Introduction
This Privacy Policy (hereinafter "Policy") describes the practices of mz137 (hereinafter "mz137", "the Platform", "we", "us", or "our") with respect to the collection, processing, storage, sharing, and protection of personal data belonging to individuals (hereinafter "User", "Member", or "you") who access or use the mz137 online casino and sports betting platform, accessible at mz137.cam.
mz137 is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection standards. This Policy is intended to provide you with a clear and comprehensive understanding of how your personal information is handled throughout your engagement with the mz137 Platform — from initial registration through to account closure.
This Policy applies to all personal data processed in connection with your use of mz137's services, regardless of whether you access the Platform from a desktop browser, mobile device, or any other access method. It applies to all registered Members and to individuals who browse the Platform without registering an Account.
Definitions
For the purposes of this Privacy Policy, the following definitions shall apply:
- "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, email address, IP address, payment method details, and transaction history.
- "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
- "Data Controller" means the entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, mz137 acts as the Data Controller in respect of Member personal data.
- "Data Processor" means any third party that processes Personal Data on behalf of the Data Controller and under its instructions.
- "Consent" means a freely given, specific, informed, and unambiguous indication of a User's agreement to the processing of their Personal Data for a specified purpose.
- "KYC" means Know Your Customer — the identity and document verification process applied to Members in accordance with anti-money laundering and regulatory compliance obligations.
- "Cookies" means small text files placed on a User's device by the Platform for the purpose of session management, analytics, preference storage, and security monitoring.
Data Controller
mz137 acts as the Data Controller in respect of the personal data of all registered Members and Platform visitors. As Data Controller, mz137 is responsible for ensuring that Personal Data is collected, used, stored, and protected in accordance with applicable data protection obligations and the terms of this Policy.
Where mz137 engages third-party service providers to process Personal Data on its behalf (for example, payment processors, identity verification providers, or analytics services), those third parties act as Data Processors. mz137 ensures that all Data Processors are bound by contractual obligations that require them to handle Personal Data in a manner consistent with this Policy and applicable data protection standards.
Personal Data We Collect
mz137 collects the following categories of personal data in connection with the provision of its services:
- Full legal name
- Date of birth
- Email address
- Mobile phone number
- Residential address (including city and postcode — e.g., Kuala Lumpur, Penang, Petaling Jaya)
- Username and encrypted password
- Preferred currency (MYR)
- Government-issued photo identification (e.g., Malaysian MyKad, passport)
- Proof of residential address (e.g., utility bill, bank statement)
- Proof of payment method ownership (e.g., e-wallet screenshot, bank statement header)
- Selfie or live photo verification where required by compliance procedures
- Deposit and withdrawal transaction history
- Payment method identifiers (e.g., masked bank account number, Touch'n Go eWallet ID, DuitNow registered number)
- Account balance history
- Bonus and promotional credit records
- Game session logs (game titles, session duration, stake amounts, game outcomes)
- Sports betting slip history (selections, odds, stake settlement outcomes)
- Responsible gambling tool settings (deposit limits, loss limits, session reminders, self-exclusion status)
- IP address and approximate geolocation derived therefrom
- Device type, operating system, and browser type
- Session timestamps and login history
- Cookie identifiers and session tokens
How We Collect Your Data
mz137 collects personal data through the following channels:
- Directly from you: When you register an Account, complete KYC verification, make a deposit or withdrawal, contact customer support, respond to a survey, or participate in a promotional offer.
- Automatically through Platform use: When you access or interact with the Platform, our systems automatically collect technical data including your IP address, device identifiers, browser type, session duration, and interaction logs via cookies and similar technologies.
- From third-party service providers: We may receive data from identity verification providers, payment processors (such as those facilitating FPX, DuitNow, or e-wallet transactions), and fraud detection services where necessary to verify your identity or process your transactions.
- From publicly available sources: Where required for KYC compliance or fraud prevention, mz137 may consult publicly available records to verify the accuracy of information provided by Members.
