230 Privacy Policy – User Data Protection

This Privacy Policy explains how the 230 platform collects, uses, stores, and protects the personal data of users in Malaysia. We are committed to safeguarding your privacy in line with our responsibilities as a responsible data controller.

Effective: 1 January 2026  |  Version: 2.0  |  Jurisdiction: Malaysia

FAQ Create an Account

Information We Collect

When you register and use the 230 platform, we collect certain types of information to ensure the service runs smoothly and securely. The categories of data we collect are as follows:

Account & Identity Information

  • Full name, date of birth, and MyKad or passport number for identity verification purposes.
  • The email address and mobile number provided during registration.
  • The username and password you set (passwords are stored in encrypted form).

Device & Browser Information

  • Your IP address, web browser type, operating system, and device screen resolution.
  • Approximate location data derived from your IP address, to ensure compliance with geographic restrictions.
  • Login session information, including the time, date, and duration of each session.

Payment Information in Malaysian Ringgit

  • Records of deposit and withdrawal transactions in MYR, including the payment methods used such as Touch 'n Go or FPX.
  • The bank account number or e-wallet registered for withdrawals (stored securely, not in plain text).
  • We do not store credit or debit card details directly — all payment processing is handled by registered third-party payment processors.

Cookies & Usage Data

  • In-platform navigation and click data, to understand how users interact with the interface.
  • Session cookies and preference cookies that store your language settings and display preferences.

How We Use Your Information

All information collected by 230 is used solely for legitimate and necessary purposes. We do not use your data beyond the following scope:

  • Identity Verification: Ensuring every account belongs to a verified individual who meets the minimum age requirement of 18 years.
  • Transaction processing: Verifying deposits and processing withdrawals to your registered bank account or e-wallet in MYR.
  • Account security: Detecting suspicious login activity and preventing unauthorised access.
  • Legal compliance: Meeting anti-money laundering (AML) obligations and financial reporting requirements applicable in Malaysia.
  • Service improvement: Analysing aggregated usage patterns (not individual behaviour) to improve the 230 platform's interface and user experience.
  • Service communications: Sending account-related notifications, transaction updates, or policy change notices via email or SMS.

We do not use your personal data to deliver third-party advertising without your explicit consent.

Cookies & Tracking Technologies

The 230 platform uses cookies to ensure core platform functionality runs smoothly and to enhance the user experience. Cookies are small text files stored on your device when you visit our website.

We use three types of cookies:

  • Session cookies: Temporarily storing your login information during an active session. These cookies are automatically deleted when you close your browser.
  • Preference cookies: Storing preferences such as your display language and theme to ensure you don't have to reconfigure them each time you access the platform.
  • Analytics cookies: Collecting aggregated usage data (without identifying individual users) to help us understand which parts of the platform are most frequently used.

You can manage and delete cookies through your browser settings. However, disabling certain cookies may affect the functionality of some parts of the 230 platform.

Data Storage, Security & Sharing

Data Storage & Security

All 230 user personal data is stored on servers protected with SSL/TLS encryption. Database access is restricted to authorised personnel only, and all access is automatically logged for security audit purposes.

Passwords are stored using strong cryptographic hashing algorithms and cannot be recovered in their original form, even by our internal staff. Sensitive payment information is not stored directly on 230's systems — it is handled by payment processors that comply with industry security standards.

Active account data is retained for the duration the account remains active, plus a minimum of three years after account closure, in line with Malaysian legal requirements for financial records.

Sharing With Third Parties

230 does not sell, rent, or transfer users' personal data to third parties for marketing purposes. However, we may share necessary information with:

  • Authorised payment processors handling deposit and withdrawal transactions in MYR.
  • Malaysian government authorities where required by law or court order.
  • Technical service providers who assist us in operating our platform infrastructure, bound by strict confidentiality agreements.

User Rights & How to Contact Us

As a 230 platform user, you have several rights regarding your personal data, all of which we fully respect:

Right of Access

You have the right to request a copy of the personal data we hold about you. Requests can be submitted by email to our support team and will be processed within 14 business days.

Right to Rectification

If any information we hold about you is inaccurate or out of date, you may request a correction by contacting us. Some changes may require additional identity verification.

Right to Erasure

You may request the deletion of your account and personal data. However, we may be required to retain certain records for the period prescribed by Malaysian law relating to financial records and anti-money laundering. Once the mandatory retention period has lapsed, your data will be permanently deleted.

Policy Updates & Contact Us

230 reserves the right to update this Privacy Policy from time to time. Users will be notified of any material changes via email or an in-platform notice. Continued use of the platform after such notice constitutes acceptance of the updated policy.

For any enquiries regarding your data privacy, please contact our support team at [email protected]. We aim to respond to all privacy-related queries within three business days.

Questions About Your Data?

The 230 support team is here to help with any questions about privacy, data access, or managing your account. Visit our FAQ page or log in to manage your account settings directly.

View FAQ Manage My Account
Bahasa Melayu