M 007 Privacy Policy — Your Data, Fully Protected

1Introduction & Scope of This Policy

m 007 ("we", "our platform") are committed to protecting the privacy of every user who registers and uses our services at https://m007.my. This Privacy Policy clearly and transparently explains how we collect, process, store, disclose, and protect your personal information.

This document applies to all m 007 platform users, including registered members, website visitors, and anyone who interacts with our services on any device — whether a smartphone, tablet, or desktop computer.

The m 007 Privacy Policy is drafted in accordance with the provisions of the Personal Data Protection Act 2010 (PDPA) Malaysia and internationally recognised security standards. By using the m 007 platform, you agree to the terms set out in this Privacy Policy. If you do not agree, please discontinue use of our platform.

2Types of Information We Collect

M 007 collects two main categories of information: details you provide directly to us, and information gathered automatically as you use our platform.

Information you provide directly:

• Identity Information: Full name, date of birth, national identification card or passport number
• Contact Information: Email address, mobile number, mailing address
• Account Information: Username, password (stored as an encrypted hash), security questions
• Financial Information: eWallet account numbers (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow details, or Malaysian bank account information for deposit and withdrawal purposes
• Verification Documents: Copies of identity card, bank statements, or other KYC (Know Your Customer) documents as requested

Automatically collected information:

• Technical Data: IP address, device type, operating system, browser version
• Usage Data: Pages visited, games played, session duration, login frequency
• Transaction Data: Deposit, withdrawal, betting, winnings, and bonus usage history
• Cookie Data: User preferences, session tokens, and website performance analytics data
• Location Data: General location information based on IP address (state/city) for legal compliance purposes

3How We Use Your Information

M 007 uses the personal information collected for the following purposes, all of which are directly related to providing you with the best online casino experience:

• Account Management: Creating, verifying, and securely managing your m 007 account
• Transaction Processing: Processing deposits and withdrawals via Malaysian eWallets (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow, and FPX — quickly and accurately
• Identity Verification (KYC): Verifying your age and identity to meet legal requirements and prevent fraud
• Customer Support: Responding to enquiries, resolving complaints, and providing technical support via live chat or email
• Platform Security: Detecting and preventing suspicious activity, fraud, money laundering, and unauthorised access
• Personalise Your Experience: Recommending slots, Live Casino, football, and badminton games tailored to your preferences
• Marketing Communications: Sending promotional information, bonuses, and special offers — only where you have consented to receive them
• Legal Compliance: Meeting reporting obligations to the relevant enforcement bodies when required
• Service Improvement: Analysing usage patterns to improve the performance, design, and functionality of the m 007 platform

M 007 will not use your data for any purpose beyond those stated above without first obtaining your explicit consent.

4Legal Basis for Data Processing

In accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), m 007 only processes your personal data on lawful grounds, namely:

• Consent: You have given explicit consent at the time of registering an account or subscribing to marketing communications from m 007.
• Contract Performance: Processing is necessary to fulfil the agreement between you and m 007, including processing deposits, withdrawals, and providing gaming services.
• Legitimate Interests: m 007 has a legitimate interest in processing data for platform security, fraud prevention, and service improvement purposes.
• Legal Obligations: Processing is required to comply with applicable Malaysian legislation, including anti-money laundering (AML) and KYC requirements.

5Information Sharing & Disclosure

M 007 does not sell, rent, or trade your personal information to any third party for their own marketing purposes. Your information is only shared in the following limited circumstances:

• Trusted Service Providers: We share necessary data with technology providers, payment processors (FPX and DuitNow gateways), gaming software providers, and cloud service providers that support the operation of the m 007 platform. All such providers are bound by strict confidentiality agreements.
• Legal Requirements: We may disclose your information to Malaysian law enforcement agencies, courts, or regulatory bodies where required by law or court order.
• Fraud Prevention: In cases involving fraud, money laundering, or serious security threats, we may share relevant information with the appropriate authorities.
• Your Explicit Consent: We may share your information with third parties where you have given clear and specific consent for such sharing.

