mamak21 Privacy Policy

This Privacy Policy (hereinafter "Policy") is issued by mamak21 (hereinafter "mamak21", "we", "us", or "our") and governs the collection, processing, use, storage, and disclosure of personal data relating to individuals (hereinafter "you", "User", or "Player") who access or use the mamak21 online gaming platform at mamak21.cam.

mamak21 is committed to protecting the privacy and security of all personal data it handles. This Policy is intended to provide you with clear and transparent information about our data practices, in accordance with applicable data protection legislation and principles, including those relevant to players based in Malaysia — across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other localities.

By registering an Account, making a deposit, or otherwise using the mamak21 Platform, you confirm that you have read, understood, and consent to the practices described in this Policy. If you do not agree with any aspect of this Policy, you should not access or use the Platform. This Policy should be read together with our Terms & Conditions, which govern your overall use of the Platform.

The following definitions apply throughout this Privacy Policy:

mamak21 collects Personal Data from you through various means in the course of providing and operating the Platform. The categories of Personal Data we collect are described below.

3.1 Registration Data

When you create an Account, we collect the following information:

• Identity data: Full legal name, date of birth, nationality, and gender.
• Contact data: Email address, mobile phone number, and residential address (including city and postcode).
• Account credentials: Username and encrypted password.

3.2 KYC Verification Data

To comply with identity verification obligations, we collect copies of government-issued identification documents such as a Malaysian MyKad, passport, or driving licence; proof of residential address such as a recent utility bill or bank statement; and a photograph of you holding your identification document. This data is used solely for the purpose of verifying your identity and age.

3.3 Financial Data

We collect transaction data relating to deposits and withdrawals made through the Platform, including payment method details (e-wallet account identifiers, bank account numbers, FPX transaction references), transaction amounts, dates, and reference numbers. We do not store full bank card numbers or banking login credentials. Payment processing is handled by third-party payment service providers, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency network processors.

3.4 Activity and Usage Data

We automatically collect data about how you use the Platform, including:

• Betting and gaming history — games played, bet amounts, outcomes, and session durations;
• Log data — IP address, browser type, device type, operating system, referring URL, and pages visited;
• Session data — login times, session duration, and geographic location data derived from IP address.

3.5 Communications Data

When you contact our customer support team via live chat or email, we retain records of those communications, including any attachments or screenshots shared during the interaction.

3.6 Cookies and Tracking Data

We use cookies and similar tracking technologies to collect data about your browsing behaviour on the Platform. See Section 8 for full details of our cookie practices.

mamak21 uses your Personal Data for the following purposes:

mamak21 relies on the following legal bases for processing your Personal Data, as appropriate to the specific processing activity:

• Contractual necessity: Processing that is necessary to perform the contract we have with you — namely, providing you with access to the Platform, processing your deposits and withdrawals, and settling bets.
• Legal obligation: Processing that is necessary to comply with legal and regulatory obligations applicable to mamak21, including KYC verification, AML reporting, and record-keeping requirements.
• Legitimate interests: Processing for purposes that serve the legitimate business interests of mamak21, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for which you have given your explicit consent, such as the receipt of marketing communications. You may withdraw consent at any time by contacting customer support or using the opt-out mechanism in any marketing communication you receive.

mamak21 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes under any circumstances. We may share your Personal Data with third parties only in the following circumstances:

6.1 Service Providers (Data Processors)

We engage third-party service providers who process Personal Data on our behalf to deliver specific functions of the Platform. These include payment processing providers (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, RHB, and cryptocurrency processors), identity verification and KYC service providers, fraud detection and AML screening tools, IT infrastructure and cloud hosting providers, and customer support software platforms. All Data Processors are bound by written data processing agreements and are prohibited from using your data for any purpose beyond the specific service they are engaged to provide.

6.2 Legal and Regulatory Disclosure

We may disclose your Personal Data to law enforcement agencies, regulatory bodies, courts, or other government authorities where we are required or permitted to do so by applicable law. This includes disclosures necessary to comply with AML obligations, tax reporting requirements, or court orders.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of our business, your Personal Data may be transferred as part of that transaction. We will notify affected users of any such transfer and the applicable privacy terms that will govern their data following the transfer.

mamak21 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised such that it can no longer be attributed to any individual. Where you request deletion of your data (see Section 10), mamak21 will assess whether retention is required for legal or regulatory purposes before actioning the request.

