Privacy Policy

This Policy applies to all visitors, registered users, and active players of the m1play Platform, including individuals accessing the site from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other locations in Malaysia and beyond.

This Policy applies to all visitors, registered users, and active players of the m1play Platform, including individuals accessing the site from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other locations in Malaysia and beyond.

By registering an account, making a deposit, or otherwise using the m1play Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not consent to this Policy, you must not use the Platform.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly, including name, identification number, contact details, device identifiers, and transaction data.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means m1play, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means any third-party entity that processes personal data on m1play's behalf under a written data processing agreement.
• "KYC" (Know Your Customer) means the identity verification process required by m1play before approving account withdrawals.
• "Cookie" means a small data file placed on your device by the Platform to enable certain functionality, store preferences, or collect analytics data.
• "You / User / Player" means any individual who accesses, registers on, or otherwise uses the m1play Platform.

m1play collects personal data only to the extent necessary to provide, secure, and improve the services offered on the Platform. The categories of data we collect are as follows:

m1play collects personal data through the following means:

• Direct Submission: Information you provide when creating an account, completing KYC verification, making a deposit, or contacting customer support.
• Automated Collection: Technical data collected automatically when you visit the Platform, including cookies, server logs, and device fingerprinting technologies used for fraud prevention.
• Third-Party Sources: Identity verification data obtained from licensed KYC service providers; payment confirmation data from payment processors such as those facilitating DuitNow, FPX, Touch 'n Go eWallet, or cryptocurrency transactions.
• Publicly Available Sources: In limited circumstances, we may verify information against publicly available records as part of our AML compliance obligations.

m1play processes your personal data one or more of the following legal bases:

• Contractual Necessity: Processing required to fulfil our obligations to you under the Terms & Conditions — including account management, transaction processing, and support services.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) laws, age verification obligations, and reporting duties to relevant authorities.
• Legitimate Interests: Processing undertaken for m1play's legitimate business interests, including fraud prevention, platform security, analytics, and improving the user experience — provided these interests do not override your fundamental privacy rights.
• Consent: Processing activities for which you have provided explicit, informed consent, including opt-in marketing communications. You may withdraw this consent at any time without penalty to your account status.

Your personal data is used by m1play for the following purposes:

• To register and manage your Account on the Platform
• To verify your identity and age as part of the KYC process
• To process deposits and withdrawals via your chosen payment method (Touch 'n Go eWallet, Maybank, CIMB, DuitNow, FPX, cryptocurrency, or other supported channels)
• To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal or prohibited conduct
• To operate and enforce the Platform's responsible gambling tools, including deposit limits and self-exclusion facilities
• To deliver customer support via live chat, WhatsApp, or email in your preferred language
• To send transactional communications relating to your Account (deposit confirmations, withdrawal updates, security alerts)
• To send marketing communications regarding promotions, bonuses, and platform updates — only where you have consented to receive them
• To analyse Platform performance, optimise the user experience, and develop new features
• To comply with legal obligations and respond to lawful requests from regulatory or law enforcement authorities

m1play does not sell, rent, or otherwise trade your personal data to any third party for commercial purposes. Data may be shared in the following strictly limited circumstances:

• Licensed KYC / AML Providers: Identity documents and verification data are shared with accredited third-party identity verification service providers solely for the purpose of completing KYC checks.
• Payment Processors: Financial data necessary to process deposits and withdrawals is shared with licensed payment processors supporting Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and cryptocurrency networks. These processors operate under their own privacy frameworks and applicable regulations.
• Game Software Providers: Limited technical and gameplay data may be shared with certified game providers to facilitate game delivery and integrity monitoring.
• Regulatory & Law Enforcement Authorities: m1play may disclose personal data to competent authorities when required to do so by applicable law, court order, or in connection with an active investigation into fraud, money laundering, or other criminal activity.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of m1play's assets, personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

All third-party processors engaged by m1play are subject to binding data processing agreements that prohibit any use of your data beyond the specific purpose for which it was shared.

m1play retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. General retention principles are as follows:

• Active Account Data: Retained for the duration of your active account relationship with m1play.
• KYC and Identity Documents: Retained for a minimum of five (5) years following account closure, in compliance with AML regulatory requirements.
• Transaction Records: Retained for a minimum of five (5) years to meet financial record-keeping and regulatory obligations.
• Support Communications: Retained for up to three (3) years following the close of the relevant support interaction, for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for the duration of your marketing opt-in, plus a reasonable period thereafter as evidence of consent.

