Rujukan Laman

Privacy, Terms and Account Security Built for Malaysia

We handle your account data, payment records and login details under a clear policy framework that respects your rights and local requirements.

Data protection commitmentsAccount security measuresUser rights & contact paths
eu9myr Privacy, Terms and Account Security Built for Malaysia
CONTACT OPTIONS

Reach Our Policy and Data-Protection Team

Whether you need to request a copy of your data, ask how we handle cookies, report a security concern, or clarify a term in our policy…

Live Chat Open the chat widget in the bottom-right corner of any page when you're logged…
Email Support Send policy, privacy or account-security questions to our dedicated support address.
FAQ Knowledge Base Browse our self-service articles on data handling, cookie settings, account closure, and withdrawal verification.
TRANSPARENCY MEASURES

Security Practices, Data Retention and Your Rights

We built our account and payment infrastructure around verifiable safeguards: encrypted sessions, restricted backend access, audit logs for withdrawals, and clear retention schedules.

Encryption and Access Control

All login sessions run over TLS; passwords are hashed with bcrypt. Backend databases require multi-factor authentication for engineer access, and withdrawal requests trigger manual review when they exceed threshold amounts or originate from a new device or IP range.

Cookie and Analytics Policy

We set a session cookie to keep you logged in, a preference cookie for language and currency, and a functional analytics identifier to measure lobby load times and detect bot traffic. No third-party advertising cookies. You can clear or block cookies in your browser; doing so may log you out.

Data Retention Schedule

Transaction records and account activity logs are kept for seven years to meet financial and anti-fraud regulations. Marketing preferences and device fingerprints are deleted within 90 days of account closure. Game-round history is archived after three years unless required for an open dispute.

Your Access and Correction Rights

You may request a machine-readable export of your personal data, ask us to correct inaccurate details, or withdraw consent for non-essential processing at any time. Submit requests via live chat or email; we'll verify your identity and respond within 30 days.

Account Closure and Deletion

Close your account through the settings menu or by contacting support. We'll stop all marketing, lock the account from new logins, and schedule personal data for deletion after the regulatory retention period. Outstanding balances must be withdrawn or forfeited before closure is finalised.

Security Incident Response

If we detect unauthorised access to account data, we'll notify affected users by email within 72 hours, explain what information was exposed, and outline steps we're taking to prevent recurrence. You'll also receive guidance on changing passwords and reviewing recent activity.

Privacy, Data and Policy FAQs

Below are the questions we hear most often about data handling, account security, cookies, retention and your rights. If your question isn't covered here, use live chat or email—we'll give you a specific answer and update this section if the topic comes up regularly.

We collect your email address, phone number, date of birth, full name as it appears on your payment method, and country of residence. During deposit or withdrawal we also record payment-method identifiers like Touch 'n Go or GrabPay account references, transaction timestamps, and device IP addresses for fraud prevention.

We share transaction details with payment processors like Touch 'n Go, GrabPay, Boost and FPX to complete deposits and withdrawals. We do not sell personal data to advertisers or data brokers. Aggregated, anonymised usage statistics may be shared with game providers to optimise lobby performance.

Transaction logs and withdrawal records are retained for seven years to meet financial compliance and dispute-resolution requirements. Marketing preferences and device identifiers are deleted within 90 days. Game-round history is archived after three years unless an open complaint or regulatory inquiry requires it.

Yes. Contact us via live chat or email with your registered email address or account ID. We'll verify your identity and send a machine-readable JSON export of your personal data, transaction history, login timestamps, and marketing-consent records within 30 days.

We set a session cookie to keep you logged in, a language-preference cookie, and a functional analytics identifier for lobby load measurement. No third-party ad cookies. You can clear or block cookies in your browser settings; blocking the session cookie will log you out.

Log in, open account settings, and edit your phone number, email or marketing preferences directly. Name and date-of-birth changes require identity verification through live chat or email support to prevent fraud. We'll ask for a photo ID and update your details within two business days.

Change your password immediately through the account-settings menu, then contact live chat or email support. We'll review recent login timestamps and IP addresses, lock the account if needed, and walk you through enabling two-factor authentication to secure future logins.