m9my Privacy Policy for Malaysian Players

1. Introduction & Scope

m9my operates the online gaming platform accessible at m9my.cam and provides live baccarat, premium slots, sports betting, poker and related services to players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam and beyond. This Privacy Policy applies to all personal data processed in connection with account registration, platform use, MYR transactions, promotional participation and customer support interactions.

By creating an m9my account or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the data practices described herein to the extent that consent is the applicable legal basis.

This policy does not extend to third-party websites, payment processors or service providers that operate under their own independent privacy notices. We recommend reviewing those notices separately when you interact with services outside the m9my platform.

2. Definitions

"Personal Data" means any information relating to an identified or identifiable natural person, including name, contact details, payment information, account credentials and device identifiers.
"Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure and deletion.
"Data Controller" refers to m9my, which determines the purposes and means of processing your Personal Data.
"Data Processor" refers to a third party that processes Personal Data on behalf of m9my under a contractual arrangement.
"Player" / "You" refers to any registered or prospective m9my account holder.
"Platform" refers to the m9my website, mobile-browser experience and all associated gaming services.

3. Data We Collect

m9my collects Personal Data through several channels depending on how you interact with the platform:

You are not required to provide Personal Data beyond what is necessary to create and operate an account. However, incomplete information may prevent us from verifying your identity, processing withdrawals, or fulfilling legal obligations.

4. How We Use Your Data

m9my uses Personal Data for the following purposes:

• Account administration — creating, maintaining, verifying and securing your m9my account;
• Identity and KYC verification — confirming your age (21+), identity and payment ownership in accordance with applicable requirements;
• Payment processing — facilitating MYR deposits and withdrawals through FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank and Hong Leong Bank;
• Service delivery — operating games, settling bets, calculating and crediting winnings, and administering the VIP programme;
• Security and fraud prevention — detecting and investigating suspicious activity, multiple account registrations, and bonus abuse;
• Responsible gambling — monitoring player activity in support of deposit limits, cooling-off periods and self-exclusion requests;
• Customer support — responding to queries, complaints and dispute resolution;
• Legal compliance — meeting regulatory, licensing, anti-money laundering and reporting obligations; and
• Platform improvement — analysing aggregated usage data to improve the performance and features of the platform.

We do not use Personal Data to build profiles sold to advertisers, conduct unsolicited political profiling or make fully automated decisions that have significant legal effects on you without human review on request.

5. Legal Bases for Processing

Processing of Personal Data by m9my is carried out on one or more of the following legal bases:

• Contractual necessity — processing required to provide the gaming services you have subscribed to, including payment processing and account management;
• Legal obligation — processing required by applicable regulations, licensing conditions, anti-money laundering requirements or court orders;
• Legitimate interests — processing carried out to protect the security and integrity of the platform, prevent fraud, and improve service quality, balanced against your privacy interests; and
• Consent — where you have expressly agreed to a specific use, such as receiving optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of earlier processing.

6. Sharing & Disclosure

m9my does not sell Personal Data. We may disclose your data to the following categories of recipient only to the extent necessary for the stated purpose:

• Payment processors and banking partners — including FPX service providers, DuitNow, Touch 'n Go eWallet, Boost, GrabPay and local Malaysian banks — solely to facilitate authorised transactions;
• Identity verification and KYC providers — to confirm your identity and age in accordance with applicable requirements;
• Technology and platform service providers — hosting, security, analytics and customer support systems that process data on our behalf under data processing agreements;
• Regulatory and law enforcement authorities — when legally required to disclose information by a valid court order, regulatory demand or applicable law; and
• Fraud prevention and security bodies — where disclosure is necessary to investigate or prevent fraud, money laundering or platform abuse.

Any third party receiving Personal Data from m9my is required to maintain appropriate technical and organisational security measures and to process data only for the specified purpose.

7. Payment Data & MYR Transactions

m9my processes all player balances and transactions in Malaysian Ringgit (MYR). When you deposit or withdraw using a payment method such as FPX bank transfer to Maybank, CIMB, Public Bank or Hong Leong Bank, or through Touch 'n Go eWallet, Boost, GrabPay or DuitNow, the transaction data required to complete and record the payment is retained as part of your account history.

Full payment credentials, such as complete bank account numbers or full e-wallet credentials, are not stored on m9my's systems. Payment references, masked identifiers and transaction amounts are retained to enable withdrawal processing, dispute resolution and compliance with financial record-keeping obligations.

Transactions are subject to the terms and conditions of the relevant payment service provider. If you believe an unauthorised transaction has occurred on your m9my account, you should contact customer support immediately.

