Privacy Policy myk2ss – Our Commitment to Protecting Your Data

Myk2ss is an online betting platform that has been operating since 2019, offering Sports Betting (including the Malaysia Super League, EPL, Champions League, and over 500 other leagues), Live Casino, e-sports, slots, and progressive jackpots to adult players in Malaysia. In the course of these operations, myk2ss collects and processes certain personal information from our players.

This Privacy Policy applies to all myk2ss platform users — whether you are browsing the site without an account, an active registered player, or a former member whose account has been closed. We are committed to handling all personal information responsibly, transparently, and in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Myk2ss collects personal information from you in a number of ways depending on how you interact with our platform. The categories of data we collect are as follows:

Data You Provide Directly:

• Full name as shown on your Malaysian identity card (MyKad) or valid passport.
• An active Malaysian phone number for OTP verification and support communications.
• Date of birth for age verification (must be 18 years of age or older).
• Your eWallet or bank account details for deposits and withdrawals — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u (FPX), or CIMB Clicks (FPX).
• A copy of your identity document (MyKad or passport) when required for identity verification prior to withdrawal.
• Any information you voluntarily provide through interactions with our customer support team.

Automatically Collected Data:

• The IP address of your device when accessing the myk2ss platform.
• The web browser type and operating system in use.
• Login session information, including the date, time, and duration of each session.
• Your in-account gaming and betting activity history — including game types, bet amounts, and outcomes.
• Complete financial transaction records, including deposits, withdrawals, and bonus usage.
• Cookie data and similar tracking technologies (as detailed in Section 6).

Myk2ss uses the personal data collected for the following purposes, all of which are necessary for the lawful and proper operation of the platform:

• Account management: To create, verify, and maintain your myk2ss account, including the mandatory identity verification process.
• Transaction processing: To process deposits, withdrawals, and all financial transactions you carry out through supported Malaysian payment methods.
• Service provision: To enable you to access and enjoy all games and betting options available at myk2ss, including Live Casino, football, e-sports, slots, and jackpots.
• Service communications: To send you important account-related notifications such as deposit confirmations, withdrawal status updates, and account security alerts.
• Promotion management: To process bonus claims, manage VIP programme memberships, and ensure all promotions are carried out correctly in accordance with the applicable terms.
• Fraud prevention: To detect, investigate, and prevent fraudulent activity, multi-account abuse, payment fraud, and money laundering involving the myk2ss platform.
• Customer support: To provide technical assistance and resolve any complaints or enquiries you submit to our Malay-speaking support team.
• Platform improvements: To analyse usage patterns and feedback for the purpose of improving the quality of myk2ss's products, interface, and overall user experience.
• Legal compliance: To comply with applicable Malaysian legal requirements, including any reporting obligations that may be mandated by the relevant authorities.

Myk2ss will not use your personal data for any purpose beyond those stated above without first obtaining your consent.

Myk2ss does not sell, rent, or disclose your personal data to third parties for their own marketing or commercial purposes. However, there are specific situations where we need to share your data with certain parties for legitimate operational purposes:

Payment Service Providers: myk2ss shares the necessary transaction information with payment service providers that process your deposits and withdrawals — including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX-supporting banks such as Maybank and CIMB. This sharing is required to process your financial transactions and is subject to each provider's respective privacy policy.

Game Software Providers: To deliver the best gaming experience, myk2ss partners with Live Casino, slots, and e-sports game providers. In this context, certain technical data (not your full personal information) may be shared solely for game operation purposes.

Legal Requirement: myk2ss may be required to disclose your personal data to Malaysian government authorities when mandated by law, court order, or a valid official investigation. In such circumstances, myk2ss will notify you in advance if permitted by law to do so.

Myk2ss continually invests in its security infrastructure and practices to ensure your personal data is protected at all times. The key security measures we employ are:

• 256-bit SSL Encryption: All communications between your device and myk2ss servers are secured with 256-bit SSL encryption — the same security protocol used by Malaysia's leading banking institutions.
• Password hashing: myk2ss account passwords are stored using strong cryptographic hashing algorithms. myk2ss never stores passwords in readable form — not even our own staff can access them.
• Two-factor authentication (2FA): myk2ss uses OTP verification via your Malaysian phone number as an additional security layer for logins and critical transactions.
• Internal access controls: Access to player personal data within myk2ss's internal systems is restricted to specific personnel who require it to carry out their operational duties. All access is logged and monitored.
• 24/7 Monitoring: The myk2ss security team continuously monitors the platform's infrastructure to detect any suspicious activity or intrusion attempts.
• Regular security audits: myk2ss conducts regular security reviews and audits to identify and address any potential vulnerabilities in our systems.

