Privacy Policy

This Privacy Policy ("Policy") describes how Menang123 ("we", "us", "our", "the Platform") collects, processes, stores, shares, and protects the personal data of individuals ("you", "your", "the Player") who access or use the services available at https://menang123.cam and all associated subdomains and mobile interfaces.

At Menang123, we understand that trust is the foundation of any long-term relationship — particularly in the context of an online gaming platform where sensitive financial and personal information is exchanged. This Policy has been written in plain, accessible English so that every player, whether based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or elsewhere in Malaysia, can clearly understand how their data is handled.

By registering an account or continuing to use the Platform after this Policy is published, you acknowledge that you have read and understood its contents and consent to the collection and processing of your personal data as described herein. If you do not agree with any provision of this Policy, you should discontinue your use of the Platform and may contact us to request deletion of any data we hold.

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

• "Personal Data" means any information that can identify a natural person directly or indirectly, including but not limited to name, identification number, contact details, financial data, and device identifiers.
• "Processing" means any operation performed on Personal Data, whether automated or manual, including collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, restriction, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, Menang123 as the Platform operator.
• "Data Processor" means any third party that processes Personal Data on behalf of the Data Controller, subject to written data processing agreements.
• "Consent" means a freely given, specific, informed, and unambiguous indication of the Player's agreement to the processing of their Personal Data for a specified purpose.
• "KYC" means Know Your Customer — the process by which Menang123 verifies the identity and address of Players in accordance with applicable anti-money laundering and responsible gambling requirements.
• "Cookies" means small text files stored on your device by your web browser when you visit the Platform, used to maintain session state, preferences, and analytics data.

Menang123 acts as the Data Controller in respect of all Personal Data collected through the Platform. As Data Controller, we are responsible for determining why and how your Personal Data is processed, and for ensuring that such processing is carried out lawfully, fairly, and transparently.

Where we engage third-party service providers — such as payment processors, identity verification services, or analytics providers — those parties act as Data Processors and may only process your data in accordance with our documented instructions and applicable data protection requirements. We do not authorise Data Processors to use your Personal Data for their own independent purposes.

Menang123 collects the following categories of Personal Data in the course of providing our services:

We do not collect sensitive special-category data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data except where expressly required for KYC verification (e.g., facial recognition on identity documents) and only to the minimum extent necessary for compliance purposes.

Menang123 collects Personal Data through the following means:

• Direct Registration: Data you provide when creating your Account, completing your profile, or updating your account settings.
• KYC Submission: Identity and address documents you upload through our secure verification portal during the account verification process.
• Financial Transactions: Data generated when you make deposits or withdrawal requests via FPX, DuitNow, Maybank2u, CIMB Clicks, Public Bank online banking, Touch 'n Go eWallet, Boost, GrabPay, Hong Leong Connect, or any other supported payment method.
• Platform Interaction: Automatically collected data generated as you navigate, play, wager, or otherwise interact with the Platform.
• Customer Support Interactions: Data exchanged during Live Chat sessions, email correspondence, WhatsApp support conversations, and any other support channel.
• Cookies and Tracking Technologies: Data collected via cookies, web beacons, pixel tags, and similar technologies as described in Section 9.
• Third-Party Sources: In certain circumstances, we may receive data about you from fraud prevention agencies, identity verification providers, or payment processors for the purpose of verifying your identity or assessing transaction risk.

All processing of your Personal Data by Menang123 is carried out on one or more of the following lawful bases:

• Contractual Necessity: Processing required to perform the contract between you and Menang123, including account creation, payment processing, game delivery, and withdrawal handling.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, responsible gambling requirements, age verification obligations, and tax reporting requirements.
• Legitimate Interests: Processing carried out to pursue Menang123's legitimate business interests, including fraud prevention, security monitoring, platform improvement, and responsible gambling monitoring — where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing carried out on the basis of your explicit consent, including the sending of marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

Menang123 uses your Personal Data for the following purposes:

