Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how mamak24 ("we", "us", "our", "the Operator", "the Platform") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "User") who access or use the mamak24 online casino and sports betting platform at mamak24.cam, including all associated mobile applications and related services.

mamak24 is committed to processing personal data responsibly, lawfully, and transparently. This Policy has been prepared in accordance with applicable data protection legislation and the requirements of our operating licence. By creating an Account on, or otherwise using, the mamak24 Platform, you acknowledge that you have read and understood this Policy and consent to the data processing activities described herein to the extent that consent is the applicable legal basis for such processing.

This Policy should be read alongside our Terms & Conditions, which form the primary contractual agreement governing your use of the Platform. In the event of any conflict between this Policy and the Terms & Conditions on a data-related matter, this Policy shall prevail.

2 Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Account" — the personal account registered and maintained by a User on the mamak24 Platform.
• "Cookies" — small text files placed on your device by the Platform to store information about your session, preferences, and browsing behaviour.
• "Data Controller" — mamak24, as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — any third party engaged by mamak24 to process personal data on its behalf, under a written data processing agreement.
• "KYC" — Know Your Customer verification procedures required to confirm a User's identity and comply with AML/CFT obligations.
• "Personal Data" — any information relating to an identified or identifiable natural person, including name, email address, identification documents, financial data, and IP address.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, and deletion.
• "Sensitive Data" — a subset of Personal Data warranting heightened protection, including identity document numbers, financial account details, and health-related information.
• "Transaction Data" — records of deposits, withdrawals, bets, and other financial activity conducted through the Platform.

3 Data We Collect

mamak24 collects the following categories of personal data in the course of operating the Platform and providing its services:

We do not intentionally collect Sensitive Data beyond what is required for KYC compliance and the provision of our services. We do not collect racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data other than a photographic ID image for identity verification purposes.

4 How We Collect Your Data

mamak24 collects personal data through the following means:

• Directly from you — when you register an Account, complete KYC verification, make a deposit or withdrawal, contact customer support, or update your Account profile;
• Automatically — when you use the Platform, via cookies, log files, session tracking technologies, and our server infrastructure, which record technical and usage data;
• From third-party payment processors — when you make deposits or withdrawals via DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, or cryptocurrency payment channels, relevant transaction data is shared with us by those processors;
• From identity verification providers — third-party KYC service providers may share verification outcomes and flagged data with us as part of our compliance process;
• From fraud prevention and AML screening services — we may receive data from screening databases used to verify that Users are not subject to sanctions or identified as high-risk individuals.

5 Legal Basis for Processing

mamak24 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity — processing is necessary to perform the contract we have with you (the Terms & Conditions) and to provide you with the services you have requested, including account management, deposits, withdrawals, and game access;
• Legal obligation — processing is required for mamak24 to comply with applicable laws and regulations, including AML/CFT legislation, identity verification requirements, and licence conditions;
• Legitimate interests — processing is necessary for mamak24's legitimate interests, including fraud detection, platform security, responsible gambling monitoring, and business analytics, where those interests are not overridden by your rights and freedoms;
• Consent — where we rely on your consent to process personal data (such as for marketing communications or optional cookies), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 How We Use Your Data

mamak24 uses the personal data we collect for the following purposes:

• To create and manage your Account, including processing your registration and verifying your eligibility (21+ age verification and identity confirmation);
• To process deposits and withdrawals in Malaysian Ringgit (MYR) via your chosen payment method;
• To fulfil KYC and AML/CFT compliance obligations as required by our operating licence;
• To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct as described in our Terms & Conditions;
• To provide customer support and resolve disputes or complaints;
• To personalise your Platform experience, including game recommendations based on your play history;
• To monitor responsible gambling indicators and, where necessary, apply protective measures or interventions;
• To send you transactional communications, such as deposit confirmations, withdrawal notifications, and security alerts;
• To send you promotional and marketing communications, where you have consented to receive them;
• To improve the Platform's performance, security, and user experience through analytics and testing;
• To comply with lawful orders or requests from regulatory authorities, courts, or law enforcement agencies.

7 Data Sharing & Disclosure

mamak24 does not sell, rent, or trade your personal data. We may share your personal data with third parties only in the following circumstances and on a strictly need-to-know basis:

• Payment processors and financial institutions — including DuitNow operators, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency payment providers, to process your transactions;
• Identity verification and KYC providers — third-party services engaged to assist with document verification and AML screening;
• Game providers and platform technology partners — to the extent necessary to deliver the games and platform features you use, under contractual confidentiality obligations;
• Fraud prevention and cybersecurity services — to protect the Platform and its users from unauthorised access and financial crime;
• Legal and regulatory authorities — where required by law, court order, or binding request from a regulatory or law enforcement authority, including disclosures required under AML/CFT legislation;
• Professional advisers — including legal counsel, auditors, and compliance consultants, under professional secrecy obligations;
• Business successors — in the event of a merger, acquisition, or sale of all or substantially all of mamak24's assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third parties with whom we share personal data are required to implement appropriate technical and organisational measures to protect that data and to process it only in accordance with our documented instructions.