8.1 What Are Cookies

Cookies are small text files stored on your device when you visit a website. They enable the website to recognise your device, maintain your session, remember your preferences, and collect analytical data about how you use the site.

8.2 Types of Cookies We Use

• Strictly necessary cookies: Essential for the Platform to function correctly. These enable login sessions, maintain your account state, and process transactions. You cannot opt out of strictly necessary cookies without impairing Platform functionality.
• Performance and analytics cookies: Used to understand how Users interact with the Platform, identify performance issues, and improve the user experience. Data collected is aggregated and anonymised.
• Functional cookies: Used to remember your preferences such as language settings, preferred payment method, and game history filters.
• Marketing and tracking cookies: Used to deliver relevant promotional content based on your activity on the Platform. These cookies are only placed where you have provided your consent.

8.3 Managing Cookies

You may manage your cookie preferences through your browser settings, which allow you to block or delete cookies. Please note that blocking strictly necessary cookies will impair your ability to use core Platform functions. For information on managing cookies in your specific browser, refer to your browser's help documentation.

mamak21 implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, loss, or destruction. Our security practices include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers — the same standard used by major Malaysian banks including Maybank, CIMB, and Public Bank;
• Password hashing — account passwords are stored using industry-standard cryptographic hashing algorithms and are never stored in plain text;
• Access controls — internal access to Personal Data is restricted on a need-to-know basis, with role-based access controls and audit logging applied to all sensitive data environments;
• KYC document security — identity documents submitted for verification are stored in encrypted, access-controlled environments with strict retention policies;
• Regular security assessments — we conduct periodic vulnerability assessments and penetration testing of our Platform infrastructure;
• Incident response — mamak21 maintains a data breach response plan. In the event of a data breach that poses a risk to your rights, we will notify affected individuals in accordance with applicable legal requirements.

Whilst we take significant steps to protect your data, no digital system is completely immune from security threats. You are responsible for maintaining the security of your own account credentials and for notifying us immediately if you suspect any unauthorised access to your Account.

You have the following rights in respect of your Personal Data held by mamak21. To exercise any of these rights, please contact our support team via live chat on the Platform or by email at [email protected]. We will respond to all legitimate requests within a reasonable timeframe, ordinarily not exceeding 30 days.

The mamak21 Platform is strictly intended for individuals who are aged 21 years and above. We do not knowingly collect, process, or store Personal Data relating to individuals under the age of 21. Age verification is conducted as part of the KYC process for all registered Accounts.

If you are a parent or guardian and believe that your child may have registered an Account on the Platform, please contact our customer support team immediately. We will investigate and take appropriate action as a matter of priority.

In the course of providing the Platform and its associated services, your Personal Data may be transferred to, stored in, or processed by systems and personnel located outside of Malaysia. This may occur in connection with the use of cloud hosting infrastructure, third-party payment processors, or other service providers operating internationally.

Where such transfers occur, mamak21 takes appropriate steps to ensure that your Personal Data receives a standard of protection equivalent to that afforded within Malaysia. This includes implementing appropriate contractual safeguards with international Data Processors, such as standard data transfer clauses, and ensuring that receiving parties maintain adequate technical and organisational security measures.

mamak21 reserves the right to update or revise this Privacy Policy at any time. When material changes are made, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered Players via in-platform notification or email.

We encourage you to review this Policy periodically to stay informed of how we are protecting your data. Your continued use of the Platform following any update constitutes your acknowledgement of the revised Policy. If you have any questions or concerns about changes to this Policy, please contact our customer support team.

If you have any questions, requests, or concerns regarding this Privacy Policy or the way in which mamak21 processes your Personal Data, please contact us through any of the channels below. We will acknowledge your request promptly and respond substantively within 30 days.

For full terms governing your use of the Platform, please refer to our Terms & Conditions. For responsible gambling support and self-exclusion tools, please visit our Responsible Gambling page.