P400 Privacy Policy – Personal Data Protection for Malaysian Members

P400 is an online gaming platform developed specifically for the Malaysian market, committed to protecting the privacy of every individual who interacts with our platform. This Privacy Policy applies to all users of p400.my, including unregistered visitors, active registered members and former members who have closed their accounts (for data that must still be retained in accordance with the law).

We collect and process your personal data solely for lawful, relevant and appropriate purposes in connection with the provision of p400's services. We do not collect data beyond established operational requirements and consistently strive to minimise our data footprint to the lowest level necessary to deliver a high-quality service to you.

This Privacy Policy should be read together with p400 Terms & Conditions and Responsible Gaming Policy us, all of which together form the entire agreement between you and p400 regarding your use of this platform.

P400 collects various categories of personal data from members for the purposes outlined in Section 3. The following are the categories of data we collect:

P400 collects and uses members' personal data solely for the following legitimate and clearly stated purposes:

In accordance with Malaysia's PDPA 2010, p400 processes member personal data on the following lawful bases:

• Consent: You grant p400 explicit consent to process your personal data when you register an account and agree to our Privacy Policy and Terms & Conditions. You may withdraw this consent at any time, though doing so may affect p400's ability to provide you with full access to its services.
• Contract Fulfilment: Certain data processing is necessary for p400 to fulfil its contractual obligations to you as a member — including payment processing, account management and providing access to games you have paid to play.
• Legal Obligations: p400 is required under Malaysian law to process certain personal data for KYC compliance, anti-money laundering purposes and reporting to the relevant authorities when required.
• Legitimate Interest: p400 has a legitimate interest in processing certain data for platform security, fraud prevention, responsible gaming and service improvement — provided these interests do not override your fundamental rights and freedoms as a member.

P400 does not sell or transfer members' personal data to third parties for marketing or commercial purposes. However, in the following limited circumstances, your personal data may be shared with certain parties:

P400 invests heavily in multiple layers of security to protect members' personal data from unauthorised access, misuse, loss or destruction. The following are the key security measures we have implemented:

• Two-Factor Authentication (2FA): p400 offers an additional layer of security through two-factor authentication for member accounts that opt in, reducing the risk of unauthorised access even if your password is compromised.
• Regular Security Audits: p400 conducts regular internal and external security audits to identify and patch any vulnerabilities in the system before they can be exploited by malicious parties.
• Network Segregation: Systems storing sensitive member data are isolated from publicly accessible areas of the platform, reducing the risk of unintentional data exposure.
• Staff Security Training: All p400 staff who handle member data undergo rigorous and regular information security training to ensure best practices are upheld at all times.

While p400 takes all reasonable measures to protect your data, we remind members that no security system in the world can be guaranteed 100% secure. p400 members also play an important role by keeping their passwords confidential and never sharing their login credentials with anyone.

As a p400 member and in accordance with Malaysia's PDPA 2010, you hold the following important privacy rights, which you may exercise at any time by contacting the p400 team:

To exercise any of the rights above, please submit a written request to [email protected] by clearly stating the right you wish to exercise and the information required to verify your identity. p400 will respond within 14 business days.

P400 uses cookies and similar tracking technologies to enhance user experience, maintain session security and understand how our platform is used. Below is an explanation of the types of cookies we use:

• Essential Cookies: These cookies are essential for the basic functioning of the p400 platform — including maintaining your login session, remembering your language preferences and ensuring security features work correctly. The p400 platform cannot operate normally without them and they cannot be disabled.
• Functional Cookies: These cookies allow p400 to remember your preferences — such as favourite games, display settings and login details (if you select "Remember Me") — to deliver a more personalised and seamless experience every time you use the platform.
• Analytics Cookies: p400 uses analytics data collected through these cookies to understand how members use the platform — including the most visited pages, most popular games, time spent and common navigation paths. All analytics are performed on aggregated data that cannot identify any individual specifically.
• Security Cookies: Dedicated cookies that help p400 detect abnormal activity, suspicious login attempts and potential security threats in real time to protect your account and data.

You can manage your cookie settings through your web browser at any time. Please note, however, that disabling certain cookies may affect the functionality and user experience of the p400 platform. For more information on how to manage cookies in your browser, please refer to your browser's help guide.

P400 retains members' personal data only for as long as necessary for the purposes outlined in this Privacy Policy, or as required under applicable Malaysian law. The following is a general guide to data retention periods at p400:

• Active Account Data: Personal data of members with an active p400 account is retained for as long as the account remains active and the member continues to use the platform's services.
• Data After Account Closure: Following the closure of a p400 account, core personal data and transaction records are retained for a minimum of 7 years in accordance with Malaysian tax and financial legal requirements, after which they will be securely deleted or anonymised.
• Support Communication Data: Records of conversations with the p400 support team are retained for 3 years for service quality purposes and resolution of any disputes that may arise.
• Security Logs: Technical and security logs collected by p400's systems are retained for 12 to 24 months for digital forensics and security incident investigation purposes where required.

Once personal data is no longer required for any legitimate purpose, p400 will take appropriate steps to securely delete it or convert it into anonymized data that can no longer be linked to any specific individual.

P400 is a platform designed exclusively for adults aged 18 and above. We do not knowingly collect, store or process personal data of individuals under the age of 18.

P400 reserves the right to update, amend or replace this Privacy Policy at any time as needed — whether due to changes in Malaysian law, shifts in industry practices, platform improvements or any other relevant factors.

When material changes are made to this Privacy Policy, p400 will notify members through one or more of the following methods: an in-account notification on p400, an email to your registered address, or a prominent notice on the p400.my homepage. We encourage you to review this Privacy Policy page periodically to stay informed about how we protect your data.

The latest version of p400's Privacy Policy will always be available on this page with a clearly stated update date. Your continued use of the p400 platform following any changes to this Privacy Policy constitutes your acceptance of the updated version. If you do not agree with any changes, please discontinue use of the platform and contact us to discuss the options available.

If you have any questions or concerns, or wish to exercise your privacy rights in relation to p400's Privacy Policy, you may contact our Data Protection Officer through the following channels:

Please include in your request: your full name, email address registered with p400, the type of request you wish to submit and any additional relevant information to help us process your request accurately and efficiently.

This Privacy Policy is effective from January 2026 and supersedes all previous versions. p400 reserves the right to update this document as required by law and platform operations. The date of the most recent update will always be displayed at the top of this document.