Updated: 1 January 2026

M2Win Privacy Policy – Personal Data Protection for Malaysian Players

Your privacy is our priority. This Privacy Policy transparently explains how M2Win collects, uses, stores, and protects your personal data as a member of our online casino platform. Please read it carefully before registering or using the M2Win platform.

Version: 2026.01 Language: Bahasa Melayu (ms-MY) Jurisdiction: Malaysia

M2Win's Privacy Commitment: We do not sell, rent, or trade your personal data to any third party for marketing purposes. Your data belongs to you, and we only use it for the purposes stated in this Privacy Policy.

M2Win's Six Data Protection Principles

Our commitment to protecting the privacy of every member on our online casino platform

256-Bit SSL Encryption

All data transmitted between your browser and M2Win's servers is protected by 256-bit SSL encryption — the same security standard used by major Malaysian banks such as Maybank and CIMB. Your data cannot be intercepted or read by any third party during transmission.

No Sale of Data to Third Parties

M2Win has never and will never sell, rent, or trade member personal data to any third party for marketing or any other commercial purpose. Your information remains confidential and is used solely for the purposes you agreed to at the time of registration.

Your Data, Your Control

As an M2Win member, you have the full right to access, correct, and request the deletion of your personal data at any time. Contact our support team and we will process your request within 30 business days.

Secure Data Storage

All member personal data is stored on servers protected by enterprise-grade firewalls, strict access controls, and 24/7 security monitoring. Access to sensitive databases is restricted exclusively to authorised personnel with a legitimate operational need.

Data Breach Notification

In the event of a security incident affecting your personal data, M2Win is committed to notifying you within the timeframe required by industry standards. We will explain what happened, what data was affected, and the steps we are taking to address the situation.

A Clear Data Retention Policy

M2Win retains your personal data only for as long as it is needed for the stated purposes or for as long as your account remains active. Data that is no longer required will be securely deleted in accordance with our established data deletion procedures and cannot be recovered.

This Privacy Policy describes M2Win's data handling practices and applies to all members using our platform at m2win.click. By registering or continuing to use the M2Win platform, you confirm that you have read and fully understood this Privacy Policy.

1. Introduction & Scope of This Privacy Policy

M2Win ("we", "our platform") respects the privacy of everyone who uses our services and is fully committed to protecting your personal data. This Privacy Policy is designed to ensure you have a clear understanding of how we manage the personal information you share with us when registering for and using the M2Win online casino platform.

This Privacy Policy applies to all personal data collected through the m2win.click website, including all services, features, content, and functionality available on the platform. It also applies to communications between you and M2Win via Live Chat, WhatsApp, and email.

We adhere to internationally recognised data protection principles, including data minimisation, purpose limitation, appropriate security, and respect for user rights. Our approach to privacy goes beyond mere legal compliance — it is a core value that guides every operational decision we make.

Important: This Privacy Policy should be read together with M2Win Terms & Conditions. Together, these documents form the complete agreement between you and M2Win regarding your use of the platform and the handling of your data.

2. Personal Data We Collect

M2Win collects only the minimum personal data necessary to provide our platform services. The following are the categories of data we collect:

Data Category Specific Information Requirements
Identity Data Full name, date of birth, national ID number Mandatory (verification)
Contact Data Malaysian phone number, email address Mandatory (account)
Financial Data Deposit methods (TnG, GrabPay, FPX), transaction records Mandatory (payment)
Technical Data IP address, device type, web browser, access logs Automatic
Game Data Betting history, play sessions, wins and losses Automatic
Communication Data Live Chat records, emails, and submitted complaints Where applicable

We not collect sensitive data such as health information, religion, political views, or biometric data unless required by applicable law or regulation. M2Win also does not collect credit card data directly — all financial transactions are processed through licensed and secure third-party payment providers.

