3900 Privacy Policy – Protecting Your Personal Data
3900 takes its responsibility to protect the privacy and personal data of every user in Malaysia seriously. This document explains in detail how we collect, use, store, and safeguard your information.
Updated: January 2026 | Applies to all Malaysian users
Document Contents
1. Information Collected by 3900
When you register and use the 3900, we collect various types of information to ensure the services we offer run smoothly, securely, and in a way that meets your needs as a user in Malaysia. This information is collected directly from you during registration, while you use our services, or through automated technology when you browse our platform. All data collection is carried out transparently and responsibly in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We do not collect any information beyond what is operationally necessary, and we will never misuse the data you provide. Each category of data we collect has a clear purpose, as described in the sections that follow.
Personal Account Information
During the registration process, you are required to provide basic personal information such as your full name, date of birth, identity card or passport number, email address, and an active mobile number. This information is used to verify your identity and to fulfil legal compliance requirements Know Your Customer (KYC), and allows us to contact you regarding your account or transactions. Your current residential address in Malaysia may also be required for further verification when you submit your first withdrawal request. All personal information is stored in protected systems and accessible only to authorised personnel. You are responsible for ensuring that all information provided remains accurate and up to date throughout your use of your 3900 account.
Device & Browser Information
The 3900 platform automatically collects certain technical information when you access our website or mobile app, including IP address, device type, mobile phone model, operating system, browser version, screen resolution, and time zone. This technical data helps us detect suspicious activity, optimise platform performance for a better mobile experience, and resolve technical issues more efficiently. Approximate location data derived from your IP address is used solely for security and geographic compliance purposes, not for highly targeted marketing. We will not access your device's GPS or precise location without your explicit prior consent. Device data is linked to your account record to help detect unauthorised login attempts.
Payment Information in MYR
To facilitate MYR (RM) deposits and withdrawals, 3900 collects the necessary banking details such as your bank name, bank account number, or the e-wallet details you use for transactions. It is important to note that 3900 does not store your credit or debit card information directly in our systems — all payments are processed through licensed third-party payment gateways that meet PCI-DSS security standards. Transaction records covering deposit and withdrawal amounts, dates, and payment methods are retained in our systems for financial audit and anti-money laundering (AML) compliance purposes. Your payment information will not be shared with any third party except where required by law or necessary to process your transaction. We recommend that you always use a bank account or e-wallet registered in your own name to avoid any verification issues.
Cookies, Usage Data & Session Tracking
The 3900 platform uses cookies and similar session tracking technologies to record how you interact with our website, including pages visited, time spent on each page, buttons clicked, and your overall navigation journey. This usage data is collected in aggregate form and used to improve interface design, enhance page loading speed, and tailor content recommendations based on your interests. Session cookies are required to maintain your logged-in state and ensure a seamless experience as you move between pages on the 3900 platform. You can control or block cookies through your browser settings, though doing so may affect certain platform functions. Further details on cookies are covered in the dedicated section of this document.
2. How We Use Your Information
All information collected by 3900 used exclusively for legitimate purposes directly related to delivering our online entertainment platform services to Malaysian users. 3900 is committed to not using your data for any unrelated purpose, and we will not sell your personal data to any third party for marketing purposes without your consent. Each data use purpose listed below is grounded in genuine operational need and complies with data protection principles recognised in Malaysia. Our data practices are governed by strict internal policies and are reviewed regularly by our compliance team. Should the purpose of data use change in the future, you will be notified in advance and given the option to withdraw your consent where applicable.
- Identity verification & account security — Ensuring every user is a verified individual eligible to use the 3900 platform, while detecting and preventing any fraudulent attempts or unauthorised access.
- Financial transaction processing — Facilitating MYR deposits and withdrawals, verifying the source of funds, and maintaining accurate financial records for each user account.
- Product & service improvements — Analysing aggregated platform usage patterns to improve the interface, loading speed, and overall user experience, particularly on mobile devices.
- Service communications — Sending important notifications relating to your account, transactions, policy updates, and customer support responses via email or SMS.
- Legal & regulatory compliance — To meet legal obligations under Malaysia's PDPA, AML requirements, and reporting duties to relevant authorities where required by law.
- Responsible gaming — Monitoring users' gaming patterns to identify early signs of problem gambling and offer appropriate support, in line with 3900's responsible gaming programme.
3. Cookies & Tracking Technologies
Cookies are small text files stored in your browser or on your device when you visit the 3900, and they play an important role in ensuring a smooth and secure user experience. We use several types of cookies, each serving a different function and stored for varying durations depending on technical requirements. Session cookies are required to maintain your logged-in status during an active session and are automatically deleted when you close your browser. Preference cookies store your language settings, interface display, and personal preferences so you do not need to reconfigure them each time you visit the 3900 platform. We also use internal analytics cookies to understand how users interact with our platform for improvement purposes, without exposing any individual's identity to third parties.
In addition to cookies, 3900 uses supplementary tracking technologies such as web beacons and session identifiers that help us connect your browsing activity across multiple pages within the platform to better understand user flow. All data collected through these mechanisms is processed in a secure environment and is not used to build user profiles for third-party advertising. You can manage your cookie preferences at any time through your browser settings; most modern browsers provide granular controls to accept, block, or delete cookies by category. Do note that blocking essential cookies may disrupt critical platform functions such as login, two-factor authentication, and transaction processing. If you have any questions about 3900's use of cookies, our support team is ready to help you understand and manage your privacy settings.
