Privacy Policy Credit Free – Malaysian Member Data Protection

Information We Collect

Credit Free collects your personal information in a number of different situations. Below are the categories of information we collect and the purposes for which they are collected:

Account Registration Information

When you register a Credit Free account, we collect the following information to verify your identity and enable you to use the platform:

• Full name as stated on your official Malaysian identification document.
• An active Malaysian mobile number for OTP verification.
• A valid and active email address.
• Date of birth to verify age eligibility (21 years and above).
• The username and password you set yourself.

Financial Transaction Information

When you make a deposit or withdrawal via local Malaysian payment methods such as DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, or FPX, we record the following transaction information:

• Name of the account or e-wallet owner used.
• Bank account number or e-wallet ID (stored in encrypted format).
• Transaction amounts in Malaysian Ringgit (RM).
• The date and time of each transaction.
• Transaction reference numbers from payment service providers.

Platform Usage Information

Credit Free also automatically collects technical and behavioural usage data when you use the platform. This includes:

• Your device's IP address when accessing Credit Free.
• Device type, operating system, and web browser used.
• Pages you visit, time spent, and your navigation path within the platform.
• Game and betting history (for audit and dispute resolution purposes).
• Technical error logs for platform improvement purposes.

How We Use Your Information

Credit Free uses the personal information it collects solely for lawful, specific and transparent purposes. Below are the primary uses of your data within the Credit Free platform:

We will not use your information for any purpose beyond those stated in the table above without first obtaining your renewed consent. If you wish to withdraw consent for receiving promotional communications, you may do so through the email preference settings in your account or by contacting the Credit Free support team.

Information Sharing

Credit Free understands that privacy is a fundamental right of every member. We therefore maintain a strict policy on the sharing of members' personal information. In general, we do not share your personal information with external parties. However, there are limited circumstances in which sharing may occur:

Trusted Third-Party Service Providers

Credit Free works with a select group of service providers that help us operate the platform. These include Malaysian local payment processors (such as DuitNow and FPX gateway providers), cloud service providers, and security audit firms. These providers are granted access only to the information necessary to perform their specific functions and are bound by strict confidentiality agreements with Credit Free.

Legal Requirements

Credit Free may be required to disclose member information to the relevant Malaysian authorities when mandated by law, court order, or a valid enforcement request. This includes investigations related to money laundering or financial fraud. In all such cases, Credit Free will disclose only the minimum information necessary.

Data Security

Protecting members' personal data is more than a legal obligation for Credit Free — it is a moral responsibility we take seriously. We continually invest in our security infrastructure to ensure your data remains safe at all times.

The technical security measures implemented by Credit Free include:

• 256-bit SSL Encryption for all communications between your browser and Credit Free's servers.
• Encryption of data at rest – sensitive information such as payment details is stored in encrypted format within our database.
• Two-factor authentication (2FA) available as an additional security layer for member accounts.
• 24/7 security monitoring by the Credit Free information security team to detect any suspicious activity.
• Regular penetration testing by an independent third party to identify and remediate security vulnerabilities before they can be exploited.
• Role-based access control – only approved personnel who require access to specific data for their designated tasks are permitted.

While Credit Free takes all reasonable security precautions, no security system can be guaranteed to be 100% secure in today's digital landscape. We therefore encourage all members to play their part in protecting their accounts by using strong passwords, keeping passwords confidential, and promptly reporting any suspicious activity to the Credit Free support team.

Cookies & Tracking Technologies

Credit Free uses cookies and similar tracking technologies to enhance the user experience and ensure the platform operates smoothly. Below is an explanation of the types of cookies we use:

• Essential Cookies: Required for core platform operations – login, active sessions, and security. These cookies cannot be disabled.
• Performance Cookies: Helps us understand how members use the platform so we can improve the overall experience. This data is anonymised and aggregated.
• Functional Cookies: Saves your preferences such as display language and settings you have configured for a more convenient experience in future.
• Analytical Cookies: Allows Credit Free to analyse overall platform usage patterns for product development purposes. No individual personal information is shared through these cookies.

You can manage your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect the functionality of some areas of the Credit Free platform. For the best experience, we recommend keeping essential cookies enabled.

Your Rights as a Credit Free Member

As a Credit Free member, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

Data Retention & Deletion

Credit Free retains members' personal information for as long as necessary to fulfil the purposes outlined in this privacy policy, or as required by applicable Malaysian law.

The data retention guidelines applied by Credit Free are as follows:

• Active account data: Retained for the duration of the active account and for 7 years after account closure to comply with Malaysian financial legal requirements.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian tax and banking legal requirements.
• Customer support communication logs: Retained for 2 years for reference and dispute resolution purposes.
• Technical log data: Retained for 90 days for security purposes and technical troubleshooting.
• Marketing data (with consent): Retained until you withdraw consent or request deletion.

Once the retention period expires, Credit Free will securely delete or anonymise your personal data using methods that ensure it cannot be recovered or accessed again. Data required for legal records or audits will be held in separate systems with strictly limited access.

Changes to the Privacy Policy

Credit Free reserves the right to update or amend this Privacy Policy from time to time to reflect changes in platform practices, legal requirements, or in response to member feedback. Whenever this policy is updated, the "Updated" date at the top of this page will change accordingly.

For significant changes that affect how we use or protect your data, Credit Free will notify you via:

• An email will be sent to the address registered to your Credit Free account.
• A clear in-platform notice the next time you log in.
• Updates to this page are clearly marked with the relevant date.

Your continued use of the Credit Free platform after the effective date of any changes to this privacy policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you have the right to close your account and request the deletion of your personal data.

Contact Us About Privacy

If you have any questions, concerns or requests regarding this privacy policy or how Credit Free handles your personal data, our team is ready to assist. We are committed to responding within 48 hours to all privacy-related enquiries.

You can reach Credit Free through the following channels:

• Privacy Email: support@creditfree.best (please include "Privacy Enquiry" in the email subject line)
• Live Chat: Available 24/7 directly within the Credit Free platform
• Response time: Email response within 2–24 hours, live chat response in under 5 minutes

To help us process your request efficiently, please include your Credit Free account number (if applicable) and a clear description of your request or concern. All privacy-related communications are handled in strict confidence by our specially trained team.