279rc Privacy Policy —
Your Data Protected, Your Privacy Respected

This Privacy Policy explains how 279rc collects, processes, stores, and protects your personal data when you use our platform — whether via website, mobile app, or any related services we offer.

By registering an account or using any 279rc service, you agree to the collection and use of information as described in this policy. If you do not agree, please stop using the platform and contact us to close your account.

We are committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA) in all our data processing practices. This includes ensuring every data collection has a legitimate and proportionate purpose, and obtaining your explicit consent where required.

279rc collects various categories of personal data depending on how you interact with our platform. Below is a comprehensive overview of the data we collect and the purposes it serves:

We only collect data that is strictly necessary to provide the services you request. No excess data is collected without clear and legally valid justification.

The personal data you provide is used responsibly and only for legitimate purposes. 279rc uses your data to:

• Account Management: Verifying your identity, processing registration, and securely managing your account profile.
• Transaction Processing: Processing deposits, withdrawals, and all other financial activities in your 279rc account.
• KYC & AML Compliance: Meeting legal requirements related to identity verification and anti-money laundering.
• Platform Security: Detecting and preventing fraud, account misuse, and suspicious activity.
• Customer Support: Efficiently handling your enquiries, complaints, and requests for assistance.
• Service Improvement: Analysing usage patterns to improve the overall platform experience.
• Service Communications: Sending you important notifications about your account, transactions, and policy changes.
• Marketing (with consent): Informing you about the latest promotions and offers, only if you have consented to receive marketing communications.

279rc does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, there are limited situations where data sharing is necessary and legally permitted:

• Authorised Service Providers: Partners who help us deliver services such as payment processing, identity verification, and technical infrastructure. All providers are bound by strict confidentiality agreements.
• Legal Requirements: When required by a court, regulatory authority, or Malaysian law enforcement agency through valid legal process.
• Fraud Prevention: With fraud prevention agencies and industry security networks to protect users from unauthorised activity.
• Business Transfers: In the event of a merger, acquisition, or asset sale, where the receiving party will be bound by the same or stricter privacy policy.

The security of your personal data is a responsibility that 279rc takes very seriously. We continually invest in the latest security infrastructure and practices to ensure your data is always protected.

The technical and organisational measures we practise include:

• 256-bit SSL encryption for all data in transit between your device and our servers.
• Encryption of data at rest for all personal information stored in our databases.
• Two-factor authentication (2FA) available and encouraged for all user accounts.
• 24/7 security monitoring by our cybersecurity team using advanced threat detection tools.
• Network segmentation to ensure that systems storing sensitive data cannot be accessed directly from the public internet.
• Regular security audits by independent third parties to identify and address any vulnerabilities.
• Privacy awareness training mandatory for all 279rc staff who handle user data.

While we take all reasonable measures, no security system is entirely foolproof. In the event of a data breach affecting your information, 279rc will notify you through our official channels within the timeframe required by law.

279rc uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

We use several types of cookies for different purposes:

• Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled.
• Performance Cookies: Helping us understand how users interact with the platform for technical improvement purposes.
• Functional Cookies: Allowing the platform to remember your preferences such as language and display settings.
• Analytics Cookies: Collecting aggregate statistical information on platform usage for service improvement purposes.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the 279rc platform. Continued use of our platform after a cookie notice is displayed is considered your consent to the use of cookies as described.

Under applicable data protection laws, you have a number of rights regarding the personal data held by 279rc. Here are those rights and how to exercise them:

To exercise any of the above rights, contact the 279rc customer support team via live chat or our official email. We will verify your identity before processing any requests related to your personal data.

279rc retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law.

Our data retention guidelines are as follows:

• Active account data: Retained for the duration your account is active plus 5 years after closure for legal compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian financial law requirements.
• KYC Records: Retained for a minimum of 5 years after account closure in accordance with AML/CFT requirements.
• Technical and security logs: Retained for 12 months for security and incident investigation purposes.
• Customer support communications: Retained for 3 years for reference and service improvement purposes.

When data is no longer needed and there is no legal requirement to retain it, 279rc will delete or anonymise it in a secure and irreversible manner.

In the course of our operations, your personal data may be transferred to and processed in countries other than Malaysia. This occurs when we use cloud infrastructure providers or technical service providers operating across multiple locations.

When your data is transferred outside Malaysia, 279rc ensures that equivalent or higher protection is maintained through:

• Data processing agreements with service providers that mandate compliance with our security standards.
• Legally recognised data transfer mechanisms to ensure your data protection rights are upheld.
• Periodic assessments of our third-party service providers' data protection practices.

279rc may update this Privacy Policy from time to time to reflect changes in our practices, technologies used, legal requirements, or other operational reasons.

When we make material changes to this policy, we will:

• Updating the "Last Updated" date at the top of this page.
• Notifying you via your registered email address if the changes materially affect how we use your personal data.
• Displaying a clear notice on the 279rc platform for at least 30 days before the changes take effect.

We encourage you to review this page periodically to stay informed of any recent changes. Your continued use of the 279rc platform after any changes are published will be considered your acceptance of the updated policy.

If you have any questions, concerns, or wish to exercise your data protection rights, do not hesitate to contact our support team. We are here to help you understand how your data is handled in the most transparent way possible.