mygm2u Privacy Policy

Last Updated: 11 June 2026

1. Introduction & Scope

This Privacy Policy ("Policy") is published by mygm2u ("mygm2u", "we", "us", or "our") and applies to all personal data collected, processed, or stored in connection with your use of the mygm2u Platform accessible at mygm2u.co, including all associated sub-pages, games, sportsbook services, promotions, and support channels.

mygm2u is committed to protecting the privacy and personal data of every Member. This Policy is intended to provide you with a transparent and complete account of our data practices so that you can make informed decisions about your engagement with the mygm2u Platform. Please read this Policy carefully. By registering a mygm2u Account or continuing to use the Platform, you acknowledge that you have read and understood this Policy.

This Policy should be read in conjunction with the mygm2u Terms & Conditions. In the event of any conflict between this Policy and the Terms & Conditions with respect to data matters, this Policy shall prevail.

2. Data Controller

For the purposes of applicable data protection law, mygm2u is the data controller in respect of personal data collected through the mygm2u Platform. As data controller, mygm2u is responsible for determining the purposes and means of processing your personal data. Enquiries relating to data protection may be directed to mygm2u's support team using the contact details provided in Section 16 of this Policy.

3. Categories of Personal Data Collected

Depending on how you interact with the mygm2u Platform, we may collect and process the following categories of personal data:

• Identity Data: Full name, date of birth, gender, and copies of identity documents such as your Malaysian national identity card (MyKad) provided during KYC verification.
• Contact Data: Email address, Malaysian mobile number, and residential address.
• Financial Data: Payment method details (e.g., Touch n Go eWallet account reference, Boost account reference, bank account details for internet banking transfers including Maybank, CIMB, Public Bank, Hong Leong Bank, and RHB), deposit and withdrawal history, and transaction records.
• Account Data: Username, encrypted password hash, account preferences, bonus balances, wagering history, game session records, and responsible gaming settings.
• Technical Data: IP address, device identifiers, browser type and version, operating system, screen resolution, session duration, and pages visited on the mygm2u Platform.
• Communications Data: Records of your correspondence with mygm2u's support team via live chat, email, or any other communication channel.
• Marketing Preferences: Your stated preferences regarding receipt of promotional communications from mygm2u.

4. How We Collect Your Data

mygm2u collects personal data through the following means:

• Direct Submission: Information you provide when registering a mygm2u Account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in any promotion.
• Automated Collection: Technical and usage data collected automatically through cookies, web server logs, and similar technologies when you access the mygm2u Platform — see Section 6 for full details.
• Third-Party Sources: Identity and fraud-screening data received from KYC verification service providers, payment processors, and fraud prevention agencies engaged by mygm2u to fulfil its compliance obligations.

5. Purposes & Legal Bases for Processing

mygm2u processes your personal data for the following purposes and on the following legal bases:

• Account Management & Service Delivery (Contract): To create and administer your mygm2u Account, process deposits and withdrawals, deliver game and sportsbook services, and respond to support queries.
• KYC & Identity Verification (Legal Obligation): To verify your identity and age (21+ requirement), satisfy anti-money laundering (AML) obligations, and comply with international gaming authority licensing conditions.
• Fraud Prevention & Security (Legitimate Interests): To detect and prevent fraudulent activity, multi-accounting, bonus abuse, and other security threats affecting mygm2u and its Members.
• Responsible Gaming (Legal Obligation & Legitimate Interests): To operate mandatory responsible gaming controls including self-exclusion, deposit limits, and problem gambling detection in compliance with licensing requirements.
• Marketing Communications (Consent): To send promotional offers, bonus notifications, and platform updates to Members who have opted in to marketing communications.
• Analytics & Platform Improvement (Legitimate Interests): To analyse Platform usage, improve user experience, optimise game lobbies, and test new features.
• Legal & Regulatory Compliance (Legal Obligation): To retain records as required by applicable law, respond to regulatory enquiries, and fulfil reporting obligations.

6. Cookies & Tracking Technologies

mygm2u uses cookies and similar tracking technologies on the Platform. Cookies are small data files placed on your device that help us recognise returning Members, maintain authenticated sessions, and collect usage analytics. The categories of cookies used by mygm2u include:

• Strictly Necessary Cookies: Required for the Platform to function — including authentication session cookies that keep you logged in to your mygm2u Account. These cannot be disabled.
• Performance & Analytics Cookies: Used to measure how Members interact with the Platform, which pages are most visited, and how games are accessed, to improve the mygm2u user experience.
• Functionality Cookies: Used to remember your preferences such as language settings, preferred game categories, and responsible gaming tool configurations.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair the function of the mygm2u Platform and you may be unable to remain logged in to your Account.

