1. Home
  2. Privacy Policy
mygm2u Official Documents — Privacy & Data

Mygm2u Privacy Policy – Our Commitment to Protecting the Personal Data of Malaysian Members

At mygm2u, your privacy is taken seriously. Every piece of information you share with us is handled with the utmost care, protected by the latest technology, and managed in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). This policy clearly explains what we collect, why we need it, and how we keep it safe.

Updated: January 2026
Language: Bahasa Malaysia
Applicable To: Malaysian Players
256-bit SSL Protected
Content: Data Collected Purpose of Use Data Sharing Data Security Cookies & Tracking Retention & Deletion Your Rights Children's Data Third-Party Links Contact Us
mygm2u's Six Privacy Commitments to You
The core principles governing how mygm2u handles every piece of personal data belonging to Malaysian members
Full PDPA 2010 Compliance
mygm2u operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This means all collection, processing, and storage of your personal data is carried out with lawful basis and for clearly stated purposes — no data is used covertly or without authorisation on the mygm2u platform.
PDPA 2010
256-bit SSL Encryption
Every communication between your device and mygm2u's servers is protected by 256-bit SSL encryption — the same security technology used by Malaysia's major banks, including Maybank and CIMB. Your login details, payment data via DuitNow or Touch 'n Go eWallet, and account information are never transmitted in an unencrypted state.
SSL 256-bit
No Sale of Data to Third Parties
mygm2u never sells, rents or trades members' personal data to any third party for marketing or commercial purposes. Your data belongs to you. We use it solely for purposes directly related to the operation of the mygm2u platform and the services you request from us.
No Data Sales
You're in Control
mygm2u members have the full right to access, correct, amend, or request the deletion of their personal data at any time. The process is straightforward — simply contact our team by email and your request will be processed within 14 business days at no charge. You remain in control of your own information at all times.
Full Member Rights
Restricted Data Access
Within the mygm2u organisation, access to members' personal data is strictly limited based on the need-to-know principle — only staff who require access to carry out their duties are permitted. All access to the member database is logged and continuously monitored by the mygm2u security team.
Restricted Access
Data Breach Notification
In the unlikely event of a data security breach involving mygm2u members' personal information, we are committed to notifying affected members within 72 hours of the breach being detected — in line with industry best practices. Immediate corrective action will be taken to minimise any harm to members.
72-Hour Notice
1

Personal Data We Collect

Mygm2u only collects personal data that is strictly necessary to provide platform services to you as a member. We do not collect information that is irrelevant or beyond what is required for the stated purposes. The following are the categories of data that mygm2u collects from Malaysian members:

Registration & Identity Data:

  • Your full name as it appears on your MyKad or Malaysian passport.
  • An active Malaysian mobile number (used for OTP verification and account communications).
  • A valid email address that is accessible to you.
  • Date of birth (to verify that you are 18 years of age or older).
  • MyKad number or passport number (collected during the KYC identity verification process).

Financial & Transaction Data:

  • Details of the payment method you use — including your Touch 'n Go eWallet account number, GrabPay, Boost, ShopeePay, DuitNow account number, or FPX account details (Maybank2u, CIMB Clicks). Full card numbers are not stored directly by mygm2u.
  • Transaction records for deposits and withdrawals, including date, time, amount in MYR (RM) and transaction status.
  • Betting and gaming history within the mygm2u platform.

Technical & Usage Data:

  • The IP address of your device when accessing the mygm2u platform.
  • The web browser type and operating system version of your device.
  • Login session records including date, time and session duration.
  • A record of pages visited and actions taken within the mygm2u platform.
Note: mygm2u will never ask for sensitive information such as your full password, bank card PIN, or bank TAC/OTP through any communication channel. If anyone claims to be from mygm2u and requests this information, it is a fraudulent attempt.
Data Category Example Information Mandatory / Optional
Identity Name, MyKad, date of birth Mandatory
Contact Phone number, email Mandatory
Finance E-wallets, FPX accounts, transaction records Mandatory (for transactions)
Technical IP address, browser type, session logs Automatic
Games Betting, game, and winnings history Automatic
Optional Account settings, responsible gaming limits Optional
2

How Your Personal Data Is Used

Mygm2u uses the personal data collected solely for purposes related to providing the platform's services to you. We adhere to the principle of data minimisation — using only the information that is relevant to each stated purpose below.

