407 Privacy Policy — Protection of Malaysia User Information
This document explains how the 407 platform collects, uses, stores, and protects your personal information. We are committed to safeguarding the privacy of every user in Malaysia through responsible and transparent data handling practices.
Types of Information Collected
407 collects several categories of information to keep the platform running securely and to deliver the best experience to users in Malaysia. The categories collected are as follows:
- Account information: Full name, date of birth, phone number, email address, and username registered when opening a 407 account.
- Payment information: Transaction details in Malaysian Ringgit (RM/MYR), along with deposit and withdrawal methods such as FPX, TNG eWallet, and DuitNow. Bank account numbers are not stored directly by 407 — they are processed through secure payment service providers.
- Device and browser information: Device type, operating system, web browser type, IP address, and other technical data collected automatically when a user accesses the platform.
- Usage data: Platform activity records including games played, access dates and times, session duration, and transaction history.
- Cookies: Session data and user preferences stored locally on your device via cookies or equivalent tracking technologies.
All information is collected solely for the purposes stated in this Privacy Policy and will not be used for any other purpose without your consent.
How We Use Your Information
Information collected by 407 is used exclusively for the following purposes:
- Verifying user identity during registration and login to ensure account security
- Processing deposits, withdrawals, and financial transactions in MYR accurately and securely
- Providing effective customer support when users reach out to the 407 team
- Detecting and preventing fraudulent activity, multi-accounting, or violations of platform terms
- Improving platform performance and user experience based on usage data analysis
- Complying with applicable legal and regulatory requirements in Malaysia
407 does not use users' personal information for third-party marketing purposes without explicit prior consent from the user.
Cookies & Tracking Technologies
The 407 platform uses cookies and similar tracking technologies to enhance platform functionality and the user experience. Cookies are small text files stored on your device when you visit the 407 platform.
The types of cookies used include session cookies (deleted when you close your browser), persistent cookies (stored for a set period to remember your preferences), and analytics cookies (which help 407 understand how users interact with the platform).
You can manage or disable cookies through your web browser settings. However, disabling certain cookies may affect how the 407 platform functions — for example, login sessions may not persist or language preferences may not be saved.
Data Storage & Security
407 implements appropriate technical and organisational measures to protect users' personal information against unauthorised access, disclosure, alteration, or destruction. This includes the use of encryption technology on all communications between users' devices and the platform's servers.
Personal information is stored on secure servers with strict access controls. Only 407 staff who require access to perform their duties are permitted to view user data, and they are bound by strict confidentiality obligations.
Data is retained for as long as the user's account remains active, and for a specified period following account closure to meet legal requirements. Data that is no longer needed will be deleted or anonymised in accordance with 407's internal procedures.
Sharing Information with Third Parties
407 does not sell or rent users' personal information to any third party for commercial purposes. However, certain information may be shared in the following circumstances:
- Payment service providers: Transaction information is shared with verified payment service providers (such as banks and e-wallet providers) solely for the purpose of processing deposits and withdrawals in MYR.
- Game providers: Game session data that must be shared with third-party game software providers to ensure games function correctly on the 407 platform.
- Legal requirements: Information may be disclosed to the relevant authorities when required by Malaysian law or a valid court order.
All third parties that receive 407 user data are bound by confidentiality agreements and are required to handle such data in accordance with the established data protection standards.
User Rights, Policy Changes & Contact Us
As a 407 platform user, you have the following rights regarding your personal information:
- Right to access: You have the right to request a copy of the personal information we hold about you.
- Right to rectification: You may request corrections to inaccurate or incomplete information via your account settings or by contacting 407 support.
- Right to erasure: In certain circumstances, you may request the deletion of your personal information, subject to any legal obligations that may require us to retain such data.
407 reserves the right to update this Privacy Policy from time to time to reflect changes in data handling practices or legal requirements. Users will be notified of material changes via the platform. Continued use after changes take effect will be considered acceptance of the updated policy.
For any enquiries regarding this Privacy Policy or to exercise your rights, please contact the 407 team at: [email protected]