1Personal Information We Collect
Mahkota69 collects your personal information only when it is genuinely necessary to deliver quality services, process transactions securely, and comply with applicable legal requirements in Malaysia. We do not collect excessive or irrelevant information beyond the scope of our services.
Specifically, the information we collect covers the following categories:
- Personal Identification Information: Full name as per identification card, identification card number (MyKad), date of birth, gender, and nationality.
- Contact Information: An active Malaysian phone number, email address, and current residential address.
- Financial Information: Bank account or e-wallet details (such as account number and bank name) used for deposits and withdrawals.
- Technical Information: IP address, browser type and version, device operating system, device ID (for mobile apps), and platform access logs.
- Platform Activity Information: Betting history, deposit and withdrawal records, game preferences, and platform usage patterns.
- KYC Documents: Copies of identity documents, proof of address, and any other verification documents required for legal compliance purposes.
We collect this information through three main methods: information you provide directly during registration or use of the platform, information collected automatically through tracking technologies such as cookies, and information received from authorised third parties such as identity verification providers and payment processors.
2How We Use Your Personal Data
Every piece of information we collect has a clear and limited purpose. mahkota69 uses your personal data solely for legitimate and transparent purposes, namely:
| Purpose of Use | Types of Data Used | Legal Basis |
|---|---|---|
| Registration & account management | Name, email, phone, IC | Contract performance |
| Deposit & withdrawal processing | Bank details, transactions | Contract performance |
| Identity verification (KYC) | IC, supporting documents | Legal obligation |
| Fraud & abuse prevention | IP, activity logs, usage patterns | Legitimate interests |
| Service & support communications | Email, phone | Contract performance |
| Marketing communications (with consent) | Email, phone | Your consent |
| Platform improvement & analytics | Usage data (anonymised) | Legitimate interests |
We will not use your data for any purpose not stated above without first obtaining your renewed consent. If we intend to use your data for a new purpose that differs from the original reason it was collected, you will be notified and asked to provide explicit consent.
3Personal Information Sharing
Mahkota69 takes member privacy very seriously. We do not sell, rent, or disclose your personal data to third parties for their own commercial marketing purposes. However, in certain limited situations, we may need to share your information with the following parties:
- Trusted Service Providers: Payment processors, KYC verification service providers, and server hosting companies bound by strict confidentiality agreements, who may only use your data for purposes we direct and nothing else.
- Authorities & Regulatory Bodies: Where required by Malaysian law, court order, or a lawful request from a law enforcement agency, we will disclose the necessary information in accordance with that requirement.
- Fraud Prevention: In cases where there is strong evidence of fraudulent activity or a serious security threat, we reserve the right to share relevant information with the responsible parties handling the case.
- Business Transfers: In the event of a merger, acquisition, or transfer of mahkota69 assets, your personal data may be transferred as part of that process, subject to prior notice being given to you.
4Encryption & Security Measures
Your data security is not just an add-on feature — it is at the core of how mahkota69 operates. We continuously invest in cutting-edge security infrastructure to ensure your personal and financial information remains protected at all times.
The security measures we implement include:
- 256-bit SSL/TLS Encryption: All communications between your browser or app and the mahkota69 servers are fully encrypted using the latest TLS 1.3 protocol, making them impossible to intercept by third parties.
- Encrypted Data Storage: Sensitive data such as passwords is stored in a one-way hash format that cannot be recovered. Financial information is stored in encrypted form using AES-256 algorithm.
- Two-Factor Authentication (2FA): mahkota69 provides an additional layer of security through two-factor authentication to protect your account from unauthorised login attempts.
- 24/7 Security Monitoring: Our cybersecurity team monitors systems around the clock to detect and respond to any threats or suspicious activity immediately.
- Regular Security Testing: We conduct regular penetration testing and security reviews by independent third parties to identify and address any system vulnerabilities.
- Internal Access Controls: Only specifically authorised personnel may access members' personal data, and every such access is logged for audit purposes.
While we take every reasonable step to protect your data, no security system can be guaranteed to be one hundred percent perfect. In the event of any security incident involving your data, mahkota69 will notify you within the timeframe required by applicable law.
5Cookie Policy
Cookies are small text files stored on your device when you browse the mahkota69 platform. We use cookies for limited and transparent purposes, with the primary goal of enhancing your overall user experience.
There are four types of cookies we use:
- Essential Cookies: Required for core platform functions such as login session authentication and security. These cookies cannot be disabled as the platform will not function properly without them.
- Preference Cookies: Store your preferences such as interface language and display settings to ensure a more comfortable experience each time you return.