  • Account Management: To create, maintain, and secure your mygm2u account, including the login process, two-factor authentication, and password recovery.
  • Transaction Processing: To process deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and FPX, and to manage withdrawals to your account securely and accurately.
  • KYC Compliance & Fraud Prevention: To verify your identity as a security measure and to comply with anti-money laundering (AML) requirements, which are a legal obligation.
  • Bonus & Promotions Management: To determine your eligibility for each mygm2u promotion, process bonus claims, and accurately track the fulfilment of rollover requirements.
  • Customer Service: To identify you when you contact the mygm2u support team, access the relevant account records, and provide accurate and efficient assistance.
  • Responsible Gaming: To monitor gameplay patterns and identify early signs of problem gambling, and to enforce the limits you have set for yourself through mygm2u's self-control tools.
  • Service Communications: To send you important account-related notifications — such as deposit confirmations, security alerts, and terms updates — via email or SMS to your registered Malaysian mobile number.
  • Platform Improvement: To analyse aggregated (not individual) usage patterns in order to improve the mygm2u platform's user experience over time.
Marketing Preferences: mygm2u may send you promotional information and special offers by email or SMS, but only if you have agreed to receive them during registration or through the communication preference settings in your account. You may withdraw this consent at any time via the "unsubscribe" link in any promotional email, or by contacting mygm2u support.
3

Data Sharing with Third Parties

Mygm2u does not sell, rent or disclose members' personal data to third parties for their own commercial purposes. This is a core commitment we uphold. That said, there are limited circumstances where we need to share data with certain parties in order to provide services to you — and all such sharing is subject to strict confidentiality agreements.

Payment Service Providers:

When you make a deposit or withdrawal, the information required to process that transaction is shared with the relevant payment provider — such as the DuitNow system, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay or the FPX processing bank. This sharing covers only the information technically necessary to complete the transaction and does not include your gaming history or any other sensitive information.

Live Casino Game Providers:

For mygm2u live casino tables — baccarat, blackjack, and others — session information is shared with our live game technology providers. This sharing is kept to a minimum and covers only the data necessary for the live games to function. All such providers are bound by strict data protection agreements with mygm2u.

Legally Required Disclosure:

Mygm2u may be required to disclose members' personal data to relevant Malaysian authorities when mandated by law — such as court orders, MACC investigations, BNM directives or other law enforcement agencies. In such circumstances, mygm2u will notify the affected member in advance unless prohibited from doing so by a court order or applicable law.

Warning: If you receive a communication from a party claiming to be a mygm2u partner and requesting your personal or financial information, please verify this first by contacting the official mygm2u support team before providing any information. mygm2u will never request sensitive data through unrecognised third parties.
4

Mygm2u Data Security Measures

Protecting the personal data of mygm2u members is a priority we take seriously at every level of our operations. We continually invest in security infrastructure to ensure your data remains safe even as cyber threats continue to evolve.

Technical Protection Layers:

  • Data Encryption at Rest: All personal data stored in the mygm2u database is encrypted using AES-256 — a military-grade encryption standard that ensures data remains unreadable even if the server is physically accessed without authorisation.
  • Data Encryption in Transit: All communications between your browser and the mygm2u platform are secured with TLS 1.3, the latest version of the transport layer security protocol. This ensures that no third party can intercept or read your data while it is in transit.
  • Two-Factor Authentication (2FA): mygm2u uses two-factor authentication via OTP sent to your registered Malaysian mobile number for every new login and withdrawal transaction. This adds a critical extra layer of protection to your account.
  • Firewall & Continuous Monitoring: mygm2u's servers are protected by a multi-layered firewall system and monitored around the clock by our cybersecurity team to detect and respond to any suspicious activity.
  • Regular Security Testing: mygm2u undergoes penetration testing and security audits conducted by independent security firms on a regular basis to identify and address any system vulnerabilities before they can be exploited.
Shared Responsibility: While mygm2u implements comprehensive security measures, your account security also depends on your own actions. Please use a strong and unique password for your mygm2u account, never share your password with anyone, and make sure you log out after every session — especially when using a shared device.
5

Cookies and Tracking Technologies

The mygm2u platform uses cookies and similar tracking technologies to ensure the platform operates correctly and to enhance your user experience. Cookies are small text files stored on your device when you visit the mygm2u platform.

Types of Cookies Used by mygm2u:

  • Essential Cookies: Required for the mygm2u platform to function — including login session cookies, CSRF security cookies and language preference cookies. These cookies cannot be disabled as they are fundamental to the platform's operation.
  • Performance Cookies: Collecting information about how you use the mygm2u platform in an aggregated and anonymised form — such as the most frequently visited pages and time spent in each section. This information helps us improve the overall user experience.
  • Functional Cookies: Saves your preferences such as display settings, language preferences and game table choices so you do not have to reconfigure them each time you log in to mygm2u.
  • Security Cookies: Used to detect suspicious sessions, repeated login attempts from unusual locations, and account activity that requires additional verification.

You can manage or block cookies through your web browser settings. However, blocking essential cookies may affect the functionality of the mygm2u platform, including your ability to log in and carry out transactions. mygm2u does not use third-party cookies for third-party advertising purposes.

