Privacy Policy m2 casino – Our Commitment to Protecting Malaysian Players' Personal Data

This Privacy Policy is issued by m2 casino (m2casino.best) as the responsible personal data controller. It sets out in detail how we collect, store, use, disclose, and protect your personal data when you register for and use our platform's services.

This Privacy Policy applies to all users of the m2 casino platform, including registered members, website visitors, and any individual who interacts with our platform through any channel. By using m2 casino's services, you acknowledge that you have read and understood this policy.

If you disagree with any aspect of this Privacy Policy, please discontinue your use of m2 casino's services and contact us at support@m2casino.best to discuss your options. Registered members may request account closure and data deletion in accordance with the rights set out in this policy.

M2 casino collects various categories of personal data depending on how you interact with our platform. Below is a detailed breakdown of the data collected:

We may also collect data that you share voluntarily, such as information submitted through feedback forms or customer satisfaction surveys. This data is used solely to improve the quality of m2 casino's services.

M2 Casino uses your personal data for legitimate and transparent purposes. The following are the primary purposes for which your data is processed:

• Account management: Registering and verifying your identity, managing your member account, processing secure logins, and maintaining the security of your account.
• Financial transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks), as well as managing withdrawals of winnings in MYR (RM).
• KYC verification and anti-money laundering: To verify user identity in compliance with anti-money laundering (AML) and counter-terrorism financing (CTF) legal requirements.
• Gaming services provision: Operating slots, live casino, table games, and Sports Betting platforms covering EPL football, Malaysia Super League, BWF badminton, and e-sports.
• Customer support: Handling inquiries, resolving technical issues, and managing complaints via live chat and email in Bahasa Melayu.
• Bonus and VIP programme: Managing the allocation of welcome bonuses, VIP cashback, reward points, and other promotions you are eligible for.
• Platform security: Detecting and preventing fraud, multi-account usage, bonus abuse, and other activities that violate m2 casino's Terms & Conditions.
• Marketing communications: Sending notifications about promotions, bonuses, and special offers — only to members who have consented to receive marketing communications.
• Platform improvements: Analysing aggregated (not individual) usage patterns to improve the user experience, platform speed, and overall service quality.
• Legal compliance: Meeting legal obligations including PDPA 2010 requirements, licensed gambling regulations, and valid court orders.

Every instance of personal data processing by m2 casino is carried out on at least one valid legal basis under Malaysia's PDPA 2010:

• Consent: For non-mandatory data processing such as marketing communications and optional analytics, we rely on your explicit consent given at registration or through your account settings at a later time.
• Contractual performance: Processing required to provide the services you have requested — such as managing your account, handling deposits and withdrawals in RM, and providing access to games — is carried out on the basis of contractual performance between you and m2 casino.
• Legitimate interests: Security activities such as fraud detection, anti-money laundering, and protecting the platform from misuse are carried out on the basis of the legitimate interests of m2 casino and all members of our platform.
• Legal obligation: Processing required to comply with Malaysian law — including AML, CTF, PDPA 2010, and licensed gambling regulations — is carried out on the basis of legal obligation.

M2 casino does not sell your personal data. We may share your personal data with the following categories of third parties only in limited circumstances and for specific purposes:

• Payment service providers: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, Boost, DuitNow, and FPX (Maybank2u, CIMB Clicks) receive the transaction information necessary to process your deposits and withdrawals. These providers are governed by their own privacy policies and security standards.
• Game software providers: Game providers partnered with M2 Casino receive only the minimum technical data required to operate games and maintain game integrity. They do not receive your full identity information.
• Cloud and IT infrastructure service providers: m2 casino's servers and data storage systems are managed by infrastructure service providers bound by strict confidentiality agreements and security standards equivalent to our own.
• Regulatory body: Licensed gambling regulatory authorities, law enforcement agencies, and Malaysian courts may receive your data when required by law or a valid court order.
• Identity verification services: Third-party KYC service providers who assist m2 casino in verifying member identities for AML compliance purposes receive the identity information required to carry out those checks.

All third parties that receive M2 Casino member personal data are bound by data processing agreements that require them to protect such data in accordance with the standards set out under PDPA 2010 and to use it solely for the purposes specified by M2 Casino.

