m1play Privacy Policy

1 Introduction

Welcome to m1play. This Privacy Policy (the "Policy") sets out how m1play ("we", "us", "our") collects, processes, stores, and discloses personal data relating to individuals ("you", "your") who visit, register with, or otherwise use the m1play platform, including our website at m1play.lat and any related mobile applications or services (collectively, the "Platform").

By accessing or using the Platform, you acknowledge that you have read and understood this Policy and agree to the collection and processing of your personal data as described herein. If you do not agree, you should discontinue use of the Platform immediately.

This Policy applies to all registered members, prospective members, and visitors based in Malaysia or accessing our Platform from Malaysia. It should be read alongside our Terms & Conditions and Responsible Gaming policy.

2 Information We Collect

We collect personal data necessary to provide a safe, compliant, and enjoyable gaming experience on m1play. The categories of information we may collect include:

2.1 Registration and Account Data

• Full legal name as stated on your national identification card (MyKad) or passport
• Date of birth (to verify you are 21 years of age or older)
• Email address and mobile phone number
• Residential address (including postcode and state in Malaysia)
• Username and account credentials (passwords are stored in hashed form only)
• Preferred language and currency (Malaysian Ringgit / MYR)

2.2 Financial and Payment Data

• Bank account details for deposit and withdrawal processing (e.g. Maybank, CIMB, Public Bank)
• E-wallet identifiers for Touch n Go eWallet, Boost, and similar services
• Transaction history, including deposit amounts, withdrawal requests, and gaming credits
• Card details where Visa or Mastercard payments are used (card data is processed by PCI-DSS certified payment processors; we do not store full card numbers)

2.3 Identity Verification (KYC) Data

• Copies of government-issued identification documents
• Proof of address documentation
• Source-of-funds or source-of-wealth documentation where required by our compliance obligations

2.4 Technical and Usage Data

• IP address and approximate geolocation derived from it
• Device type, operating system, and browser information
• Session logs, login timestamps, and activity patterns on the Platform
• Game history, wagering activity, and bonus utilisation records
• Communications with our customer support team

2.5 Communications Data

• Emails, live chat transcripts, and support tickets submitted to m1play
• Responses to surveys, promotions, or feedback requests (where you choose to participate)

3 How We Use Your Information

m1play processes your personal data only for legitimate, clearly defined purposes. We will not use your data in ways that are incompatible with the purpose for which it was originally collected. Our primary uses are as follows:

• Account management: Creating, maintaining, and securing your m1play account, including verifying your identity and age at registration.
• Payment processing: Facilitating deposits and withdrawals via local Malaysian payment channels such as Maybank, CIMB, Touch n Go eWallet, and Boost.
• Service delivery: Providing access to our full range of games — slots, live casino, sportsbook, fishing games, Sic Bo — and ensuring a seamless experience across devices.
• Regulatory compliance: Meeting our obligations under applicable anti-money laundering (AML), know-your-customer (KYC), and responsible gaming requirements.
• Fraud prevention and security: Detecting and preventing fraudulent activity, unauthorised account access, and abuse of promotional offers.
• Customer support: Responding to your enquiries, resolving disputes, and improving our service quality based on feedback.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behaviour and applying self-exclusion or cooling-off measures where appropriate.
• Marketing communications: Sending you relevant promotions, bonus offers, and platform updates — but only where you have provided your consent, and always with a clear opt-out option.
• Analytics and improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, and the overall user experience for Malaysian players.

4 Cookies & Tracking Technologies

m1play uses cookies and similar tracking technologies to ensure the Platform functions correctly, to remember your preferences, and to gather analytical data that helps us improve the service.

4.1 Types of Cookies We Use

• Strictly necessary cookies: Essential for the Platform to operate. These include session cookies that keep you logged in during an active gaming session. You cannot opt out of these without ceasing use of the Platform.
• Functional cookies: Remember your language preferences, display settings, and last-used payment method to save you time on future visits.
• Analytical cookies: Collect anonymised data about how visitors navigate the Platform — which game categories are most popular, average session duration, and similar metrics — to guide product improvements.
• Marketing cookies: Used to deliver relevant promotional content and to measure the effectiveness of our advertising campaigns. These are only activated where you have given explicit consent.

4.2 Managing Your Cookie Preferences

You may adjust your browser settings to block or delete cookies at any time. Please note that disabling strictly necessary cookies will prevent you from logging into your m1play account. For all other cookie categories, you can update your preferences via your account settings or by contacting our support team at [email protected].

