Privacy Policy Mostplay – Malaysian User Data Protection

Mostplay respects the privacy of everyone who interacts with our platform. This Privacy Policy outlines in detail mostplay's privacy practices regarding the collection, use, storage, protection, and disclosure of personal data belonging to our members and website visitors.

This document covers all services offered by Mostplay, including the web platform, mobile app, casino games, live casino, slots, poker, Sports Betting — Malaysian Super League football, EPL, badminton, IPL cricket, and e-sports — as well as all our customer support channels.

Mostplay operates in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia. We are committed to ensuring your personal data is handled with integrity, transparency, and accountability. If you have any privacy concerns, our team is ready to assist through the channels stated at the end of this document.

Mostplay collects personal data through several different methods. Below is a summary of the data we collect and the purposes for which it is used:

We do not collect sensitive information such as biometric data, medical records, religious beliefs or political affiliations unless required by law for specific identity verification purposes.

Mostplay uses your personal data only for lawful and disclosed purposes. Our use of data is as follows:

• Account Management: Creating and managing your mostplay account, including identity verification and login security.
• Transaction Processing: Processing deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay or FPX, and withdrawals to your bank account or digital wallet.
• Service Provision: Enables you to access and use all features of the Mostplay platform, including casino, Sports Betting, poker, and jackpot.
• Service Communications: Sending important notices regarding your account, changes to our terms, promotions you have subscribed to, and service updates.
• Security & Fraud Prevention: Monitoring account activity to detect and prevent fraud, money laundering, and security breaches.
• Platform Improvements: Analysing usage data to understand user needs and improve the Mostplay platform experience.
• Legal Compliance: Fulfilling legal obligations, including Anti-Money Laundering (AML) requirements and Know Your Customer (KYC) verification.
• Responsible Gaming: Monitoring gameplay patterns to identify players who may need responsible gaming support.

Mostplay does not sell, rent, or trade your personal data to any third party for marketing or other commercial purposes. However, we may share data in the following limited circumstances:

• Payment Service Providers: We share the necessary financial information with payment processors — including DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and banks supporting FPX (Maybank, CIMB, Public Bank, and others) — solely for the purpose of processing your transactions.
• Game Providers: Required account information is shared with our gaming software providers to enable access to their games on the Mostplay platform.
• Legal Authorities: We may disclose data when required by law, court order, or official request from Malaysian authorities.
• Technical Partners: Technical service providers such as cloud computing, analytics and security partners who help us operate the platform. All such partners are bound by strict confidentiality agreements.

Mostplay uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

We use the following types of cookies:

• Essential Cookies: Required for core platform functions such as login, session security and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Gathering information on how you use the platform to help us understand which pages are most popular and identify technical issues.
• Functional Cookies: Remembering your preferences — such as language, preferred betting limits, and display settings — to deliver a more personalised experience.
• Analytics Cookies: Helps us understand aggregate platform usage patterns for continuous improvement purposes.

You can manage your cookie settings through your browser at any time. Please note that disabling certain cookies may affect the functionality of the Mostplay platform.

The security of your data is mostplay's highest technical priority. We continuously invest in sophisticated security infrastructure to ensure your data remains protected at all times:

• 256-bit SSL/TLS encryption covering all communications between your device and mostplay's servers.
• Data-at-rest encryption for all sensitive information stored in our databases.
• Role-based access control (RBAC) ensures that mostplay staff can only access data necessary for their specific responsibilities.
• Two-factor authentication (2FA) for all staff accounts with access to data systems.
• Round-the-clock security monitoring and threat detection by our IT security team, 24 hours a day, 7 days a week.
• Penetration testing and regular security audits conducted by certified independent third parties.
• A comprehensive incident response plan to address any data breaches swiftly and effectively.

Under Malaysia's PDPA and global best privacy practices, you have the following rights regarding your personal data held by Mostplay:

Mostplay retains your personal data only for as long as necessary for the purposes stated in this policy, or as required under Malaysian law:

• Active Account Data: For the duration your account is active, plus 7 years after account closure (as required by Malaysian financial record-keeping regulations).
• Transaction Records: At least 7 years from the transaction date, in accordance with Malaysian tax and financial regulatory requirements.
• Communication Records: 3 years from the date of last interaction for support and dispute resolution purposes.
• Usage Data & Logs: 12 months for technical data and security logs.
• Marketing Data: Until you withdraw consent, or 3 years from your last interaction.

Once the retention period expires, data will be permanently deleted or anonymised so that it can no longer be linked to any specific individual.

The Mostplay platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from children or minors under the age of 18.

If we determine that we have collected data from a minor without proper age verification, we will take immediate steps to delete that information and close the account in question. If you believe a child has registered on the Mostplay platform, please contact us at privacy@mostplay.cash immediately.

The Mostplay platform may contain links or references to third-party websites or services. This Privacy Policy applies only to data collected by Mostplay and does not cover the privacy practices of those third-party websites or services.

Mostplay is not responsible for the content, privacy policies, or practices of any third-party websites that may be referenced or linked from our platform. We encourage you to read and understand the privacy policy of every website you visit.

Mostplay reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or technological developments.

• Members will be notified of material changes via their registered email address at least 14 days before taking effect.
• The date of the most recent update will always be displayed at the top of this document.
• Previous versions of this Privacy Policy are archived and can be requested through customer support.
• Continued use of the Mostplay platform after the effective date of any amendment constitutes your acceptance of the updated policy.

For any enquiries, concerns, or requests relating to this Privacy Policy or how mostplay handles your personal data, please contact: