en
This policy explains what personal information we collect from players in Malaysia, why we need each piece of it, who processes it on our behalf, and what control you have over it. We ask for information for three practical reasons: to open and secure your account, to confirm that you are who you say you are before money leaves the platform, and to run the rewards you claim. Nothing here is collected for sale or trade.
Registration asks for a username, your full name, a password, a contact number with its country code, and an email address. The full name matters, because withdrawals are paid only to a bank account in the same name, so we hold it as entered and treat it as an identity field rather than a display name.
Verification in My Account covers your contact number, email address, game preference and date of birth. Pressing Verify Now sends a one-time password to the number or address being confirmed, so we also record that a code was issued and whether the confirmation succeeded. The date of birth serves two purposes: it supports age checks, and it is the field the Birthday Bonus is credited against.
Using Deposit and Withdrawal means we hold the bank or payment details you submit, any saved bank entries, the amount and timing of each transaction, and the payment slips you upload for a manual transfer. That slip is an image you choose to send us, and it often contains your own bank reference details, so treat it as sensitive before uploading.
Alongside payments, our systems record game sessions, bet history and wallet movements. These records are what cashback, subsidy and bonus calculations are built from, so they are also what we check when a player asks why a figure came out as it did.
We log connection and device information, including the network address used to reach your account. This supports fraud screening and device recognition services such as iovation and ThreatMetrix, and it is central to the one account per person rule: offers are limited to one open account per individual, family, household address, email address, telephone number, bank account and network address, and duplicate signals are what reveal a breach of that rule.
Where a security or age question arises, we may request proof of identity at any time, including before a withdrawal. That can mean identity documents, copies of cards used for payment, a passport or driving licence, or a recent bank statement. Documents are requested for a specific check, not collected as a routine part of registration.
If you use Share & Earn, we record your referral link, which accounts registered through it, their qualifying deposits and their weekly betting volume, because the MYR 50 payment and the 0.20% weekly referral bonus are calculated from exactly those figures.
Messages you send through Live Chat are kept with your account so a later agent can see what was already discussed. Disputes submitted in writing are retained with the correspondence that follows them.
Each category has a direct purpose. Account details create and secure your login. Verification data confirms your contact points and supports age checks, since accounts are for adults of 18 and over. Payment details and name matching make sure a withdrawal reaches the account holder and not a third party. Transaction and betting records drive bonus eligibility, required bet amounts, cashback on net loss and birthday credits. Device and connection data protects accounts from takeover and keeps duplicate accounts from collecting the same offer twice. Support records let us resolve a question or a dispute. We also use records where we are obliged to keep them or to respond to a lawful request.
We share only what a task requires:
We do not sell personal information, and we do not pass it to advertisers as a product.
Our site uses cookies and similar storage to keep a session running, and remember interface choices such as language. Choosing Remember Me at login stores a token on that device so you are not asked to sign in again, which is convenient on a private phone and a poor idea on a shared or public computer.
Connections to the platform are encrypted, and access to member information inside the business is restricted to staff whose work requires it. The GoDaddy Verified & Secured mark shown on our site relates to that secured connection; it is a connection indicator rather than an audit of how data is handled.
Your own habits do as much work as ours. Use a long password that you use nowhere else, never share your login with anyone who offers to play or claim a bonus on your behalf, and log out on devices other people can reach. Unauthorised sites imitate our branding with lookalike names, and the usual goal is a captured username and password, so reach your account through the buttons here or through the Android app, never through a link forwarded in a chat group or an advert. The same caution applies while completing the registration form for the first time.
Your contact number and email address can each be changed once in My Account. Your full name cannot be edited after the verification reward has been claimed, which is why it should match your bank account from the start. For any other correction, for a copy of what we hold, or for account closure, contact Live Chat, and we will act on requests where the law allows. Account closure on request is handled by the same team.
Account, transaction and verification records are kept while your account is open and afterwards for as long as we are required to retain them for financial, security and legal purposes. Documents collected for a one-off check are held with that check.
Accounts are for adults of 18 and over. Where there is doubt about a player’s age, identity is checked.
Any update to this policy is published on this page, so read it again before you next submit documents or add a new bank account. If you are still deciding whether to sign up, the overview of games, rewards and wallet rules explains what an account gives you.