- Analytics Cookies: Collect aggregated and anonymised usage data to help us understand how members interact with the platform for continuous improvement purposes.
- Security Cookies: Used to detect and prevent fraudulent activity and unauthorised access to your account.
You can manage your cookie settings through your browser at any time. Please note, however, that disabling certain cookies may affect platform functionality. For guidance on managing cookies in popular browsers, refer to your browser's help documentation.
6Your Rights as a Data Subject
Under Malaysia's Personal Data Protection Act 2010 and international best practices, you as a data subject have clearly defined rights regarding your personal information held by mahkota69. We fully respect and facilitate the exercise of these rights.
Right to Access
You have the right to know what personal data we hold about you and obtain a copy of it at any time through our official channels.
Right to Rectification
If any of your personal information is inaccurate or out of date, you have the right to request a correction and we will update it promptly.
Right to Erasure
You may request the deletion of your personal data when it is no longer needed, subject to any applicable legal retention requirements.
Right to Object
You have the right to object to the processing of your data for direct marketing purposes at any time, and we will stop immediately.
Right to Data Portability
You have the right to receive your personal data in a machine-readable format and transfer it to another service provider of your choice.
Right to Restrict Processing
In certain circumstances, you may request that the processing of your data be temporarily restricted while we investigate your request or complaint.
7Data Retention Period
Mahkota69 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Malaysian law. We do not retain your data longer than necessary.
- Active Account Data: Retained for the duration your mahkota69 account remains active and for a reasonable period after account closure for the purpose of resolving any disputes that may arise.
- Financial Transaction Records: Retained for a minimum of 7 years after the transaction date, in line with Malaysia's accounting and tax legal requirements.
- KYC Documents: Retained in accordance with the minimum requirements set by the relevant regulatory body, typically no less than 5 years after the business relationship ends.
- Security & Access Logs: Retained for 12 to 24 months for security audit purposes and incident investigation where necessary.
- Marketing Data: Retained until you withdraw consent or request deletion, whichever comes first.
Once the retention period has expired, your personal data will be securely deleted using methods that ensure it cannot be recovered, or anonymised so that it can no longer be directly linked to your identity.
8Third-Party Links and Services
The mahkota69 platform may contain references to third-party payment processing services and technical providers required for platform operations. While we carefully select our third-party partners and require them to comply with strict data protection standards, the mahkota69 Privacy Policy applies only to information we process directly.
Every third-party provider we engage is bound by a data processing agreement that requires them to:
- Use your data only in accordance with mahkota69's instructions and not for their own purposes
- Implementing technical and organisational security measures consistent with our standards
- Notify us promptly in the event of any security incident
- Delete or return your data when their services end
9Protection of Minors
Mahkota69 is an online entertainment platform strictly restricted to individuals aged 18 Years and Above only. We do not intentionally collect or process any personal information from children or legally recognised minors.
During the registration process, we carry out age verification through strict KYC procedures to ensure that no minors can register or use our platform. These measures include:
- Date of birth verification during account registration
- Valid identity document verification during the KYC process
- Continuous monitoring to detect any suspicious activity
- Immediate account closure if the account holder is found to be underage
If we become aware that we have inadvertently collected personal information from a minor, we will take immediate action to delete that information and close the relevant account without delay. Parents or guardians with concerns about this matter are encouraged to contact our support team promptly.
10Amendments to This Privacy Policy
Mahkota69 reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or technological developments that affect how we handle personal information.
When material changes are made to this Privacy Policy, we will take the following steps to ensure you are always kept informed:
- Display a clear notice on the mahkota69 platform homepage at least 14 days before the amendment takes effect
- Send notifications to registered members via their registered email or SMS
- Update the "Last Updated" date at the top of this document
- Retain previous versions of the Privacy Policy for reference by members who require them
Your continued use of the mahkota69 platform after any amendment takes effect will be considered your acceptance of the updated terms. If you do not agree with the changes made, you have the right to close your account and stop using the platform before the amendment comes into effect.
We encourage you to review this Privacy Policy periodically, especially before providing us with any new personal information, to ensure you always understand how your information is handled.
11Contact Us on Privacy Matters
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, mahkota69's Data Protection Officer (DPO) team is here to assist you.
You may contact us through the following official channels and we are committed to responding within 3 working days for general enquiries, and within 30 working days for official requests relating to data subject rights:
We also accept written requests through official channels. For requests involving data subject rights such as access, correction, or deletion, please include sufficient identification details so we can process your request securely and accurately. All privacy-related communications will be handled with complete confidentiality.