Privacy Policy

Section 01

Introduction

This Privacy Policy ("Policy") describes how Fachai ("the Platform", "we", "us", "our") collects, uses, stores, discloses, and otherwise processes the personal data of individuals ("Player", "User", "your") who access or use the Fachai online gaming platform, including the website at https://fachai.buzz, its associated mobile interfaces, applications, and related services (collectively, the "Services").

By registering an account on Fachai, accessing any part of the Services, or otherwise interacting with this Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. This Policy forms part of, and should be read together with, Fachai's Terms & Conditions.

Fachai operates this Platform for users in Malaysia and internationally. Where Malaysian law, including the Personal Data Protection Act 2010 (PDPA), applies to the processing of personal data in connection with commercial transactions involving Malaysian residents, we are committed to compliance with those obligations. If you are a Malaysian resident, you have specific rights under the PDPA which are described in Section 11 of this Policy.

Section 02

Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" — Any information that identifies or could reasonably be used to identify a natural person, directly or in combination with other information. Examples include name, email address, Malaysian IC number, passport number, IP address, and financial account details.
• "Processing" — Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, alteration, retrieval, transmission, blocking, erasure, or destruction.
• "Data Controller" — Fachai, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" — A third-party entity that processes Personal Data on behalf of Fachai, strictly under Fachai's documented instructions and for the purposes described in this Policy.
• "Consent" — A freely given, specific, informed, and unambiguous indication of a Player's agreement to the processing of their Personal Data for a stated purpose.
• "Sensitive Personal Data" — A subset of Personal Data warranting enhanced protection, including government-issued identification numbers, financial account details, and identity verification documents.
• "KYC" — Know Your Customer. The process by which Fachai verifies a Player's identity, including collection and review of identity documents such as Malaysian IC, passport, or utility bills.
• "Cookie" — A small text file placed on a Player's device by the Platform for purposes including session management, analytics, and personalisation.

Section 03

Data We Collect

Fachai collects Personal Data from Players through several channels and across different stages of their relationship with the Platform. The categories of data collected are as follows:

Fachai does not intentionally collect sensitive categories of Personal Data beyond what is necessary for KYC compliance and fraud prevention. We do not collect data relating to racial or ethnic origin, political opinions, religious beliefs, health status, or sexual orientation.

Section 04

Legal Basis for Processing

All processing of Personal Data by Fachai is conducted one or more of the following lawful bases:

1. Contractual Necessity — Processing is necessary to perform the contract between Fachai and the Player, including account management, deposit and withdrawal processing, game delivery, and customer support.
2. Legal Obligation — Processing is required for Fachai to comply with applicable legal obligations, including anti-money laundering (AML) requirements, identity verification mandates, fraud detection, and regulatory reporting obligations.
3. Legitimate Interests — Processing is necessary for Fachai's legitimate business interests, including platform security, fraud prevention, internal analytics, service improvement, and responsible gambling monitoring, provided those interests are not overridden by the Player's fundamental rights and freedoms.
4. Consent — Where Fachai relies on consent as its lawful basis (primarily for direct marketing communications), the Player has provided a freely given, specific, informed, and unambiguous indication of agreement. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Section 05

How We Use Your Data

Fachai uses Personal Data collected from Players for the following purposes:

• Account Administration — Creating and managing your Fachai account, verifying your identity, and maintaining accurate account records.
• Service Delivery — Processing deposits, facilitating withdrawals through your chosen payment method (Touch 'n Go eWallet, DuitNow, Maybank, CIMB, Hong Leong Bank, Public Bank, Boost, GrabPay, USDT TRC20, Bitcoin), and providing access to the gaming content.
• KYC & Fraud Prevention — Verifying your identity documents, detecting and preventing fraudulent activity, money laundering, and other prohibited conduct as defined in the Terms & Conditions.
• Customer Support — Responding to your enquiries, resolving disputes, and maintaining records of support interactions for quality assurance.
• Responsible Gambling — Monitoring gaming activity to identify patterns indicative of problem gambling and administering self-exclusion, deposit limits, and cooling-off tools in accordance with ourResponsible Gambling commitments.
• VIP Programme Management — Tracking wagering activity to determine VIP tier status and administering tier-related benefits including birthday bonuses, cashback rewards, and personal account manager assignments.
• Platform Analytics & Improvement — Analysing aggregate and anonymised usage data to improve platform performance, user experience, game selection, and support quality.
• Marketing Communications — Sending promotional offers, bonus notifications, and news relevant to your Fachai account, strictly subject to your communication preferences and applicable consent requirements. You may opt out at any time.
• Legal Compliance — Meeting obligations under applicable law, including data retention requirements, regulatory reporting, and responding to lawful requests from competent authorities.

