Privacy Policy malayclub – Member Personal Data Protection

Malayclub collects various types of personal information when you register, use the platform or carry out financial transactions. This collection is done transparently and only for the purposes stated in this privacy policy.

Information you provide directly:

• Full name as shown on your identification document (MyKad or passport).
• Active email address used for account communications.
• Mobile phone number for OTP verification and notifications.
• Date of birth for age verification (18 years and above).
• Payment method details such as bank account numbers for withdrawal purposes.
• A copy of your identification document during the KYC (Know Your Customer) process.

Information collected automatically:

• IP address and general location data (state/country) when you access the platform.
• Device type, operating system, and web browser used.
• Gaming activity data including date, time, game type, and wagering amounts.
• Financial transaction logs including deposits and withdrawals.
• Login session data and platform usage duration.

Every piece of information we collect is used responsibly and only for legitimate purposes. malayclub never uses your data for anything unrelated to the services you use.

We may also use aggregated, anonymised data for internal research, gaming trend analysis, and user experience improvement. Data in this form cannot be used to identify you individually.

Malayclub stores member personal data on secure servers with multiple layers of security. Our infrastructure is designed to withstand current cyber threats and ensure continuous data availability.

Security measures we implement:

• Data encryption at rest: All data stored on our servers is encrypted using the AES-256 algorithm, ensuring it remains unreadable even if the servers are accessed without authorisation.
• Data encryption in transit: All communication between your browser and the malayclub platform is secured with TLS 1.3 — the latest internet encryption standard.
• Internal access controls: Access to members' personal data is restricted to staff who genuinely require it to perform their duties (need-to-know principle).
• Regular security audits: Our systems undergo penetration testing and third-party security audits every six months.
• 24/7 Monitoring: Our security team continuously monitors system activity to detect and respond to any potential threats.

Data Retention Period: malayclub retains your personal data for as long as your account is active and for a maximum of 7 years after account closure, as required by Malaysian law on financial compliance and anti-money laundering. After this period, data will be securely deleted or anonymised.

Malayclub does not sell or trade member personal information to any third party. However, there are limited situations where we may need to share certain information with relevant partners or authorities.

Situations where information sharing may occur:

• Payment service providers: Transaction details that must be shared with FPX, DuitNow, Touch 'n Go eWallet, GrabPay or your bank to process your deposits and withdrawals. All these providers are bound by strict confidentiality agreements.
• Platform service providers: Technology companies that help us operate the platform, including cloud hosting providers, email delivery services, and analytics tools. They are only permitted to use your data for the purposes we specify.
• Legal requirement: Government authorities, law enforcement agencies, or courts issuing a lawful order or request for information in connection with a criminal investigation or regulatory compliance.
• Fraud prevention: Trusted identity verification agencies or services to help detect and prevent fraud, money laundering, or platform abuse.

In all of the above sharing scenarios, MalayClub ensures that only the minimum necessary information is shared, and all third parties receiving your data are required to protect it to an equal or higher security standard than our own.

Malayclub uses cookies and similar tracking technologies to enhance your experience on our platform, ensure the platform functions correctly and help us understand how members use our services.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled.
• Functional Cookies: Saves your preferences such as preferred language, display theme and account settings to deliver a more personalised experience.
• Analytics Cookies: Anonymously collects usage data to help us understand which pages are most popular and how we can improve the platform.
• Marketing Cookies: Used to display relevant MalayClub promotional ads. You may opt to disable this category through your cookie settings.

In addition to cookies, we also use technologies such as pixel tracking and local storage for the same purposes. All data collected through these technologies is processed in accordance with this privacy policy and is not used to identify you individually without your consent.

As a registered malayclub member in Malaysia, you have several important rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA). We fully respect and facilitate the exercise of these rights.

To exercise any of the above rights, please contact the malayclub support team via live chat within the platform or our official email. Your request will be verified and processed within 14 business days. In complex cases, this period may be extended up to 30 days with prior notice to you.

Malayclub operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA), the primary legislation governing the collection, processing and use of personal data in Malaysia.

Core PDPA principles we fully comply with:

• General Principle: Your personal data is only processed with your consent or under legally permitted exemptions.
• Purpose Principle: Data is collected solely for the stated purposes and is not used for any other purpose without additional consent.
• Usage Principle: Data use is limited to the original purpose of collection or directly related purposes.
• Disclosure Principle: Your personal data is not disclosed to any other party without your consent, except where permitted by law.
• Security Principle: Practical security measures are in place to protect your personal data from loss, misuse or unauthorised access.
• Retention Principle: Data is not retained longer than necessary for its original purpose.
• Integrity Principle: We take reasonable steps to ensure your data is accurate, complete, and up to date.
• Access Principle: You have the right to access and correct your personal data that we hold.

If you have any questions, concerns, or complaints about how malayclub handles your personal data, our Data Protection Officer (DPO) team is ready to assist.

You can reach us through the following channels:

• Live Chat: Live support is available 24/7 via the live chat button within the malayclub platform after logging into your account.
• Email: Send your privacy enquiries to [email protected] with the subject line "Privacy Policy Enquiry".
• Response Time: We are committed to responding to all privacy-related enquiries within 3 business days.

If you are not satisfied with how we have handled your privacy complaint after contacting us, you have the right to lodge a complaint with Malaysia's Personal Data Protection Department (PDPD) as the relevant regulatory authority.