Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how myk2ss ("we", "us", "our", "the Company") collects, processes, stores, and protects personal data provided by users ("you", "User", "Player") when you access or use the myk2ss platform, including the website at https://myk2ss.cam, any associated subdomains, and all related services (collectively, the "Platform").

myk2ss takes the privacy of its users seriously. We are committed to handling your personal information responsibly, transparently, and in accordance with applicable data protection principles. This Policy forms part of our broader framework of player protection documents alongside our Terms & Conditions and Responsible Gambling Policy.

By registering an Account or using any feature of the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Platform.

2. Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or can be used to identify you as a natural person, directly or indirectly, including but not limited to your name, email address, identification number, device identifiers, and financial data.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
• "Data Controller" means myk2ss, the entity that determines the purposes and means of Processing Personal Data.
• "Data Processor" means any third party engaged by myk2ss to process Personal Data on its behalf under a contractual arrangement.
• "Consent" means freely given, specific, informed, and unambiguous agreement by which you indicate acceptance of Personal Data Processing for a stated purpose.
• "KYC" means Know Your Customer — the identity verification process required by regulatory obligations and our internal compliance framework.
• "Cookies" means small text files placed on your device by the Platform to store session, preference, and analytical information.

3. Data We Collect

myk2ss collects Personal Data through several means — directly from you when you register or use the Platform, automatically through technical systems during your session, and in limited cases from verified third-party sources to fulfil our compliance and fraud-prevention obligations.

3.1 Data You Provide Directly

Category	Examples	When Collected
Identity Data	Full legal name, date of birth, nationality, MyKad or passport number	Registration & KYC verification
Contact Data	Email address, mobile phone number, residential address	Registration & account management
Financial Data	Payment method details (e-wallet account ID, bank name, last 4 digits of account), transaction history	Deposits, withdrawals & KYC
Verification Documents	Copy of government-issued ID, proof of address, payment method ownership evidence	KYC verification
Communication Data	Content of support tickets, live chat transcripts, email correspondence	Customer support interactions

3.2 Data Collected Automatically

When you access the Platform, our systems automatically record the following technical data:

• IP address and approximate geographic location (country/city level, e.g., Kuala Lumpur, Penang, Johor Bahru);
• Device type, operating system, browser type and version;
• Session duration, pages visited, features used, and click-path data;
• Cookies, pixel tags, and similar tracking technologies (see Section 7);
• Betting and gaming activity logs, including wager amounts, game selections, and transaction timestamps.

3.3 Data from Third Parties

In limited circumstances, myk2ss may receive Personal Data from third parties, including:

• Payment service providers (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX via Maybank, CIMB, Public Bank, Hong Leong Bank) for the purpose of confirming transaction status and detecting fraud;
• Identity verification service providers engaged to assist with KYC compliance;
• Credit reference or fraud-screening agencies where required for anti-money laundering (AML) purposes.

4. How We Use Your Data

myk2ss uses your Personal Data for the following core purposes:

• Account creation and management — to register your Account, authenticate logins, and maintain your player profile on the Platform;
• Transaction processing — to process deposits and withdrawals via your selected payment method, including Touch 'n Go eWallet, DuitNow, FPX, and cryptocurrency channels;
• Identity verification (KYC & AML) — to verify your identity and age as required by our licensing obligations and internal compliance procedures;
• Regulatory compliance — to maintain records as required by applicable gaming regulations and anti-money laundering frameworks;
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, and other prohibited conduct described in our Terms & Conditions;
• Customer support — to respond to your queries, complaints, and support requests via live chat and email;
• Platform improvement — to analyse usage data and session behaviour to improve the design, functionality, and performance of the Platform;
• Marketing communications — where you have opted in, to send you promotional offers, bonus notifications, and updates relevant to your account. You may opt out at any time via your account settings;
• Responsible gambling — to monitor patterns of play that may indicate problem gambling behaviour and to provide you with appropriate tools and interventions where warranted.

5. Legal Basis for Processing

myk2ss processes your Personal Data only where a valid legal basis exists. The applicable legal bases are:

• Contractual necessity — processing required to perform the contract between you and myk2ss (i.e., to operate your Account and provide the services you have requested);
• Legal obligation — processing required to comply with applicable laws and regulatory requirements, including KYC, AML, and gaming licence conditions;
• Legitimate interests — processing carried out in pursuit of myk2ss's legitimate business interests, including fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights and interests;
• Consent — where you have expressly opted in to receive marketing communications or to participate in analytics programmes. Consent may be withdrawn at any time.

6. Data Sharing & Disclosure

myk2ss does not sell, rent, or trade your Personal Data to third parties for commercial purposes. We may disclose your Personal Data to the following categories of recipients in the circumstances described:

6.1 Service Providers & Processors

We engage trusted third-party service providers who process Personal Data on our behalf under binding data processing agreements. These include payment processors (including e-wallet operators and Malaysian banks operating via FPX and DuitNow), KYC verification providers, cloud hosting infrastructure providers, customer support software vendors, and analytics platforms. All processors are contractually obligated to handle your data securely and only for the purposes specified by myk2ss.

