🔒 Privacy Policy last updated: January 2026 🛡️ Your data is protected with encryption 256-bit SSL 👁️ Menang123 does not sell your information to any third party 📧 Privacy inquiries: support@menang123.biz 🔐 Two-factor authentication is available for account security your 🇲🇾 Malaysia's trusted online casino platform for Malaysian players 🔒 Privacy Policy last updated: January 2026 🛡️ Your data is protected with encryption 256-bit SSL 👁️ Menang123 does not sell your information to any third party 📧 Privacy inquiries: support@menang123.biz 🔐 Two-factor authentication is available for account security your 🇲🇾 Malaysia's trusted online casino platform for Malaysian players
UPDATED JANUARY 2026

Menang123 Privacy Policy – Our Commitment to Protecting Your Data

We take every member's privacy seriously. This document clearly explains how Menang123 collects, uses, and protects your personal information.

Menang123's Six Privacy Commitments

The principles that guide how we handle every member's personal data

256-bit SSL Encryption at All Times

Every communication between your device and Menang123 is encrypted using 256-bit SSL technology — the same level of protection used by major Malaysian banks such as Maybank and CIMB. Your data is never transmitted unencrypted.

256-bit SSL End-to-End Encryption
Data Not Sold to Third Parties

Menang123 does not sell, rent, or commercialise your personal information to any third party. Your information is used solely for platform operations and service improvements. This is a commitment we uphold without exception.

Not Sold Not Shared Without Consent
Strict Data Access Controls

Only staff Menang123 who are authorised may access members' personal data, and only for legitimate operational purposes. All access to member records is logged and monitored internally. Unauthorised access is strictly prohibited.

Restricted Access Activity Log
Your Privacy Controls, In Your Hands

You have the right to access, correct, delete, or restrict the use of your data at any time. Menang123 provides a straightforward and responsive process for you to exercise these privacy rights without having to navigate unnecessary bureaucracy.

Right of Access Right to Erasure Right to Rectification
Clear Data Retention Period

Your data is not stored indefinitely without reason. Menang123 has a clear data retention policy — transaction records are kept in accordance with legal requirements, while other data is deleted or anonymised once it is no longer needed for operations.

Retention Period Automatic Deletion
Prompt Data Breach Notification

In the event of any security incident involving your data, Menang123 committed to notifying affected members within 72 hours of an incident being confirmed. Transparency in critical situations is part of our responsibility.

72-Hour Notice Instant Response

Menang123 Privacy Policy

This Privacy Policy describes how Menang123 ("we", "Platform") collects, uses, discloses, and protects your personal information when you use our platform at menang123.biz. We respect the privacy of every member and are committed to protecting your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). By using the Menang123, you agree to the practices described in this Privacy Policy.

1

Introduction & Scope of This Policy

At Menang123, we believe that privacy is more than just a legal obligation — it is a fundamental right of every individual that deserves to be taken seriously. As a platform serving over 250,000 members across Malaysia, we recognise the weight of our responsibility in protecting our members' personal data.

This Privacy Policy applies to all information you provide during the registration process and while using the services of Menang123, when contacting our support team, and when visiting our website even without registering an account. It also applies to information we collect automatically through technologies such as cookies and server logs.

Malaysia PDPA Compliance: Menang123 operates in compliance with Malaysia's Personal Data Protection Act 2010. As a registered data processor, we adhere to all data protection principles established under Malaysian law.

2

Personal Information We Collect

Menang123 collects your personal information through two main methods — information you provide directly, and information collected automatically when you use our platform.

Information you provide directly:

  • Identity Information: Full name as per identity card, identity card number, date of birth and gender.
  • Contact Information: Malaysian phone number, email address, and residential address (required for physical gift delivery for Diamond members).
  • Financial Information: Payment method details used for deposits and withdrawals — Touch 'n Go eWallet account number, GrabPay, Boost, ShopeePay, DuitNow or FPX account (Maybank2u, CIMB Clicks). We do not store your full credit card number or bank account password.
  • KYC Verification Documents: ID card image and verification selfie required for the identity verification process prior to your first withdrawal.
  • Communications: Records of conversations with our support team via live chat, email or WhatsApp.

