Privacy Policy – How mm1919 Protects Your Data

1. Introduction

This Privacy Policy ("Policy") describes how mm1919 ("mm1919", "we", "us", "our") collects, uses, discloses, and safeguards the personal data of individuals ("you", "User", "Player") who access or use the mm1919 online gaming platform at mm1919.app and all associated services (the "Service").

mm1919 is committed to protecting your privacy and handling your personal data with transparency, integrity, and in accordance with applicable data protection principles. We apply these commitments to all players, regardless of where they are located across Malaysia — whether you are playing from Kuala Lumpur, Penang, Johor Bahru, or Kota Kinabalu.

By registering an account or otherwise using the Service, you acknowledge that you have read and understood this Policy. If you disagree with any part of this Policy, please discontinue use of the Service and contact us to close your account.

2. Personal Data We Collect

mm1919 collects personal data in the following categories:

2.1 Registration Data

When you create an mm1919 account, we collect: full name, date of birth, email address, username, password (stored as a bcrypt hash — never in plain text), and the country and region of residence you provide.

2.2 Identity Verification Data (KYC)

Prior to processing your first withdrawal, mm1919 may request identity verification documents including: government-issued photo identification (e.g. MyKad, passport), proof of address (e.g. utility bill, bank statement), and where required, proof of payment method ownership.

2.3 Transaction Data

We record all financial transactions on the mm1919 platform: deposit amounts and timestamps, withdrawal requests and settlement records, bonus credits and wager history, and the payment method reference (masked card or e-wallet identifier — not full card numbers).

2.4 Technical & Usage Data

2.5 Communications Data

When you contact mm1919 support via live chat or email, we retain the content of those communications for quality assurance, staff training, and dispute resolution purposes.

3. How mm1919 Uses Your Data

mm1919 uses collected personal data for the following purposes:

• Account management — creating, maintaining, and securing your mm1919 account;
• Service delivery — processing deposits, withdrawals, bet placements, and game sessions;
• Identity verification — complying with Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations;
• Fraud prevention and security — detecting and preventing unauthorised account access, payment fraud, and platform abuse;
• Regulatory compliance — fulfilling reporting obligations to licensing authorities and law enforcement where legally required;
• Responsible gaming — monitoring for indicators of problem gambling and providing support tools as described in our Responsible Gaming page;
• Personalisation — displaying relevant promotions and game recommendations within your mm1919 account interface;
• Communications — sending transactional messages (required) and promotional communications (where you have not opted out);
• Platform improvement — analysing aggregated usage data to improve the mm1919 user experience.

4. Legal Basis for Processing

mm1919 processes your personal data on the following legal bases:

• Contractual necessity — processing required to perform the account agreement and deliver the Service (registration, payments, bet processing);
• Legal obligation — processing required to comply with AML regulations, KYC requirements, and regulatory reporting obligations;
• Legitimate interests — fraud prevention, platform security, and improving our Service, where those interests are not overridden by your rights;
• Consent — processing for promotional communications, which you may withdraw at any time.

5. Data Sharing & Disclosure

mm1919 does not sell or rent personal data to third parties. We may share your data with:

• Payment processors — Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, and other processors, solely to facilitate transactions. Each processor operates under its own privacy commitments and applicable financial regulations;
• Game providers — licensed studios (e.g. Pragmatic Play, PG Soft, Evolution) receive the minimum data necessary to deliver game sessions (e.g. player token, currency, stake);
• Identity verification services — third-party KYC providers who verify identity documents during the withdrawal process;
• Regulatory and legal authorities — where mm1919 is legally required to disclose data to licensing bodies, law enforcement, or courts of competent jurisdiction;
• IT and security service providers — infrastructure, hosting, and security partners who process data on mm1919's behalf under data processing agreements.

6. Data Retention

mm1919 retains personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following retention guidelines:

• Active accounts — personal data is retained for the duration of the account relationship;
• Closed accounts — account and transaction records are retained for a minimum of five (5) years following account closure, as required by AML regulations;
• KYC documents — retained for five (5) years after the last transaction or account closure, whichever is later;
• Support communications — retained for three (3) years for quality assurance and dispute resolution purposes;
• Technical logs — retained for ninety (90) days unless required for an ongoing security investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an identifiable individual.

