Mahjong69 Privacy Policy — Full Commitment Protecting Malaysian Members' Data

1 Information We Collect

1.1 Information You Provide Directly

When you register an account, use the platform, or contact the mahjong69 support team, we may collect the following information:

• Full name as shown on your MyKad or other valid Malaysian identification document
• An active Malaysian phone number for account verification and communications
• Email address for account management and important notifications
• Date of birth for minimum age verification of 18 years
• Payment method information linked to your account — including Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay e-wallet numbers, or FPX/Malaysian bank account details
• Identity document copies (MyKad, bank statement) requested during the KYC verification process for withdrawals exceeding certain limits
• Communication records with the mahjong69 customer support team via live chat or email

1.2 Automatically Collected Information

When you use the mahjong69 platform, our systems automatically record the following technical information:

1.3 Information We Do Not Collect

Mahjong69 does not collect biometric data, health information, or any category of sensitive personal data unrelated to platform use. We also do not store full credit card numbers, PINs, or passwords in readable format — all sensitive financial information is processed directly through recognised third-party payment processors without passing through mahjong69 servers.

2 How We Use Your Data

2.1 Primary Purposes of Data Use

Data collected by mahjong69 is used solely for purposes related to delivering the platform's services to you. This includes:

• Account Management — creating, verifying, and maintaining your mahjong69 account securely
• Transaction Processing — processes deposits via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, FPX, and withdrawals to your Malaysian account
• Customer Support — handling enquiries, resolving technical issues, and providing account-related assistance
• Identity Verification (KYC) — meets legal compliance requirements and prevents financial fraud
• Platform Improvements — analyzing usage patterns to improve the performance, speed, and overall experience of the mahjong69 platform
• Service Communications — sending important notifications related to your account, security, transactions, and platform updates
• Fraud Detection — identifying and preventing suspicious activity, fraud, or usage that violates mahjong69's Terms & Conditions

2.2 Marketing Communications

Mahjong69 may send communications relating to promotions, new bonuses, and special offers to members who have given their consent. You may withdraw this consent at any time by updating your notification settings in your account or by contacting our support team. Even if you opt out of marketing communications, you will still receive important notifications relating to your account's security and transactions.

3 Data Sharing & Disclosure

3.1 Core Principle — No Data Sales

Mahjong69 strictly does not sell, rent, or transfer members' personal data to any third party for marketing, advertising, or commercial purposes. This is our absolute commitment to every Malaysian member who entrusts their data to the mahjong69 platform.

3.2 Permitted Sharing Under Limited Circumstances

There are limited circumstances in which mahjong69 may need to share your data with certain parties:

• Authorised Payment Processors — to process deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX, and Malaysian banks. Only the minimum data necessary to complete the transaction is shared.
• Malaysian Authorities — where required by court order, a legitimate criminal investigation, or legal obligations under Malaysian law. In such cases, mahjong69 will disclose only the minimum information necessary.
• Technical Service Providers — third parties that help us operate the platform (such as server hosting providers and cybersecurity services) are bound by strict confidentiality agreements and are not permitted to use your data for any other purpose.
• Your Explicit Consent — in the rare event that we need to share data outside of the situations described above, we will obtain your explicit consent beforehand.

4 Data Security

4.1 mahjong69 Security Infrastructure

Mahjong69 continuously invests in security infrastructure to ensure members' personal and financial data remains protected at all times. Key security measures we have in place include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and mahjong69's servers
• An intrusion detection system (IDS) that monitors network traffic 24 hours a day
• Multi-layered firewall and DDoS protection system to prevent service disruptions
• Member passwords are stored using a cryptographic hashing algorithm that cannot be decrypted
• Two-factor authentication (2FA) is available for all accounts and strongly encouraged to be enabled
• Regular security audits by independent third parties to identify and address vulnerabilities
• Strict internal access controls — mahjong69 staff can only access data required for their specific role

4.2 Shared Responsibilities

While mahjong69 takes all reasonable steps to protect your data, security is a shared responsibility. You can help keep your account secure by:

• Use a strong, unique password for your mahjong69 account — do not reuse the same password across other platforms
• Enabling two-factor authentication (2FA) in your account settings
• Do not share your login credentials with anyone, including family members
• Be cautious of emails or messages claiming to be from mahjong69 that ask for your account details — our team will never request your password through any channel
• Log out of your mahjong69 account when using a shared or public device

4.3 Data Breach Notification

In the unlikely event of a data breach affecting members' personal information, mahjong69 is committed to notifying affected members within 72 hours of becoming aware of the incident, in line with industry best practices. Notifications will be sent via email and/or SMS, and will include details of what occurred, what data may have been affected, and steps you can take to protect yourself.

