Privacy Policy

Privacy Policy m29 — Your Data, Our Responsibility

At m29, your privacy is not merely a legal obligation — it is our genuine commitment. Find out exactly how your personal data is collected, used, and protected at all times.

Last Updated: 1 January 2026

Why Your Privacy Safe With m29

Six core principles that form the foundation of personal data protection for every m29 member in Malaysia.

256-Bit SSL Encryption

Every piece of information you submit to m29 is protected by bank-grade 256-bit SSL encryption. Your data remains secure in transit and is inaccessible to any unauthorised third party.

No Data Selling

M29 has never sold and will never sell your personal data to any third party for marketing purposes. Your data is used solely for the purpose of delivering m29 services.

Full Control in Your Hands

You have the right to access, amend, or request deletion of your personal data at any time. m29 respects your rights as the data owner and handles every request with care.

Secure Data Storage

Your personal data is stored on servers protected by industry-grade firewalls, intrusion detection systems, and strict access controls. Only authorised personnel may access sensitive data.

Malaysia PDPA Compliance

All m29 data management practices comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We operate transparently and take full responsibility for every piece of data you entrust to us.

Immediate Breach Notification

In the event of any security incident involving your data, m29 is committed to notifying you promptly and taking immediate remedial action to protect your interests.

Important Notice

This Privacy Policy explains how m29 collects, uses, stores, and protects your personal information. By using the m29 platform, you confirm that you have fully read and understood this policy.

Section 01

Introduction

Welcome to the m29 Privacy Policy page. We understand that your trust is our most valuable asset, and protecting your personal information is our absolute priority.

This Privacy Policy describes in detail how m29 (operating under the domain m29.best) manages your personal data — from collection, use, and storage, through to protection and deletion. This document is written in clear, plain language so every member in Malaysia knows exactly what rights and protections they have.

M29 operates in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and adheres to all applicable data protection legal requirements. As a data controller, m29 takes full responsibility for all personal data entrusted to our platform by members.

This policy applies to all users of the m29 platform — whether via the website at m29.best, the m29 mobile app, or any other service provided by m29. If you do not agree with any part of this policy, you are required to stop using the m29 platform.

Section 02

Information Collected

M29 collects various types of personal information to enable us to provide a secure, efficient, and personalised service to every member. This information is collected directly from you or automatically when you use our platform.

2.1 Information You Provide Directly

Data Category Example Information Primary Purpose
Identity Information Full name, date of birth, MyKad / passport number KYC Verification
Contact Information Email address, phone number, residential address Account Communications
Financial Information Bank account number, bank name, transaction history Payment Processing
Login Information Username, password (encrypted) Account Security
Verification Documents MyKad image, bank statement, utility bill Legal Compliance

2.2 Information Collected Automatically

When you use the m29 platform, our systems automatically collect certain technical information to ensure a smooth and secure gaming experience:

  • Device Information: Device type, operating system, phone model, screen resolution
  • Network Information: IP address, internet connection type, internet service provider (ISP) name
  • Session Data: Login and logout times, session duration, pages visited
  • Game Data: Wagering history, games played, wins and losses
  • Cookie Data: Your preferences, language settings, login status

2.3 Information from Third-Party Sources

In certain circumstances, m29 may receive information about you from trusted third-party sources, including identity verification service providers, payment processors, and fraud prevention service providers. This information is used solely for security and account verification purposes.

Section 03

How We Use Your Data

M29 uses your personal data responsibly and only for legitimate purposes. All data usage is guided by the principle of minimum necessity — we only use data that is strictly required for the stated purpose.

  • Account Management: Create, verify, and manage your m29 account, including the KYC process
  • Transaction Processing: Process deposits, withdrawals, and all financial transactions securely and accurately
  • Service Provision: Enables you to access all games and features on the m29 platform seamlessly
  • Security and Fraud Prevention: Detect and prevent fraudulent activity, money laundering, and platform abuse
  • Customer Support: Handle your enquiries, complaints, and technical support requests
  • Account-Related Communications: Send important notifications regarding your account, transactions, and policy changes
  • Service Improvement: Analyse usage patterns to improve platform performance and user experience
  • Legal Compliance: Fulfil applicable legal and regulatory obligations, including PDPA and anti-money laundering (AML) requirements
  • Personalised Marketing: Send relevant promotional offers and bonuses — only where you have given your consent
m29 Data Usage Principles

M29 will only use your data for the purposes stated at the point of collection, or for purposes consistent with those. Any new and different use will require fresh consent from you.

Section 04

Data Sharing

M29 never sells your personal data to any party. However, under certain circumstances, m29 may need to share your information with the following parties for legitimate operational purposes:

4.1 Third-Party Service Providers

M29 works with trusted third-party service providers to handle certain aspects of our platform operations. This includes payment processors such as FPX, Touch 'n Go, and GrabPay; identity verification service providers; and technology infrastructure vendors. All third-party providers are bound by strict confidentiality agreements and are only permitted to use your data for specified purposes.

4.2 Legal Requirements

M29 may be required to disclose your information to government authorities or law enforcement where mandated by applicable Malaysian law, a valid court order, or for the purposes of preventing and investigating financial crime.

4.3 Business Transfers

If m29 is involved in any merger, acquisition, or transfer of business assets, your personal data may be transferred as part of those assets. You will be notified in advance before your data becomes subject to a different privacy policy.

