Mamak21 Privacy Policy – Personal Data Protection Malaysian Players

We collect various types of information necessary to provide you with a safe, seamless, and responsible service. Below are the main categories of data we collect:

A. Registration & Identity Information

• Full name as per official documents
• National identification number (MyKad) or passport number
• Date of birth for age verification (18+)
• Email address and mobile phone number
• Residential address

B. Financial & Transaction Information

• Bank account number registered for deposits and withdrawals
• Records of all deposits, withdrawals and wagering
• E-wallet information (Touch 'n Go, GrabPay, Boost)
• Financial transaction history within the platform

C. Technical & Usage Information

• IP address and general location (city/state)
• Device type, operating system, and web browser
• Activity logs within the platform (games played, session duration)
• Cookies and website usage analytics data

Every piece of data we collect has a clear and legitimate purpose. mamak21 does not use your data for any purpose beyond what is stated here without obtaining your consent first.

We also use your information to comply with legal obligations relating to anti-money laundering (AML), counter-terrorism financing, and other financial regulations. This is our responsibility as a financial platform operating with accountability.

Mamak21 does not sell, rent, or trade your personal data to any third party. This is a core principle we never compromise on. However, under the following limited circumstances, we may need to share your information:

• Payment Service Provider: To securely process deposit and withdrawal transactions through approved payment providers.
• Regulatory Body: When required by Malaysian law or a valid court order.
• Security Provider: Cybersecurity firms that assist us in detecting and preventing fraud, subject to strict confidentiality agreements.
• Cloud Infrastructure Provider: International-grade cloud service providers that store our data to the highest security standards.

All third parties working with mamak21 are required to sign strict confidentiality and data protection agreements. They are only permitted to use your data for the specified purposes.

Mamak21 continuously invests in high-grade security infrastructure to ensure your data remains protected at all times. Below are the protection layers we employ:

• 256-bit SSL/TLS Encryption for all data communications between your device and our servers.
• Data encryption at rest — all sensitive data stored in our databases is also encrypted.
• Firewall and intrusion detection systems monitored 24/7 by our security team.
• Two-factor authentication (2FA) for account login and high-value financial transactions.
• Regular security audits by an independent third party to identify and address any vulnerabilities.
• Role-based access control — only staff who require access to perform their duties may view the relevant data.
• Regular data backups at separate locations to ensure service continuity.

While we take all reasonable steps to protect your data, no system can guarantee 100% security. If you suspect any unauthorized activity on your account, please contact our support team immediately.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data we hold about you. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of the rights above, contact our privacy team by email at [email protected]. We will process all valid requests within 14 working days from the date of receipt.

The mamak21 website and app use cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. Below are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session verification, and security. These cookies cannot be disabled.
• Performance Cookies: Collects information on how you use the platform to help us improve speed and usability.
• Functional Cookies: Saves your preferences such as language settings and display theme to deliver a more personalised experience.
• Analytics Cookies: Helps us understand aggregated usage trends for ongoing product improvement.

You can manage cookie settings through your web browser preferences. Please note that disabling certain cookies may affect the functionality of some areas of the mamak21 platform.

Mamak21 only retains your personal data for as long as necessary for the stated purposes or as required by applicable law:

• Active account data is retained for as long as your account remains active, plus 7 years after account closure to comply with financial legal requirements.
• Financial transaction records are retained for 7 years as required by anti-money laundering laws.
• Security and access logs are retained for 2 years for fraud detection purposes.
• Customer support correspondence is retained for 3 years.

Once the retention period expires, your data will be securely deleted or anonymised using methods that ensure it cannot be recovered.

Mamak21 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements to our services. When material changes occur, we will:

• Updating the "Last Updated" date at the top of this document.
• Sending email notifications to all registered members at least 14 days before changes take effect.
• Displaying a clear notice on our platform's home page.

Continued use of the mamak21 platform after the effective date of any changes constitutes your acceptance of the updated policy. If you disagree with any changes, you have the right to close your account and request deletion of your data.