5 Cookies & Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files stored in your web browser when you visit the mahjong69 website. They help our platform recognise your device, remember your preferences, and deliver a better experience on your next visit. mahjong69 uses several types of cookies:

5.2 Cookie Management

You can manage or delete cookies through your web browser settings. Please note that disabling essential cookies may affect the functionality of the mahjong69 platform, including your ability to log in and carry out transactions securely. For guidance on managing cookies in popular browsers, refer to your web browser's documentation.

6 Your Rights as a mahjong69 Member

6.1 Your Privacy Rights at a Glance

As a mahjong69 member, you have the following rights regarding your personal data, in line with the principles of Malaysia's Personal Data Protection Act 2010 (PDPA):

6.2 How to Exercise Your Rights

To exercise any of the privacy rights listed above, please contact the mahjong69 privacy team by email at support@mahjong69.asia, clearly stating your request. We may need to verify your identity before processing any request related to your personal data, to ensure your data security is not compromised.

7 Data Retention & Deletion

7.1 Data Retention Period

Mahjong69 retains members' personal data for as long as the account is active and for a reasonable period following account closure, taking into account the following legal requirements:

• Financial transaction records (deposits and withdrawals) — retained for a minimum of 7 years in line with Malaysian financial reporting requirements
• Identity verification (KYC) records — retained for a minimum of 5 years after account closure to meet anti-money laundering (AML) compliance requirements
• Customer support communication logs — retained for 2 years for reference and dispute resolution
• Aggregated analytics data (with no individual identification) — may be retained indefinitely
• Basic profile information — deleted within 30 days of a valid account closure request, subject to no outstanding issues

7.2 Data Deletion After the Retention Period

Once the specified retention period has ended, mahjong69 will securely delete or anonymise your personal data using methods that ensure the data cannot be recovered. The deletion process follows a schedule set by mahjong69's internal data management team and is audited on a regular basis.

8 Children's Privacy & Youth Protection

8.1 Adults-Only Platform

The mahjong69 platform is intended exclusively for users aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18. All account registrations require age verification, and we reserve the right to request proof of age at any time.

8.2 Actions Where Children's Data Is Inadvertently Collected

If mahjong69 becomes aware that personal data of an individual under 18 has been collected without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account. Parents or guardians who suspect their child is using the mahjong69 platform are welcome to contact our support team for prompt action.

8.3 Parental Control Tools

Mahjong69 encourages parents and guardians to install parental control software on all devices used by underage family members. A range of parental control solutions are available, free or paid, for iOS, Android, and Windows, and can help restrict access to adult entertainment platforms.

9 Policy Amendments & How to Contact Us

9.1 Privacy Policy Amendments

Mahjong69 reserves the right to update this Privacy Policy from time to time to reflect changes in our data handling practices, legal requirements, or platform improvements. Members will be notified of any material amendments via in-platform notifications or email before the changes take effect. Continued use of the mahjong69 platform following such notification constitutes acceptance of the updated policy.

9.2 Contact the mahjong69 Privacy Team

For any enquiries, concerns, or requests relating to your personal data privacy, you may reach us through the following channels:

• Live Chat 24/7: The fastest way — click the chat icon at the bottom right corner of the mahjong69 platform
• Email: support@mahjong69.asia — for requests requiring written documentation, response within 24–48 business hours
• Frequently Asked Questions: Visit mahjong69 FAQ page for answers to the most frequently asked privacy questions

Our team operates 24 hours a day, 7 days a week in Bahasa Melayu and is ready to help you understand your privacy rights and handle any requests relating to your personal data on the mahjong69 platform.