6.2 Regulatory and Law Enforcement Authorities

myk2ss may disclose Personal Data to competent regulatory, judicial, or law enforcement authorities where required by applicable law, court order, or regulatory directive — for example, in connection with AML investigations, fraud inquiries, or licensing compliance audits. Any such disclosure will be made on the minimum necessary basis and recorded in our compliance logs.

6.3 Business Transfers

In the event that myk2ss is subject to a merger, acquisition, reorganisation, or asset sale, Personal Data held by myk2ss may be transferred to the successor entity as part of that transaction. You will be notified in advance of any such transfer and of any material changes to this Policy that may result.

7. Cookies & Tracking Technologies

The myk2ss Platform uses cookies and similar technologies to deliver core functionality, improve user experience, and gather analytical data. The following categories of cookies are used:

Cookie Type	Purpose	Required?
Strictly Necessary	Session authentication, security tokens, load balancing. Required for the Platform to function.	Yes — cannot be disabled
Functional	Remembering user preferences (language, display settings), keeping you logged in between sessions.	Recommended
Analytical / Performance	Collecting anonymised usage statistics to understand how Players interact with the Platform and identify areas for improvement.	Optional — opt out in settings
Marketing	Tracking conversions and delivering relevant promotional content to opted-in Players. Not shared with third-party ad networks.	Optional — opt out in settings

You may manage your cookie preferences through your browser settings at any time. Disabling strictly necessary cookies will prevent the Platform from functioning correctly.

8. Data Retention

myk2ss retains your Personal Data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the lifetime of your Account and for a minimum of five (5) years following Account closure, to comply with AML record-keeping requirements;
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction;
• KYC documentation: Retained for a minimum of five (5) years from the date of verification;
• Customer support communications: Retained for two (2) years from the date of the last interaction, unless the communication forms part of a dispute or investigation;
• Marketing opt-in records: Retained until you withdraw consent, plus a reasonable period thereafter to demonstrate compliance;
• Technical and log data: Typically retained for ninety (90) days, unless required for a specific investigation.

When Personal Data is no longer required, it is securely deleted or anonymised in accordance with our data disposal procedures.

9. Data Security

myk2ss implements appropriate technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit TLS/SSL encryption for all data transmitted between your device and our servers — the same encryption standard used by leading Malaysian banks such as Maybank and CIMB;
• Encryption of sensitive data at rest, including identity documents and financial records;
• Role-based access controls ensuring that only authorised personnel can access Personal Data on a need-to-know basis;
• Regular internal security audits and vulnerability assessments;
• Multi-factor authentication for administrative access to systems holding Personal Data;
• Formal data breach response procedures, including timely notification to affected users where a breach poses a risk to your rights and interests.

While we apply rigorous security standards, no internet transmission or storage system is completely immune from risk. You are responsible for keeping your Account login credentials confidential and for notifying myk2ss immediately if you suspect unauthorised access to your Account.

10. Your Rights

As a data subject, you have the following rights in relation to your Personal Data held by myk2ss. To exercise any of these rights, please contact us using the details in Section 14.

• Right of Access: You may request a copy of the Personal Data we hold about you. We will respond within a reasonable timeframe and provide the information in a clear, structured format.
• Right to Rectification: If your Personal Data is inaccurate or incomplete, you may request that we correct or update it.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that regulatory data (such as KYC and transaction records) cannot be deleted before the mandatory retention period expires.
• Right to Restriction of Processing: You may request that we limit processing of your data in certain circumstances — for example, while a dispute regarding accuracy is being resolved.
• Right to Data Portability: You may request that your Personal Data be provided to you in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You may object to Processing based on legitimate interests or for direct marketing purposes. Objections to marketing will always be honoured. Objections to other processing will be assessed on their merits.
• Right to Withdraw Consent: Where Processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of Processing that occurred prior to withdrawal.

11. International Data Transfers

myk2ss operates internationally, and your Personal Data may be processed by our service providers or operational teams in jurisdictions outside Malaysia. Where such transfers occur, myk2ss ensures that appropriate safeguards are in place to protect your data at a standard equivalent to what you would expect within Malaysia. These safeguards may include contractual data protection clauses, adequacy decisions, or binding corporate rules, as appropriate to the receiving jurisdiction and the nature of the data transferred.

12. Minors & Age Restriction

The myk2ss Platform is strictly for individuals aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. If we become aware that Personal Data has been submitted by a person under 21, that Account will be immediately suspended and the associated Personal Data will be deleted in accordance with applicable law, except where retention is required by regulatory obligations.

If you are a parent or guardian and have reason to believe your child has registered an Account on the Platform, please contact us immediately at the address in Section 14.

13. Policy Amendments

myk2ss may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or the services we provide. Where a material change is made, we will notify registered Account holders by email at least seven (7) days before the revised Policy takes effect. The "last updated" date at the top of this page will be revised with each update. Your continued use of the Platform following the effective date of any revision constitutes acceptance of the updated Policy. We encourage you to review this page periodically.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way myk2ss handles your Personal Data, please contact our support team. We aim to acknowledge all privacy-related queries within 48 hours and to resolve them within 30 days.