5 Disclosure to Third Parties

m1play does not sell your personal data to third parties. We may, however, share your information with carefully selected partners and service providers under strict contractual obligations where necessary to deliver the Platform and meet our legal requirements:

• Payment processors and banking partners: Including Maybank, CIMB, Public Bank, and third-party e-wallet and card processing providers, to execute your deposits and withdrawals securely.
• Identity verification providers: Third-party KYC and AML screening services used to verify your identity documents and satisfy our compliance obligations.
• Technology and hosting providers: Cloud infrastructure, content delivery, and platform technology providers who process data on our behalf under data processing agreements.
• Customer support tools: Helpdesk software providers that facilitate live chat and email support interactions.
• Regulatory and law enforcement authorities: Where required by applicable Malaysian law, court order, or the lawful request of a competent regulatory or law enforcement authority, we may disclose your data without prior notice to you.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of our business assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third parties who receive personal data from m1play are contractually required to process it only for the specified purpose and to maintain appropriate technical and organisational security measures.

6 Data Retention

We retain your personal data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law. Our general retention periods are as follows:

• Account data: Retained for the duration of your active membership and for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements.
• Transaction and financial records: Retained for a minimum of seven (7) years from the date of the transaction to comply with Malaysian financial record-keeping obligations.
• KYC and identity documents: Retained for the duration of your account and for at least five (5) years following account closure.
• Customer support communications: Retained for up to three (3) years following resolution of the enquiry or dispute.
• Marketing consent records: Retained until you withdraw consent, plus a reasonable period thereafter to demonstrate compliance.
• Analytical and log data: Typically anonymised or aggregated after thirteen (13) months.

When personal data is no longer required, we will securely delete or anonymise it in accordance with our internal data lifecycle procedures.

7 Security Measures

Protecting your personal data is a responsibility we take seriously at m1play. We have implemented a range of technical and organisational security controls, including:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and our servers
• Encryption of sensitive data fields at rest, including payment credentials and identification document copies
• Strict access controls ensuring that only authorised personnel with a legitimate need can access personal data
• Regular internal security audits and vulnerability assessments of the Platform
• Multi-factor authentication requirements for administrative access to systems holding personal data
• Incident response procedures to detect, contain, and notify affected users of any personal data breach in a timely manner

While we apply industry-standard measures, no method of electronic storage or internet transmission is 100% secure. We encourage all m1play members to use a strong, unique password, enable any available two-factor authentication on their account, and to contact us immediately if they suspect unauthorised access to their account.

8 Your Rights

As a registered member or user of m1play, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us using the details in Section 11.

• Right of access: You may request a copy of the personal data we hold about you. We will respond within thirty (30) calendar days of receiving a valid request.
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that we correct it. You may also update certain details directly within your account profile.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations. Note that certain data must be retained under AML and KYC regulations regardless of your request.
• Right to restrict processing: You may request that we limit the processing of your personal data in certain circumstances, such as while the accuracy of the data is being contested.
• Right to data portability: Where technically feasible and legally applicable, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where we process your data on the basis of your consent (e.g. for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to the processing of your personal data where we rely on legitimate interests as our legal basis, unless our compelling legitimate grounds override your interests.

We aim to respond to all valid data subject requests within thirty (30) calendar days. In complex cases we may extend this period by a further two months, in which case we will notify you of the extension and the reason for it.

9 Children & Minors

The m1play Platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect, process, or store personal data from any person below this age.

During registration, all applicants are required to confirm their date of birth and submit identity verification documents. Where we discover or have reason to believe that a user is under 21 years of age, we will immediately suspend the account, void any associated transactions, and securely delete any personal data collected in connection with that account.

If you are a parent or guardian and believe that a minor has submitted personal data to m1play, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

10 Changes to This Policy

m1play reserves the right to amend this Privacy Policy at any time. We will notify registered members of material changes via email to the address associated with their account, or through a prominent notice on the Platform, at least fourteen (14) days before the changes take effect.

The updated Policy will be published on this page with a revised effective date. We encourage you to review this Policy periodically to stay informed about how we protect your personal data. Continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Policy.

If you have concerns about any proposed changes to this Policy, please contact us before the effective date. You may also choose to close your account if you do not agree with the revised terms, subject to the account closure procedures set out in our Terms & Conditions.

11 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by m1play, please do not hesitate to get in touch with us:

• Email: [email protected]
• Support portal: Accessible via the live chat function on the m1play Platform (available 24/7)
• Response time: We aim to acknowledge all privacy-related enquiries within two (2) business days and to resolve them fully within thirty (30) calendar days

For general questions about your account or the Platform, you can also visit our FAQ page or review the About Us section for more background on m1play and our approach to responsible, trusted online gaming for Malaysian players.