Data Protection

Privacy Policy mtown — Our Commitment to Protecting Your Personal Data

Your privacy is more than a legal obligation to us — it is part of the trust you place in mtown. This document transparently explains how we manage your data.

Updated: January 2026

Six Principles mtown Data Protection

Mtown's privacy policy is built on six core principles that ensure your personal data is always handled responsibly.

Purpose-Driven Data Collection

Mtown only collects personal data that is strictly necessary to deliver our services. No data is collected excessively or without a pre-defined purpose.

Data Encryption and Security

All data is stored and transmitted using 256-bit SSL encryption. Our servers are protected by multiple security layers that are regularly reviewed by independent security experts.

User Permission Controls

You are in control of your data — from marketing preferences to data deletion requests, everything can be managed through your account settings or by contacting our support team.

No Sale of Data to Third Parties

Mtown has never and will never sell users' personal data to any third party for marketing or commercial purposes. Your data is not a product we trade in.

Full Transparency

This Privacy Policy document is written in plain, easy-to-understand language — not confusing legal jargon. We want you to genuinely understand what we do with your data.

Malaysian Legal Compliance

Mtown's privacy policy is designed in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international compliance requirements applicable to our platform's operations.

Important Note: This Privacy Policy explains how mtown collects, uses, stores, and protects your personal information. By using the mtown platform, you agree to the practices described in this document. Please read the full policy carefully.

1 Introduction

Mtown (hereinafter referred to as "we", "Platform", or "mtown") cares deeply about the privacy of every user who entrusts our platform with their personal data. We understand that when you share information with us, you are placing your trust in us — a trust we do not take lightly.

This Privacy Policy applies to all users of the mtown platform, including those accessing it via the official website, the mtown App for Android and iOS, and any other digital channels operated by mtown. It describes what data we collect, why we collect it, how we use it, and the rights you have regarding that data.

This policy should be read together with Terms and Conditions us, which forms the entire usage agreement between you and the mtown platform.


2 Types of Personal Data We Collect

Mtown collects personal data across several categories depending on the type of interaction you have with the platform. Below is a table of the types of data collected and their respective purposes:

Data Categories Specific Data Types
Identity Information Full name, date of birth, identification number (MyKad/passport), gender
Contact Information Email address, phone number, mailing address
Financial Information Bank account number, digital wallet details, deposit and withdrawal transaction records
KYC Verification Data Copies of identification documents, selfies for facial verification, and proof of address
Technical Data IP address, device type, browser, operating system, general location data
Platform Activity Data Game records, betting history, session duration, and games played
Communication Data Support conversation records, emails, and feedback submitted to us

Technical data is collected automatically when you access our platform. Other data is collected directly from you during registration, KYC verification, or when you use our services.


3 How We Use Your Data

Mtown uses collected personal data solely for legitimate, stated purposes. We do not use your data for purposes unrelated to the provision of platform services. The primary uses of your data are as follows:

  • Account Management: Creating, verifying, and maintaining your user account, including the KYC process required for regulatory compliance.
  • Service Delivery: Processing deposits and withdrawals, enabling access to games, and providing all platform features you use every day.
  • Security and Fraud Prevention: Identifying and preventing fraudulent activity, money laundering, unauthorised access, and other security threats to the platform and its users.
  • Legal Compliance: Meeting reporting requirements to relevant authorities, including Anti-Money Laundering (AML) and Know Your Customer (KYC) obligations.
  • Customer Support: Processing enquiries, complaints, and support requests you submit to our support team.
  • Platform Improvements: Analysing usage patterns (in aggregate and anonymised form) to improve platform quality, add new features, and enhance user experience.
  • Service Communications: Sending important notifications regarding your account, policy changes, or security information you need to be aware of.
  • Marketing (with consent): Sending promotional information, bonuses, and special offers — only to users who have given consent to receive marketing communications.

4 Data Sharing with Third Parties

Mtown does not sell, rent, or trade users' personal data to any third party for marketing or commercial purposes. This is a non-negotiable principle in the way we manage your data.

However, there are limited situations in which we may share your data with certain parties, namely:

  • Authorised Service Providers: Third parties that help us deliver our services — such as payment processors, gaming platform providers, and technology infrastructure service providers — all of whom are bound by strict confidentiality agreements and may only use data for specified purposes.
  • Relevant Authorities: When required by law, court order, or a valid request from a regulatory authority, we will provide the necessary data within the limits prescribed by law.
  • KYC Verification Providers: Third-party identity verification services that help us carry out the KYC process securely and in line with industry standards.
  • Business Transfers: In the event that mtown undergoes a merger, acquisition, or asset transfer, user data may be transferred as part of that process — however, the receiving party will be subject to an equivalent or stricter privacy policy.

Our Commitment: All third parties with whom we share data are subject to strict data protection agreements. They are not permitted to use your data for any purpose other than what has been specified in those agreements.


5 Data Security Measures

Protecting your data is our top technical and operational priority. mtown implements multiple layers of security measures to ensure your personal data cannot be easily accessed, altered, or stolen by unauthorised parties.

