Privacy Policy — csgo500

1. Introduction

csgo500 ("Company", "we", "us", "our") operates the online gaming and sports betting platform accessible at csgo500.cam and any associated subdomains or mobile applications (collectively, the "Platform"). This Privacy Policy ("Policy") describes how we collect, use, store, disclose, and protect personal data obtained from users ("Players", "you") of the Platform.

This Policy applies to all persons who register an account, visit the Platform, or otherwise interact with csgo500's services, including players accessing the Platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other locations in Malaysia and internationally.

By creating a csgo500 account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately.

2. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

3. Data Controller

csgo500, the operator of the Platform at csgo500.cam, acts as the Data Controller with respect to Personal Data collected through the Platform. As Data Controller, csgo500 is responsible for determining the purposes for which your Personal Data is processed and for ensuring that such processing complies with applicable data protection legislation, including Malaysia's Personal Data Protection Act 2010 (PDPA) and any other applicable legal frameworks.

csgo500 has designated a responsible point of contact for data protection enquiries. Contact details are provided in Section 15 of this Policy.

4. Personal Data We Collect

csgo500 collects Personal Data through several channels and at different stages of your interaction with the Platform. The categories of data we collect include the following:

4.1 Registration & Account Data

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (for age verification purposes — minimum age 21)
• Residential address
• Email address and mobile phone number
• Username and encrypted account password
• Nationality and country of residence

4.2 Identity Verification (KYC) Data

• Copy of Malaysian MyKad (front and back), passport, or other government-issued identification
• Selfie photograph taken at the time of document submission
• Proof of payment method (e.g., screenshot of Touch 'n Go eWallet, bank statement header, or card image)

4.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method references
• Payment method identifiers (e-wallet account numbers, bank account numbers, cryptocurrency wallet addresses)
• Bonus and promotional activity records
• Account balance history

4.4 Platform Usage & Technical Data

• IP address and geolocation data (country/city level)
• Device type, operating system, and browser information
• Session activity logs, including pages visited, games played, and bets placed
• Login timestamps and frequency data
• Customer support communication records (live chat transcripts, email threads)

5. Purpose of Processing & Legal Basis

csgo500 processes your Personal Data for the following purposes, each supported by a lawful basis as described below:

6. Data Sharing & Disclosure

csgo500 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We may share your Personal Data with the following categories of recipients only where necessary and proportionate:

• Payment Service Providers: Malaysian and international payment processors including banks (Maybank, CIMB, Public Bank, Hong Leong), e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay), DuitNow, FPX, and cryptocurrency platforms — for the purpose of processing your deposits and withdrawals.
• KYC & Identity Verification Partners: Third-party identity verification service providers used to complete KYC checks in accordance with regulatory requirements.
• Technology & Infrastructure Providers: Cloud hosting and data storage providers who process data on our behalf under strict data processing agreements.
• Game Content Providers: Licensed game studios whose content is integrated into the Platform may receive session-level anonymised data for game analytics purposes; they do not receive personally identifiable information.
• Regulatory Authorities: csgo500 may disclose Personal Data to applicable regulatory bodies, law enforcement agencies, or courts of competent jurisdiction where required by law, by court order, or where we reasonably believe disclosure is necessary to prevent fraud or serious harm.
• Professional Advisers: Legal counsel, auditors, or accountants where disclosure is necessary for professional advice purposes, subject to confidentiality obligations.

7. International Data Transfers

The nature of online gaming platforms means that certain technical operations — including cloud hosting, fraud screening, and game content delivery — may involve the transfer of Personal Data to servers or processors located outside Malaysia.

Where such transfers occur, csgo500 takes all reasonable steps to ensure that your Personal Data is afforded a level of protection equivalent to that provided under Malaysian law and the Personal Data Protection Act 2010. Measures employed include:

• Execution of binding contractual clauses with all international Data Processors obligating them to apply equivalent data protection standards.
• Transfer of data only to jurisdictions assessed to maintain adequate data protection frameworks.
• Application of technical safeguards including encryption and access controls to all transferred data.