Information collected automatically:

  • Usage Data: Gaming activity records, betting history, deposit and withdrawal records, login and logout timestamps.
  • Technical Data: IP address, web browser type, device operating system, screen resolution and other device information relevant to technical troubleshooting.
  • Cookie Data: Session information, language preferences, and other cookie-related data as described in Section 7.
  • Location Data: General location information based on IP address, for the purpose of verifying that you are accessing the platform from Malaysia.
Data Category Example Primary Purpose Mandatory?
Identity Full name, IC number, date of birth Verification & KYC Yes
Contact Phone, email Communication & security Yes
Finance Digital wallets, FPX Deposits & withdrawals Yes
Usage Game history Service improvement Automatic
Technical IP address, browser Security & support Automatic
3

How We Use Your Personal Information

Menang123 uses your personal information only for lawful purposes that are necessary to provide our platform services. The following are the primary purposes for which your data is used:

  • Account Management: Creating and managing your account, processing registrations, verifying your identity through the KYC process, and maintaining accurate account records.
  • Financial Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX, and processing withdrawals to the payment method registered under your name.
  • Provision of Gaming Services: Gives you access to all games on the platform — slots, live baccarat, table games, poker, live matches (Malaysia Super League football, EPL, badminton, e-sports) and lottery.
  • VIP Rewards Programme: Automatically calculating and crediting your VIP Points, determining your VIP tier, and processing weekly cashback and other rewards.
  • Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, duplicate account usage and bonus abuse. This includes betting pattern analysis and IP address monitoring.
  • Customer Support: Responding to enquiries, resolving technical issues, and managing your complaints. Communication records are retained for reference and quality improvement purposes.
  • Service Communications: Sending important notifications regarding your account, changes to terms, transaction confirmations, and relevant security information.
  • Legal Compliance: To fulfil reporting and compliance obligations under applicable Malaysian law governing our operations, including anti-money laundering (AML) requirements.
  • Platform Improvements: Analysing usage data in aggregate (not at an individual level) to understand how players use the platform and to make improvements to the interface and services.

Marketing: Menang123 may send promotional information and bonus offers via email or in-platform notifications. You may opt out of these marketing communications at any time through the unsubscribe link in any email or via your account settings. Opting out of marketing does not affect essential service communications.

4

Sharing & Disclosure of Information

Menang123 does not sell or rent your personal information to any third party for their marketing purposes. However, there are limited circumstances where we need to share your information with others for legitimate operational purposes:

  • Payment Processor: Digital wallet and banking providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks) receive the transaction information necessary to process your deposits and withdrawals. These providers are governed by their own privacy policies.
  • Game Providers: Game providers that integrate their games into the platform Menang123 may receive technical data necessary to deliver a seamless gaming experience. They do not receive your full identity or financial information.
  • Identity Verification Service: Third-party KYC service providers that assist us in verifying member identities through automated document checks. All such providers are bound by strict data protection agreements.
  • Legal Authorities: When required by Malaysian law, court order or legitimate request from a regulatory authority, Menang123 are required to disclose the necessary information. We will endeavour to inform you of any such disclosure unless prohibited from doing so by law.
  • Business Transfer: In the event of a merger, acquisition or sale of company assets, members' personal information may be transferred as part of the business transaction. You will be notified and given a choice before your data becomes subject to a different privacy policy.

All third parties that receive your data from Menang123 are required to comply with data protection standards equivalent to or higher than those we hold ourselves to. We only work with providers that have been reviewed and approved by our internal security team.

5

Data Security Measures

Menang123 implements multiple layers of security to protect your personal data from unauthorised access, disclosure, alteration or destruction. Our approach to data security is comprehensive and ongoing.

