallet and others, casino gaming and Sports Betting software providers, identity verification service providers, and IT infrastructure service providers. All these providers are bound by strict data protection agreements and are only permitted to process your data for purposes specified by comeon.

6.2 Authorities & Regulatory Bodies

comeon will disclose your personal data to Malaysian authorities where required by law, court order, or in efforts to prevent or investigate financial crime. We will not make such disclosures voluntarily beyond what the law requires.

6.3 Business Transfer

In a hypothetical scenario where comeon engages in a merger, acquisition, or sale of assets, users' personal data may be transferred as part of that transaction. In such circumstances, we will ensure all parties involved adhere to data protection standards equivalent to those in this Privacy Policy, and we will notify you before your data becomes subject to a different privacy policy.

7Transfer of Data Outside Malaysia

In operating a global platform, comeon may need to store or process some of your data on servers located outside Malaysia – for example, for cloud infrastructure services or international gaming software providers. When this occurs, we take appropriate measures to ensure your data continues to be protected at a level equivalent to or higher than that required under Malaysia's PDPA.

The safeguards we apply to international transfers include internationally recognised standard data transfer agreements, regular security assessments of all third-party providers, and contractual clauses ensuring adherence to strict data protection standards.

If you would like to know more about the data transfer mechanisms we use for any specific country, you can contact us at support@comeon-vip.net for further information.

8Data Security – How We Protect Your Information

comeon invests seriously in security infrastructure to protect your personal data against unauthorised access, loss, destruction, or inadvertent disclosure. Key technical and organisational measures we employ include:

• 256-bit SSL Encryption: All data transmitted between your device and our servers comeon encrypted using TLS/SSL protocol with 256-bit strength – the same standard used by major banking institutions in Malaysia.
• Stored Data Encryption: Sensitive data such as passwords and payment details are stored in encrypted form using modern cryptographic algorithms. Your password is never stored in plain text.
• Role-Based Access Controls: Access to personal data within internal systems comeon restricted on a need-to-know basis. Only staff who require access to carry out their duties are granted permission to the relevant data categories.
• Two-Factor Authentication: Platform administration account comeon is protected with multi-factor authentication to prevent unauthorized access even in the event of a compromised password.
• 24/7 Security Monitoring: Our automated monitoring system operates around the clock to detect suspicious activity, intrusion attempts, or anomalies that may indicate a security incident.
• Regular Security Audits: comeon conducts periodic independent third-party security audits to identify and address any vulnerabilities in our systems.

While we take all reasonable steps to protect your data, no security system can guarantee 100% protection under all circumstances. You also play an important role in keeping your account secure. comeon your end – by using a strong password, not sharing your login credentials, and notifying us immediately if you suspect any suspicious activity.

9Data Retention Period

comeon does not retain your personal data for longer than is necessary for the purposes stated in this Privacy Policy, or beyond the period required under Malaysian law.

In general, our data retention policy is as follows:

• Active Account Data: Retained for the duration your account remains active on the platform comeon.
• Financial Transaction Data: Retained for a minimum of 7 years in accordance with applicable Malaysian financial and tax regulatory requirements.
• Support Communication Records: Retained for 3 years from the date of last interaction for reference and dispute resolution purposes.
• Identity Verification (KYC) Data: Retained for a minimum of 5 years after account closure in accordance with AML compliance requirements.
• Technical Log Data: Retained for 12 months for security and technical troubleshooting purposes.
• Marketing Data: Retained until you withdraw consent for marketing communications, or up to 3 years from the last interaction, whichever comes first.

Once the retention period has expired and there is no legal obligation requiring continued storage, comeon will securely delete or de-identify your data using methods that prevent recovery.

10Your Rights as a Data Subject

Under Malaysia's PDPA, you have the following rights regarding your personal data held by comeon. We are committed to facilitating the exercise of these rights within a reasonable timeframe.

10.1 Right to Access Data

You have the right to request a copy of the personal data we hold about you. Access requests can be made by emailing support@comeon-vip.net. We will process valid requests within 21 business days.

10.2 Right to Rectification

If the personal data held by comeon is inaccurate or incomplete, you have the right to request a correction. For basic details such as your phone number or email address, you can update these directly in your account settings. For corrections to identity information, please contact our support team.

10.3 Right to Erasure ("Right to be Forgotten")

You may request comeon delete your personal data in certain circumstances – for example, when the data is no longer needed for its original purpose, or when you withdraw the consent on which the processing was based. Please note that this right is not absolute – we may need to retain some data to meet legal obligations or for legitimate security purposes.

10.4 Right to Object to Processing

You have the right to object to the processing of your personal data where it is based on legitimate interests comeon, including processing for direct marketing purposes. You may object to marketing communications by updating your account notification settings or by contacting us.

10.5 Right to Restrict Processing

In certain circumstances – such as when you dispute the accuracy of your data or object to its processing – you may request comeon to restrict how we use your data while the matter is being resolved.

To exercise any of the rights above, submit a written request to support@comeon-vip.net stating the right you wish to exercise and sufficient details for us to identify your account. We may require identity verification before processing the request.

11Cookies & Tracking Technologies

comeon uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

11.1 Types of Cookies We Use

• Essential Cookies: Required for the platform's core functions – such as maintaining your login session and ensuring security features work correctly. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collects information on how visitors use our platform — pages visited most frequently, time spent, and errors encountered. This data is used to improve platform performance. comeon.
• Functional Cookies: Saving your preferences such as language and display settings so you don't have to reconfigure them each time. This cookie system is what allows the platform to remember your language preference.
• Analytics Cookies: Helps us understand aggregate usage patterns to make better development decisions. This data is processed in anonymised or pseudo-anonymised form.

11.2 Managing Cookie Settings

You can manage your cookie settings through your web browser. Most modern browsers allow you to view, delete, or block cookies from specific websites. Please note that disabling certain cookies may affect the functionality of the platform. comeon – particularly essential cookies required for secure login sessions.

12Children's Privacy

Platform comeon is strictly limited to individuals aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

Should we discover that we have collected personal data from an individual under the age of 18, we will take immediate steps to close the relevant account, delete all associated personal data, and refund any funds in accordance with established procedures.

Parents or guardians who become aware that their minor child has registered an account on comeon are requested to contact us immediately at support@comeon-vip.net so that we may take the appropriate action.

13Changes to This Privacy Policy

comeon reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or developments in platform operations. When we make material changes, we will:

• Updating the "Last Updated" date at the top of this document
• Sending notifications to all registered members via their registered email
• Displaying clear notices within the platform comeon during subsequent login sessions

For minor changes that do not materially affect your rights, comeon may update this document without a separate notification. We therefore encourage you to review this Privacy Policy periodically.

Continued use of the platform comeon after the effective date of the amended Privacy Policy will be considered acceptance of the new terms. If you do not agree with any changes, you have the right to close your account and request deletion of the relevant data in accordance with the procedure set out in Section 10.

14Contact Us – Privacy Enquiries & Complaints

If you have any questions, concerns, or complaints regarding how comeon handling your personal data, please contact us through the following channels:

• Privacy Email: support@comeon-vip.net – please use "Privacy Enquiry" as your email subject for faster handling
• Live Chat: Available directly on the platform comeon, 24/7 in Bahasa Malaysia

We aim to respond to all privacy-related enquiries within 5 business days, and to resolve more complex complaints within 21 business days.

If after contacting us you remain unsatisfied with how we have handled your privacy concern, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) or the relevant regulatory body, as provided under your rights pursuant to PDPA 2010.