mygame | Privacy Policy and Member Data Protection

1. Personal Information We Collect

Mygame collects your personal data only for lawful and necessary purposes in delivering platform services. Below are the categories of information we collect along with their specific purposes:

Data Category	Example Information	Collection Purpose
Identity	Full name, date of birth, MyKad number	KYC identity verification, legal compliance
Contact	Phone number, email address	Account communications, transaction notifications
Financial	Bank account number, bank name, e-Wallet	Deposit and withdrawal processing
Technical	IP address, browser type, device information	Account security, fraud detection
Usage	Game history, transaction logs	Customer support, internal audit
Communication	Live chat records, support tickets	Complaint resolution, staff training

We do not collect sensitive data such as health information, political views, or biometric data unless specifically required by applicable regulatory requirements.

2. How We Use Your Data

All use of your personal data by mygame has a clear legal basis. We use your information for the following purposes:

Account management: Create, verify, and maintain your mygame account, including the KYC process required for the security of all members.
Transaction processing: Process all deposits and withdrawals accurately and securely, and maintain financial records as required by law.
Platform Security: Detect and prevent fraud, money laundering, unauthorized access, and misuse of the mygame platform.
Customer Support: Address inquiries, resolve complaints, and provide technical assistance to members who need it.
Service communications: Send important notifications related to your account, transactions, policy changes, and security updates.
Platform improvements: Analyze aggregated usage patterns to improve user experience and platform performance.
Legal compliance: Meet reporting obligations to the relevant authorities in accordance with applicable Malaysian law.

Data Minimisation Principle: mygame only collects data that is strictly necessary for the stated purposes. We do not collect excessive data or retain your information for longer than needed.

3. Sharing Information with Third Parties

Mygame does not sell your personal data. However, under certain limited circumstances, we may share information with the following parties for legitimate operational needs:

Payment providers: Transaction information required to be shared with banks, FPX providers, TNG e-Wallet, GrabPay and DuitNow to process your deposits and withdrawals. These providers are bound by strict confidentiality agreements.
Game software providers: Game data shared with casino and sports software providers to ensure fairness and accuracy of game results. No personally identifiable data is shared for this purpose.
Government authorities: Information required by law to be shared with law enforcement agencies, the Inland Revenue Board, or other regulatory bodies pursuant to a court order or valid legal requirement.
Cloud services: Data stored on cloud servers managed by trusted service providers that comply with international security standards and are bound by strict data processing agreements.

All third parties that receive your data from mygame are required to maintain a level of data protection equal to or higher than what we practice ourselves.

4. Data Security Measures

Mygame invests seriously in cybersecurity infrastructure to ensure your personal data is protected at all times. The technical and operational measures we implement include:

256-bit SSL/TLS Encryption for all data communications between your device and our servers, ensuring no sensitive information can be intercepted while in transit.
Hashed password storage using a strong one-way hashing algorithm. The mygame team itself cannot view your original password — only you know it.
Two-factor authentication (2FA) available and strongly encouraged for all members to add an extra layer of security to your account.
24/7 threat monitoring by an automated intrusion detection system that monitors suspicious activity and takes immediate action when required.
Internal access controls on a "need-to-know" basis — only staff who require access to specific data to perform their duties are granted that permission.
Regular data backups to a secure, separate location to ensure your data is not lost due to system failure or disaster.

While we take all reasonable precautions, no security system is entirely foolproof. In the event of a material data breach, we will notify affected members within 72 hours of it being identified.

5. Your Rights under PDPA 2010

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by mygame:

Right of Access

Request a copy of the personal data we hold about you at any time.

Right to Rectification

Request correction of inaccurate or incomplete data without delay.

Right to Erasure

Request deletion of your data, subject to legal retention requirements.

Right to Object

Object to the processing of your data for direct marketing purposes at any time.

Right to Portability

Receive your data in a machine-readable format for transfer to another platform.

Right to Restriction

Request a restriction on data processing in certain circumstances while a dispute is being investigated.

To exercise any of the above rights, please contact our Data Privacy Officer by email [email protected]. We will respond to your request within 14 days work.

6. Cookie Policy

Mygame uses cookies — small text files stored on your device — to keep the platform running properly and to give you a better experience. Here are the types of cookies we use:

Cookie Type	Purpose	Duration	Can Be Declined?
Important	Login sessions, security, core platform functionality	Session / 30 days	No — required for the platform to function
Functional	Save language preferences, display settings, and game preferences	1 year	Yes — can be disabled in settings
Analytics	Anonymous usage statistics for platform improvement	2 years	Yes — can be declined without affecting functionality

You can manage your cookie settings through your internet browser. Please note that disabling essential cookies may affect the overall functionality of the mygame platform.

7. Data Retention Period

Mygame does not retain your personal data indefinitely. We follow the principle of minimum retention by setting clear periods based on operational and legal requirements:

Active account data: Retained for the duration your account is active and up to 7 years after account closure to comply with Malaysia's financial legal requirements.
Financial transaction records: Retained for a minimum of 7 years in accordance with the Companies Act 2016 and LHDN tax reporting requirements.
KYC and identity verification data: Retained for 5 years after the business relationship ends in accordance with anti-money laundering requirements.
Support chat logs: Retained for 2 years for quality control purposes and reference in the event of any future disputes.
Analytics data: Anonymous usage data is collected for a maximum of 2 years before being permanently deleted.

Once the applicable retention period has ended, your data will be securely deleted or permanently anonymized so that it can no longer be linked to you.

8. International Data Transfers

In certain circumstances, your personal data may be transferred to or processed outside Malaysia, particularly in connection with cloud service providers and international gaming software vendors we use.

All international data transfers are carried out only to countries or entities with a level of data protection that is adequate, equivalent to, or higher than Malaysia's PDPA 2010 standard.
All third-party service providers that receive your data from outside Malaysia are bound by data processing agreements requiring them to protect your information in accordance with the standards set by mygame.
Data transfers to countries without equivalent data protection laws are only carried out with additional contractual safeguards in place, such as Standard Contractual Clauses.

To obtain a list of countries and third-party service providers involved in processing your data, you may contact our Data Privacy Officer via [email protected].

9. Children's Privacy

The mygame platform is strictly for individuals aged 18 years and above only. We do not knowingly collect or process personal data of individuals under the age of 18.

The mygame registration process requires age verification through a valid identity document. Accounts found to belong to minors will be terminated immediately.
If you become aware that a minor has registered a mygame account, please notify us immediately at [email protected] so that we can take the appropriate action.
Parents or guardians concerned about their children's use of the platform are encouraged to contact our support team for further guidance.

10. Contact Our Data Privacy Officer

If you have any questions, concerns, or complaints regarding how mygame handles your personal data, we encourage you to contact us directly. We are committed to addressing every enquiry seriously and within a reasonable timeframe.

Privacy Email: [email protected] (dedicated to data protection matters)
General Support: [email protected] or via the platform's 24/7 live chat
Response Time: We aim to respond to all privacy enquiries within 14 working days
Official Complaint: If you are not satisfied with our response, you have the right to file an official complaint with the Department of Personal Data Protection Malaysia

For issues that require identity verification before processing (such as data access or deletion requests), please include your registered account number and a copy of a valid identification document to help expedite the review process.

Mygame Privacy Policy – Member Personal Data Protection

End-to-End Encryption

PDPA 2010 Compliance

Secure Data Storage

Personal Access Control

No Sale of Personal Data

Regular Security Audits

Contents