Privacy Policy – Data Protection 19myr Malaysia Player Personal Data

19myr understands that Malaysian players' trust in our platform depends largely on their confidence that personal information is handled with care, responsibility and security. This Privacy Policy is designed to give 19myr players full transparency into our data collection and processing practices.

This Privacy Policy applies to all personal information collected by 19myr through our official website at 19myr.click, our mobile application (where available), any communications via email, live chat, or WhatsApp, and all other interactions you have with the 19myr platform. This Policy should be read together with the 19myr Terms & Conditions, which form part of the overall agreement between you and our platform.

We encourage all players to read this Privacy Policy carefully in full. If you have any questions or concerns about how we handle your data, do not hesitate to reach the 19myr privacy team by email at support@19myr.click.

19myr collects players' personal data only where it is necessary to provide the requested service, fulfil legal obligations, or improve the user experience. We do not collect data beyond what is needed for these purposes. The following are the categories of data we collect:

Financial information related to payment methods — such as your Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX account details — is processed through licensed and certified third-party payment systems. 19myr does not store your full e-wallet account number or banking password; we only receive transaction confirmations from payment service providers.

Personal data collected by 19myr is used only for legitimate and transparent purposes. We do not use your data for anything unrelated to the delivery of our platform's services without your consent. The purposes for which data is used are as follows:

• Account Management – Creating and managing your player account, processing registrations, verifying identity and maintaining accurate account records.
• Transaction Processing – Processing deposits via Touch 'n Go, GrabPay, DuitNow and other Malaysian payment methods, as well as your winnings withdrawals.
• Service Provision – Enabling access to all games and betting markets on the 19myr platform, including slots, Live Casino, poker, baccarat, football, e-sports and more.
• Security & Fraud Detection – Detecting and preventing fraud, money laundering, duplicate account use and any suspicious or unlawful activity.
• Customer Support – Responding to your enquiries, complaints and support requests via live chat, WhatsApp or email in Bahasa Melayu or English.
• Responsible Gaming – Monitors betting patterns to identify players who may need support and to enforce limits set by players themselves.
• Legal Compliance – Fulfilling legal obligations, licensing regulations and directives from relevant authorities.
• Marketing Communications – Sends information about promotions, bonuses and platform updates only to players who have given their consent. You may unsubscribe at any time.

19myr does not sell, rent, or trade players' personal data to third parties for their commercial gain. However, to keep the 19myr platform running smoothly and securely, we do need to share certain data with a limited set of third-party categories, as outlined below:

• Payment Service Providers – Required transaction details are shared with Malaysian e-wallet and local banking providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX) solely for the purpose of processing financial transactions.
• Game Providers – Minimal game session data is shared with providers such as Pragmatic Play, PG Soft and Evolution to enable gameplay and resolve any technical disputes.
• Technology Service Providers – Server hosting providers, cybersecurity services, and software vendors that assist 19myr in operating the platform on a technical level, all subject to strict data protection agreements.
• Legal Authorities – Personal data may be disclosed to regulatory authorities, the police, or courts where required by law or a valid court order.

The security of players' personal data is 19myr's highest priority. We invest continuously in state-of-the-art security infrastructure and employ a multi-layered approach to protect your information from unauthorised access, disclosure, alteration or destruction.

• Data Encryption in Transit – All communications between your device and 19myr's servers use TLS 1.3 with 256-bit SSL encryption, ensuring your data cannot be intercepted in transit.
• Data Encryption at Rest – Sensitive data stored in our databases, including identity information and financial records, is encrypted using AES-256 encryption standards.
• Role-Based Access Control – Our systems use role-based access controls to ensure that each 19myr staff member can only access data required for their specific responsibilities.
• Two-Factor Authentication (2FA) – 19myr encourages players to enable two-factor authentication on their accounts as an additional layer of protection against unauthorised access.
• Regular Security Audits – The 19myr platform undergoes regular penetration testing and independent security audits conducted by certified cybersecurity firms to identify and address any vulnerabilities.
• Real-Time Monitoring – The 19myr security team continuously monitors system logs, login attempts, and access patterns to detect any suspicious activity before it becomes a real threat.

While 19myr takes all reasonable steps to protect your data, no system can be guaranteed 100% secure against all cyber threats. In the unlikely event of a data breach affecting your data, 19myr will notify you within a reasonable timeframe in accordance with applicable legal obligations and will take immediate steps to minimise any impact.

19myr uses cookies and similar tracking technologies to enhance the user experience, understand platform usage patterns and ensure security. Cookies are small text files stored on your device when you visit our website.

• Essential Cookies – Required for the 19myr platform to function properly. This includes login session cookies and security cookies. These cannot be disabled without affecting core platform functionality.
• Preference Cookies – Saves your preferences such as interface language, odds format (Decimal or Malay Odds) and other display settings for a more convenient experience.
• Analytics Cookies – Helps 19myr understand how players use the platform – most visited pages, session duration and navigation patterns – for the purpose of continuous improvement.
• Cookie Management – You can manage or delete cookies at any time through your web browser settings. However, disabling certain cookies may affect the functionality or user experience of the 19myr platform.

19myr retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or for as long as required by applicable laws and regulations — whichever is longer.

• Active Account Data – Retained for the duration your account remains active with 19myr, plus any minimum retention period required by law following account closure.
• Financial Transaction Records – Retained for a minimum of 7 years in accordance with applicable accounting and anti-money laundering (AML) legal requirements.
• Security Logs – Retained for 90 days for the purposes of security incident investigation and fraud detection.
• Support Communication Data – Records of conversations with the 19myr support team are retained for 2 years for reference and service quality improvement purposes.
• After Account Closure – When an account is closed at a player's request, data that is no longer required for legal obligations will be anonymised or deleted within 90 days.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the international privacy principles we adhere to, you have the following rights regarding your personal data held by 19myr. To exercise any of these rights, submit your request to support@19myr.click with the subject line "Privacy Rights Request".

19myr does not provide services to individuals under the age of 18 and does not knowingly collect personal data from children or minors. Our platform enforces strict age verification during the registration process, and any account found to have been registered by an underage individual will be terminated immediately, all balances forfeited, and any data collected will be deleted in accordance with our policy.

If you have reason to believe that an underage individual has registered an account on 19myr or is using this platform, please notify our support team immediately via live chat or email at support@19myr.click so that appropriate action can be taken without delay.

19myr reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, technological developments, legal changes or other operational reasons. Any material changes will be communicated to registered players via email or in-platform notification at least 14 days before the changes take effect.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. Continued use of the 19myr platform after any changes to the Privacy Policy take effect will be considered acceptance of the revised terms. We encourage players to check this page periodically to stay informed of our latest privacy practices.

For any enquiries, concerns, or requests related to this Privacy Policy or how 19myr handles your personal data, you may reach us through the channels below. All privacy enquiries will be treated with full confidentiality and responded to within 14 business days.

• Privacy Email: support@19myr.click – Use the subject line "Privacy Inquiry" or "Privacy Rights Request" to ensure your message is routed to the appropriate team.
• Live Chat: Available 24/7 on the 19myr platform for general enquiries. For formal privacy rights requests, we recommend using email to maintain a clear written record.
• Response Time: General enquiries – within 24 hours. Formal privacy rights requests – within 14 business days from the date the request is received.