While myk2ss takes all reasonable security measures, no system can be guaranteed 100% secure against every cyber threat. You also play an important role in keeping your account safe — use a strong password and never share your login credentials with anyone.

Myk2ss uses cookies and similar tracking technologies to enhance your user experience and ensure the platform functions correctly. Cookies are small text files stored on your device when you visit the myk2ss website.

The types of cookies we use are as follows:

• Essential cookies: Required for core platform functions such as login authentication, play sessions, and security. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collects information about how you use the myk2ss platform — pages visited, time spent, and any errors encountered. This information is used in aggregate form to improve the platform.
• Functional cookies: Saving your preferences such as language, theme, and display settings so you do not have to reconfigure them each time you log in.
• Analytics cookies: Helps us understand overall platform usage patterns for product improvement purposes. Analytics data is aggregated and does not identify individual users.

You can manage or disable cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the myk2ss platform and your overall gaming experience.

Myk2ss retains your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable Malaysian law:

• Active account data: Retained for as long as your account remains active and for the post-closure period stipulated by applicable legal requirements.
• Financial transaction records: Retained for the minimum period required under applicable Malaysian financial regulations — typically at least 7 years from the date of the transaction.
• Identity verification records: Identity documents submitted for verification purposes are retained for the period required by Malaysia's anti-money laundering (AML) laws.
• Access and security logs: Retained for a period sufficient for security investigation and dispute resolution purposes, typically between 6 and 24 months.
• Marketing data: Retained until you withdraw consent to receive marketing communications or until you close your account.

When data is no longer required for any legitimate purpose, myk2ss will delete or anonymise it in accordance with secure disposal procedures.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data held by myk2ss:

• Right of access: You have the right to request a copy of the personal data we hold about you. Requests can be submitted through the myk2ss support team and will be processed within 14 business days.
• Right to rectification: If the personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. Certain corrections (such as name and date of birth) require supporting document verification.
• Right to withdraw consent: You may withdraw your consent to certain data processing activities (such as marketing communications) at any time. This withdrawal does not affect any processing that has already taken place.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes. Once your objection is received, myk2ss will cease that processing.
• Right to complain: If you believe myk2ss has violated your privacy rights, you have the right to lodge a complaint with the relevant data protection authority in Malaysia.

To exercise any of the above rights, please contact the myk2ss support team by email at support@myk2ss.best, clearly stating your request. We will verify your identity before processing any data-related request.

Myk2ss is a betting platform intended exclusively for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

All myk2ss account registrations include an age verification step. Should we find that personal data of a minor (under 18 years of age) has been collected inadvertently, we will take the following steps immediately:

• Closing the relevant account without prior notice.
• Freezing all account balances pending the completion of the investigation.
• Permanently deleting all associated personal data within a secure timeframe.

If you are a parent or guardian who believes your minor child has registered a myk2ss account without your consent, please contact our support team at support@myk2ss.best immediately.

Myk2ss reserves the right to update or amend this Privacy Policy from time to time to reflect changes in operational practices, legal requirements, or technological developments. Where material changes are made to this policy, myk2ss will:

• Updating the "Last Updated" date shown at the top of this document.
• Displaying a clear notice of changes on the myk2ss platform homepage for at least 7 days.
• Sending notifications to all registered members via their registered Malaysian phone number.

Your continued use of the myk2ss platform after the effective date of any amendment constitutes your acceptance of the revised policy. If you do not agree with the changes made, you have the right to close your account and withdraw all remaining balances before the amendment takes effect.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how myk2ss handles your personal data, please reach out to us through the following channels:

• Email: support@myk2ss.best — include "Privacy Enquiry" in your email subject line for faster processing.
• Live chat: Available on the myk2ss platform 24 hours a day, 7 days a week. Our Malay-speaking support team is always ready to assist.

Myk2ss is committed to responding to all privacy-related enquiries within 5 business days. For more complex requests such as data access requests or formal complaints, a response may take up to 14 business days.

All privacy-related communications will be handled by myk2ss-trained and authorised personnel. Your identity will be verified before any sensitive information is shared or any action is taken on your request.