Privacy Policy

1 Introduction

mm1919 ("the Company", "we", "us", or "our"), operator of the online gaming platform accessible at https://mm1919.cam, is committed to safeguarding the privacy and personal data of all individuals who access or use our services. This Privacy Policy ("Policy") describes how we collect, receive, use, store, share, transfer, and otherwise process personal data in connection with your use of the mm1919 Platform.

This Policy applies to all users of the Platform, including registered players, visitors who browse the Platform without registering, and any persons who contact our customer support team. It should be read in conjunction with our Terms & Conditions, which govern your overall use of mm1919.

By registering an account, using the Platform, or otherwise interacting with us, you acknowledge that you have read and understood this Policy. If you do not agree with how we handle personal data, you should not use the Platform.

2 Definitions

For the purpose of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, alteration, or deletion.
• "Data Controller" means mm1919, the entity that determines the purposes and means of processing personal data.
• "Data Processor" means any third-party service provider that processes personal data on behalf of mm1919 under a written data processing agreement.
• "Data Subject" means the individual to whom the personal data relates — in most cases, you, the registered player or Platform visitor.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
• "KYC" means Know Your Customer — identity verification procedures required for regulatory compliance.
• "Platform" means the mm1919 website, mobile platform, and all associated services at https://mm1919.cam.

3 Data We Collect

We collect personal data through several channels, including information you provide directly, data generated through your use of the Platform, and data received from third-party verification and payment service providers.

3.1 Information You Provide Directly

• Full legal name, date of birth, and gender
• Residential address (including city and postcode)
• Email address and mobile phone number
• Username and encrypted password
• Government-issued identity documents (MyKad, Passport, or Driver's Licence) submitted during KYC
• Proof of address documents (utility bills, bank statements)
• Payment method details, including bank account names and e-wallet identifiers (we do not store full card numbers)
• Communications you send to our support team via live chat or email

3.2 Data Generated Automatically

• IP address and approximate geolocation at the time of login
• Device type, operating system, browser type and version
• Session timestamps, login history, and session duration
• Wagering history, game activity, deposit and withdrawal records
• Platform navigation patterns and page interaction data
• Cookies and similar tracking technology data (see Section 8)

3.3 Data from Third Parties

• Identity verification results from KYC service providers
• Transaction verification data from payment processors (Maybank, CIMB, DuitNow, Touch 'n Go eWallet, GrabPay, Boost, FPX, and other Malaysian payment partners)
• Fraud screening results from anti-money laundering service providers
• Data from promotional partners where you have opted into joint promotions

4 How We Use Your Data

mm1919 processes your personal data only for clearly defined and legitimate purposes. The following table summarises the primary purposes for which we use your data:

5 Legal Basis for Data Processing

mm1919 processes personal data on one or more of the following legal bases, depending on the specific purpose:

• Contractual Necessity: Processing necessary to perform the contract between you and mm1919 — including account management, transaction processing, and customer support.
• Legal Obligation: Processing required to comply with applicable law, including anti-money laundering regulations, KYC requirements, tax reporting obligations, and judicial or regulatory orders.
• Legitimate Interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and service improvement — provided such interests are not overridden by your fundamental rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing & Disclosure

mm1919 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following circumstances and only to the extent necessary for the stated purpose:

• KYC and Identity Verification Providers: Third-party services that assist with verifying your identity and age as required for regulatory compliance. These providers act as Data Processors under binding agreements.
• Payment Service Providers: Malaysian banking and e-wallet operators including Maybank, CIMB Bank, Public Bank, Hong Leong Bank, DuitNow, Touch 'n Go eWallet, GrabPay, Boost, and FPX, to facilitate deposits and withdrawals. Only the minimum data necessary for transaction processing is shared.
• Fraud and AML Screening Services: Third-party providers that assist us in detecting and preventing money laundering, fraud, and other financial crime, as required by our compliance obligations.
• Technology and Infrastructure Providers: Cloud hosting, data storage, and security service providers who maintain our Platform infrastructure. All such providers are bound by data processing agreements prohibiting independent use of your data.
• Regulatory and Law Enforcement Authorities: We may disclose personal data to government agencies, law enforcement bodies, or regulators where required by applicable law, court order, or regulatory directive, without prior notice to you where legally permissible.
• Professional Advisers: Lawyers, auditors, and accountants where necessary for the provision of professional services, all of whom are bound by confidentiality obligations.