6

Data Retention & Deletion Period

Mygm2u retains members' personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Malaysian law.

Data Type Retention Period Reason
Identity & Account Data Duration of active account + 7 years AML legal requirements
Financial Transaction Records 7 years from the transaction date Accounting & tax requirements
Betting & Game Records 5 years from the date of activity Dispute resolution & auditing
Support Communication Log 3 years from the date of communication Service records & disputes
Technical Log Data (IP, session) 12 months Security & fraud detection
Non-Essential Cookie Data 13 months maximum User experience improvement

Once the specified retention period has lapsed, your personal data will be securely deleted from mygm2u's systems or converted into an anonymised format that cannot be linked back to you personally. The deletion process follows methods that comply with industry security standards to ensure deleted data cannot be recovered.

Early Deletion Request: If you close your mygm2u account and wish to request early deletion of your personal data ahead of the standard retention period, you may submit a written request to support@mygm2u.best. mygm2u will assess the request and process the deletion of data not subject to legal obligations within 30 business days.
7

Your Personal Data Rights

As a mygm2u member and an individual protected under Malaysia's Personal Data Protection Act 2010 (PDPA), you have a number of rights you may exercise in relation to your personal data held by mygm2u. These rights are as follows:

  • Right of Access: You have the right to request a copy of the personal data mygm2u holds about you. mygm2u will provide this information in a readable format within 21 business days from the date a valid request is received.
  • Right to Rectification: If you find that any personal data held by mygm2u is inaccurate or out of date, you have the right to request a correction. mygm2u will verify and correct the information within 14 business days.
  • Right to Withdraw Consent: For data collected on the basis of your consent (such as for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the validity of any processing that took place prior to it.
  • Right to Object to Processing: You have the right to object to the processing of your personal data for direct marketing purposes at any time, without having to provide any reason.
  • Right to Lodge a Complaint: If you believe mygm2u has not handled your data in compliance with PDPA 2010, you have the right to file a complaint with the Department of Personal Data Protection Malaysia.

To exercise any of the above rights, contact the mygm2u data protection team by emailing support@mygm2u.best with the subject line "PDPA Data Rights Request". Please provide your mygm2u account number and a copy of your identification for verification purposes. We are committed to responding to all valid requests within the timeframe stipulated by Malaysia's PDPA.

8

Children's Data Protection

The mygm2u platform is intended for adults aged 18 and above only. mygm2u does not knowingly collect or process personal data of individuals under the age of 18. All mygm2u registration processes are designed to ensure that only adults can create and use an account.

If mygm2u discovers that personal data belonging to an individual under the age of 18 has been collected inadvertently — possibly because the individual provided false age information during registration — we will take the following steps immediately:

  • Temporarily suspending the relevant account while an investigation is conducted.
  • Permanently and securely removing all personal data belonging to the individual from mygm2u's systems.
  • Contacting the parent or legal guardian of the individual if their contact information can be identified.
  • Returning any legitimate financial balance to the recognised guardian.

If you are a parent or guardian and have reason to believe that your child under the age of 18 has registered on mygm2u without your knowledge, please contact us immediately at support@mygm2u.best so that we can take the appropriate action.

9

Links to Third-Party Websites

The mygm2u platform may contain links or references to third-party websites or services in certain contexts. mygm2u's Privacy Policy applies only to the mygm2u platform itself — it does not cover the privacy practices of any third-party websites or services you may access through those links.

Mygm2u is not responsible for the content, privacy policies, or security practices of any third-party websites. We recommend reading the privacy policy of each website you visit separately before providing them with any personal information.

Links to payment providers such as the Touch 'n Go eWallet portal, GrabPay, or DuitNow during the deposit process are examples of situations where you may be redirected to a third-party environment. In all such cases, your financial transactions are protected by that provider's own security protocols — not solely by mygm2u — once you are within their environment.
10

Contact Us Regarding Data Privacy

If you have any questions, concerns or requests regarding this Privacy Policy or how mygm2u handles your personal data, we encourage you to reach out to us directly. We are committed to providing a clear and satisfactory response to every privacy-related enquiry.

How to Reach the mygm2u Privacy Team:

  • Email (preferred): Send an email to support@mygm2u.best with the subject line "Privacy Policy Enquiry" or "PDPA Data Rights Request". Please include your mygm2u account number to help us respond more efficiently. Our standard response time is within 24 to 48 hours on business days.
  • Live Chat Platform: Log in to your mygm2u account and use the live chat function for simpler privacy enquiries. Our Malaysian-speaking support agents are available 24 hours a day, 7 days a week.

