Main24 Privacy Policy – Personal Data Protection for Malaysian Members

Main24 collects your personal information in specific situations when you interact with our platform. We only collect what is genuinely necessary to provide you with a safe, efficient, and responsible service.

Information You Provide Directly

• Registration Information: Full name, Malaysian identity card number (MyKad), date of birth, email address, Malaysian phone number, account password.
• Identity Verification (KYC) Information: MyKad or passport copy, verification selfie, proof of address (utility bill or bank statement).
• Financial Information: Details of the payment method used — whether Touch 'n Go eWallet, GrabPay, DuitNow, FPX Maybank2u, CIMB Clicks, Boost, or ShopeePay. main24 does not directly store credit card numbers or bank account details.
• Communications: Support chat records, emails, complaints, and any other correspondence you have submitted to the main24 team.

Automatically Collected Information

• Usage Data: Slots, live casino, and Sports Betting history — including Malaysian Super League and EPL football, badminton, e-sports, poker, lottery, and jackpot — covering dates, times, bet amounts, and outcomes.
• Technical Data: IP address, device type and operating system, web browser type, screen resolution, and application version in use.
• Transaction Data: Complete deposit and withdrawal history, including dates, amounts, payment methods, and transaction status.
• Location Data: General location based on IP address for geo-verification and fraud prevention purposes. main24 does not track your precise GPS location without your explicit consent.

Main24 uses the personal data it collects solely for legitimate and necessary purposes to ensure the platform operates properly and securely. Below is the complete list of data usage purposes:

Main24 will not use your personal data for any purpose other than those stated above without first obtaining your renewed consent. If you have previously given consent to receive marketing communications from main24, you may withdraw that consent at any time by contacting our support team.

Main24 does not sell, lend, or disclose members' personal information to third parties for marketing or commercial purposes. However, there are limited situations where main24 needs to share certain information with the following trusted parties, solely to enable the platform to operate:

Approved Service Providers

Main24 works with carefully selected third-party service providers to handle certain platform functions, including:

• Payment Gateway Providers: Touch 'n Go eWallet, GrabPay, DuitNow, FPX Maybank2u, CIMB Clicks, Boost, and ShopeePay providers receive the transaction information required to process your deposits and withdrawals. These providers maintain their own privacy policies and security measures.
• Game Providers: Game providers such as Pragmatic Play, Microgaming, NetEnt, Evolution Gaming, and Playtech receive the session data required to run games and verify results. No personally identifiable information is shared, other than anonymised session IDs.
• Identity Verification Services: Third-party KYC providers used to verify member identity documents during the KYC process. All such providers are bound by strict confidentiality agreements with main24.
• Analytics Services (Anonymised Data): Analytics platforms are used to understand website usage patterns for improvement purposes — only fully anonymised data is shared.

Mandatory Disclosure Required by Law

Main24 may be required to disclose member personal information to Malaysian authorities in the following circumstances:

• Upon lawful request from authorities such as the police, courts, or Malaysian enforcement agencies, pursuant to a valid writ, summons, or court order.
• To comply with reporting requirements under Malaysia's anti-money laundering (AML) legislation.
• To prevent fraud, identity theft, or serious security threats against members or the platform.

Protecting member personal data is a top priority for main24. We continuously invest in the latest security infrastructure to ensure your information remains protected against evolving cyber threats.

Technical Security Layers

• Data Encryption in Transit: All communications between your browser or app and main24's servers are protected with TLS 1.3 protocol and AES-256 encryption — the highest security standards commercially available.
• Stored Data Encryption: Sensitive data stored in main24's databases, including passwords and financial information, is encrypted using strong cryptographic algorithms. Your password is never stored in plain text.
• Two-Factor Authentication (2FA): All members are encouraged and able to enable 2FA for an additional layer of protection against unauthorised access to their accounts.
• Continuous Threat Monitoring: main24's security systems monitor all platform activity in real time to detect and respond to suspicious activity or intrusion attempts.
• Regular Security Audits: main24 undergoes penetration testing and security audits by independent cybersecurity firms at least twice a year.

Internal Access Controls

Access to member personal data within main24 is strictly limited on a need-to-know basis. Only staff with a legitimate operational need are permitted to access specific data, and all access is logged and monitored. All main24 personnel who handle personal data are required to sign binding confidentiality agreements and undergo regular data protection training.

Main24 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the main24 website.

Types of Cookies Used

• Essential Cookies (Required): Required for core platform functionality — including maintaining your login session, recognising your device during an active session, and ensuring basic platform security. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: Remembering your preferences and settings, such as your preferred language, display theme, and other account settings. These cookies improve usability but are not required for core functionality.
• Analytics Cookies (Anonymised): Helps main24 understand how members use the platform — the most frequently visited pages, navigation flows, and areas that may need improvement. Data collected through analytics cookies is anonymised and not linked to your personal identity.
• Security Cookies: Used by main24's fraud detection system to identify unusual or suspicious access patterns that may indicate an attempted account breach.

Managing Your Cookies

You can control and manage cookies through your web browser settings. Most modern browsers — including Chrome, Safari, Firefox, and Edge — allow you to view, delete, or block cookies. However, please be aware that disabling essential cookies may affect the functionality of the main24 platform and disrupt your gaming experience. For guidance on managing cookies in your specific browser, refer to that browser's support documentation.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection principles, every main24 member has the following rights regarding their personal data:

To exercise any of the above rights, contact the main24 support team via live chat or email at support@main24.best by stating the right you wish to exercise along with your account details for verification. All requests will be processed within 14 business days and we will keep you updated on the progress of your request.

Main24 retains member personal data only for as long as necessary to fulfil the purpose for which it was collected, or for as long as required under applicable Malaysian law — whichever is longer. The following are general data retention guidelines:

• Active Account Data: For as long as your account remains active and throughout the duration of your service relationship with main24.
• Financial Transaction Records: A minimum of 7 years from the transaction date, in line with Malaysian tax and financial audit regulatory requirements.
• KYC and Identity Verification Records: A minimum of 5 years following account closure, in accordance with Malaysia's anti-money laundering (AML) legal requirements.
• Support Communication Records: 3 years from the date of the communication, for reference and future complaint resolution purposes.
• Security Log Data: 2 years from the date the log was recorded, for the purpose of investigating any security incidents that may arise.
• Anonymised Analytics Data: No time limit — data that has been fully anonymised is no longer considered personal data and may be retained indefinitely for long-term analytics purposes.

Once the relevant retention period has elapsed, main24 will delete or anonymise your personal data in a secure and permanent manner. Should you close your main24 account, the data deletion process will be initiated in accordance with the schedule above, subject to any legal requirements mandating longer retention.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how main24 handles your personal data, please reach out to us through the following channels:

• Privacy Email: support@main24.best — please include "Privacy Enquiry" in your email subject line.
• Live Chat: Available on the main24 platform 24 hours a day, 7 days a week — the fastest way to get an immediate response.
• WhatsApp: Contact the main24 support team via WhatsApp for enquiries that require further discussion.

The main24 privacy team will respond to all privacy-related enquiries within 5 business days. For formal requests relating to user rights under the PDPA, the response period is 14 business days.

Main24 is committed to resolving all privacy complaints internally in a fair and transparent manner. If you are not satisfied with how main24 has handled your privacy complaint, you have the right to refer the matter to the Personal Data Protection Commissioner of Malaysia or the relevant supervisory authority.