Privacy Policy

Introduction

This Privacy Policy ("Policy") is issued by Menang29 ("we", "us", "our", "the Platform"), the operator of the online casino and sports betting platform accessible at menang29.cam. This Policy describes how Menang29 collects, processes, stores, discloses, and protects the personal data of users ("you", "User", "Player") who access or use the platform.

Menang29 is committed to handling personal data responsibly and in accordance with internationally recognised data protection principles, including those reflected in the General Data Protection Regulation (GDPR), Malaysia's Personal Data Protection Act 2010 (PDPA), and the data handling standards required under our international online gaming licence.

By creating an account on Menang29, making a deposit, using any game or feature on the platform, or continuing to browse the website, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transfer, or deletion.
• "Data Controller" — Menang29, the entity that determines the purposes and means of processing Personal Data collected through the platform.
• "Data Processor" — a third party that processes Personal Data on behalf of Menang29, pursuant to a data processing agreement, including payment processors, KYC verification providers, and cloud hosting partners.
• "KYC Data" — identity verification documentation submitted by Users, including copies of national identification cards (MyKad), passports, proof of address, and payment method ownership evidence.
• "Cookies" — small text files placed on your device by the platform for the purposes of session management, analytics, and service personalisation.
• "Sensitive Personal Data" — a subset of Personal Data that warrants heightened protection, including financial account details, identification document numbers, and biometric data.

Personal Data We Collect

Menang29 collects the following categories of personal data, depending on how you interact with the platform:

How We Collect Your Data

Menang29 collects personal data through the following methods:

4.1 Direct Collection

Data you provide directly when you register an account, complete KYC verification, make deposits or withdrawals, participate in promotions, contact customer support, or update your account settings.

4.2 Automated Collection

Data collected automatically through your use of the platform, including through cookies, web beacons, server logs, and similar tracking technologies. This includes your device's IP address, session duration, pages visited, game interactions, and click patterns.

4.3 Third-Party Sources

In limited circumstances, Menang29 may receive personal data from third-party sources, including:

• Payment service providers (DuitNow, FPX, Maybank, CIMB, Public Bank, RHB, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, cryptocurrency networks) to confirm transaction status and payment method ownership;
• Identity verification partners for KYC screening and anti-fraud checks;
• Anti-money laundering (AML) screening databases to fulfil regulatory compliance obligations under our gaming licence.

Purpose of Processing & Legal Basis

Menang29 processes personal data for the following purposes, each supported by a corresponding legal basis:

Data Sharing & Disclosure

Menang29 does not sell your personal data to third parties. We may share your data in the following limited and controlled circumstances:

6.1 Service Providers (Data Processors)

We engage trusted third-party service providers who process personal data solely on our instructions and under binding data processing agreements. These include payment processing partners, cloud infrastructure providers, KYC and fraud screening vendors, email delivery platforms, and customer support software providers. All such processors are required to maintain data security standards consistent with this Policy.

6.2 Regulatory and Legal Authorities

Menang29 may disclose personal data to competent regulatory bodies, law enforcement agencies, tax authorities, or courts where we are legally required to do so — for example, to comply with our gaming licence reporting obligations, respond to lawfully issued subpoenas, or cooperate with investigations into financial crime.

6.3 Anti-Money Laundering Screening

To fulfil obligations under international AML frameworks, Menang29 may share limited identity information with sanctions screening databases and financial intelligence services. This processing is conducted under a legal obligation and is not subject to opt-out.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of Menang29's business, personal data held by the platform may be transferred to the acquiring entity. Users will be notified of any such transfer and provided information about the new data controller's privacy practices.

Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device when you access the Menang29 platform. They enable the platform to recognise your device across sessions, maintain your login state, remember your preferences, and collect usage analytics.

7.2 Types of Cookies Used

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in and security tokens. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and recently played games to improve your experience.
• Analytics Cookies: Collect aggregated, anonymised data about how users navigate the platform — which pages are visited most frequently, where users drop off, and how features are used. This data helps us improve the platform.
• Security Cookies: Help detect and prevent fraudulent activity and account takeover attempts by flagging unusual session behaviour.

7.3 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality and performance of the Menang29 platform. Instructions for managing cookies in common browsers are available in the help documentation of your respective browser.