Any amendments to this Privacy Policy will be communicated to all active mygm2u members via email or in-platform notification at least 14 days before the changes take effect. By continuing to use the mygm2u platform after the effective date, you are deemed to have accepted the updated Privacy Policy.

This Privacy Policy was last updated in January 2026 and supersedes all previous versions. For more information about your rights and obligations as a member, please also refer to Terms & Conditions mygm2u.

Your Personal Data Rights at mygm2u
PDPA 2010 grants you these rights — mygm2u is committed to honouring every one of them
Right to Access Your Data
You may request a copy of all personal data that mygm2u holds about you. Requests will be processed within 21 business days and delivered to your registered email address in a readable format.
Right to Rectification
If any information in your mygm2u records is inaccurate — such as your name, phone number or email address — you have the right to request a correction, which will be carried out within 14 business days.
Right to Object to Marketing
You can stop receiving marketing communications from mygm2u at any time via the "unsubscribe" link in any email, or by contacting our support team. This does not affect important service communications.
Right to Request Erasure
After closing your mygm2u account, you may request the deletion of personal data that is not subject to legal retention obligations. Requests will be processed within 30 business days, with a deletion confirmation sent to your email.
Right to Withdraw Consent
Any consent you have given to mygm2u to process certain data may be withdrawn at any time. Such withdrawal does not affect any processing that has already taken place on the basis of your prior consent.
Right to Lodge a Complaint with the PDPA
If you are not satisfied with how mygm2u has handled your data after raising the issue directly with us, you have the right to lodge a formal complaint with Malaysia's Department of Personal Data Protection (JPDP).
FAQ – mygm2u Privacy Policy
Clear answers to the most frequently asked questions about data privacy at mygm2u

No. mygm2u never sells, rents, or discloses members' phone numbers or email addresses to any third party for their own marketing purposes. Your Malaysian phone number is used by mygm2u solely for legitimate operational purposes — such as OTP verification during login, deposit and withdrawal transaction notifications, and important service communications related to your account. If you receive marketing SMS messages unrelated to mygm2u and suspect your number was obtained unlawfully, please notify us so we can investigate the matter.

No. Your mygm2u account password is never stored in a form that anyone can read — including mygm2u's own internal team. Your password is encrypted using a strong one-way hashing algorithm before it is stored. This means that even if mygm2u's database were accessed without authorisation, your password cannot be recovered or read. This is also why, when you forget your password, mygm2u cannot "tell" you your old password — we can only help you set a new one through a secure reset process.

When you close your mygm2u account, the platform will retain your personal data for the period required by Malaysian law — in particular, financial and transaction records which must be kept for 7 years in accordance with accounting and anti-money laundering legal requirements. Data not subject to these legal obligations will be deleted according to mygm2u's standard deletion schedule. If you wish to request early deletion of data categories where this is permitted, you may submit a written request to support@mygm2u.best after your account is closed, and we will process the request within 30 business days with written confirmation.

Yes, all betting and gaming activity on your mygm2u account is recorded for dispute resolution, security auditing, and legal compliance purposes. These records are strictly confidential and are not accessible to other members or the general public. Within mygm2u, access to individual betting records is limited to teams that require it for legitimate operational purposes — such as complaint resolution or security investigations. You can view your own activity history under the "Game History" section of your mygm2u account. Records are retained for 5 years from the date of the activity.

Your payment information — whether it is a DuitNow account number, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, or FPX account — is handled with maximum protection at mygm2u. First, all such information is encrypted with AES-256 at rest and TLS 1.3 in transit. Second, mygm2u does not store full account numbers in manually accessible logs — they are stored in tokenised format. Third, all payment transactions are processed directly through secure channels with the payment provider, without mygm2u acting as an intermediary that retains sensitive data. For added security, every withdrawal request requires OTP verification to your registered Malaysian phone number before it is processed.
View All FAQs
mygm2u Privacy Policy & Terms & Conditions — Related Documents

This Privacy Policy should be read together with Terms & Conditions mygm2u for a comprehensive understanding of your rights and responsibilities as a platform member. For information on how to play in a healthy and responsible manner, please also visit the Responsible Gaming us. Any enquiries regarding our privacy policy may be directed to support@mygm2u.best.

YOUR DATA IS SECURE — START PLAYING WITH CONFIDENCE
Register with mygm2u Today & Enjoy a Platform That Protects Your Privacy
With a clear understanding of how mygm2u protects your data, you can enjoy football, Baccarat, badminton and more with complete peace of mind. A Welcome Bonus of up to RM888 awaits you — minimum deposit of just RM20 via DuitNow or Touch 'n Go eWallet.
Register Free Now View All Bonuses
SSL
256-bit
PDPA
2010 Compliant
RM20
Min Deposit
RM888
Bonus Max
Bahasa Melayu