The m29 Guarantee

M29 does not share your personal data with third-party advertisers, data brokers, or any party without a legitimate operational need. All data sharing is subject to binding data protection agreements.

Section 05

Cookies and Tracking Technologies

The m29 platform uses cookies and similar tracking technologies to enhance your experience, ensure account security, and help us understand how the platform is used for continuous improvement.

5.1 Types of Cookies Used

  • Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled as they are essential for platform operation.
  • Performance Cookies: Collects information on how you use the platform (e.g. most frequently visited pages) to help us improve performance.
  • Functional Cookies: Saves your preferences such as language, display settings, and login details for your convenience.
  • Analytics Cookies: Helps us understand traffic patterns and platform usage in aggregate, anonymised form.

5.2 Cookie Management

You can control and manage cookies through your web browser settings. Please note, however, that disabling certain cookies may affect the functionality of the m29 platform and your gaming experience. Cookie management instructions vary by browser — please refer to your browser's help section for detailed guidance.

Section 06

Data Security

M29 consistently invests in enterprise-grade cybersecurity infrastructure to ensure your personal data remains protected at the highest level. Our approach to data security is integrated and multi-layered.

  • End-to-End Encryption: All communications between your device and m29 servers are encrypted using TLS 1.3 protocol with AES-256 encryption
  • Role-Based Access Control: Only specifically authorised staff may access sensitive member data, and every access is recorded in an audit log
  • Two-Factor Authentication: m29's internal systems are protected by multi-factor authentication to prevent unauthorised access
  • 24/7 Monitoring: Our security systems are monitored around the clock by an experienced cybersecurity team
  • Regular Penetration Testing: Security audits and penetration testing are conducted regularly by independent experts
  • Secure Data Backup: Your data is backed up regularly to a secure, fully encrypted location
Shared Responsibility

While m29 takes comprehensive security measures, the security of your account also depends on you. Keep your password strong, unique, and never share it with anyone. Enable two-factor authentication for added protection.

Section 07

Data Retention Period

M29 retains your personal data only for as long as necessary to fulfil the purpose of collection or to comply with applicable legal requirements. Our principle is straightforward: data that is no longer needed will be securely deleted or anonymised.

Data Type Retention Period Reason
Active Account Information Throughout the active account period Ongoing service provision
Financial Transaction Records 7 years after transaction AML / tax legal requirements
KYC Documents 5 years after account closure PDPA and AML Compliance
Activity Log 2 years Security and fraud investigation
Marketing Data Until consent is withdrawn Marketing communications with consent

Once the retention period has ended, your data will be securely deleted or anonymised using industry-standard procedures, ensuring the information can no longer be linked back to you.

Section 08

Your Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have clearly defined rights regarding your personal data. m29 respects and facilitates the exercise of all these rights.

Right of Access

You have the right to obtain a copy of the personal data we hold about you at any time.

Right to Rectification

You may request correction of any inaccurate or incomplete data in your account.

Right to Erasure

You may request deletion of your personal data, subject to legal retention obligations.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time.

Right to Data Portability

You may request to receive your data in a machine-readable format for transfer.

Right to Restriction

In certain circumstances, you may request a restriction on the processing of your personal data.

To exercise any of the above rights, please contact the m29 support team via Live Chat or our support email. We will process your request within 30 working days. No fee is charged for reasonable requests.

Section 09

Cross-Border Data Transfer

In the course of operations, your personal data may be transferred to and stored on servers located outside Malaysia. This occurs when we use cloud infrastructure services or service providers operating in other countries.

M29 ensures that any cross-border data transfers are carried out with adequate and equivalent safeguards in place, including:

  • Binding data processing agreements with all third-party providers
  • Compliance with recognised international data security standards
  • Data encryption in transit and at rest
  • Periodic assessment of data protection standards in the recipient country

By using the m29 platform, you consent to such data transfers carried out solely for the purpose of delivering services to you securely and efficiently.

Section 10

Children's Privacy

The m29 platform is strictly for individuals aged 18 years and above. m29 does not knowingly collect, process, or store any personal information from individuals under the age of 18.

If we discover that we have collected personal information from an individual under the age of 18 without valid parental consent verification, we will take immediate steps to delete that information and close the account in question. Our age verification (KYC) process is designed to prevent underage registration.

Important Notice

If you become aware that an individual under the age of 18 has registered or is using the m29 platform, please notify us immediately via our support email so that prompt action can be taken.

Section 11

Privacy Policy Changes

M29 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to our services.

If there are significant changes, we will notify you through the following means:

  • In-platform notifications on m29 upon login
  • Notification email to the address registered in your account
  • Updates the "Last Updated" date at the top of this page

Your continued use of the m29 platform after the effective date of any changes will be considered your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

Section 12

Contact Us

If you have any questions, concerns, or wish to exercise your data privacy rights, the m29 Data Protection Officer (DPO) team is ready to assist you.

Live Chat

Reach us directly via Live Chat on the m29 platform for an immediate response. Our support team is available 24 hours a day, 7 days a week.

Support Email

For data privacy-specific enquiries, email our team at [email protected] and we will respond within 3 business days.

We are committed to responding to all privacy-related enquiries within a reasonable timeframe and ensuring every issue is resolved thoroughly and professionally. Your trust is our priority.

Play Responsibly,
Your Privacy Is Protected

Now you know how m29 protects your data. Register today and enjoy a safe, fair, and responsible gaming experience alongside thousands of members across Malaysia.

Bahasa Melayu