8 Cookies & Tracking Technologies

mamak24 uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage) to operate the Platform effectively and to improve your user experience. The categories of cookies we use are as follows:

• Strictly Necessary Cookies — essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled as the Platform cannot operate without them.
• Functional Cookies — remember your preferences such as language settings, game lobby layout, and deposit limit configurations. Disabling these may affect Platform functionality.
• Analytics Cookies — collect aggregated, anonymised information about how Users interact with the Platform, which we use to improve performance and user experience. We use these cookies based on our legitimate interests.
• Marketing Cookies — used to deliver relevant promotional content and to measure the effectiveness of marketing campaigns. These are only activated with your explicit consent.

You may manage your cookie preferences through your browser settings or through the cookie preference centre available on the Platform. Please note that disabling certain cookies may impair your ability to use some features of mamak24.

9 Data Security

mamak24 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include, without limitation:

• 256-bit TLS/SSL encryption for all data transmitted between your device and the Platform;
• Encryption at rest for stored sensitive data, including identity documents and financial records;
• Role-based access controls that restrict access to personal data to authorised personnel on a need-to-know basis;
• Two-factor authentication (2FA) available to all Users for Account access;
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent third parties;
• Intrusion detection and real-time monitoring systems to identify and respond to security threats;
• Staff training and internal data protection policies binding all personnel who handle personal data.

Notwithstanding the above, no data transmission over the internet or method of electronic storage is entirely secure. While mamak24 takes all reasonable steps to protect your data, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, mamak24 will notify affected Users without undue delay.

10 Data Retention

mamak24 retains personal data for the following periods, unless a longer retention period is required or permitted by applicable law:

• Account and identity data — retained for the duration of your Account relationship with mamak24, and for a minimum of seven (7) years following Account closure, to comply with AML record-keeping obligations and to support regulatory investigations or legal proceedings;
• Transaction and financial data — retained for a minimum of seven (7) years in accordance with financial record-keeping requirements under our operating licence conditions;
• Technical and usage data — retained for up to two (2) years from the date of collection, unless required for ongoing security investigations;
• Customer support communications — retained for up to three (3) years from the date of the relevant interaction;
• Marketing consent records — retained for as long as you maintain an Account, and for a period of one (1) year following Account closure or opt-out, to demonstrate lawful basis for processing.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with you as an identifiable individual.

11 Your Rights

Subject to applicable data protection law, you have the following rights with respect to your personal data held by mamak24. You may exercise these rights by contacting our data protection team using the details set out in Section 16.

We will respond to all verified data rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further sixty (60) days, in which case we will notify you of the extension and the reasons for it. Requests that are manifestly unfounded or excessive may be declined, and we will provide written reasons for any such refusal.

12 International Data Transfers

12.1 mamak24's Platform infrastructure, servers, and some of our third-party service providers may be located outside of Malaysia. By using the Platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions that may have different data protection standards to those applicable in Malaysia.

12.2 Where personal data is transferred internationally, mamak24 takes appropriate safeguards to ensure that your data continues to be protected to a standard equivalent to that afforded within Malaysia. Such safeguards may include contractual data protection clauses, data processing agreements incorporating standard contractual clauses, or reliance on the adequacy of the recipient country's data protection framework.

12.3 If you would like further information about the specific safeguards applied to international transfers of your personal data, please contact us using the details set out in Section 16.

13 Children & Minors

The mamak24 Platform is strictly intended for adults aged 21 years and above. mamak24 does not knowingly collect or process personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the relevant Account.

If you believe that a person under 21 has registered for an Account on mamak24, please contact us immediately using the details in Section 16 so that we can investigate and take appropriate action.

14 Third-Party Links & Services

The mamak24 Platform may contain references to or integrations with third-party services, including payment gateways and game provider platforms. These third-party services operate under their own privacy policies and terms of service, over which mamak24 has no control.

mamak24 is not responsible for the privacy practices, security measures, or content of any third-party services. We encourage you to review the privacy policies of any third-party services you access in connection with your use of the mamak24 Platform.

15 Amendments to This Policy

15.1 mamak24 reserves the right to update or amend this Privacy Policy at any time. Where amendments are material, we will notify registered Users via email or in-platform notification prior to the amendments taking effect.

15.2 The effective date of the current version of this Policy is displayed at the top of this page. We recommend that you review this Policy periodically to remain informed about how your personal data is being protected.

15.3 Your continued use of the Platform following the effective date of any amended Policy constitutes your acknowledgement of the updated Policy. If you do not accept the amended Policy, you should cease using the Platform and may request Account closure in accordance with our Terms & Conditions.

16 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by mamak24, please contact us through the following channels:

• Data Enquiries & Rights Requests — Email: [email protected] — please include "Privacy Request" in your subject line.
• Live Chat: Available 24/7 through the mamak24 Platform. Average response time under 2 minutes. For data rights requests, please specify the nature of your request to the agent.

When submitting a data rights request, please provide your registered Account username and email address to enable us to verify your identity before processing the request. We may request additional verification information where necessary to confirm your identity and protect against fraudulent requests.