Privacy Policy — mygm2u

This Privacy Policy ("Policy") is issued by mygm2u ("we", "us", "our"), the operator of the online gaming platform accessible at mygm2u.cam. This Policy describes how mygm2u collects, uses, stores, shares, and protects personal data provided by or collected from players and visitors ("you", "your") in connection with your use of the Platform.

mygm2u is operated as a Malaysia-focused online gaming service, providing sports betting, live casino, slot games, crash games, fishing games, and related entertainment products. Our primary user base consists of Malaysian adults aged 21 and above, and the majority of our data processing activities are conducted in the context of Malaysian payment methods — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, and Public Bank — and Malaysian-language customer interactions handled in English.

This Policy applies to all personal data processed by mygm2u in connection with your use of the Platform, including data collected through account registration, identity verification (KYC), deposits and withdrawals, gaming activity, customer support interactions, and marketing communications (where consented).

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information that identifies or could reasonably be used to identify a natural person, including name, identification number, contact details, financial information, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, or deletion.
• "Data Controller" — mygm2u, as the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" — a third party that processes Personal Data on behalf of mygm2u pursuant to a data processing agreement, such as payment gateway providers or KYC verification services.
• "Consent" — a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a specific purpose.
• "KYC" — Know Your Customer; the identity and age verification process required to comply with anti-money laundering and responsible gambling obligations.
• "Platform" — the mygm2u website and all associated services available at mygm2u.cam.
• "Cookies" — small text files placed on your device by the Platform to store session and preference information.

mygm2u collects Personal Data through multiple touchpoints across your journey as a player. The categories of data we collect, and the contexts in which we collect them, are set out below.

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data. If any such data is incidentally disclosed during support interactions, it will not be processed for any purpose beyond resolving your immediate support query.

mygm2u uses your Personal Data for the following purposes:

4.1 Account Management and Platform Access

To create and maintain your player account, authenticate your identity when you log in, manage your account settings and preferences, and provide access to all gaming and betting features available on the Platform.

4.2 Payment Processing

To process deposits and withdrawals in Malaysian Ringgit (MYR) via your chosen payment method, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, and Public Bank. Financial data is shared with our payment gateway partners solely for the purpose of executing your requested transactions.

4.3 Identity Verification (KYC) and Fraud Prevention

To verify your identity and age as part of our KYC process, detect and prevent fraudulent activity, money laundering, multi-accounting, and other forms of prohibited conduct, and to comply with our anti-money laundering (AML) and responsible gambling obligations.

4.4 Responsible Gambling Monitoring

To monitor gaming patterns and identify players who may be exhibiting signs of problem gambling behaviour, in accordance with our responsible gambling commitments. This includes automated monitoring of deposit frequency, loss patterns, and session duration, and may result in proactive outreach from our responsible gambling team.

4.5 Customer Support

To handle and resolve your customer support enquiries, complaints, and account-related requests. Support interactions conducted via live chat or email are recorded and retained for quality assurance, training, and dispute resolution purposes.

4.6 Marketing Communications (Consent-Based)

To send you promotional offers, bonus notifications, and platform updates where you have provided your explicit consent to receive such communications. You may withdraw this consent at any time by updating your preferences in your account dashboard or by contacting our support team.

4.7 Legal and Regulatory Compliance

To comply with applicable laws, regulations, and lawful requests from competent authorities, including financial record-keeping requirements and reporting obligations under anti-money laundering frameworks.

mygm2u processes your Personal Data on the following legal bases, depending on the specific purpose of processing:

• Contractual Necessity: Processing required to perform our obligations under the Terms and Conditions you agreed to upon account registration — including account management, payment processing, and game access.
• Legal Obligation: Processing required to comply with applicable legal requirements, including KYC/AML obligations and financial record-keeping mandates.
• Legitimate Interests: Processing conducted for our legitimate business interests, including fraud detection, platform security, responsible gambling monitoring, and customer support quality assurance, provided such interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications, non-essential cookies, and optional data analytics — all of which require your prior informed consent and may be withdrawn at any time.

mygm2u does not sell, rent, or otherwise commercially transfer your Personal Data to third parties. We share Personal Data only in the following limited circumstances:

6.1 Payment Service Providers

Your financial and identity data is shared with payment processors — including the operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and partnered Malaysian banks including Maybank, CIMB, and Public Bank — to the extent necessary to process your deposit and withdrawal transactions. These providers operate under their own privacy policies and are subject to separate regulatory frameworks.

6.2 KYC and Identity Verification Partners

Where we use third-party identity verification services to assist with KYC processing, your identity documents and personal details will be shared with those providers under binding data processing agreements. These partners are prohibited from using your data for any purpose other than the verification service.

6.3 Game Studio Technology Partners

Our game studio technology partners may receive limited technical and session data (such as session tokens and game round identifiers) that is necessary to deliver game content and record outcomes. This data does not include your full identity details and is used solely for game delivery and RNG audit purposes.

