Privacy Policy — makmak24

Introduction

This Privacy Policy ("Policy") is issued by makmak24 ("the Company", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at https://makmak24.cam ("the Platform"). It describes how makmak24 collects, uses, stores, shares, and protects personal data relating to users of the Platform ("you", "the User", "the Player").

This Policy applies to all personal data processed in connection with your use of the makmak24 Platform, including during account registration, identity verification, deposits and withdrawals, customer support interactions, and general browsing. It applies regardless of whether you access the Platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or any other location.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, each of which forms an integral part of the agreement between you and makmak24. If you do not agree with any part of this Policy, you must cease using the Platform and contact us to close your account.

Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

Data We Collect

makmak24 collects personal data across several categories depending on your interaction with the Platform:

3.1 Registration & Identity Data

• Full legal name as it appears on official identification.
• Date of birth (for age verification — the Platform is strictly 21+ only).
• Email address and contact telephone number.
• Residential address, including city, state, and postcode.
• Nationality and country of residence.
• Username and encrypted password.

3.2 Identity Verification (KYC) Documents

• Copy of government-issued photo identification (e.g., Malaysian MyKad, passport).
• Proof of residential address (e.g., utility bill, bank statement dated within three months).
• Proof of payment method ownership (e.g., screenshot of Touch 'n Go eWallet, Boost, or Maybank2u account).
• Selfie or video verification in connection with liveness checks where required.

3.3 Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and payment method references.
• E-wallet identifiers for Touch 'n Go eWallet, Boost, and GrabPay accounts.
• Bank account details associated with Maybank2u, CIMB Clicks, Public Bank, and FPX transactions.
• DuitNow transfer reference numbers.
• Cryptocurrency wallet addresses where applicable.
• Bonus and promotional transaction history.

3.4 Technical & Usage Data

• IP address and approximate geolocation data derived therefrom.
• Device type, operating system, and browser information.
• Session timestamps, login history, and platform navigation patterns.
• Betting and gaming history, including game types, wager amounts, and outcomes.
• Customer support interaction records, including chat transcripts and email correspondence.

3.5 Behavioural & Preference Data

• Responsible gambling tool settings (e.g., deposit limits, self-exclusion records).
• Language and display preferences.
• Marketing communication preferences and opt-in/opt-out records.

How We Collect Your Data

makmak24 collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or submit feedback.
• Automatically: Through cookies, server logs, and tracking technologies when you browse the Platform, including device identifiers and session activity data.
• From third parties: From identity verification providers, fraud detection services, payment processors (including e-wallet and banking partners), and, where applicable, publicly available sources for AML screening purposes.

Legal Basis for Processing

makmak24 processes personal data on one or more of the following legal bases:

How We Use Your Personal Data

makmak24 uses personal data for the following purposes:

• Account operation: Creating and maintaining your account, authenticating your identity at login, and enabling access to Platform features.
• Identity verification: Conducting KYC checks to verify your age (21+ requirement), identity, and source of funds in compliance with applicable AML regulations.
• Payment processing: Facilitating MYR deposits and withdrawals via your chosen payment method, including Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, DuitNow, and FPX.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, collusion, money laundering, and account takeover attempts.
• Responsible gambling: Monitoring player activity for signs of problem gambling, enforcing self-exclusion and deposit limits, and fulfilling our duty of care obligations.
• Customer support: Responding to queries, resolving disputes, and maintaining records of support interactions.
• Platform improvement: Analysing usage patterns and performance data to enhance the Platform's functionality, stability, and user experience.
• Legal compliance: Meeting our obligations under applicable laws, responding to regulatory enquiries, and participating in legal proceedings where required.
• Marketing (with consent): Sending promotional offers, bonus notifications, and product updates to Users who have opted in to receive such communications.

Data Sharing & Third-Party Disclosure

makmak24 does not sell, rent, or trade personal data to third parties for their own commercial purposes. We may share personal data with the following categories of recipients, strictly on a need-to-know basis and subject to binding data protection agreements:

• Payment processors and banking partners: Including Maybank, CIMB, Public Bank, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX service providers — for the purpose of processing MYR transactions.
• Identity verification providers: Third-party KYC and AML service providers engaged to verify user identity and screen against sanctions and watchlists.
• Fraud prevention and cybersecurity services: Providers of fraud detection software and security monitoring tools.
• Regulatory and law enforcement authorities: Where we are legally required to disclose information — for example, to comply with a court order, regulatory investigation, or AML reporting obligation.
• Professional advisers: Including legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.
• IT infrastructure providers: Cloud hosting, database, and technical operations service providers who process data solely on our instructions.

All third parties engaged by makmak24 as Data Processors are required to implement appropriate technical and organisational security measures and to process personal data only in accordance with our documented instructions.

Data Retention

makmak24 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents reconstruction of the original data.

Data Security

makmak24 implements a range of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption of sensitive data fields at rest using industry-standard algorithms.
• Role-based access controls ensuring that personal data is accessible only to personnel with a legitimate operational need.
• Multi-factor authentication for internal system access.
• Regular security audits, vulnerability assessments, and penetration testing.
• Secure disposal of physical and electronic records containing personal data.
• Incident response procedures providing for prompt notification in the event of a data breach.

Cookies & Tracking Technologies

The makmak24 Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to remember your preferences, and to analyse how the Platform is used. The categories of cookies we use are as follows:

You may manage your cookie preferences at any time through your web browser settings. Disabling non-essential cookies will not affect your ability to use core Platform features, though some personalisation functionality may be limited.

Your Data Protection Rights

Subject to applicable law, you have the following rights in relation to your personal data held by makmak24. To exercise any of these rights, please contact us at [email protected]. We will respond to all verified requests within 30 days.

International Data Transfers

Some of makmak24's service providers and technology partners are located outside of Malaysia. Where personal data is transferred to countries that may not provide a level of data protection equivalent to that in Malaysia, makmak24 implements appropriate safeguards to ensure that such transfers comply with applicable data protection law. These safeguards may include:

• Standard contractual clauses approved by the relevant data protection authority.
• Binding corporate rules where data is shared within a corporate group.
• Transfer to countries recognised as providing adequate data protection.

By using the makmak24 Platform, you acknowledge and consent to the transfer of your personal data to our service providers in accordance with the safeguards described above.

Third-Party Services & Linked Pages

The makmak24 Platform operates on a closed-link basis and does not contain hyperlinks to external third-party websites for commercial purposes. However, our payment processing integrations involve interactions with third-party financial service providers — including Maybank, CIMB, Public Bank, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX — each of which operates under their own privacy policies.

makmak24 is not responsible for the privacy practices of these third-party payment providers. We encourage you to review their respective privacy policies, particularly in relation to any personal data you submit directly to their platforms or apps when initiating a payment transaction.

Children's Privacy

If makmak24 becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you have reason to believe that a minor has registered an account on the Platform, please contact us immediately at [email protected].

Age verification is a mandatory part of our KYC process. All new accounts are subject to age verification before real-money transactions are permitted.

Updates to This Privacy Policy

makmak24 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where changes are material, we will provide notice to registered Users via the email address associated with their account or through a prominent notice on the Platform, no less than seven (7) days prior to the changes taking effect.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy. We encourage you to review this Policy periodically.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or wish to raise a concern about how makmak24 handles your personal data, please contact our Data Protection team:

All data rights requests must be submitted with sufficient information to verify your identity before we can process the request. We will not action data rights requests from unverified parties. Where we are unable to fulfil a request — for example, due to a conflicting legal obligation — we will explain the reason clearly in our response.