8. Cookies & Tracking Technologies

m9my uses cookies and similar tracking technologies to maintain secure login sessions, remember your preferences, detect suspicious access patterns and collect aggregated usage statistics that help us improve the platform.

Categories of cookies used on the platform include:

• Strictly necessary cookies — required for the platform to function, including session management and security tokens. These cannot be disabled without preventing core functionality.
• Functional cookies — store your preferences such as language and display settings to personalise your experience.
• Analytics cookies — collect aggregated, anonymised information about how players navigate the platform to identify areas for improvement.

You may manage cookie preferences through your browser settings. Disabling certain cookies may limit access to specific platform features. Strictly necessary cookies cannot be disabled while you are actively using the platform.

9. Data Retention

m9my retains Personal Data for as long as your account remains active and for a reasonable period thereafter to fulfil the purposes described in this policy. Specific retention periods are influenced by:

• regulatory and licensing requirements applicable to the platform;
• anti-money laundering record-keeping obligations;
• the need to resolve open disputes, claims or investigations; and
• legally mandated minimum retention periods for financial and transaction records.

Where retention is no longer required, data is securely deleted or permanently anonymised so that it can no longer be associated with an individual. You may request the deletion of your Personal Data where no overriding retention obligation applies by contacting m9my customer support.

10. Security Measures

m9my implements a range of technical and organisational measures to protect Personal Data against unauthorised access, loss, destruction or alteration. These include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• encryption of sensitive data fields stored in our database systems;
• role-based access controls restricting staff access to Personal Data on a need-to-know basis;
• two-factor authentication options for player accounts;
• regular internal security assessments and vulnerability monitoring; and
• incident response procedures to identify, contain and report data security events in a timely manner.

No data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. If you suspect that your account credentials have been compromised, please contact our 24/7 live chat support immediately.

11. Your Rights

As an m9my account holder, you may exercise the following rights in relation to your Personal Data:

• Right of access — you may request a copy of the Personal Data we hold about you;
• Right to rectification — you may ask us to correct inaccurate or incomplete Personal Data;
• Right to erasure — you may request deletion of your Personal Data where we no longer have a lawful basis to retain it;
• Right to restrict processing — you may ask us to limit how we use your data in certain circumstances;
• Right to data portability — where technically feasible, you may request that Personal Data provided by you be transferred in a structured, machine-readable format; and
• Right to withdraw consent — where processing is based on consent, you may withdraw that consent at any time.

To exercise any of these rights, please contact m9my customer support via 24/7 Live Chat or by writing to [email protected] (plain text address, not a clickable link). We may need to verify your identity before processing the request. Applicable legal obligations may affect our ability to fulfil certain deletion or portability requests in full.

12. Responsible Gambling & Data

m9my uses transaction and behavioural data to support responsible gambling obligations. This includes monitoring for patterns that may indicate problem gambling behaviour such as unusually frequent deposits, increasing bet sizes, or attempts to circumvent deposit limits. Data used for responsible gambling monitoring is handled with the same security standards as all other Personal Data.

If you request a self-exclusion or cooling-off period, we will retain a record of that request to prevent re-registration during the exclusion period. This retention serves your protection and is not used for marketing purposes. For further information, visit our Responsible Gambling page.

13. Children & Minors

m9my is strictly for persons aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. If we discover that an account was registered by a person below this age, the account will be suspended, any balance returned appropriately, and relevant data deleted or securely isolated in accordance with applicable obligations.

If you believe a minor has created an m9my account, please notify us immediately via live chat so that we can take appropriate action. We take the protection of minors very seriously and any such reports will be treated as a priority.

14. Policy Updates

m9my may revise this Privacy Policy from time to time to reflect changes in our data practices, platform features, regulatory requirements, or business operations. When we make material changes, we will display a notification within the platform and update the effective date shown at the top of this page.

We encourage you to review this Privacy Policy periodically. Your continued use of m9my following a material update constitutes your acknowledgement of the revised terms. Where the update affects data previously collected on the basis of your consent and the new purpose is materially different, we will seek fresh consent before proceeding.

15. Contact Us

If you have questions, requests or concerns regarding this Privacy Policy or the way m9my handles your Personal Data, please contact our support team:

• Live Chat: 24/7 via the chat function on the m9my platform — typical response time under 5 minutes;
• Email: [email protected] — displayed as plain text only, not a clickable link.

We will respond to privacy-related enquiries within a reasonable timeframe and may request identity verification before actioning access, correction or deletion requests. All communications are handled in English.