Legal Basis for Processing
mz137 processes your personal data one or more of the following legal grounds:
| Legal Basis | Processing Activities Covered |
|---|---|
| Contractual Necessity | Account registration, deposit and withdrawal processing, game session management, KYC verification, customer support responses, bonus administration. |
| Legal Obligation | Anti-money laundering (AML) and counter-terrorist financing (CTF) compliance, age verification, regulatory reporting, fraud investigation, record retention as required by our licensing framework. |
| Legitimate Interest | Platform security monitoring, fraud detection and prevention, system performance optimisation, responsible gambling monitoring, aggregate analytics for service improvement. |
| Consent | Non-essential cookie placement, optional marketing communications where a Member has affirmatively opted in to receive such communications. |
How We Use Your Personal Data
mz137 uses the personal data it collects for the following purposes:
- Account Management: Creating, maintaining, verifying, and administering your mz137 Account, including processing your login credentials and account settings.
- Payment Processing: Facilitating deposits and withdrawals via your chosen payment methods, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Bank.
- Identity Verification: Conducting KYC checks to verify your identity, age (21+ requirement), and payment method ownership as required by our compliance obligations.
- Service Delivery: Providing access to casino games, live dealer services, sports betting markets, and all other Platform features.
- Fraud Prevention and Security: Monitoring for fraudulent activity, unauthorised account access, money laundering, collusion, and other prohibited conduct as described in our Terms & Conditions.
- Customer Support: Responding to enquiries, resolving disputes, and processing account service requests submitted through live chat or email.
- Responsible Gambling: Monitoring gaming behaviour patterns to identify potential problem gambling indicators, administering self-exclusion requests, and enforcing deposit and loss limits set by Members.
- Regulatory Compliance: Fulfilling record-keeping, reporting, and audit obligations required under our licensing framework and applicable AML/CTF regulations.
- Platform Improvement: Analysing aggregated, anonymised usage data to improve Platform performance, user experience, and game selection.
Data Sharing & Disclosure
mz137 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Personal data may be shared with third parties only in the following limited circumstances:
- Payment Service Providers: Financial institutions and e-wallet operators (including those processing FPX, DuitNow, and Malaysian bank transactions) receive the transaction data necessary to process your deposits and withdrawals.
- Identity Verification Providers: Third-party KYC and AML service providers may process your identification documents and verification data strictly for the purpose of confirming your identity and age.
- Game Content Providers: Gaming studios and live dealer platform operators may receive your session identifier and account status to facilitate game access. These providers do not receive your full personal profile.
- Regulatory and Law Enforcement Authorities: mz137 may disclose personal data to licensing authorities, financial regulators, law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory direction.
- Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by mz137 may access personal data to the extent strictly necessary to perform their professional duties, subject to confidentiality obligations.
- Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of mz137's business, personal data may be transferred to the acquiring entity, subject to the same privacy protections as set out in this Policy.
Cookies & Tracking Technologies
mz137 uses cookies and similar tracking technologies on the Platform for the following purposes:
| Cookie Type | Purpose | Required? |
|---|---|---|
| Strictly Necessary | Session authentication, maintaining login state, CSRF protection, security tokens. | Yes — cannot be disabled |
| Functional | Remembering user preferences such as language settings, preferred game categories, and account display settings. | Optional |
| Analytics | Aggregated, anonymised tracking of page visits, session duration, and feature usage to support Platform improvement. No personally identifiable data is used in analytics reporting. | Optional |
| Security | Fraud detection, bot identification, and anomalous login pattern detection to protect Member accounts. | Yes — cannot be disabled |
You may manage your cookie preferences for optional cookies through your browser settings. Please note that disabling functional cookies may affect the performance and personalisation features of the Platform. Strictly necessary and security cookies cannot be disabled without affecting your ability to use the Platform.
Data Retention
mz137 retains personal data only for as long as is reasonably necessary to fulfil the purposes for which it was collected, or as required by applicable legal regulatory, or licensing obligations. The following general retention periods apply:
- Account and Registration Data: Retained for the duration of the Member's Account and for a minimum period of five (5) years following Account closure, in accordance with AML and KYC record-keeping requirements.