Section 06

Data Sharing & Disclosure

Fachai does not sell, rent, or trade your Personal Data to third parties. We may share your Personal Data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment Service Providers — Including e-wallet operators (Touch 'n Go, Boost, GrabPay), banking payment gateways (Maybank, CIMB, Hong Leong, Public Bank via FPX/DuitNow), and cryptocurrency processing partners, to facilitate the processing of deposits and withdrawals. These providers receive only the minimum data necessary to execute the transaction.
• Identity Verification Partners — Third-party KYC providers engaged to verify identity documents and conduct background checks in compliance with AML and fraud prevention requirements. Such providers process Sensitive Personal Data under strict confidentiality and data security obligations.
• Game Content Providers — Licensed third-party game suppliers who provide the technical infrastructure for Fachai's slot, live casino, sports betting, and arcade content. These providers may receive session identifiers and game activity data to facilitate gameplay and resolve disputes.
• IT Infrastructure & Security Providers — Cloud hosting, cybersecurity, and fraud detection service providers engaged to operate and protect the Platform. These providers act as Data Processors under contractual data processing agreements.
• Legal & Regulatory Authorities — We may disclose Personal Data to competent government authorities, law enforcement agencies, or regulatory bodies where required or permitted by applicable law, including response to lawful orders, court proceedings, or AML reporting obligations.
• Professional Advisers — Lawyers, auditors, and other professional advisers engaged in connection with the operation of the Platform, strictly on a need-to-know basis and under professional confidentiality obligations.

All third-party Data Processors engaged by Fachai are required to process Personal Data solely in accordance with Fachai's instructions, to implement appropriate technical and organisational security measures, and not to further share or use the data for their own purposes.

Section 07

International Data Transfers

In the course of operating the Platform, Personal Data may be transferred to and processed in countries outside of Malaysia. Such transfers may occur when data is processed by third-party service providers (including cloud infrastructure and game content providers) whose servers are located outside Malaysia.

Where Personal Data is transferred outside Malaysia, Fachai takes reasonable steps to ensure that the recipient jurisdiction provides an adequate level of data protection, or that appropriate safeguards are in place — such as contractual data protection clauses or equivalent measures — to protect the transferred Personal Data in a manner consistent with the standards set out in this Policy.

By using the Fachai Platform and accepting this Privacy Policy, you acknowledge and consent to the potential transfer of your Personal Data to countries outside Malaysia for the purposes described in this Policy.

Section 08

Data Retention

Fachai retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention principles apply:

• Active Account Data — Retained for the duration of your account's active status plus an additional period to allow for account reactivation requests and resolution of outstanding balances or disputes.
• Identity & KYC Documents — Retained for a minimum of five (5) years following the closure of the account, or longer where required by AML legislation or regulatory mandate.
• Financial Transaction Records — Retained for a minimum of five (5) years following the date of each transaction, in compliance with applicable financial record-keeping requirements.
• Support Correspondence — Retained for up to two (2) years following the resolution of the support interaction, unless retention for a longer period is required for legal proceedings or dispute resolution.
• Marketing Data — Retained until you withdraw consent or update your marketing preferences, after which marketing communications will cease promptly.
• Technical & Log Data — Retained for up to twelve (12) months for security monitoring and fraud detection purposes.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Anonymised, aggregate data may be retained indefinitely for analytical purposes.

