Privacy Policy — 123myr

1. Introduction

123myr ("we", "us", "our", "the Platform") operates the online gaming and sports betting platform accessible at https://123myr.net. We understand that your personal data is important to you, and we take our obligations as a data handler seriously. This Privacy Policy ("Policy") describes in plain terms what personal information 123myr collects from you, why we collect it, how we use and protect it, and what rights you have in relation to your data.

This Policy applies to all users of the 123myr platform, including registered account holders and visitors who browse the website without registering. By creating a 123myr account, logging in, or otherwise using any part of our Services, you acknowledge that you have read this Policy and consent to the practices described herein.

This Privacy Policy should be read alongside the 123myr Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement governing your use of the platform.

2. Data Controller

For the purposes of applicable data protection legislation, 123myr is the data controller responsible for your personal information. This means 123myr determines the purposes for which, and the manner in which, your personal data is processed. Questions or requests relating to your personal data should be directed to our data protection contact at [email protected].

3. Personal Data We Collect

123myr collects personal data through multiple channels — directly from you when you register and use the platform, automatically through your use of the website, and occasionally from third parties in connection with KYC and payment verification. The categories of personal data we may collect include:

3.1 Registration & Account Data

• Full legal name as appearing on your Malaysian National Identity Card (MyKad) or passport
• Date of birth (required to verify the 21+ age eligibility requirement)
• Residential address
• Email address
• Malaysian phone number
• Username and hashed password (passwords are never stored in plain text)
• Account preferences and communication settings

3.2 Identity Verification (KYC) Data

• Copies of government-issued identity documents (MyKad or passport)
• Proof of address documents (utility bills, bank statements)
• Proof of payment method ownership (e-wallet screenshots, bank account screenshots)
• Selfie or liveness verification images where required by our compliance processes

3.3 Financial Data

• Deposit and withdrawal transaction records, including amounts and timestamps
• Payment method identifiers (e-wallet account references, bank account numbers) — full card or account numbers are never stored by 123myr
• Wallet balance history and bonus credit/debit records
• Cryptocurrency transaction hashes (for USDT TRC20 transactions)

3.4 Gaming Activity Data

• Bets placed, games played, wager amounts, and game outcomes
• Session start and end times, session durations
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)
• Bonus usage and wagering requirement progress

3.5 Technical & Device Data

• IP address and approximate geolocation (city/region level)
• Device type, operating system, and browser type and version
• Unique device identifiers
• Referring URL and pages visited within the 123myr platform
• Login timestamps and session tokens

3.6 Communications Data

• Records of live chat conversations with 123myr customer support
• Email correspondence with the 123myr team
• Survey responses and feedback submissions

4. How We Use Your Personal Data

123myr uses your personal data for the following purposes:

123myr does not use your personal data for automated decision-making that produces significant legal effects without human review, except where required by fraud prevention or AML systems, in which case you have the right to request human review of automated decisions affecting your account.

5. Legal Basis for Processing

123myr processes your personal data on the following legal bases depending on the specific purpose:

• Contractual necessity: Processing required to perform our agreement with you — account management, payment processing, game delivery, and customer support.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC/AML obligations under our gaming licence conditions and applicable financial regulations.
• Legitimate interests: Processing for fraud prevention, security monitoring, platform improvement, and responsible gaming oversight — where our legitimate interests do not override your rights and freedoms.
• Consent: Where you have provided specific, informed consent — primarily for marketing communications. You may withdraw this consent at any time by updating your account communication preferences or contacting [email protected].

6. Sharing Your Personal Data

123myr does not sell your personal data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment processors and e-wallet providers: Touch 'n Go eWallet, Boost, GrabPay, DuitNow, Maybank, CIMB, and other payment partners receive the minimum data required to process your transactions securely.
• KYC and identity verification service providers: Third-party identity verification platforms that assist with document authentication and age verification processes.
• Game content providers: Our gaming software partners (e.g., Pragmatic Play, PG Soft, Microgaming) may receive session identifiers necessary for game delivery; they do not receive your full personal profile.
• Fraud prevention and AML platforms: Specialised compliance technology providers that assist 123myr in detecting suspicious activity and meeting its regulatory obligations.
• Regulatory and law enforcement authorities: Where 123myr is legally required to disclose information to gaming regulators, financial intelligence units, or law enforcement agencies pursuant to a valid legal request.
• Professional advisors: Legal, financial, and technical advisors who are bound by professional confidentiality obligations.