3. How We Collect Your Personal Data

M2Win collects your personal data through several different methods:

  • During account registration: When you register a new account with M2Win, you provide basic information such as your phone number and password. Additional details such as your full name and date of birth may be required for identity verification during the withdrawal process.
  • While using the platform: Your activity on the M2Win platform is tracked automatically, including games played, bet amounts, time spent playing, and wins or losses. This data is used to deliver a better gaming experience and to support responsible gambling requirements.
  • When making a deposit or withdrawal: When you carry out financial transactions using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX via Maybank2u and CIMB Clicks, the transaction information required for processing and financial record-keeping is collected.
  • Through communications with us: When you contact the M2Win support team via Live Chat or WhatsApp, the content of that communication is stored for reference and service improvement purposes.
  • Through cookies and tracking technologies: The M2Win platform uses cookies and similar technologies to remember your preferences, improve platform performance, and understand how you use our services. Further details are provided in Section 7.
  • From third-party sources: In certain situations related to identity verification or fraud prevention, M2Win may receive information from verification agencies or payment service providers that you use.

4. How We Use Your Personal Data

M2win uses your personal data solely for legitimate purposes that you have implicitly or explicitly consented to. The following are the primary purposes for which your data is used:

  1. Account management: To create, maintain, and secure your M2Win account, including identity verification, password management, and account security.
  2. Financial transaction processing: To accurately and securely process deposits from Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX, and to process withdrawals of winnings to your Malaysian bank account.
  3. Provision of gaming services: To allow you to access and play all games on the M2Win platform, including slots, live casino, baccarat, blackjack, Sports Betting on Malaysia Super League, EPL football, and more.
  4. Customer support: To respond to enquiries, resolve complaints, and provide technical support in Bahasa Melayu via Live Chat and WhatsApp.
  5. Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorised access, and platform abuse.
  6. Legal compliance: To fulfil the legal and regulatory obligations applicable to M2Win's operations, including Anti-Money Laundering (AML) requirements and age verification.
  7. Platform improvement: To analyse usage patterns, identify technical issues, and make improvements to the m2win platform for a better user experience.
  8. Marketing communications: To send you promotional information, bonus offers, and the latest updates — but only if you have opted in to receive such communications. You may unsubscribe at any time.
  9. Responsible gaming: To monitor gameplay patterns for early signs of problem gambling and to direct appropriate self-control tools to members who may need assistance.
Note: M2Win does not use your personal data for purposes not stated above without first obtaining your additional consent. If we intend to use your data for a new purpose, we will notify you and obtain the appropriate consent.

5. Sharing Data with Third Parties

M2Win does not sell, rent, or trade your personal data to third parties for their own marketing purposes. However, in certain limited situations, we may need to share your data with the following parties:

  • Payment service providers: Digital wallet and online banking providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX receive the transaction information needed to process your deposits and withdrawals. All such providers are bound by strict confidentiality agreements.
  • Game software providers: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Play'n GO, and others receive only the minimum technical data required to deliver live casino and slots to you.
  • Technology service providers: Cloud infrastructure providers, transactional email services, and platform analytics tools may process some of your data in their capacity as data processors acting on M2Win's instructions. They are not permitted to use this data for their own purposes.
  • Legal authorities: M2Win will disclose personal data to the relevant authorities when required by law, court order, or in the context of a legitimate criminal investigation such as fraud or money laundering.
  • Professional advisors: In very limited circumstances, legal advisors, auditors, or security consultants who are bound by professional confidentiality obligations may access the data necessary to carry out their duties on behalf of M2Win.

In all cases where your data is shared, M2Win ensures that those third-party providers have adequate data protection measures in place and use the data solely for the specified purpose.

6. M2Win's Data Security Measures

M2Win implements a range of technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, alteration, or unauthorised disclosure:

  • Data encryption in transit: All communications between your device and M2Win's servers are protected by TLS 1.3 with 256-bit encryption, ensuring that data in transit cannot be intercepted by any third party.
  • Data encryption at rest: Account passwords are stored using an irreversible cryptographic hashing algorithm. Sensitive financial information is encrypted at rest within our database.
  • Strict access controls: Access to M2Win systems and databases containing personal data is restricted solely to staff who require such access to carry out their job responsibilities. The Principle of Least Privilege is strictly enforced.
  • 24/7 security monitoring: M2Win's systems are continuously monitored by a cybersecurity team to detect any suspicious activity, intrusion attempts, or anomalies that require immediate attention.
  • Two-factor authentication (2FA): Internal M2Win accounts used by staff to access sensitive data are protected with 2FA. Members are also encouraged to enable 2FA on their accounts for an added layer of protection.
  • Regular security audits: M2Win conducts regular security audits and penetration testing to identify and address any vulnerabilities before they can be exploited.