7 Data Retention

We retain personal data for no longer than is necessary for the purposes for which it was collected, or as required by applicable law. The following retention guidelines apply:

• Account and Identity Data: Retained for the duration of your Account and for a minimum of five (5) years following account closure, in accordance with AML and financial record-keeping obligations.
• Transaction Records: Deposit, withdrawal, and wagering records are retained for a minimum of seven (7) years to comply with applicable financial record-keeping requirements.
• KYC Documents: Retained for five (5) years following the end of the customer relationship, or longer if required by a regulatory authority.
• Customer Support Communications: Retained for three (3) years from the date of the interaction, unless a dispute or legal claim extends the applicable period.
• Marketing Data: Retained until you withdraw consent or for a maximum of three (3) years from your last interaction with our marketing communications, whichever is earlier.
• Technical and Log Data: Typically retained for twelve (12) months, unless retained longer for security investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identified individual.

8 Cookies & Tracking Technologies

mm1919 uses cookies and similar technologies (including web beacons and local storage) to operate and improve the Platform, personalise your experience, and maintain session security. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. These cannot be disabled without significantly impacting Platform functionality.
• Functional Cookies: Enable enhanced features such as remembering your language preferences, game lobby filters, and display settings between sessions.
• Analytical Cookies: Used to collect aggregated, anonymised information about how users interact with the Platform, helping us identify areas for improvement.
• Security Cookies: Used to detect suspicious login behaviour, device anomalies, and potential fraud patterns.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the Platform but may affect certain personalisation features. Note that strictly necessary cookies are required for core Platform functionality and cannot be disabled.

9 Data Security

mm1919 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit TLS/SSL encryption for all data transmitted between your device and our servers
• Encryption of sensitive data fields (including identity document data) at rest using industry-standard encryption algorithms
• Role-based access controls ensuring that staff access personal data only on a strict need-to-know basis
• Two-factor authentication for all administrative access to production systems
• Regular penetration testing and vulnerability assessments conducted by independent security specialists
• Continuous monitoring of Platform systems for anomalous activity, intrusion attempts, and data access irregularities
• Incident response procedures to manage and report data security incidents in accordance with applicable regulatory requirements

10 User Rights

As a data subject, you have the following rights with respect to your personal data held by mm1919. To exercise any of these rights, please contact our support team:

We will respond to all data subject requests within 30 calendar days of receipt. In complex cases this period may be extended by a further 60 days with prior notice to you. Requests may be submitted via our 24/7 live chat support or by emailing our support team.

11 Children & Minors

mm1919 is strictly an adult platform. We do not knowingly collect, process, or retain personal data from any person under the age of 21 years. The minimum legal gambling age for casino-style gaming in Malaysia is 21.

Where we discover or reasonably suspect that personal data has been collected from a person under 21, we will take immediate steps to verify the situation and, if confirmed, delete the data and close the relevant account. Any deposits associated with such an account will be returned via the original payment method following appropriate verification.

Parents and guardians who believe a minor may have registered on the Platform are encouraged to contact our support team immediately.

12 Cross-Border Data Transfers

To provide the Platform, mm1919 may transfer personal data to service providers and infrastructure partners located in jurisdictions outside Malaysia. Where such transfers occur, we ensure that appropriate safeguards are in place to maintain a level of data protection equivalent to applicable international standards.

Safeguards for cross-border transfers may include:

• Data processing agreements incorporating appropriate contractual protections
• Transfers to jurisdictions recognised as providing adequate data protection
• Technical security measures applied to data in transit and at rest

You may request information about the specific safeguards applicable to any cross-border transfer of your personal data by contacting our Data Protection contact via the details in Section 15.

13 Third-Party Links

The mm1919 Platform does not contain links to external third-party websites. This Privacy Policy applies solely to personal data processed by mm1919 in connection with your use of the Platform at https://mm1919.cam. We are not responsible for the privacy practices of any third-party payment processors, whose own privacy policies govern the handling of data transmitted directly to them in connection with payment transactions.

14 Amendments to This Policy

mm1919 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or Platform functionality. All amendments will be published on this page with an updated effective date.

Where amendments are material — meaning they significantly alter how we process your data or reduce your rights — we will notify registered players via email or a prominent on-site notification prior to the changes taking effect. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

We recommend reviewing this Policy periodically. If you have questions about any amendment, please contact our support team before the effective date.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by mm1919, you may contact us through the following channels:

We will acknowledge all formal data protection requests within 5 business days and provide a substantive response within 30 calendar days. This Policy was last reviewed on 1 January 2026.