Privacy Policy 26m Casino — Your Data is Fully Protected

1. Information We Collect

26m Casino collects various types of personal information to provide services that are secure, fair, and legally compliant. The information we collect falls into three main categories:

Information you provide directly:

• Full name, date of birth, and gender upon account registration.
• Email address, phone number, and residential address.
• A copy of your identity document (MyKad or passport) for KYC verification purposes.
• Payment method details including bank account or e-wallet information.
• Any communication you send to our support team.

Information collected automatically:

• IP address, device type, operating system, and web browser used.
• Usage log data including pages visited, visit times, and actions taken on the platform.
• Game history, total wagering, wins, and losses.
• General location data based on IP address.

Information from third parties:

• Identity verification from the KYC service providers we engage.
• Payment verification details from financial service providers.
• Fraud prevention data from trusted third-party security services.

2. How We Use Your Data

We use the personal information collected solely for legitimate purposes directly related to the provision of 26m casino services. Below is a brief overview of the purposes for which your data is used:

We will not use your data for any purpose other than those stated above without first obtaining your explicit consent.

3. Sharing Information with Third Parties

26m Casino does not sell or rent your personal data to any third party. However, we may share necessary information with the following parties under limited and controlled circumstances:

• Payment service providers: Transaction information required to securely process your deposits and withdrawals.
• KYC service providers: Identity documents for legally required identity verification purposes.
• Cloud service providers: Data storage within server infrastructure that is secure and compliant with international security standards.
• Regulatory Authority: Information required by law enforcement bodies or regulatory authorities when mandated by law.
• Game providers: Game data required to ensure proper game functionality and accurate records of wins.

All third parties we work with are required to comply with strict data protection standards and may only use your data for purposes agreed upon with 26m casino.

4. Cookies and Tracking Technologies

26m Casino uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login verification and session security. These cookies cannot be disabled.
• Performance Cookies: Helps us understand how players use the platform so we can continually improve it. All data is collected anonymously.
• Functional Cookies: Saves your preferences such as language and display settings so you do not have to reconfigure them each time you log in.
• Marketing Cookies: Used with your consent to display more relevant promotions and offers based on your gaming interests.

You can manage or disable cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the overall functionality of the platform.

5. Data Security

The security of your personal data is an absolute priority for 26m casino. We implement a comprehensive range of technical and organisational measures to protect your information from unauthorised access, loss, or misuse:

• 256-bit SSL encryption for all data transmissions between your device and our servers.
• Encryption of sensitive data in databases using industry-grade encryption algorithms.
• Role-based access controls ensuring that only authorised staff can access player data.
• Continuous 24/7 security monitoring with real-time threat detection systems.
• Regular security audits conducted by independent cybersecurity experts.
• A comprehensive incident response plan in the event of any security breach.
• Regular data security training for all staff who handle player data.

While we take all reasonable precautions, no security system can be guaranteed 100% risk-free. We encourage you to take responsibility as well by keeping your account password secure and reporting any suspicious activity to our team promptly.

6. Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold about you:

To submit any request related to the rights above, please contact our privacy team by email at [email protected]. We will process your request within the timeframe required by law.

7. Data Retention

26m Casino retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable law.

• Active account data: Retained for the duration your account remains active and for a defined period following account closure.
• Financial transaction records: Retained for a minimum of seven (7) years in accordance with Malaysian financial law requirements.
• KYC documents: Retained for the period required by applicable anti-money laundering legislation.
• Log and security data: Retained for the period necessary for security purposes and the resolution of any disputes.
• Support communication records: Retained for three (3) years for reference and service improvement purposes.

Once the retention period has ended and there is no legal requirement for continued storage, your data will be securely deleted or anonymised.

8. International Data Transfers

In the course of our operations, your personal data may be transferred to and processed in countries other than Malaysia. This occurs when we use cloud service providers or technology partners operating across various global locations.

When your data is transferred outside Malaysia, we ensure equivalent or greater protection is provided through mechanisms such as:

• Legally binding data processing agreements with all third parties involved.
• Use of service providers that comply with internationally recognised data protection standards.
• Data protection impact assessments prior to the implementation of any new international data transfers.

9. Children's Privacy

26m Casino is an online gambling platform exclusively for individuals aged 18 and above. We do not knowingly collect or process any personal data from individuals under 18 years of age.

If we discover that personal data of a child has been collected without our knowledge, we will take immediate action to delete that data and close the associated account. Parents or guardians who become aware that their child has registered an account on our platform are requested to contact our support team immediately.

10. Amendments to the Privacy Policy

26m Casino reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological developments. Players will be notified of any material amendments via a prominent notice on the platform or by email.

The "Last Updated" date at the top of this document will always be refreshed whenever changes are made to the Privacy Policy. We encourage you to review this page periodically so you remain informed about how we handle your personal data.

Your continued use of the 26m casino platform following the publication of any amendments to this Privacy Policy constitutes your acceptance of those amendments.

11. Contact Us Regarding Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the 26m casino privacy team is here to help.

• Privacy Email: [email protected] — please use "Data Privacy Request" as your email subject for faster processing.
• Live Chat: Available 24/7 directly from the 26m casino platform for instant enquiries.

We are committed to responding to all privacy-related requests within 30 calendar days of receipt. For more complex requests, we will notify you within that period if additional time is required.