Section 09

Data Security

Fachai implements a range of technical and organisational security measures designed to protect Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between user devices and Fachai's servers;
• Encrypted storage of sensitive data at rest, including identity documents and financial account information;
• Multi-factor authentication options for Player account access;
• Role-based access controls limiting internal staff access to Personal Data on a strict need-to-know basis;
• Continuous intrusion detection and security monitoring systems;
• Regular security assessments and vulnerability testing of the Platform's infrastructure;
• Data breach response procedures enabling prompt detection, containment, and notification in the event of a security incident.

Notwithstanding these measures, no transmission of data over the internet or electronic storage system can be guaranteed to be completely secure. Players are responsible for maintaining the security of their own account credentials and for notifying Fachai immediately if they suspect that their account has been accessed without authorisation.

Section 10

Cookies & Tracking Technologies

Fachai uses cookies and similar tracking technologies on the Platform to enhance functionality, analyse usage patterns, and support security operations. The following categories of cookies are used:

• Strictly Necessary Cookies — Essential for the operation of the Platform, including session management, login state maintenance, and security functions. These cookies cannot be disabled without impairing core Platform functionality.
• Functional Cookies — Used to remember your preferences, such as language settings, preferred payment method, and display configurations, to provide a more personalised user experience.
• Analytics Cookies — Used to collect aggregated, anonymised data about how Players interact with the Platform, including pages visited, time spent, and navigation paths. This data is used to identify and address usability issues and to improve the overall Platform experience.
• Security Cookies — Used for fraud detection and platform integrity purposes, including identifying suspicious login patterns and potential bot activity.

Most web browsers allow you to control or disable cookies through browser settings. Disabling certain categories of cookies may affect the functionality of the Platform — in particular, disabling strictly necessary cookies will prevent you from logging in and using the Services. Instructions for managing cookies are available in the help section of your browser.

Section 11

Your Data Rights

Subject to applicable law, including the Malaysia Personal Data Protection Act 2010 (PDPA) and any other applicable data protection legislation, Fachai recognises and facilitates the following rights with respect to your Personal Data:

To exercise any of the above rights, please contact our Data Privacy team via the support channels described in Section 15. We will respond to all legitimate requests within a reasonable period and, in any event, within the timeframe required by applicable law. Identity verification may be required before we can fulfil a data rights request.

Section 12

Minors & Age Restriction

The Fachai Platform is strictly intended for individuals aged 21 years and above. Fachai does not knowingly collect Personal Data from any person under the age of 21. If you are under21, you are not permitted to register an account, access the Platform, or provide any Personal Data to Fachai.

If Fachai becomes aware that Personal Data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. Any funds associated with an underage account will be handled in accordance with our Terms & Conditions and applicable law.

If you believe that a minor may have registered an account on the Fachai Platform, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action.

Section 13

Third-Party Links & Services

The Fachai Platform may contain integrations with or references to third-party services, including game providers, payment processors, and identity verification partners. These third-party services operate under their own privacy policies, which are independent of this Policy.

Fachai does not control the privacy practices of third-party services and is not responsible for the content, security, or privacy policies of any third-party website, application, or service. We encourage Players to review the privacy policies of any third-party service they interact with through or in connection with the Fachai Platform.

When you use a third-party payment method such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, Maybank, CIMB, Hong Leong, or Public Bank to make a deposit or withdrawal, your transaction data is processed by that provider in accordance with their own privacy policy and terms of service. Fachai receives only a transaction confirmation and the necessary identifiers to credit or debit your account.

Section 14

Changes to This Policy

Fachai reserves the right to update, amend, or replace this Privacy Policy at any time. Changes will be reflected in the "Last Updated" date displayed at the top of this page. Where changes are material — meaning they significantly affect how your Personal Data is processed or your rights as a data subject — Fachai will make reasonable efforts to notify registered Players via email or through an in-platform notice prior to the changes taking effect.

We encourage you to review this Privacy Policy periodically. Your continued use of the Fachai Platform following the publication of any updated Policy constitutes your acceptance of those changes. If you do not agree with any changes to this Policy, you should cease using the Platform and contact our support team to arrange account closure.

Section 15

Contact Us

For all privacy-related enquiries, data rights requests, concerns about how your Personal Data is processed, or to report a suspected data security incident, please contact Fachai through the channels below. All communications are handled in English and responded to during Malaysia Standard Time (MYT, UTC+8) business hours.