13500 Privacy Policy — User Data Protection

13500 uses cookies — small text files stored on your device — to maintain your login session and remember the language preferences and display settings you have previously selected. We use two types of cookies: session cookies, which are automatically deleted when the browser is closed, and persistent cookies, which are stored for a set period to facilitate future logins. We also use internal tracking technologies such as server logs and session tokens to monitor platform traffic, detect technical issues, and analyse usage patterns on an aggregate basis without identifying individual users. You can control or block cookies through your browser settings at any time; however, please note that blocking all cookies may affect certain 13500 platform functions, such as the ability to maintain your login session. Tracking carried out by 13500 is limited to activity within the platform only and does not extend to monitoring your activity on third-party websites. We do not sell or share individual tracking data with any third party for external advertising or marketing purposes.

13500 stores all user data on servers protected with 256-bit SSL encryption, ensuring that your personal and financial information cannot be accessed by unauthorised parties — whether in transit or at rest. Access to user databases is strictly limited to authorised 13500 personnel only, and every access is logged in internal audit trails to enable full review and accountability. User passwords are never stored in plain text — they are processed using industry-standard hashing algorithms before being saved, meaning no one, including our own staff, can read your password. Financial data relating to MYR transactions is retained for the period required under Malaysian financial law, and records that exceed the stipulated retention period are securely deleted in accordance with our internal procedures. While 13500 implements comprehensive technical security measures, users are also encouraged to practise good personal security habits — such as using strong passwords, not sharing login credentials, and promptly reporting any suspicious activity to our support team. In the unlikely event of a data breach, 13500 will notify affected users as soon as possible in accordance with applicable Malaysian legal requirements.

Every 13500 user has the right to request a copy of the personal information we hold relating to their account at any time. Data access requests can be submitted to our support team, and we will process such requests within 14 business days. The information provided will include account data, transaction records, and login history associated with your identity. We reserve the right to verify your identity before disclosing any information to ensure data is only shared with the legitimate account holder.

Users have the right to request corrections to any personal information that is inaccurate, outdated, or incomplete in 13500's records. Corrections can be made by contacting the support team and providing relevant supporting documents to verify the requested changes. 13500 will process correction requests within a reasonable timeframe and notify users once the changes have been made. Corrections involving identity or payment-related information may require additional verification steps to safeguard your account.

Users who wish to close their account may request deletion of their personal data by contacting the 13500 support team through official channels. However, certain records such as financial transaction history may need to be retained for a specified period to fulfil Malaysia's legal obligations before they can be permanently deleted. Deletion requests will be processed once all account balances have been settled and there are no active investigations relating to the account in question. We will confirm in writing once the data deletion process has been completed.