mamak24 Privacy Policy

1. Introduction

mamak24 operates an online gaming platform accessible at mamak24.club, serving adult players primarily based in Malaysia. As a platform that processes financial transactions and personal identity information, mamak24 takes data privacy seriously and is committed to handling your personal data with care, transparency, and in accordance with applicable data protection principles.

This Privacy Policy sets out the types of personal data mamak24 collects, the purposes for which that data is used, the parties with whom it may be shared, the safeguards mamak24 has in place to protect it, and your rights in relation to your personal data.

If you have questions about this Policy or wish to exercise your privacy rights, please contact us as set out in Section 15 of this Policy.

2. Personal Data We Collect

mamak24 collects the following categories of personal data:

2.1 Identity & Contact Data

• Full legal name
• Date of birth and age verification documents (e.g., MyKad, passport)
• Registered email address
• Mobile phone number
• Residential address
• Nationality and country of residence

2.2 Account & Transactional Data

• Username and encrypted password credentials
• Account registration date and history
• Deposit and withdrawal history, including payment method identifiers (e.g., FPX bank reference, Touch n Go account identifier, GrabPay reference, USDT wallet address)
• Betting and gaming history, including game type, stake amounts, outcomes, and timestamps
• Bonus and promotion redemption records
• Account correspondence and support ticket history

2.3 Technical & Usage Data

• IP address and approximate geolocation derived therefrom
• Device type, operating system, and browser version
• Session duration and page interaction data
• Login timestamps and authentication event logs
• Cookies and similar tracking technologies (see Section 7)

2.4 Sensitive Data

Where required by applicable anti-money laundering (AML) or know-your-customer (KYC) regulations, mamak24 may collect enhanced verification data including copies of identity documents and proof of address documents. This data is handled with additional security controls and is used solely for verification and regulatory compliance purposes.

3. How We Collect Your Data

mamak24 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make deposits or withdrawals, place bets, contact customer support, or respond to surveys or promotions;
• Automatically — through cookies, server logs, and platform analytics tools as you interact with the mamak24 website;
• From payment processors — transaction confirmation data and payment identifiers from our integrated payment partners, including FPX, Touch n Go eWallet, Boost, GrabPay, DuitNow, and USDT processing services;
• From identity verification services — where we engage third-party KYC and AML screening providers to verify identity documents and screen against sanctions lists and politically exposed persons (PEP) databases;
• From fraud prevention services — device fingerprinting, IP reputation, and behavioural analytics data from fraud detection partners.

4. How We Use Your Personal Data

mamak24 uses your personal data for the following purposes:

mamak24 does not use your personal data to make automated decisions that produce legal or similarly significant effects without human review, except where required for real-time fraud prevention purposes — in which case you may request human review of any such decision by contacting customer support.

5. Legal Basis for Processing

mamak24 processes your personal data on the following legal bases:

• Performance of a contract — processing necessary to provide the services you have requested, including account management, payment processing, and bet settlement;
• Compliance with a legal obligation — processing required to comply with applicable AML, KYC, and other regulatory requirements;
• Legitimate interests — fraud detection, platform security, responsible gaming monitoring, and service improvement, where our legitimate interests are not overridden by your data protection rights;
• Consent — for optional communications such as promotional emails and push notifications, where you have provided explicit consent. You may withdraw consent at any time by updating your communication preferences in account settings or by contacting support.

6. Data Sharing & Disclosure

mamak24 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients:

• Payment service providers — FPX banking partners (Maybank, CIMB, Public Bank, Hong Leong), Touch n Go eWallet, Boost, GrabPay, DuitNow, and USDT processors, solely for the purpose of processing your transactions;
• Identity verification providers — third-party KYC and AML screening services engaged to verify your identity and screen against regulatory watchlists;
• Game content providers — game studios and platform providers whose content is hosted on mamak24, to the extent necessary for the provision of their services (typically limited to anonymised session identifiers);
• IT infrastructure and cloud service providers — hosting, database, and security service providers who process data on our behalf under binding data processing agreements;
• Fraud prevention and analytics services — providers of device fingerprinting, IP reputation, and behavioural analytics services for the purpose of protecting platform integrity;
• Regulatory and law enforcement authorities — where disclosure is required by applicable law, court order, or regulatory directive. mamak24 will, where legally permissible, notify you of such disclosures;
• Professional advisers — legal, accounting, and audit professionals under binding confidentiality obligations, where necessary for the conduct of their professional services.

All third parties with whom mamak24 shares personal data are required to implement appropriate technical and organisational measures to protect that data and to use it only for the specified purpose.