Following the applicable retention period, personal data will be securely deleted or anonymised in manner that prevents reconstruction.

m1play uses cookies and similar tracking technologies to enhance your experience on the Platform. The types of cookies we use are categorised as follows:

• Essential Cookies: Required for the Platform to function correctly. These include session management, security tokens, and login authentication. These cannot be disabled without materially impairing Platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings and notification preferences, so you do not have to reconfigure them on each visit.
• Analytics Cookies: Used to collect aggregated, anonymised information about how users interact with the Platform — including page visit frequency, session duration, and navigation patterns — to help us improve the user experience.
• Security Cookies: Used to detect and prevent fraudulent account access, bot activity, and suspicious device behaviour.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may limit the functionality of the Platform. m1play does not use third-party advertising cookies or cross-site tracking technologies for commercial advertising purposes.

m1play implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, and disclosure. These measures include, but are not limited to:

• 256-bit SSL / TLS Encryption: All data transmitted between your device and the m1play Platform is encrypted in transit using industry-standard TLS protocols.
• Encrypted Storage: Personal data and financial records are stored in encrypted databases with strict access controls and role-based permissions.
• Two-Factor Authentication (2FA): Available on all user accounts to provide an additional layer of protection against unauthorised logins.
• Regular Security Audits: The Platform undergoes periodic independent security assessments and penetration testing to identify and remediate vulnerabilities.
• Staff Access Controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis. All staff handling personal data are subject to confidentiality obligations.

As a data subject, you hold the following rights in relation to your personal data held by m1play. To exercise any of these rights, please contact our support team and we will respond within 30 days:

• Right of Access: You have the right to request a copy of all personal data we hold about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held in your Account.
• Right to Erasure: In certain circumstances, you may request that m1play delete your personal data. This right is subject to overiding legal obligations — for example, KYC and transaction records that must be retained for regulatory compliance.
• Right to Restrict Processing: You may request that we limit the processing of your data in specific circumstances, for example while a data accuracy dispute is being resolved.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format for the purpose of transfering it to another service provider, where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Object: You have the right to object to processing based on legitimate interests where you believe your fundamental rights override those interests.

To submit a data rights request, please contact us via live chat or email our support team at [email protected] (plain text — not a clickable link) with the subject line "Data Rights Request".

m1play does not knowingly collect personal data from any individual under the age of 21 years. The Platform is strictly an adult entertainment service and access by persons under 21 is prohibited.

During the registration process and as part of KYC verification, m1play takes active steps to verify that all users meet the minimum age requirement. If m1play becomes aware that personal data has been collected from a user who is under 21, that Account will be closed immediately, all associated funds will be forfeited, and all personal data will be deleted to the extent permitted by law.

Parents and guardians who believe a minor may have registered an Account on m1play should contact our support team immediately so the matter can be investigated and resolved without delay.

The m1play Platform may reference or integrate services provided by third parties, including game software providers, payment processors, and identity verification platforms. When you interact with these third-party services — for example, by completing a Touch 'n Go eWallet transaction or using a Maybank FPX payment — those third parties may independently collect data pursuant to their own privacy policies.

m1play is not responsible for the privacy practices of third-party service providers. We encourage you to review the privacy policies of any third-party service you use in connection with the Platform. m1play selects third-party providers carefully and requires that they maintain data protection standards comensurate with our own.

m1play reserves the right to amend this Privacy Policy at any time. Material changes — such as changes to the categories of data collected, the purposes for which data is used, or the rights available to you — will be communicated to registered players via email notification or a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this page reflects the most recent revision. Your continued use of the Platform following the publication of an updated Policy constitutes acceptance of the revised terms.

We recommend reviewing this Privacy Policy periodically to stay informed of how m1play protects your data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact m1play's support team through the following channels:

• Live Chat: Available 24/7 on the Platform. Average response time 3–5 minutes. Supported languages: English, Bahasa Melayu, and Mandarin.
• WhatsApp: Available 24/7. Contact number displayed after logging in to your Account.
• Email: [email protected] (plain text — not a clickable link). Please use the subject line "Privacy Enquiry" or "Data Rights Request" to ensure prompt routing to the appropriate team. We aim to respond to all privacy-related emails within 2 business hours.

Our team serves players from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across Malaysia. We are committed to resolving all privacy-related enquiries fairly, promptly, and with full respect for your rights as a data subject.

For information about responsible gambling resources, self-exclusion tools, or deposit limit requests, please visit our Responsible Gambling page.