• Account Management: Creating, maintaining, and administering your Account, including processing login credentials, account updates, and communication preferences.
• Service Delivery: Enabling you to access and use all features of the Platform, including casino games, sports betting markets, live dealer tables, and promotional offers.
• Payment Processing: Facilitating deposits and withdrawals via Malaysian payment channels including FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and major Malaysian bank online portals.
• Identity Verification (KYC): Verifying your identity and age in compliance with applicable anti-money laundering and responsible gambling regulations before activating full withdrawal privileges.
• Fraud Prevention and Security: Monitoring account activity for suspicious behaviour, identifying and investigating potential fraud, and protecting the integrity of our platform and player funds.
• Responsible Gambling Monitoring: Analysing your gaming behaviour to identify patterns that may indicate problem gambling, and facilitating the operation of self-exclusion, deposit limit, and session reminder tools.
• Customer Support: Responding to your enquiries, resolving complaints, processing account-related requests, and maintaining records of support interactions for quality and compliance purposes.
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications. You may opt out at any time by contacting support.
• Legal and Regulatory Compliance: Meeting our obligations under applicable laws, responding to lawful requests from regulatory authorities, and maintaining records as required by law.
• Platform Improvement: Analysing aggregated usage data to understand how the Platform is used, identify technical issues, and improve the overall player experience.

Menang123 does not sell, rent, or trade your Personal Data to third parties for commercial purposes. We may share your data only in the following limited circumstances:

• Payment Processors: We share the minimum necessary financial data with our payment processing partners (including FPX operators, DuitNow service providers, and e-wallet platforms such as Touch 'n Go, Boost, and GrabPay) solely for the purpose of completing your requested transactions.
• Identity Verification Providers: We may engage third-party KYC and identity verification services to assist in verifying the authenticity of documents submitted by Players. These providers are bound by strict data processing agreements.
• Fraud Prevention Agencies: We may share data with fraud prevention and anti-money laundering databases to verify the legitimacy of transactions and prevent financial crime.
• Regulatory Authorities: We are required by law to disclose certain information to competent regulatory and law enforcement authorities upon receipt of a valid legal request, court order, or where we have a good-faith belief that disclosure is necessary to prevent imminent harm.
• Technology Service Providers: We work with trusted technology partners for platform hosting, analytics, customer support software, and security monitoring. All such providers are contractually bound to process your data only as instructed by Menang123.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of assets, your Personal Data may be transferred to the successor entity, subject to the same privacy protections described in this Policy. You will be notified of any material change in data controllership.

In all cases, data sharing is limited to what is strictly necessary for the stated purpose. We require all third parties to maintain appropriate technical and organisational security measures to protect your data.

The Menang123 Platform uses cookies and similar tracking technologies to maintain session state, personalise your experience, and analyse platform usage. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies, security tokens, and language preference cookies. These cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: Used to remember your preferences, such as your preferred display language (English, Bahasa Melayu, or Mandarin), notification settings, and last visited games.
• Analytics Cookies: Used to collect aggregated, anonymised data about how Players interact with the Platform — including pages visited, time on site, and error reports. This data helps us improve the Platform experience.
• Security and Fraud Prevention Cookies: Used to detect and prevent fraudulent activity, including device fingerprinting tokens used to identify suspicious login patterns.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform, including the ability to maintain a logged-in session. Menang123 does not use third-party advertising or retargeting cookies.

Menang123 retains your Personal Data for as long as is necessary to fulfil the purposes described in this Policy, and as required by applicable legal, regulatory, and compliance obligations. The following general retention guidelines apply:

• Active Account Data: Retained for the full duration of your Account relationship with Menang123.
• KYC and Identity Documents: Retained for a minimum of 5 years from the date of submission, or for such longer period as required by applicable anti-money laundering regulations.
• Transaction Records: Financial transaction history is retained for a minimum of 5 years from the date of the transaction for compliance and audit purposes.
• Support Correspondence: Live chat transcripts, email records, and complaint files are retained for a minimum of 2 years from the date of the last interaction.
• Closed Account Data: Upon account closure — whether at your request or following termination under our Terms & Conditions — your data will be retained for the applicable statutory retention period and then securely destroyed.