The technical security measures we implement include:

  • Data Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS 1.3 protocol with a 256-bit SSL certificate.
  • Stored Data Encryption: Sensitive information such as passwords (stored in an unrecoverable hash format), KYC documents and financial details are encrypted in our database.
  • Role-Based Access Control: Staff may only access data necessary to carry out their specific duties. Access to member records is logged and reviewed on a regular basis.
  • Continuous Security Monitoring: An automated monitoring system operates 24/7 to detect suspicious activity, unauthorised login attempts, and other security anomalies.
  • Periodic Penetration Testing: Menang123 conducts regular security testing (penetration testing) by independent security firms to identify and address vulnerabilities before they can be exploited.
  • Two-Factor Authentication (2FA): Available as an optional add-on for all members to protect their accounts with an extra layer of security.
256-bit SSL Password Hash 24/7 Monitoring 2FA Available Security Testing Access Controls

Shared Responsibility: While we do everything we can to protect your data, the security of your account also depends on your own actions. Always use a strong and unique password, never share your login credentials with anyone, and enable 2FA for added protection.

6

Personal Data Retention Period

Menang123 retains your personal data only for as long as necessary for the purposes described in this Privacy Policy, or as required under applicable Malaysian law. We do not keep data longer than necessary.

  • Active Account Data: Retained for as long as your account is active. An account is considered active provided there has been at least one login within the past 90 days.
  • Financial Transaction Records: Retained for 7 years after the transaction date, in accordance with Malaysia's accounting and anti-money laundering legal requirements.
  • KYC Documents: Retained for as long as the account is active and 5 years following account closure, in accordance with regulatory compliance requirements.
  • Support Communication Records: Retained for 2 years from the date of last communication, for reference and dispute resolution purposes.
  • Security Logs: Retained for 12 months for security investigation and monitoring purposes.
  • Marketing Data: Retained until you unsubscribe or request deletion, whichever comes first.

Once the retention period expires, data will be securely deleted or anonymised so it can no longer be linked to you personally. Our secure deletion process ensures that data cannot be recovered once removed.

7

Cookies & Tracking Technologies

Platform Menang123 uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. Cookies are small text files stored on your device by your web browser.

Types of cookies we use:

  • Essential Cookies (Required): Required for core platform functionality — managing login sessions, security, and basic navigation. Without these cookies, the platform cannot function properly. These cookies cannot be disabled.
  • Performance Cookies: Collects information on how visitors use the platform — most frequently visited pages, error messages and page load times. All such information is aggregated and does not personally identify you.
  • Functional Cookies: Allows the platform to remember your preferences such as language, display settings and other choices, to provide a more personalised experience.
  • Session Cookies: Temporary cookies that are automatically deleted when you close your browser. Used to maintain your login session for the duration of a single browsing session.

You can manage and delete cookies through your web browser settings. However, disabling essential cookies may affect platform functionality. For instructions on managing cookies in your browser, please refer to your browser's help documentation.

8

Your Privacy Rights

Under Malaysia's Personal Data Protection Act 2010 and our commitment to privacy, you have the following rights regarding your personal information held by Menang123:

Right of Access

You may request a copy of all personal information we hold about you at any time. We will provide this information within 14 days of receiving your request.

Right to Rectification

If your information is inaccurate or incomplete, you have the right to request a correction. Contact support and we will update your records within 7 business days.

Right to Erasure

You may request that we delete your personal data under certain circumstances. Such requests are subject to legal retention obligations that we are unable to override.

Right to Restrict Processing

In certain circumstances, you may request that we restrict how we use your data while a dispute is being resolved or a review is underway.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format for transfer to another service provider where applicable.

Right to Object to Marketing

You may object to the use of your data for direct marketing purposes at any time. You can unsubscribe via the link in any marketing email or through your account settings.

To exercise any of the above rights, contact our privacy team at support@menang123.biz with the subject line "Privacy Rights Request" and specify the right you wish to exercise along with your account details for identity verification. We will verify your identity before processing any request.

9

Protection of Children's Data

Platform Menang123 is strictly for individuals aged 18 and above. We do not knowingly collect any personal information from individuals under the age of 18.

If we find that we have inadvertently collected personal information from someone under the age of 18, we will immediately take the following steps:

  • Closing the account in question immediately.
  • Deleting all related personal information from our records within 30 days.
  • Refunding any deposits made, after deducting applicable administrative costs, to the original payment method.

If you are aware of or suspect that a minor has registered an account at Menang123, please contact us immediately at support@menang123.biz so we can take prompt action.