7. Cookies & Tracking Technologies

mamak24 uses cookies and similar technologies on its platform. Cookies are small text files stored on your device that help us provide a functional, personalised, and secure experience. The categories of cookies used by mamak24 include:

• Strictly necessary cookies — essential for the platform to function, including maintaining your login session, remembering your preferences, and enabling secure transactions. These cannot be disabled.
• Performance and analytics cookies — collect anonymised or aggregated information about how users interact with the platform, used to improve functionality and user experience.
• Fraud prevention cookies — used to detect and prevent fraudulent activity, including account takeover and multi-accounting attempts.
• Preference cookies — remember your settings and preferences (e.g., language, odds format) to personalise your experience.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the mamak24 platform.

8. Data Retention

mamak24 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and transactional data — retained for a minimum of five (5) years following account closure, in compliance with applicable AML record-keeping requirements;
• KYC verification documents — retained for a minimum of five (5) years following the completion of the verification process or account closure, whichever is later;
• Technical and usage logs — retained for up to twelve (12) months from the date of generation, unless a longer retention period is required for fraud investigation or legal proceedings;
• Customer support records — retained for three (3) years from the date of the relevant interaction;
• Marketing consent records — retained for three (3) years from the date of consent or last interaction, whichever is later.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with mamak24's data destruction procedures.

9. Data Security

mamak24 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the mamak24 platform;
• Encryption at rest for sensitive data fields including passwords (using industry-standard hashing algorithms) and payment identifiers;
• Role-based access controls limiting internal access to personal data to authorised personnel with a legitimate business need;
• Regular penetration testing and vulnerability assessments of the platform infrastructure;
• Multi-factor authentication requirements for administrative access to systems containing personal data;
• Incident response procedures for detecting, reporting, and responding to data security incidents.

Notwithstanding the above, no method of electronic transmission or storage is completely secure. While mamak24 uses commercially reasonable measures to protect your personal data, we cannot guarantee absolute security. You are responsible for maintaining the security of your own account credentials.

10. Your Privacy Rights

Subject to applicable law, you may have the following rights in relation to your personal data held by mamak24:

• Right of access — the right to request a copy of the personal data mamak24 holds about you;
• Right to rectification — the right to request correction of inaccurate or incomplete personal data;
• Right to erasure — the right to request deletion of your personal data, subject to mamak24's legal obligations to retain certain records;
• Right to restriction — the right to request that mamak24 restrict processing of your personal data in certain circumstances;
• Right to data portability — the right to receive your personal data in a structured, machine-readable format in certain circumstances;
• Right to withdraw consent — the right to withdraw consent to processing based on consent at any time, without affecting the lawfulness of prior processing;
• Right to object — the right to object to processing based on legitimate interests, including for direct marketing purposes.

To exercise any of these rights, please contact mamak24 customer support as set out in Section 15. mamak24 will respond to verified requests within 30 days. Requests may require identity verification before processing. Please note that certain rights are subject to exceptions under applicable law — for example, mamak24 may be unable to delete data it is required to retain for AML compliance purposes.

11. Children and Minors

The mamak24 platform is strictly for adults aged 21 years and above. mamak24 does not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been collected from an individual below the minimum age, we will take immediate steps to delete that data and close the associated account.

If you believe that a minor may have created a mamak24 account or that we may have inadvertently collected personal data from a minor, please contact us immediately at the details provided in Section 15.

12. International Data Transfers

mamak24's platform infrastructure may involve the transfer of personal data to servers or service providers located outside of Malaysia. Where such transfers occur, mamak24 will ensure that appropriate safeguards are in place — including contractual data processing agreements incorporating standard data protection clauses — to ensure that your personal data receives a comparable level of protection to that required under applicable Malaysian data protection law, specifically the Personal Data Protection Act 2010 (PDPA).

13. Links to Third-Party Sites

The mamak24 platform does not include links to third-party websites beyond those referenced in navigation and footer menus for internal site pages. In the event that the platform contains any links to external sites (for example, linked from game descriptions or informational content), please note that mamak24 has no control over the content or privacy practices of those sites and this Privacy Policy does not apply to them. We encourage you to review the privacy policies of any third-party sites you visit.

14. Updates to This Policy

mamak24 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform functionality. Where changes are material, mamak24 will notify registered users by email to their registered address or by displaying a prominent notice on the platform prior to the changes taking effect.

The "Last updated" date at the top of this Policy indicates when it was most recently revised. We encourage you to review this Policy periodically. Your continued use of the mamak24 platform following notification of any changes constitutes acceptance of the updated Policy.

15. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or your personal data, you may contact mamak24 through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the mamak24 platform

Please mark your communication "Privacy Request" and include your registered username and a description of your request to help our team handle it promptly. mamak24 aims to respond to all privacy-related requests within 30 calendar days of receipt.