- KYC Documentation: Retained for a minimum of five (5) years following the completion of the KYC process or Account closure, whichever is later.
- Transaction Records: Retained for a minimum of five (5) years following the date of the relevant transaction.
- Customer Support Records: Retained for a period of two (2) years following the closure of the relevant support case.
- Technical Logs and Session Data: Retained for a period of twelve (12) months, or longer where specific logs are relevant to an ongoing investigation or dispute.
Upon the expiry of the applicable retention period, personal data will be securely deleted or anonymised in manner that prevents re-identification.
Cross-Border Data Transfers
As an internationally licensed gaming platform, mz137 may transfer your personal data to or access it from systems located outside Malaysia. Such transfers may occur in connection with the use of cloud-based infrastructure, third-party payment processors, KYC verification providers, and game content distribution networks.
Where personal data is transferred outside Malaysia, mz137 takes reasonable steps to ensure that appropriate safeguards are in place to protect the security and integrity of that data, including:
- Engaging only Data Processors that maintain recognised data security certifications or equivalent standards;
- Incorporating contractual data protection obligations into agreements with all cross-border Data Processors;
- Applying encryption and access controls to all data in transit and at rest.
Your Data Rights
As a Member of mz137, you hold the following rights in respect of your personal data. These rights may be exercised at any time by contacting the mz137 support team as described in Section 16:
Data Security
mz137 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:
- 256-bit SSL/TLS encryption applied to all data transmitted between your device and the mz137 Platform;
- Encryption of sensitive personal data stored in mz137's database systems;
- Role-based access controls ensuring that personal data is accessible only to authorised personnel with a legitimate operational need;
- Multi-factor authentication options for Member account access;
- Continuous automated monitoring for anomalous access patterns and potential security incidents;
- Regular security assessments and vulnerability testing of Platform infrastructure.
Notwithstanding the above, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. While mz137 takes all reasonable steps to protect your personal data, we cannot warrant absolute security against all possible threats. Members are encouraged to use strong, unique passwords and to enable two-factor authentication on their Accounts.
In the event of a data breach that is likely to result in a risk to the rights and freedoms of affected Members, mz137 will take prompt action to contain the breach and will notify affected Members and relevant authorities in accordance with our obligations under applicable data protection regulations.
Children & Minors
The mz137 Platform is strictly intended for individuals aged21 years and above. mz137 does not knowingly collect, process, or retain the personal data of any individual under the age of 21.
During Account registration and KYC verification, mz137 verifies the age of all prospective Members. Any Account determined to belong to an individual under 21 years of age will be immediately closed, and any personal data associated with that Account will be deleted or anonymised in accordance with our data retention obligations, except where retention is required for regulatory compliance purposes.
If you have reason to believe that mz137 has inadvertently collected personal data from an individual under 21 years of age, please contact our support team immediately [email protected] so that appropriate action can be taken without delay.
Policy Amendments
mz137 reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or our Platform's operational structure. Amendments will take effect upon publication of the revised Policy at mz137.cam/privacy-policy.
Where any amendment constitutes a material change to the manner in which mz137 processes Members' personal data, mz137 will make reasonable efforts to draw Members' attention to that change through a notice on the Platform at time of publication. For significant changes that affect processing based on consent, mz137 may seek a renewed expression of consent from affected Members where appropriate.
The "Last Updated" date displayed at the top of this page indicates the date on which the most recent revision to this Policy was made effective. We encourage all Members to review this Policy periodically.
Contact Us
For any questions, concerns, or formal requests relating to this Privacy Policy or the processing of your personal data by mz137, please contact our support team using the following methods. We aim to acknowledge all data-related enquiries within two business days and to provide a substantive response within a reasonable timeframe thereafter.
For matters related to our Terms and Conditions, please visit mz137.cam/terms-conditions. For responsible gambling tools and self-exclusion requests, please visit mz137.cam/responsible-gambling.