8. Data Retention

csgo500 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention principles apply:

• Active Accounts: Personal Data associated with active accounts is retained for the duration of the account and for a period of five (5) years following account closure, in accordance with anti-money laundering statutory obligations.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years from the date of submission, as required by applicable AML and regulatory compliance obligations.
• Transaction Records: Financial transaction records are retained for seven (7) years for accounting and regulatory audit purposes.
• Support Communications: Customer support records are retained for three (3) years from the date of the interaction.
• Marketing Consent Records: Records of marketing opt-in consent are retained for as long as you remain subscribed and for three (3) years thereafter.

Upon expiry of the applicable retention period, data is securely deleted or irreversibly anonymised so that it can no longer be linked to any individual.

9. Cookies & Tracking Technologies

The csgo500 Platform uses cookies and similar tracking technologies to provide core functionality, analyse usage patterns, and deliver a personalised experience. The categories of cookies we use are as follows:

You may manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies may impair your ability to use core Platform features including login and payment processing.

10. Security Measures

csgo500 employs a comprehensive suite of technical and organisational security measures designed to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Encryption: All data in transit between your device and the Platform is protected by 256-bit SSL/TLS encryption. Personal data stored at rest is encrypted using industry-standard AES encryption.
• Access Controls: Access to Personal Data within csgo500's internal systems is restricted on a strict need-to-know basis. All staff with data access are subject to confidentiality obligations and regular security training.
• Penetration Testing: The Platform is subject to regular third-party security assessments and penetration testing to identify and remediate vulnerabilities.
• Two-Factor Authentication: csgo500 supports and encourages the use of two-factor authentication (2FA) on all player accounts to prevent unauthorised access.
• Fraud Monitoring: Automated fraud detection systems monitor transactions and account activity in real time to detect and respond to suspicious behaviour.

While we take all reasonable precautions, no internet-based system can guarantee absolute security. If you suspect that your account has been compromised, please contact our support team immediately.

11. Your Data Rights

Subject to applicable law and certain limited exceptions, you hold the following rights with respect to your Personal Data held by csgo500:

12. Minors & Age Gating

The csgo500 Platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect Personal Data from persons under the age of 21.

As part of our registration process, all applicants are required to declare their date of birth. Where age verification is flagged as incomplete or potentially inaccurate, the relevant account will be suspended pending satisfactory KYC age verification. If it is subsequently confirmed that an account holder is under the minimum age requirement, the account will be permanently closed, all balances will be forfeited, and any collected data will be deleted promptly.

13. Third-Party Services & Links

The csgo500 Platform integrates with third-party service providers to deliver core functionality, including payment processing through Malaysian providers such as Touch 'n Go eWallet, DuitNow, FPX, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, as well as cryptocurrency processing platforms and identity verification services.

Each third-party provider operates under its own privacy policy, which governs how they handle data passed to them during the course of a transaction or verification. csgo500 is not responsible for the privacy practices of third-party services beyond the contractual obligations we impose on them as Data Processors under our data processing agreements.

The csgo500 Platform does not contain hyperlinks to external third-party websites. Any external services accessible through the Platform (such as payment gateways) are presented within controlled, secured integration points designed to minimise data exposure.

14. Amendments to This Policy

csgo500 reserves the right to update or revise this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing practices, or the nature of our services.

Where amendments are material — meaning they substantively affect how we use your Personal Data or your rights with respect to it — we will provide advance notice to registered Players via the email address registered to their account, and/or through a prominent notice displayed within the Platform, at least fourteen (14) days before the amended Policy takes effect.

For non-material updates (such as typographical corrections or clarificatory language that does not change the substance of the Policy), the updated Policy will be published on this page with a revised "Last Updated" date. Your continued use of the Platform following the effective date of any revision constitutes acceptance of the updated Policy.

The current version of this Privacy Policy is always available at csgo500.cam/privacy-policy.

15. Contact & Data Protection Enquiries

If you have any questions, concerns, or requests related to this Privacy Policy or the processing of your Personal Data by csgo500, please contact our dedicated data protection team using the channels below:

We aim to acknowledge all privacy enquiries within five (5) business days and to provide a substantive response within thirty (30) calendar days. For complex requests, we may extend this period by a further thirty (30) days with prior notice to you.

Our support team is available in English, Bahasa Melayu, and Mandarin, 24 hours a day, 7 days a week.