Privacy Policy CashSweep — Our Commitment to Protecting Your Personal Data

1

Introduction

CashSweep ("we", "Platform", "CashSweep") respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy explains our data collection and processing practices when you use the cashsweep.xyz website, the CashSweep mobile app, and all related services ("Services").

By accessing or using CashSweep Services, you acknowledge that you have read and understood this Privacy Policy. Please read this document carefully together with Terms and Conditions us to understand the full scope of the protections we have in place for Malaysia users.

2

Personal Data We Collect

CashSweep collects personal data that you provide directly to us, as well as data generated automatically when you use our Services. Below are the details of the data we collect:

A. Data You Provide Directly

• Full name as stated on official identification documents (MyKad or passport)
• Date of birth and gender
• Full residential address
• Email address and mobile number
• Bank account details for withdrawal processing
• KYC documents — copy of MyKad, passport, or other identification documents
• Source of income information (if required for advanced KYC compliance)

B. Automatically Collected Data

• Your IP address and network information
• Device type, operating system and web browser version
• Gaming activity history — games played, session duration, wagering and wins
• Financial transaction history — deposits, withdrawals and bonuses
• Approximate location data (state/region) based on IP address
• User activity logs within the platform for security and troubleshooting purposes

3

How We Use Your Data

Your personal data is used by CashSweep solely for legitimate and necessary platform operational purposes. We do not use your data for any purpose other than those stated below:

• Identity verification and KYC process during registration and withdrawals
• User account management including password recovery and account security
• Securely processing deposits, withdrawals and other financial transactions
• Enforcement of platform terms of use and fraud prevention
• Providing effective and relevant customer support
• Sending account-related communications — transaction notifications, security updates
• Sending promotional information to users who have given their consent
• Platform usage analytics for continuous product improvement
• Compliance with applicable legal and regulatory obligations

4

Legal Basis for Data Processing

CashSweep processes your personal data on the basis of one or more of the following valid legal grounds:

• Contract Fulfilment — Processing necessary to fulfil the service agreement between you and cashsweep, including account management and transaction processing.
• Legal Obligation — Processing required to comply with legal obligations relating to anti-money laundering (AML), counter-terrorism financing (CFT) and KYC requirements.
• Legitimate Interest — Processing for fraud prevention, platform security, usage analytics and service improvement carried out responsibly.
• Consent — For marketing communications and certain cookie usage, we obtain your explicit consent beforehand.

5

Data Sharing with Third Parties

CashSweep does not sell users' personal data to any party. We only share data in the following limited circumstances and with appropriate safeguards:

• Payment Service Providers — Information required to process deposits and withdrawals is shared with trusted payment gateways via secure channels.
• Game Providers — Minimum game session data required is shared with third-party game providers for operational purposes.
• Regulatory Compliance — Information required to fulfil legal obligations may be shared with the relevant authorities upon official request.
• Technical Service Providers — Cloud service, cybersecurity and technical support providers acting as data processors under cashsweep's instructions.

6

Data Security

CashSweep implements multiple layers of technical and organisational security controls to protect users' personal data from unauthorised access, loss, destruction, or disclosure:

• Data encryption in transit using TLS 1.3 / 256-bit SSL protocols
• Data encryption at rest for sensitive information such as financial data and KYC documents
• Role-based access control (RBAC) — only authorised staff may access user data
• Regular access log audits to detect any suspicious activity
• Periodic penetration testing conducted by independent third parties
• Documented and tested incident response procedures
• Mandatory cybersecurity training for all staff who handle user data

7

Data Retention Period

CashSweep retains users' personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal requirements:

• Active account data is retained for as long as your account remains active at CashSweep
• Financial transaction records retained for a minimum of 7 years in compliance with AML legal requirements
• KYC documents are retained for a minimum of 5 years after the account closure date
• Security and access logs are retained for 2 years for audit and investigation purposes
• Marketing data (with consent) is retained until you withdraw your consent

Once the retention period expires, data will be securely deleted or anonymised so that it can no longer be linked to you as an individual.

8

Cookies & Tracking Technology

CashSweep uses cookies and similar tracking technologies to enhance user experience and platform performance. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies — Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Performance Cookies — Collects anonymised data on how users interact with the platform to help us improve the user experience.
• Functional Cookies — Remembering your preferences such as language, theme and display settings.
• Analytics Cookies — Helps us understand platform usage patterns in aggregate and anonymised form for product development purposes.

You can manage or delete cookies through your web browser settings. Please note that deleting certain cookies may affect the functionality of some CashSweep Services.

9

Your Rights as a User

As a cashsweep user, you have the following rights regarding your personal data. To exercise any of these rights, contact our privacy team and we will respond within 30 business days:

10

Child Data Protection

Cashsweep Services are exclusively for adults aged 18 and above. We do not knowingly collect any personal data from individuals under 18.

11

Amendments to the Privacy Policy

CashSweep reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When material amendments are made, we will notify you via:

• Email notification to your registered address
• Prominent notice on the cashsweep platform homepage
• In-app notifications on the cashsweep mobile app
• Update the "Last Updated" date at the top of this document

Continued use of cashsweep Services after the effective date of any amendment constitutes acceptance of the updated Privacy Policy. We encourage you to review this page from time to time.

12

Contact Our Privacy Team

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, please contact the cashsweep Data Protection Officer (DPO) via:

• Email: [email protected] (state "Privacy Enquiry" in the email subject line)
• 24/7 Live Chat on the cashsweep platform
• Complaint form via the Support section in your account

We are committed to resolving any privacy-related inquiries or complaints within 30 business days of receipt. For more complex cases requiring further investigation, we will keep you updated on the progress within that timeframe.