Mygame Privacy Policy – Malaysian Member Personal Data Protection

1 Personal Information We Collect

When you register and use the mygame platform, we collect several categories of personal information to ensure our services are secure, effective, and tailored to your needs. The information we collect falls into three main categories:

a) Information you provide directly:

• Full name as shown on your official identity document.
• Identity card number (MyKad) or passport number for foreign nationals.
• Active email address used for account communications.
• A Malaysian mobile number registered in your name.
• Date of birth for member age verification.
• Current residential address in Malaysia.
• Bank account or e-wallet details for processing deposits and withdrawals.
• KYC supporting documents such as MyKad photos, bank statements, or utility bills.

b) Information collected automatically:

• IP address and device information used to access the platform.
• Activity log data including login times, games played, and session duration.
• Your device's browser and operating system information.
• General location data based on IP address for geolocation compliance purposes.

c) Information from third-party sources:

• Identity verification from KYC service providers integrated with our platform.
• Transaction information from the payment processors used during deposits or withdrawals.
• Blacklist screening data from fraud prevention and anti-money laundering agencies.

2 How We Use Your Information

Every piece of information we collect is used responsibly and purposefully. Below is a summary of how we use your data:

We will not use your data for any purpose not stated in this Privacy Policy without your prior consent. All data use is proportionate to its stated purpose and does not exceed what is reasonably necessary.

3 Information Sharing With Third Parties

Mygame does not sell or disclose your personal data to third parties for marketing purposes. However, there are certain situations where we need to share your information with the following parties:

• Payment processors: Transaction information is shared with approved payment service providers to securely process your deposits and withdrawals.
• KYC service providers: Identity verification documents are shared with integrated KYC partners to meet legal compliance requirements.
• Technology service providers: Companies that help us operate the platform — including cloud computing, analytics, and cybersecurity services — are all bound by strict confidentiality agreements.
• Legal authorities: mygame will disclose the required information if mandated by a court order, law enforcement agency, or relevant regulatory body in Malaysia.
• Fraud prevention: Information may be shared with industry fraud prevention consortiums to protect all platform users from criminal activity.

All third parties who receive your data are required to uphold the same data security standards as mygame and may only use that data for authorised purposes.

4 Data Security & Protective Measures

Mygame makes serious investments in security infrastructure to ensure your personal data remains protected at all times. Among the security measures we have implemented:

• 256-bit SSL Encryption for all communications between user devices and our servers.
• Data encryption at rest for all sensitive records including banking information and KYC documents.
• Two-factor authentication (2FA) available for all member accounts as an additional layer of security.
• 24/7 Security Monitoring by our cybersecurity team to detect and respond to threats in real time.
• Penetration testing periodically by independent third parties to identify and address system vulnerabilities.
• Role-based access control ensuring only authorised personnel can access sensitive data.

While we take all reasonable steps to protect your data, no security system can guarantee 100% absolute protection. We encourage you to also take precautions such as using a strong password and never sharing your login credentials with anyone.

5 Cookies & Tracking Technologies

The mygame platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform runs smoothly. Below are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session authentication and security. These cookies cannot be disabled as they are essential to platform operations.
• Preference Cookies: Saving your personal settings such as display language and game preferences so you do not need to reconfigure them every time you log in.
• Analytics Cookies: Helps us understand how members use the platform so we can continuously improve the user experience. This data is collected in aggregate form and cannot identify individuals.
• Security Cookies: Used to detect suspicious activity and protect your account from unauthorized access.

You can manage cookie settings through your browser preferences. However, disabling essential cookies may affect platform functionality. Analytics and preference cookies can be turned off without impacting core platform functions.

6 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection best practices, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact the mygame privacy team via live chat or our official support email. We will process your request within 14 business days. In complex cases, this period may be extended to 30 business days, with notice provided to you.

7 Data Retention Period

Mygame retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable Malaysian law. Our data retention guidelines are as follows:

• Active account data: Retained for the duration your account is active and up to 7 years after account closure to meet anti-money laundering (AML) compliance requirements.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian accounting and tax legal requirements.
• KYC Documents: Retained for 5 to 7 years after the business relationship ends, in line with AMLA (Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001) requirements.
• Support communication logs: Retained for 2 years for service quality and dispute resolution purposes.
• Analytics data: Aggregated data without personal identifiers may be retained for a longer period for platform improvement purposes.

Once the specified retention period has ended, your personal data will be securely deleted or anonymised so that it can no longer be linked to you.

8 Changes to This Privacy Policy

Mygame reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or service improvements. When significant changes occur, we will:

• Publishing the updated Privacy Policy on this page with a new effective date.
• Sending notifications to members via their registered email or in-app notices for important changes.
• Providing a summary of key changes so you can quickly understand what is different.

Continued use of the mygame platform after the effective date of any changes means you accept the updated Privacy Policy. If you do not agree with the changes, please contact us to discuss your options, including the option to close your account.

We encourage you to review this page periodically so you always know how we handle your personal information. The "Updated" date at the top of this page indicates when this Privacy Policy was last revised.

9 Contact Our Privacy Team

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, the mygame privacy team is here to help. We are committed to responding to every inquiry transparently and within a reasonable timeframe.

You can reach us through:

• Live Chat: Available 24/7 via the mygame platform — the fastest way to get an immediate response.
• Email: [email protected] — for written enquiries that require documentation or attachments.

When contacting us regarding a data request, please include your account number and request details clearly so we can process your request promptly. All privacy-related communications are handled confidentially by our trained team.