When we share data with third parties, we ensure that those parties maintain a level of data protection equal to or higher than our own.

6Data Security & Protection Measures

M 007 continually invests in the latest security infrastructure to ensure your personal data is always protected. Our security measures include:

• 256-bit SSL Encryption: All communications between your device and m 007's servers are encrypted using the latest Transport Layer Security (TLS) technology.
• Password Protection: Your password is stored as a cryptographic hash that cannot be read — not even by m 007 staff.
• Two-Factor Authentication (2FA): An additional security layer to protect your account from unauthorised access.
• 24/7 Monitoring: An automated threat detection system that monitors for suspicious activity around the clock.
• Internal Access Controls: Only authorised personnel may access user data, and all access is logged for audit purposes.
• Regular Security Audits: Independent penetration testing is conducted periodically to ensure our systems remain robust.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure. We encourage you to take precautions as well, such as using a strong password and keeping your login credentials confidential.

7Use of Cookies

M 007 uses cookies and similar tracking technologies to enhance your experience and analyse platform performance. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Performance Cookies: Collects anonymous information about how you use the website to help us improve the platform.
• Functionality Cookies: Saving your preferences such as language, display settings, and favourite games for a more personalised experience.
• Analytics Cookies: Helps us understand platform traffic patterns and usage to make better development decisions.

You can manage your cookie settings through your browser at any time. Please note that disabling certain cookies may affect some features of the m 007 platform.

8Data Storage & Retention Period

M 007 retains your personal information only for as long as necessary for the purposes outlined in this Privacy Policy, or as required under Malaysian law.

• Active Account Data: Retained for as long as your account is active and for a reasonable period thereafter to facilitate account recovery if needed.
• Financial Transaction Records: Retained for a minimum of 7 years in line with Malaysia's financial and anti-money laundering legal requirements.
• Security Logs: Retained for 2 years for audit purposes and security incident investigations.
• Marketing Data: Retained until you withdraw consent or request deletion.
• KYC Information: Retained for at least 5 years after the business relationship ends, in compliance with AML regulations.

Once the retention period expires, your data will be securely deleted or anonymised using industry-recognised procedures.

9Your Rights Under the PDPA

As a Malaysian citizen or resident, you have specific rights regarding your personal data under PDPA 2010. m 007 is committed to making it easy for you to exercise these rights:

To submit any of the above rights requests, please contact us at support@m007.my. We will process your request within 30 working days from the date of receipt.

10Cross-Border Data Transfers

In certain circumstances, your personal data may be transferred to or stored on servers located outside Malaysia, particularly in connection with the cloud service providers and international gaming technology providers we use.

When such transfers occur, m 007 ensures that:

• The recipient country or region provides a level of data protection equivalent to Malaysia's PDPA
• Appropriate data processing agreements have been established with the data recipients
• Adequate technical and organisational security measures have been implemented

11Links to Third-Party Websites

The m 007 platform may contain links to third-party websites or services for your convenience. Please note that m 007's Privacy Policy not applicable to those third-party websites or services.

M 007 has no control over the content, privacy policies, or practices of third-party websites. We encourage you to read the Privacy Policy of every website you visit. Your use of third-party websites is entirely at your own risk.

12Changes to This Privacy Policy

M 007 reserves the right to update or modify this Privacy Policy at any time. You will be notified of any material changes via your registered email or an in-platform notification at least 14 days before the changes take effect.

The "Last Updated" date at the top of this page will be revised whenever the Privacy Policy changes. We encourage you to review this page periodically to stay informed about how we protect your information.

Continued use of the m 007 platform after changes to the Privacy Policy are made will be considered your acceptance of the updated version. If you do not agree with the changes, please contact us to discuss the available options.

13Contact Us About Privacy

If you have any questions or concerns, or wish to submit a request regarding your personal data, the m 007 Data Protection Officer team is here to help.

You also have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia if you believe your rights under the PDPA 2010 have been violated.