10

Changes to This Privacy Policy

Menang123 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or service improvements. The date of the most recent update will always be displayed at the top of this page.

For significant changes to how we use your personal data, we will:

  • Notifying you via the email address registered to your account at least 14 days before the changes take effect.
  • Displaying a clear notification within the platform when you log in.
  • For minor or editorial changes, we may update the policy without prior notice, but the update date will be revised accordingly.

Continued use of the platform Menang123 after the effective date of the changes means you accept the updated Privacy Policy. If you do not agree with the changes, please close your account before the effective date and contact us to have your data removed.

The version of the Privacy Policy you are reading takes effect from January 2026 and supersedes all previous versions.

11

Contact Us for Privacy Queries

If you have any questions, concerns, or complaints regarding how Menang123 handles your personal information, our team is here to help. We take every privacy-related inquiry seriously and are committed to providing complete and satisfactory responses.

  • Privacy Email: support@menang123.biz — use the subject line "Privacy Policy Inquiry" for faster routing (responded to within 24 hours)
  • Live Chat: Available 24/7 on the platform for general enquiries (response time under 2 minutes)
  • WhatsApp: For urgent privacy matters (number displayed after logging in)

For formal privacy complaints, please use the email channel and provide full details of the issue you are experiencing. All formal complaints will be acknowledged within 24 hours and resolved within 5 business days. If you are not satisfied with how we have handled your complaint, you have the right to refer the matter to the Department of Personal Data Protection, Ministry of Communications and Digital Malaysia.

FAQ – Menang123 Privacy Policy

Quick answers to the most frequently asked questions about our privacy and data protection practices

No. Menang123 does not sell, rent, or commercialise your personal information to any third party for their marketing purposes. This is a commitment we uphold without exception. We only share your information with third parties in very limited circumstances — payment processors that help us complete your transactions (such as Touch 'n Go eWallet, GrabPay, or FPX), technical service providers bound by strict data protection agreements, and authorities when required by law. In all these cases, data sharing is solely for the purpose of servicing your account, not for the commercial benefit of third parties.

Yes, you can request deletion of your personal data by contacting us at support@menang123.biz. However, please note that certain data cannot be deleted immediately due to legal obligations. For example, financial transaction records must be retained for 7 years under Malaysia's accounting and anti-money laundering laws. KYC documents must be kept for 5 years after account closure. Data not subject to legal retention requirements will be deleted or anonymised within 30 days of your request. Closing your account is the first step in the data deletion process.

If your account has been inactive for 90 consecutive days (no logins), any accumulated VIP Points will expire. The account itself remains open unless you formally request its closure. After 2 years of inactivity, Menang123 may reach out via your registered email to confirm whether you wish to keep the account. If no response is received within 30 days of that notice, the account may be closed and data not subject to legal retention requirements will be anonymised or deleted in accordance with our retention policy.

Menang123 does not store your full bank account number, credit card number, or digital wallet account password. When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX, the transaction is processed directly through the respective provider's secure payment gateway. Menang123 only receives confirmation that a payment was successful or failed — no sensitive financial account details pass beyond the payment provider's gateway into our systems. The only information we retain is the type of wallet or bank you used and the account name or last digits for withdrawal verification purposes.

If you suspect your Menang123 account has been accessed without your authorization, take the following steps immediately: First, change your account password right away. Second, contact the Menang123 support team via live chat or email at support@menang123.biz with the subject line "Unauthorized Account Access" — our security team will respond within 15 minutes and can temporarily lock your account while an investigation is carried out. Third, review your login history and transaction records to identify any suspicious activity. Fourth, enable two-factor authentication (2FA) once your account is restored to prevent this from happening again. We take every report of unauthorized access seriously and will investigate promptly.

A Platform That Values Your Privacy

Menang123 is built on trust. Your data is safe with us — 256-bit SSL encryption, no data selling, and you retain full control over your personal information. Join over 250,000 Malaysian players who already trust us.

Accepted Deposit Methods:

Touch 'n Go GrabPay Boost ShopeePay DuitNow Maybank2u CIMB Clicks
Bahasa Melayu