4. Data Security & Storage
Protecting your personal data is the top priority of the 3900, and we continually invest in the latest security infrastructure to protect your information from unauthorised access, data breaches, or misuse. All data transmitted between your device and 3900's servers is protected by 256-bit SSL/TLS encryption — the highest industry standard for online data security. Data stored in our databases is also encrypted using robust encryption algorithms, ensuring that even in the event of a security breach, your information remains unreadable to unauthorised parties. Our systems undergo regular penetration testing and independent third-party security audits to identify and remediate vulnerabilities before they can be exploited. The 3900 security team monitors our systems around the clock using sophisticated intrusion detection systems (IDS) to respond swiftly to any threats.
Regarding data retention, 3900 only keeps your personal information for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal obligations. Financial transaction data is retained for a minimum of seven (7) years to meet Malaysia's financial reporting and AML compliance requirements, while account activity logs are kept for three (3) years for security purposes. Once data is no longer needed and no legal obligation requires its continued retention, it will be securely deleted or anonymised in accordance with our standard procedures. In the event of a security incident involving your personal data, 3900 is committed to notifying you within a reasonable timeframe as required under applicable data breach notification laws. You can be confident that your data is handled with full integrity and accountability by the entire 3900 team.
5. Sharing Information with Third Parties
Platform 3900 does not sell, rent, or trade users' personal data to any third party for commercial or marketing purposes. That said, there are limited situations where sharing your information with certain parties is necessary for our services to function properly and to meet applicable legal obligations in Malaysia. Any data sharing is carried out under strict confidentiality agreements and involves only the minimum information required for the relevant purpose. 3900 takes full responsibility for ensuring that any third party receiving user data upholds data protection standards equivalent to or higher than our own. Users will be informed of any changes to our data sharing practices through updates to this privacy policy.
Situations in which data sharing may occur:
- Payment service providers — Licensed payment gateways that process deposit and withdrawal transactions in MYR require the minimum payment details necessary to complete those transactions securely.
- Government authorities & law enforcement — 3900 will disclose user information to the relevant authorities when required by a court order, legal directive, or in the course of a legitimate financial crime investigation.
- Identity verification services — Licensed third-party KYC providers are used to help verify new users' identities securely and efficiently, with only the minimum data necessary shared for the verification process.
- Auditors & professional advisors — In the context of financial audits or compliance obligations required by law, professional advisors bound by professional confidentiality obligations may require limited access to certain records.
In all data sharing scenarios above, 3900 ensures that only the information strictly necessary is shared, and recipients are subject to strict usage restrictions. We do not permit any third party to use your data for their own purposes unrelated to providing services to 3900.
6. User Rights, Policy Changes & How to Contact Us
As a user of the platform 3900 in Malaysia, you have several important rights regarding your personal data, protected under the Personal Data Protection Act 2010 (PDPA). These rights can be exercised at any time by contacting our privacy support team through the official channels provided, and we are committed to responding to all requests within a reasonable timeframe. 3900 fully respects users' rights over their data and will handle every request with care and professionalism. The specific rights available to you are described in detail below. We encourage you to familiarise yourself with these rights and to reach out to us without hesitation if you have any privacy concerns.
Right of Access
You have the right to request a copy of the personal data we hold about you at any time. Requests will be processed within 21 business days once your identity has been verified by our team.
Right to Rectification
If any personal data we hold about you is inaccurate or out of date, you have the right to request an immediate correction. You can update certain details directly through the account profile section on the 3900 platform.
Right to Erasure
You may request the deletion of your personal data when it is no longer needed for the original purpose of collection. However, certain data may need to be retained to fulfil legal obligations such as AML financial record-keeping requirements.
Right to Withdraw Consent
Where data processing is based on your consent, you may withdraw that consent at any time without affecting the validity of any processing that took place prior to withdrawal.
Changes to This Privacy Policy
3900 reserves the right to update or amend this privacy policy from time to time to reflect changes in our practices, new legal requirements, or platform service improvements. Any material amendments will be communicated to registered users via in-account notifications or email at least seven (7) days before the changes take effect. The date of the most recent update will always be displayed at the top of this document so you can identify the version currently in force. We encourage you to review this page periodically to stay informed about how 3900 protects your privacy. Continued use of the platform after any amendments take effect constitutes your acceptance of the revised terms.
Contact the 3900 Privacy Team
If you have any questions or concerns, or wish to exercise any of the privacy rights described in this document, please contact the 3900 privacy support team via our official email at [email protected]. Our dedicated team handles every enquiry with care and aims to provide a satisfactory response within the stated timeframe. For urgent matters involving account security or suspected data breaches, please mark your email clearly as "URGENT – PRIVACY" so our team can prioritise it. You can also visit the FAQ for answers to privacy questions frequently asked by Malaysian users. 3900 remains committed to providing all Malaysian users with a safe, transparent, and responsible experience.
Still Have Questions About Your Privacy?
The 3900 support team is here to help you understand your privacy rights and how we protect your data. Visit our FAQ section or register now to enjoy a safe and responsible online entertainment experience in Malaysia.