Menang123 implements comprehensive technical and organisational security measures to protect your Personal Data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard Transport Layer Security (TLS) protocols. You can verify this by the padlock icon in your browser's address bar when visiting the Platform.
• Encryption at Rest: Sensitive Personal Data, including KYC documents and financial records, is encrypted in storage using AES-256 encryption.
• Access Controls: Strict role-based access controls ensure that Personal Data is accessible only to authorised personnel who require access to perform their job functions. All staff with access to Personal Data are subject to confidentiality obligations.
• Two-Factor Authentication: Available for all Player accounts to provide an additional layer of protection against unauthorised access.
• Automated Threat Monitoring: Our security systems monitor all account activity and transactions in real time for indicators of unauthorised access, fraud, and unusual patterns.
• Regular Security Audits: We conduct periodic internal and independent security assessments to identify and remediate vulnerabilities in our platform infrastructure.

While we take every reasonable precaution to secure your data, no digital system can guarantee absolute security. In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify affected Players and the relevant authorities in accordance with our legal obligations and as promptly as practicable.

Where Personal Data is transferred to or processed in a jurisdiction outside of Malaysia — for example, in connection with cloud hosting, third-party payment processing, or technology services — we take appropriate steps to ensure that such transfers are carried out lawfully and that your data remains protected to a standard equivalent to that described in this Policy.

Such steps may include entering into data transfer agreements with the recipient entities, applying appropriate safeguards, and ensuring that any third party receiving your data is bound by contractual obligations consistent with the protections afforded by this Policy.

As a Player of Menang123, you have the following rights with respect to your Personal Data. You may exercise any of these rights by contacting us at [email protected] or via Live Chat:

To exercise any of the above rights, please submit a written request to [email protected] with your full name, registered email address, and a clear description of your request. We may need to verify your identity before processing your request. We will respond within 30 calendar days, or notify you if a longer period is required due to the complexity of the request.

The Menang123 Platform is strictly prohibited for use by any person under the age of 21 years. We do not knowingly collect Personal Data from individuals under the age of 21. Our registration process requires users to confirm their age and to undergo identity verification that includes date-of-birth confirmation.

If we become aware, at any point, that Personal Data has been collected from a person under the age of 21, we will immediately suspend the associated Account, delete or quarantine the relevant data, and take such further action as is appropriate in the circumstances, which may include notification to the relevant authorities where required.

We strongly encourage parents and guardians to maintain oversight of their children's online activities and to use parental control software where appropriate to prevent underage access to online gambling platforms. If you believe a minor has accessed or registered on our Platform, please contact us immediately at [email protected].

The Platform may contain references to, or integration with, third-party services — including payment gateways such as FPX and DuitNow, e-wallet providers such as Touch 'n Go eWallet, Boost, and GrabPay, and identity verification services. Where you interact with these third-party services, your data is also subject to the privacy policies of those respective parties.

Menang123 is not responsible for the privacy practices or data handling of third-party services. We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of our Platform. Our responsibility extends only to data that is held directly by Menang123 or by our contracted Data Processors.

Menang123 reserves the right to update or revise this Privacy Policy at any time. Material changes — meaning changes that substantively affect how your data is processed or your rights as a data subject — will be communicated to registered Players via email or prominent in-platform notification at least 14 days before they take effect.

Non-material updates, such as formatting improvements, clarifications, or the addition of new processing activities that are consistent with previously stated purposes, may be made without specific advance notice, with the updated Policy published on this page with a revised "Last Updated" date.

Your continued use of the Platform following the effective date of any revised Policy constitutes your acknowledgement of and agreement to the revised terms. If you object to any change, you may request Account closure and deletion of your data as described in Section 13.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or would like to raise a concern about how we handle your Personal Data, please contact us through the following channels:

• Email: [email protected] — please include "Privacy Policy Enquiry" in your subject line.
• Live Chat: Available 24 hours a day, 7 days a week on the Platform in English, Bahasa Melayu, and Mandarin. Average first-response time: 3–5 minutes.
• WhatsApp: Our support team is also reachable via WhatsApp. Contact details are provided upon account registration.

All formal data protection requests and complaints will be acknowledged within 3 business days and responded to in full within 30 calendar days. If you are not satisfied with our response, you retain the right to escalate your complaint to the relevant data protection authority in your jurisdiction.