While we take all reasonable steps to protect your data, no security system can guarantee 100% absolute protection. You also play an important role in keeping your account safe — use a strong password, never share your login credentials, and report any suspicious activity to us immediately.

7. Cookies and Tracking Technologies

The M2Win platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

  • Essential Cookies: These cookies are required for core platform functions such as login authentication and session security. The platform cannot operate properly without them and they cannot be disabled.
  • Functional Cookies: These cookies remember your preferences such as language, display settings, and game choices to provide a more personalised experience during your play session.
  • Analytics Cookies: These cookies help us understand how users interact with the M2Win platform — which pages are visited most, how much time is spent, and where users encounter issues. This information is used to improve the platform.
  • Security Cookies: These cookies help detect fraudulent activity, suspicious login attempts, and other security threats that could compromise your account.

You can control and manage cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the m2win platform. For more information on managing cookies, refer to the documentation for your web browser.

8. Your Rights Regarding Personal Data

As an M2Win member, you have the following rights regarding your personal data. To exercise any of these rights, contact our support team by email at support@m2win.click or via Live Chat on the platform:

Right of Access

Obtain a copy of the personal data we hold about you in a readily readable format.

Right to Rectification

Request the correction of any inaccurate or incomplete personal data held in our records.

Right to Erasure

Request the deletion of your personal data when it is no longer needed for the original purpose for which it was collected.

Right to Restriction

Request a restriction on the processing of your data in certain circumstances while a complaint is pending resolution.

Right to Portability

Receive your data in a structured, machine-readable format for transfer to another provider.

Right to Object

Object to the processing of your data for direct marketing purposes or in situations involving legitimate interests.

M2Win will process your data rights request within 30 working days after receipt of a complete request. In complex cases, this period may be extended by up to 60 days, with notice provided to you. We do not charge fees for reasonable data rights requests.

Note: The right to data deletion is subject to our legal obligation to retain financial and compliance records for the minimum period prescribed by Malaysian law. Data required by law to be retained cannot be deleted upon individual request.

9. Personal Data Retention

M2Win retains your personal data for as long as your account is active or as long as necessary to provide services to you. Once an account is closed, we will retain certain data for the period required under our legal obligations and legitimate business interests:

  • Financial and transaction records: Retained for a minimum of 7 years in accordance with financial reporting requirements and applicable Anti-Money Laundering (AML) regulations.
  • Customer support communication records: Retained for 3 years for reference purposes, complaint resolution, and service improvement.
  • Security logs and account activity: Retained for 12 months for security investigation and fraud prevention purposes.
  • Identity verification data: Retained for 5 years after account closure in accordance with regulatory compliance requirements.
  • Gaming and betting data: Retained for 5 years for dispute resolution purposes and responsible gambling compliance requirements.

Data that is no longer needed and has passed its designated retention period will be securely deleted using methods that ensure it cannot be recovered. M2Win conducts regular reviews of stored data to ensure nothing is retained longer than necessary.

10. Protection of Children's Data

The M2Win platform is for users aged 18 and above only. We do not knowingly collect or process personal data from individuals under the age of 18. Every account registration requires confirmation that the user meets this minimum age requirement.

If M2Win becomes aware that personal data belonging to a minor has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account. Any account suspected of belonging to a minor will be suspended immediately pending age verification.

If you believe your child or a minor you know has registered an account on M2Win, please contact us immediately via Live Chat or email at support@m2win.click so we can take the appropriate action.

11. Amendments to This Privacy Policy

M2Win reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer. Any amendments will take effect once the updated version is published on this page.