6.4 Legal and Regulatory Disclosure

We may disclose your Personal Data to competent law enforcement authorities, regulatory bodies, or courts where we are legally required to do so, or where such disclosure is necessary to protect the rights, property, or safety of mygm2u, its players, or the public.

mygm2u uses cookies and similar tracking technologies on the Platform to deliver a functional, secure, and consistent experience for Malaysian players. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function and cannot be disabled. They include session cookies that maintain your login state, security tokens, and preferences such as your selected payment method. No consent is required for these cookies as they are technically essential.
• Performance & Analytics Cookies: These cookies collect aggregated, anonymised data about how players interact with the Platform — such as which pages are visited most frequently and how long sessions last. This information helps us improve the platform experience. These cookies are activated only with your consent.
• Functional Cookies: These cookies remember your choices and preferences (such as language settings and notification preferences) to provide a more personalised experience. They are activated with your consent.
• Marketing Cookies: mygm2u does not deploy third-party marketing or advertising cookies for the purpose of serving you advertisements on other websites. Promotional communications are handled through direct channels such as email and in-platform notifications, subject to your consent preferences.

You can control and manage cookies through your browser settings. Disabling strictly necessary cookies may affect your ability to log in or use core Platform features. For detailed guidance on managing cookies in your specific browser, consult your browser's help documentation.

mygm2u retains your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by applicable law or regulation. Our standard retention principles are as follows:

• Account and Identity Data: Retained for the duration of your account relationship with mygm2u, and for a minimum of five (5) years following account closure, to comply with anti-money laundering and financial record-keeping obligations.
• Transaction Records: Retained for a minimum of five (5) years following each transaction, in accordance with standard financial record-keeping requirements.
• KYC Documents: Identity and address verification documents are retained for the same period as account and identity data. Copies of documents are stored in encrypted form.
• Gaming Activity Data: Retained for the duration of your account relationship and for up to three (3) years following account closure, for responsible gambling monitoring, audit, and dispute resolution purposes.
• Customer Support Records: Retained for up to three (3) years following the closure of each support interaction.
• Marketing Consent Records: Retained for as long as necessary to demonstrate compliance with your consent preferences, and for up to two (2) years following your withdrawal of consent.

Following the expiry of applicable retention periods, Personal Data is securely deleted or anonymised so that it can no longer be used to identify you.

mygm2u implements a range of technical and organisational security measures designed to protect your Personal Data against unauthorised access, loss, misuse, or alteration. Key security controls in place include:

• SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encryption at rest for stored Personal Data, including identity documents and financial records;
• Role-based access controls ensuring that only authorised personnel with a legitimate operational need can access player data;
• Comprehensive audit logging of all access to player records;
• Multi-factor authentication requirements for administrative access to data systems;
• Regular internal security reviews and vulnerability assessments of Platform infrastructure;
• Staff training on data protection obligations and secure data handling practices.

While mygm2u takes reasonable and appropriate steps to protect your Personal Data, no internet-based system is completely immune to security risks. You are responsible for maintaining the confidentiality of your account credentials. If you suspect that your account has been compromised, please contact our support team immediately.

As a player registered on the mygm2u Platform, you hold the following rights in relation to your Personal Data. You may exercise any of these rights by submitting a request to our customer support team:

To exercise any of these rights, please contact our customer support team via live chat or by email (address provided in Section 14). We will respond to all verified data rights requests within thirty (30) calendar days. In complex cases, this period may be extended by an additional sixty (60) days, of which you will be notified.

Please note that some rights are subject to limitations where processing is required to comply with a legal obligation, to protect the vital interests of another person, or to establish, exercise, or defend legal claims.

mygm2u's primary operations are focused on the Malaysian market. However, as an online platform, certain data processing activities — such as the operation of game studio technology infrastructure, cloud hosting services, and KYC verification systems — may involve the transfer of Personal Data to data processors located outside of Malaysia.

Where such transfers occur, mygm2u ensures that appropriate safeguards are in place to protect your Personal Data to a standard at least equivalent to that applied in Malaysia. These safeguards include:

• Contractual data processing agreements with all third-party processors that require them to maintain adequate data protection standards;
• Preference for processors located in jurisdictions with recognised data protection frameworks;
• Regular review of third-party processor security certifications and compliance standards.

By using the mygm2u Platform and agreeing to this Privacy Policy, you acknowledge and consent to the potential transfer of your Personal Data to processors outside Malaysia for the purposes described in this Policy.

If we become aware that Personal Data has been submitted by a person under the age of 21, we will take immediate steps to delete that data and close the associated account. Any funds deposited by an underage user will be returned to the original payment source.

If you have reason to believe that a minor has registered an account or submitted Personal Data to mygm2u, please contact our support team immediately so that we can investigate and take appropriate action.

mygm2u reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or Platform operations. When we make material changes to this Policy, we will notify registered players via the email address associated with their account and/or by posting a prominent notice on the Platform.

Where changes are required immediately for legal or security reasons, they may take effect upon publication without prior notice. The "Last Updated" date at the top of this Policy will be revised accordingly. We encourage you to review this Policy periodically to stay informed of how we protect your Personal Data.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you must cease using the Platform and may request account closure by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by mygm2u, please contact us through the following channels:

When submitting a data rights request or privacy enquiry, please include your registered account username, the nature of your request, and any relevant reference numbers. We will acknowledge all privacy-related requests within 48 hours and respond substantively within thirty (30) calendar days.