Data Retention

Menang29 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by our legal and licensing obligations. The following general retention schedule applies:

• Active Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with gaming licence anti-money laundering record-keeping requirements.
• KYC and Identity Documents: Retained for a minimum of five (5) years following account closure, as required under international AML frameworks.
• Transaction Records: Retained for five (5) years following each transaction date to satisfy financial reporting and audit trail obligations.
• Communications and Support Records: Retained for a minimum of two (2) years following each communication to support dispute resolution and regulatory inquiries.
• Technical and Analytics Data: Anonymised and aggregated after a period of thirteen (13) months; raw technical logs retained for a maximum of six (6) months.
• Marketing Preference Records: Retained for the duration of your account relationship, updated when you modify your marketing preferences.

Upon expiry of the relevant retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual.

Data Security

Menang29 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption: All data in transit is protected by 256-bit SSL/TLS encryption. Sensitive data at rest — including KYC documents and financial records — is encrypted using AES-256 or equivalent standards.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Internal staff access to sensitive account data is governed by role-based access control policies and audit logging.
• Two-Factor Authentication: Account access requires two-factor authentication for all Users, reducing the risk of unauthorised account takeover.
• Regular Security Audits: Menang29's systems are subject to periodic penetration testing and vulnerability assessments conducted by independent security professionals.
• Incident Response: We maintain a documented data breach response procedure that includes immediate containment steps, forensic investigation, regulatory notification, and user communication where required.

Your Data Protection Rights

Subject to applicable law and our legal and licensing obligations, you have the following rights with respect to your personal data held by Menang29:

To exercise any of the above rights, please contact Menang29's Data Protection contact via live chat or email at [email protected], providing your registered account username and a clear description of your request. We will respond within 30 calendar days of receiving a valid request. Complex or high-volume requests may be subject to an extended response period, of which you will be notified.

Menang29 will not charge a fee for reasonable data subject access requests. We reserve the right to charge a reasonable administrative fee for manifestly unfounded or excessive requests.

Children & Minors

Menang29's services are strictly intended for individuals who are at least 21 years of age. We do not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the account registration and KYC process.

If we become aware that personal data has been collected from a person under the age of 21 without verifiable parental or guardian consent, we will take immediate steps to delete that data and close the associated account. Any deposits made by an underage account holder will be returned to the originating payment method, net of any applicable administrative costs, and all game history associated with that account will be voided.

If you believe that a minor has registered an account on Menang29, please contact our support team immediately via live chat so we can investigate and act promptly.

Third-Party Links & Services

The Menang29 platform does not contain links to external third-party websites for general browsing purposes. Where integrations with third-party payment providers (such as DuitNow, FPX, Maybank online banking, CIMB Clicks, Touch 'n Go eWallet, Boost, and GrabPay) are presented within the deposit and withdrawal flow, those interactions are governed by the privacy policies of the respective payment service providers in addition to this Policy.

Menang29 is not responsible for the privacy practices or content of third-party services that process your data in connection with payment transactions. We recommend reviewing the privacy policies of any payment provider you use before submitting financial information.

International Data Transfers

Menang29 operates under international gaming licensing and may process or store personal data in servers located outside of Malaysia. Where personal data is transferred to, or accessed from, jurisdictions outside your country of residence, Menang29 takes reasonable steps to ensure that equivalent levels of data protection are in place.

Such steps may include entering into standard contractual clauses with Data Processors based in third countries, selecting cloud and infrastructure providers who maintain internationally recognised security certifications (such as ISO 27001), and applying contractual data processing obligations consistent with the principles of this Policy.

By using the Menang29 platform, you acknowledge and consent to the transfer of your personal data to servers and processors located in other jurisdictions for the purposes described in this Policy.

Amendments to this Policy

Menang29 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered Users via email and/or a prominent notice on the platform at least 14 days before the changes take effect, except where a shorter notice period is required by law or licensing obligation.

The revised Policy will display the updated effective date at the top of the document. Your continued use of the Menang29 platform following the effective date of any revision constitutes your acceptance of the updated Policy. If you do not agree to the revised terms, you should close your account before the effective date of the change and contact support to arrange withdrawal of any remaining balance.

We encourage you to review this Policy periodically to stay informed of how we handle your personal data. The current version is always available on this page.

Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy, your personal data held by Menang29, or the exercise of your data protection rights, please contact us through the following channels:

For responsible gambling support, self-exclusion requests, or deposit limit queries, please visit our dedicated Responsible Gambling page or contact support directly.