For significant amendments that affect how we use your personal data, M2Win will provide advance notice via email or an in-platform notification before the changes take effect. This gives you the opportunity to review the updates and make an informed decision based on the revised terms.

The "Updated" date at the top of this page always reflects the date of the most recent amendment. We encourage you to review this page periodically to stay informed of the latest privacy terms applicable to your use of the M2Win platform.

12. How to Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or the way M2Win handles your personal data, please reach out to us through the following channels:

  • Privacy email: support@m2win.click (please include "Privacy Enquiry" in the email subject line)
  • Live Chat: Available 24/7 within the M2Win platform once you are logged in to your account
  • WhatsApp: Contact the M2Win support team via WhatsApp for a faster response

Our privacy team will respond to your enquiry in Bahasa Melayu within 5 working days. For formal data rights requests, please refer to Section 8 for details on procedures and processing timelines.

Our commitment: We take every privacy enquiry seriously. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority under applicable laws in Malaysia.

FAQ – M2Win Privacy Policy

The most frequently asked questions about privacy and data protection on our platform

No. M2Win does not sell, rent, or trade members' personal data to any other company for their own advertising or marketing purposes. This is an absolute commitment we uphold without exception. Your data is shared with third parties only in strictly limited situations, such as with the payment provider you use (Touch 'n Go, GrabPay, FPX, and others) to process your transactions, with casino game software providers to deliver games to you, and with legal authorities where required by law. All such third parties are bound by strict confidentiality agreements and are not permitted to use your data for any other purpose.

The security of your financial information is M2Win's highest priority. All deposit and withdrawal transactions use HTTPS connections with TLS 1.3 encryption, ensuring data cannot be intercepted in transit. M2Win does not store bank card details or bank account information directly on our servers — all financial transactions are processed through licensed payment providers that comply with PCI-DSS security standards. When you use Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, or FPX via Maybank2u and CIMB Clicks, those transactions are processed within the respective payment provider's secure environment, and M2Win receives only a success or failure confirmation without ever seeing the sensitive details of your payment account.

Yes, you have the right to request deletion of your personal data and M2Win will honour that request. However, there are important exceptions you should be aware of. First, financial and transaction records must be retained for a minimum of 7 years under Malaysian law relating to financial reporting and Anti-Money Laundering compliance — this data cannot be deleted even upon your request. Second, data required to resolve any outstanding disputes or claims cannot be deleted until those matters are fully resolved. Outside of these exceptions, data that no longer has a legal basis for retention will be securely deleted. To submit a data deletion request, contact us at support@m2win.click with "Data Deletion Request" in the email subject line.

If you suspect your M2Win account has been accessed without your authorisation, take the following steps immediately. First, contact the M2Win support team via Live Chat or WhatsApp to report the matter — our team operates 24 hours a day and will respond promptly. Second, change your account password right away if you still have access. Third, review your transaction history and account activity to identify any actions you did not perform. The M2Win security team will investigate any unauthorised access, freeze any suspicious transactions that have not yet been processed, and help you regain full control of your account. To prevent such incidents, always use a strong and unique password, enable 2FA where available, and never share your login credentials with anyone, including family members. Please note that the M2Win team will never ask for your password through any communication channel. For more information on account security, refer to FAQ page us.

M2Win Related Policy Documents

Also read other policy documents related to your rights and obligations as an M2Win member

Terms & Conditions

The complete agreement between you and M2Win, covering account terms, deposits, withdrawals, bonuses, and game rules.

Read Now
Responsible Gambling

A complete guide to self-exclusion tools, deposit limits, self-suspension features, and support resources for M2Win players.

Read Now
FAQ

Detailed answers to the most frequently asked questions about accounts, deposits, withdrawals, bonuses, and security at M2Win.

Read Now

Your Data Is Safe at M2Win – Register & Start Playing Today!

With 256-bit SSL protection, no sale of data to third parties, and privacy controls in your hands — M2Win is an online casino platform you can trust completely. Over 850,000 members across Malaysia already have.

256-bit SSL No Data Sales Control in Your Hands Regular Security Audits
Bahasa Melayu