Key security measures we implement include:

  • 256-bit SSL Encryption: All data transmitted between your device and mtown's servers is protected by bank-grade encryption that cannot be easily compromised.
  • Data-at-Rest Encryption: Sensitive data stored in our databases is also encrypted for additional protection, even when at rest.
  • Strict Access Controls: Only staff with a legitimate business need are permitted to access user data — with a full audit log maintained for every access made.
  • 24/7 Monitoring: Our security monitoring system operates around the clock to detect and respond to any threats or suspicious activity in real time.
  • Regular Security Audits: Penetration testing and independent security audits are conducted regularly by third-party cybersecurity experts to identify and address any vulnerabilities.
  • Secure Data Backup: User data is regularly backed up to a separate secure location to ensure recovery is possible in the event of an unexpected technical incident.

While we implement all these security measures, it is important to note that no online system can be guaranteed 100% secure. You also play an important role in keeping your own account secure through the use of strong passwords and good security practices.


6 Cookies and Tracking Technologies

Mtown uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. Cookies are small files stored on your device when you visit our platform.

Types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled.
  • Functional Cookies: Saving your preferences such as language, display settings, and other personal choices to make your experience on the platform more convenient.
  • Analytics Cookies: Helps us understand how users interact with the platform — most visited pages, time spent, and navigation patterns. This data is used in aggregate form for platform improvements.
  • Performance Cookies: Used to monitor platform performance and identify technical issues that require resolution.

You can manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of some parts of the platform. For optional (non-essential) cookies, you may opt out without affecting your core use of the platform.


7 Data Retention Period

Mtown retains your personal data only for as long as it is needed for the purposes stated in this policy, or as required by applicable law. Our general principle is to retain data for the minimum period necessary.

  • Active Account Data: Retained for as long as your account is active and for a defined period after account closure for compliance and audit purposes.
  • Financial and Transaction Records: Retained for a minimum of 7 years in accordance with applicable financial laws and AML compliance requirements in Malaysia.
  • KYC Records: Retained for the period specified by regulatory requirements — typically a minimum of 5 years after account closure.
  • Support Communication Data: Retained for 3 years for reference and dispute resolution purposes.
  • Analytics Data: Anonymised usage data is retained for a longer period for platform improvement purposes, but contains no personally identifiable information.

When data is no longer needed and there is no legal requirement to retain it, we will securely delete or anonymise it in accordance with established procedures.


8 Your Rights as a User

As an mtown platform user, you have certain rights regarding your personal data. mtown respects and facilitates the exercise of these rights:

Right of Access

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

You have the right to request corrections to inaccurate or outdated data via your account settings or by contacting support.

Right to Erasure

In certain situations, you may request the deletion of your personal data, subject to applicable legal requirements.

Right to Object to Processing

You may object to the processing of your data for direct marketing purposes at any time.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format for transfer to another platform.

Right to Restriction of Processing

You may request a restriction on data processing in certain situations while a dispute is being resolved.

To exercise any of the rights above, contact the mtown support team via live chat within the platform or our official email. We will respond to your request within 30 business days. In cases involving additional verification requirements or complex requests, we may require more time and will notify you in advance.


9 Cross-Border Data Transfers

As a platform operating within a global technology environment, some users' personal data may be processed or stored on servers located outside Malaysia. This may occur when we use cloud computing services, international gaming providers, or third-party technology infrastructure.

When cross-border data transfers occur, mtown ensures equivalent or higher levels of protection are maintained through:

  • Data transfer agreements compliant with international data protection standards
  • Selecting service partners with recognised data security certifications
  • Data protection impact assessments prior to any new transfer being implemented
  • Standard contractual clauses ensuring data protection responsibilities are transferred along with the data

10 Children and Minors

The mtown platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from children or individuals under the age of 18. Our KYC process is designed to detect and prevent registration by minors.

Should we find that we have collected data from an individual under the age of 18, we will take immediate steps to delete that data and close the relevant account. If you are a parent or guardian who believes your child has registered on our platform, please contact our support team immediately.


11 Amendments to the Privacy Policy

Mtown reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When significant amendments are made, we will notify you via in-platform notifications, an email to your registered address, or a prominent notice on our website.

The "Updated" date at the top of this document will always reflect the date of the latest amendment. We encourage you to review this page periodically. Continued use of the mtown platform following any amendment constitutes your acceptance of the revised policy.


12 How to Contact Us Regarding Privacy

If you have any questions, concerns, or wish to exercise your rights regarding this Privacy Policy, please contact us through the following channels:

  • Live Chat: Available 24/7 via the chat icon within the mtown platform
  • Email: [email protected] (displayed as text only)
  • FAQ: Visit page FAQ us for answers to frequently asked questions about privacy

Our team responsible for data privacy matters will respond to your enquiry within a reasonable timeframe. For formal data rights requests, we aim to provide a response within 30 working days from the date the request is received.

Data Controller: mtown acts as the data controller for personal information collected through the platform. Any communications regarding data privacy should be directed to our Privacy and Data Protection team through the channels stated above.

Join a Trusted Platform

Your Data Is Safe with mtown — Register with Confidence

User privacy is our priority. Join the community of Malaysian players who trust mtown for a safe and enjoyable gaming experience.

Encrypted data No data sales Malaysia PDPA 18+ only
Bahasa Melayu