7. Disclosure of Personal Data

mygm2u does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We may disclose your personal data to the following categories of recipients, strictly as necessary and subject to appropriate data protection agreements:

• Payment Processors: Touch n Go, Boost, Maybank, CIMB, Public Bank, Hong Leong Bank, RHB, and other payment service providers engaged to process your deposits and withdrawals.
• KYC & Fraud Screening Providers: Third-party identity verification and AML screening services engaged by mygm2u to fulfil its regulatory obligations.
• Game Providers: Software providers whose games are hosted on the mygm2u Platform may receive anonymised session data necessary to operate their games.
• IT & Infrastructure Providers: Cloud hosting, content delivery, and cybersecurity providers engaged to operate and protect the mygm2u Platform.
• Regulatory & Law Enforcement Authorities: Where mygm2u is legally required to disclose information to gaming regulators, tax authorities, law enforcement agencies, or pursuant to a valid court order.

8. International Data Transfers

Some of mygm2u's third-party service providers may be located or operate data processing infrastructure outside Malaysia. Where personal data is transferred internationally, mygm2u ensures that appropriate safeguards are in place — including standard contractual clauses or equivalent measures — to protect your data to the same standard as required under applicable Malaysian and international data protection frameworks.

9. Data Retention

mygm2u retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements. Specifically:

• Account Data and transaction records are retained for a minimum of five (5) years following account closure, in compliance with applicable AML and gaming authority record-keeping requirements.
• KYC documents are retained for a minimum of five (5) years following the end of the Member relationship.
• Communications data (support chat and email records) are retained for three (3) years.
• Technical and analytics data is retained in anonymised or aggregated form for up to two (2) years.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with mygm2u's data disposal procedures.

10. Security Measures

mygm2u implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the mygm2u Platform;
• Encryption of sensitive data fields (including payment credentials and passwords) at rest;
• Strict role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity specialists;
• Two-factor authentication (2FA) for both Member accounts and internal administrative access;
• Comprehensive incident response and breach notification procedures.

11. Your Rights as a Data Subject

Subject to applicable data protection law, you have the following rights in respect of your personal data held by mygm2u:

• Right of Access: You may request a copy of the personal data mygm2u holds about you.
• Right of Rectification: You may request correction of any inaccurate or incomplete personal data.
• Right of Erasure: You may request deletion of your personal data where mygm2u no longer has a lawful basis for retaining it — subject to overriding legal obligations such as AML record-keeping requirements.
• Right to Restrict Processing: You may request that mygm2u restricts its processing of your personal data in certain circumstances.
• Right to Data Portability: You may request receipt of your personal data in a structured, machine-readable format where technically feasible.
• Right to Object: You may object to processing of your personal data based on mygm2u's legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact mygm2u's support team using the details in Section 16. mygm2u will respond to all verifiable data subject requests within thirty (30) days. Identity verification may be required before requests are processed.

12. Children & Minors

The mygm2u Platform is strictly for individuals aged 21 and above. mygm2u does not knowingly collect or process personal data relating to individuals under the age of 21. Where mygm2u becomes aware that personal data has been collected from a person under 21 — whether through inadequate age verification or any other means — it will take immediate steps to delete such data and close the associated Account. Parents or guardians who believe a minor may have registered on the mygm2u Platform are encouraged to contact our support team immediately.

13. Marketing Communications

mygm2u may send promotional emails, SMS notifications, or in-platform messages to Members who have opted in to receive marketing communications. You may unsubscribe from marketing communications at any time by following the unsubscribe link included in any marketing email, adjusting your notification preferences in your mygm2u Account settings, or contacting mygm2u support. Opting out of marketing communications does not affect service-related notifications (such as deposit confirmations, withdrawal updates, or Account security alerts), which are sent as part of our contractual obligations to you.

14. Third-Party Links

The mygm2u Platform may contain links to third-party websites or services in certain contexts. mygm2u is not responsible for the privacy practices or content of any third-party websites. This Policy applies solely to personal data collected by mygm2u through the mygm2u Platform. We encourage you to review the privacy policies of any third-party services you access.

15. Amendments to This Policy

mygm2u reserves the right to update or amend this Privacy Policy at any time. Where material changes are made, mygm2u will publish the revised Policy on the Platform and, where reasonably practicable, notify Members by email. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Continued use of the mygm2u Platform following publication of an amended Policy constitutes your acceptance of the updated terms.

16. Contact & Data Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or your personal data held by mygm2u, please contact us through the following channels:

• Live Chat: 24/7 via the on-site live chat widget — response time under 5 minutes.
• Email: [email protected]

mygm2u's support team is available around the clock, including on Malaysian public holidays such as Hari Raya Aidilfitri, Hari Merdeka, and Thaipusam. All data-related enquiries will be handled with appropriate confidentiality and responded to within the timeframes specified in this Policy.