7. Security Measures

mm1919 implements the following technical and organisational security measures to protect your personal data:

• TLS 1.3 encryption for all data in transit between your browser and mm1919 servers;
• AES-256 encryption for sensitive data stored at rest;
• Bcrypt password hashing — mm1919 staff cannot access or retrieve your password in plain text;
• PCI DSS-compliant payment processing — card and e-wallet data is handled by certified processors, not stored by mm1919;
• Multi-factor authentication available on all mm1919 accounts;
• Access controls — internal staff access to personal data is role-restricted and logged;
• Regular security assessments and penetration testing of the mm1919 platform.

8. Cookies & Tracking

mm1919 uses cookies and similar technologies on the platform. Cookies used on mm1919 fall into the following categories:

• Essential cookies — required for login session management, security tokens, and core platform functionality. These cannot be disabled without disrupting the Service;
• Analytics cookies — used to understand how players navigate mm1919, which pages are visited most, and where technical issues occur. Data is aggregated and anonymised;
• Preference cookies — store your language, game lobby display preferences, and other UI settings.

mm1919 does not use third-party advertising or retargeting cookies. No cookie data from the mm1919 platform is shared with social media platforms or external advertising networks.

You may control non-essential cookies via your browser settings. Note that disabling essential cookies will prevent you from logging into your mm1919 account.

9. Your Data Rights

Subject to applicable law and certain regulatory limitations, you have the following rights regarding your personal data held by mm1919:

• Right of access — request a copy of the personal data mm1919 holds about you;
• Right to rectification — request correction of inaccurate or incomplete personal data;
• Right to erasure — request deletion of your personal data, subject to retention obligations under AML and regulatory law;
• Right to restriction — request that we restrict processing of your data in certain circumstances;
• Right to data portability — receive your personal data in a structured, machine-readable format where technically feasible;
• Right to withdraw consent — opt out of promotional communications at any time via your account settings or by contacting support;
• Right to object — object to processing based on legitimate interests, subject to our overriding legal obligations.

To exercise any of these rights, contact the mm1919 support team via live chat. We will respond within thirty (30) days. Where identity verification is required before fulfilling a request, additional time may be needed.

10. Children & Minors

The mm1919 Service is strictly available to individuals aged 21 years or older. mm1919 does not knowingly collect personal data from individuals under the age of 21.

If mm1919 identifies or is notified that personal data belonging to an individual under 21 has been collected, the account will be immediately closed, all data will be deleted to the extent permitted by law, and any funds will be handled in accordance with our Terms & Conditions age verification provisions.

Parents and guardians who believe their child has registered on mm1919 should contact support immediately via live chat.

11. Cross-Border Data Transfers

mm1919 operates infrastructure and engages service providers that may be located outside Malaysia. Where personal data is transferred internationally — for example, to game providers or payment processors operating in other jurisdictions — mm1919 ensures that:

• Transfers are made only to recipients who provide adequate levels of data protection;
• Contractual safeguards (data processing agreements) are in place to govern the transfer and processing;
• The minimum amount of personal data necessary is shared.

mm1919 does not transfer personal data to jurisdictions known to have inadequate data protection frameworks without implementing additional safeguards.

12. Updates to This Policy

mm1919 may update this Privacy Policy from time to time to reflect changes in our data practices, service offerings, or applicable legal requirements. Where changes are material, we will provide reasonable notice via the mm1919 platform or your registered email address.

The effective date at the top of this page indicates when the current version was last revised. Your continued use of the Service after publication of an updated Policy constitutes your acceptance of the changes. We encourage you to review this page periodically.

13. Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the mm1919 Data team via:

• Live chat: Available 24/7 on the mm1919 platform
• Email: [email protected]

We aim to respond to all privacy-related enquiries within thirty (30) days. If you are not satisfied with our response, you may have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.