In all cases, third-party data recipients are contractually required to process your data only for the specific purpose for which it was shared, and to maintain appropriate security standards.

7. Cookies & Tracking Technologies

123myr uses cookies and similar tracking technologies on its platform. Cookies are small text files placed on your device that help the platform function correctly, remember your preferences, and improve your experience.

7.1 Types of Cookies Used

• Essential cookies: Required for the platform to function. These include session authentication tokens, login state cookies, and security cookies. These cannot be disabled without impairing platform functionality.
• Performance cookies: Collect anonymised data about how players navigate the platform — which pages are visited most, where users drop off, and similar aggregated analytics. This helps 123myr improve the platform experience.
• Functionality cookies: Remember your preferences such as language settings, preferred payment method display, and responsible gaming tool settings.
• Marketing cookies (with consent only): Used to show relevant promotional content. These are only set with your explicit consent and can be withdrawn via account settings.

You may manage cookie preferences via your browser settings. Note that disabling essential cookies will affect your ability to log in and use the platform.

8. Data Retention

123myr retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, and as required by applicable legal and regulatory obligations. Specific retention periods include:

• Account data: Retained for the duration of your account's active status and for a minimum of five (5) years following account closure, as required by gaming licence and AML regulations.
• KYC documentation: Retained for a minimum of five (5) years from the date of verification, in compliance with international AML standards.
• Transaction records: Retained for a minimum of five (5) years in line with financial record-keeping requirements.
• Support communications: Retained for three (3) years from the date of the last interaction.
• Technical and device data: Typically retained for up to twelve (12) months for security and fraud analysis purposes.

Upon the expiry of the applicable retention period, data is securely deleted or anonymised in a manner that prevents re-identification.

9. Data Security

123myr implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 123myr platform
• Password hashing using one-way cryptographic algorithms — 123myr staff cannot view your password in plain text
• Two-factor authentication (2FA) available for all player accounts
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Regular security audits and penetration testing of the platform infrastructure
• Automated fraud and anomaly detection systems monitoring for unusual account activity in real time

While 123myr takes all reasonable precautions, no digital transmission or storage system is 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, 123myr will notify affected users and relevant regulatory authorities in accordance with applicable breach notification obligations.

10. Your Data Rights

Subject to applicable data protection law and the terms of our gaming licence obligations, you have the following rights in relation to your personal data held by 123myr:

• Right of access: You may request a copy of the personal data 123myr holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations.
• Right to restrict processing: You may request that 123myr restricts the processing of your data in certain circumstances, such as while accuracy is being verified.
• Right to data portability: Where processing is based on your consent or contractual necessity, you may request your data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please submit a written request to [email protected]. 123myr will respond to all valid requests within 30 days. We may require identity verification before processing a data rights request.

11. Children's Privacy

The 123myr platform is strictly for adults aged 21 years and above. 123myr does not knowingly collect personal data from individuals under the age of 21. If we become aware that a user under 21 has registered an account, the account will be immediately closed and any funds returned following identity verification. If you believe a minor has registered on the platform, please contact us immediately at [email protected]. Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gaming platforms.

12. International Data Transfers

123myr's primary operations and data storage are focused on serving Malaysian players. However, some of our technology providers and data processors may be located outside Malaysia. Where personal data is transferred internationally, 123myr ensures that appropriate safeguards are in place — such as standard contractual clauses or equivalent data protection arrangements — to ensure your data receives an equivalent level of protection regardless of where it is processed.

13. Third-Party Links

The 123myr platform may contain references or contextual links to other online services. This Privacy Policy applies solely to the 123myr platform. 123myr is not responsible for the privacy practices, content, or security of any third-party website or service. We encourage you to review the privacy policies of any third-party service you interact with independently of the 123myr platform.

14. Updates to This Privacy Policy

123myr may update this Privacy Policy periodically to reflect changes in our data practices, regulatory requirements, or platform features. When material changes are made, we will notify registered players via their registered email address or through a prominent notice on the 123myr platform, with reasonable advance notice of the effective date of the changes. The "Last Updated" date at the top of this Policy will reflect the date of the most recent revision. Continued use of the platform following the effective date of a revised Privacy Policy constitutes acceptance of the updated terms.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by 123myr, please contact us:

• Email: [email protected]
• Live Chat: Available 24/7 from within your 123myr account after login
• Response Time: 123myr aims to respond to all privacy-related queries within 5 business days

For data rights requests specifically, please title your email "Data Rights Request — [Your Username]" to ensure prompt routing to our data protection team.