M29 Privacy Policy – Protecting Your Data

m29 takes your privacy seriously. As an online entertainment platform operating in Malaysia through m29.vin, we understand that your trust in us depends greatly on how we handle your personal information.

This Privacy Policy is drafted in accordance with the Malaysia Personal Data Protection Act 2010 (PDPA) and the best international data protection principles. It sets out in detail the types of data we collect, why we need it, and the measures we take to ensure its security at all times.

By registering or continuing to use the m29 platform, you agree to the terms set out in this Privacy Policy. We encourage you to read this document carefully and contact our support team if anything is unclear.

M29 collects your personal information through several means — directly when you register or use the platform, automatically via tracking technologies, and occasionally through trusted third parties such as payment providers.

Below is a detailed table of the types of data we collect and their respective purposes:

Every piece of information we collect has a clear and lawful purpose. m29 does not use your data for any purpose unrelated to service delivery or compliance with legal requirements.

• Account Management: Creating, verifying, and managing your member account, including the KYC process required by law.
• Transaction Processing: Securely verifying and processing all deposits and withdrawals through our supported payment channels.
• Platform Security: Detecting and preventing fraud, money laundering, unauthorised access, and suspicious activity.
• Legal Compliance: Fulfilling reporting obligations and compliance requirements with the relevant regulatory authorities.
• Customer Support: Addressing enquiries, resolving complaints, and providing the technical assistance you need.
• Personalised Experience: Tailoring content, promotions, and game recommendations based on your preferences and gaming habits.
• Responsible Gaming: Monitoring gaming behaviour to identify signs of problem gambling and offer appropriate assistance.
• Product Improvements: Analysing aggregated usage data to improve platform features and the overall user experience.

M29 does not sell or transfer your personal data to third parties for their own marketing purposes. However, there are limited situations where we need to share your information with trusted external parties to ensure our services operate smoothly and securely.

• Payment Providers: Transaction data is shared with payment processors such as DuitNow, FPX, TNG eWallet, GrabPay, and Boost to facilitate deposit and withdrawal management.
• Identity Verification Providers: KYC information is shared with approved third-party identity verification services to ensure compliance with anti-money laundering (AML) regulations.
• Game Providers: Basic account information is shared with game providers such as Pragmatic Play, Evolution, and other partners to enable seamless gaming sessions.
• Legal Authorities: m29 will disclose required information to regulatory authorities or law enforcement when mandated by Malaysian law.
• Cloud Services: Data is stored and processed using cloud infrastructure that complies with strict international security standards.

Your data security is an absolute priority for m29. We continuously invest in the latest security infrastructure and processes to ensure your information is protected at all times — whether in transit or at rest.

• End-to-End Encryption: All communications between your app and m29 servers are secured by TLS 1.3 protocol with AES-256 encryption.
• Two-Factor Authentication (2FA): Additional security features are available for all accounts to prevent unauthorised access even if your password is compromised.
• Real-Time Threat Monitoring: Our security systems monitor suspicious activity around the clock and will take automated action to protect your account.
• Regular Penetration Testing: m29 conducts comprehensive security testing on a regular basis through independent security experts to identify and patch any vulnerabilities.
• Internal Access Controls: Only staff with a legitimate business need may access user data, and every access is recorded in an audit log.

While we take all reasonable steps to protect your data, no security system in the world is entirely infallible. We therefore encourage you to also play your part in keeping your account secure by using a strong, unique password and never sharing your login credentials with anyone.

M29 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable Malaysian law.

• Active Account Data: Retained for the duration your account remains active and for the required period following account closure.
• Financial Transaction Records: Retained for 7 years in accordance with the requirements of Malaysia's Anti-Money Laundering Act 2001.
• KYC Documents: Retained for the duration of the active account period plus 5 years after account closure.
• Security Logs: Retained for 12 months for security incident investigation purposes if necessary.
• Marketing Data: Retained until you unsubscribe or withdraw your consent.

M29 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

• Essential Cookies: Required for core platform functions such as login, session security, and language preferences. These cookies cannot be disabled.
• Performance Cookies: Helping us understand how visitors use the platform so we can continuously improve it. All data is collected anonymously.
• Functional Cookies: Allowing the platform to remember your preferences, such as display settings and favourite games, to deliver a more personalised experience.
• Marketing Cookies: Used to display relevant promotions and offers to you based on your interests and activity on the platform.

You can manage or disable cookies through your web browser settings at any time. Please note, however, that disabling certain cookies may affect the functionality and your experience on the m29 platform.

As an m29 user and a Malaysian citizen or resident, you have certain rights regarding your personal data under PDPA 2010. m29 is committed to helping you exercise these rights.

The m29 platform is exclusively for individuals aged 18 years and above. We do not intentionally collect, store, or process any personal information from individuals under the age of 18.

If we discover that personal data of a child has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question. If you are aware that a child has registered on our platform, please contact us immediately at [email protected] so that we can take the appropriate action.

M29 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, evolving legal requirements, or new technologies we adopt.

When we make material changes to this policy, we will notify you via your registered email or through a prominent notice on our platform at least 14 days before those changes take effect. By continuing to use the m29 platform after the effective date, you are deemed to have accepted the updated terms.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, do not hesitate to contact us. Our team is ready to assist you.

• Support Email: [email protected]
• Data Protection Officer (DPO): [email protected]
• Support Operating Hours: 24 hours a day, 7 days a week
• Response Time: Within 2 business days for general enquiries; 30 days for formal privacy rights requests

We value your trust and are committed to providing a prompt, transparent, and satisfactory response to every privacy-related enquiry we receive.