M2 Casino takes data security seriously and invests in protecting every member's personal information. The technical and organisational security measures we have in place include:

• 256-bit SSL Encryption: All data transmitted between your device and m2 casino's servers is encrypted using TLS/SSL 256-bit — the same standard used by Malaysia's major banking institutions.
• Secure password storage: Member passwords are not stored in plain text. We use a strong cryptographic hashing algorithm (bcrypt) to store passwords securely.
• Layered access controls: Access to systems containing member personal data is restricted on a need-to-know basis. All staff access is logged and audited regularly.
• Two-factor authentication (2FA): m2 casino provides 2FA for all member accounts as an additional layer of security. Internal staff accessing sensitive systems are required to use 2FA.
• Regular security audits: m2 casino's security systems are regularly reviewed and tested by our internal security team and independent third-party auditors to identify and address vulnerabilities.
• Incident response plan: M2 Casino maintains documented incident response procedures to address potential data breaches swiftly and effectively, including notification procedures for the relevant authorities and affected members as required under the PDPA.

M2 casino retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or to comply with applicable legal requirements. The following are the key data retention guidelines:

• Active account data: Throughout the duration of your membership with m2 casino and until account closure.
• Financial transaction data: A minimum of 7 years from the date of the transaction or account closure (whichever is later), in accordance with Malaysia's financial and anti-money laundering legislation.
• KYC records and identity verification: A minimum of 5 years after account closure, in accordance with the requirements of AMLA (Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001).
• Customer support communication logs: 2 years from the date of communication, for complaint resolution and reference purposes.
• Technical data and activity logs: 12 months for the purposes of technical troubleshooting and platform security.
• Marketing data (with consent): Until you withdraw your consent or close your account, whichever comes first.

Once the retention period expires, your data will be permanently deleted from M2 Casino's systems or fully anonymised so that it can no longer be linked to you personally.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by M2 Casino:

M2 casino uses cookies and similar tracking technologies to ensure the platform functions correctly and to deliver a better user experience. Below are the types of cookies used:

• Essential cookies (required): Required for core platform functionality, including maintaining your login session, saving language preferences, and processing transactions securely. These cookies cannot be disabled without affecting the platform's basic functionality.
• Performance cookies: Collecting aggregated (non-individual) information about how users interact with the platform — most visited pages, time spent, and technical errors encountered. This data helps us improve the performance and usability of the M2 Casino platform.
• Functionality cookies: Saving your preferences — such as interface language, preferred betting limits, and display settings — to provide a more personalised experience on your next visit.
• Marketing cookies: Used only with your consent, these cookies allow us to display relevant promotional content based on your interests and activity. You may decline or withdraw this consent at any time.

You can manage your cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality or user experience of the M2 Casino platform. For more detailed cookie preferences, please check the settings menu within your account.

In certain circumstances, personal data of m2 casino members may be processed or stored on servers located outside Malaysia. This occurs when we engage international cloud infrastructure providers or game software providers operating from other countries.

In all cases of cross-border data transfers, M2 Casino ensures:

• The recipient country maintains adequate data protection standards, or a binding contractual data protection agreement has been established with the data recipient.
• Equivalent technical security measures are applied to protect data both in transit and at rest at locations outside Malaysia.
• Data transfers are limited to the purposes stated in this Privacy Policy and do not exceed the scope required.

M2 casino is a platform designed exclusively for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18.

M2 Casino's registration process is designed to prevent access by minors, including age verification at the point of registration and KYC checks to confirm that members are legal adults. Should we discover that a child's personal data has been collected inadvertently, we will take immediate steps to delete that data and close the account in question.

If you have reason to believe that a minor has registered for or is using the m2 casino platform, please contact us immediately at support@m2casino.best so that appropriate action can be taken without delay.

M2 Casino reserves the right to amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes in how we handle data. Any material amendments will be communicated to registered members via email and in-platform notifications at least 14 days before the amendment takes effect.

For non-material amendments such as spelling corrections or language clarifications that do not alter the substantive rights or obligations of either party, we reserve the right to make changes without prior notice. The "Updated" date at the top of this page will always reflect the date of the most recent amendment.

It is your responsibility to review this Privacy Policy page periodically. Your continued use of the m2 casino platform after any amendments take effect will be considered your acceptance of the updated policy.

If you have any questions or concerns, or wish to exercise your rights under the PDPA 2010 regarding personal data held by m2 casino, please contact our Data Protection Officer (DPO) through the following channels:

• Email: support@m2casino.best – please include the subject line "Privacy Enquiry" or "PDPA Rights Request" along with your account number for faster processing. Typical response time is within 5 business days.
• Live Chat: For general privacy enquiries, our 24/7 support team — fluent in Bahasa Malaysia — is available to assist and can escalate issues to the Data Protection Officer where necessary.

We are committed to handling every privacy enquiry seriously, transparently, and within a reasonable timeframe. If you are not satisfied with M2 Casino's response to your privacy enquiry or complaint, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP), the authority responsible for overseeing PDPA 2010 compliance in Malaysia.