Privacy Policy CardGames – How We Protect the Personal Data of Malaysian Players

1Information We Collect from You

cardgames collects several categories of personal information from our users for legitimate and specific purposes. We do not collect information beyond what is necessary to operate our platform. The types of data we collect are as follows:

We may also receive information about you indirectly through our payment providers — for example, transaction status confirmations from DuitNow or FPX verifying that your deposit was successful. This information is used solely for the purpose of processing your financial transactions on cardgames.

2How We Use Your Personal Data

cardgames uses collected data solely for the following purposes. We will not use your data for any other purpose without first obtaining your explicit consent:

• Account Management: Creating, verifying, and maintaining your account cardgames your account, including secure login processes and two-factor identity verification.
• Financial Transaction Processing: Processing all deposits via DuitNow, FPX (Maybank2u, CIMB Clicks), Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay, and processing your winnings withdrawals in Malaysian Ringgit (RM).
• Gaming Services Provision: Covers all games on the platform, including baccarat, blackjack, slots, live casino, and Sports Betting such as the Malaysia Super League, EPL, and international badminton.
• Service Communications: Sending important account-related notifications, transaction confirmations, security alerts, and relevant policy updates.
• Customer Support: Resolving enquiries, complaints, and disputes submitted via live chat or support email cardgames.
• Security & Fraud Prevention: Detecting and preventing fraud, money laundering, multiple account usage, and platform abuse.
• Legal Compliance: Fulfilling applicable Malaysian legal obligations, including PDPA 2010, AML (Anti-Money Laundering) and licensing regulatory requirements.
• Platform Improvements: Analysing usage data in aggregate (non-personal) form to improve the platform's performance, design and user experience cardgames.
• Marketing Communications: Sending promotional offers, bonuses and new game updates — only if you have consented to receive them during registration or through your account settings.

You can opt out of marketing communications at any time by updating your notification preferences in your account panel cardgames or by contacting our support team. Opting out of marketing communications will not affect your receipt of important service notifications related to your account.

3Sharing Data with Third Parties

cardgames does not sell, rent or disclose your personal data to third parties for their own marketing or commercial purposes. However, we may share your data in certain limited situations as follows:

• Payment Providers: We share the necessary transaction details with our payment providers — including DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay — solely for the purpose of processing your financial transactions. These providers are bound by strict confidentiality agreements.
• Game Software Providers: Our slots and live casino providers (such as Pragmatic Play, Evolution Gaming, and others) may receive the game session data required to operate their games. This data does not include your financial information or full identity details.
• Malaysian Authorities: We will disclose your data to the relevant Malaysian authorities (such as Bank Negara Malaysia, the police, or the courts) if required by law, court order, or official investigation.
• Technology Providers: IT infrastructure and cybersecurity service providers that assist in operating the platform cardgames may have limited access to the data required to deliver their services, under binding confidentiality agreements.

In all cases where data is shared, cardgames ensures that any party receiving data is bound by data protection standards equivalent to our own. We do not permit any third party to use your data for their own purposes unrelated to the services they provide to cardgames.

4Security & Data Protection

cardgames implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction:

• 256-bit SSL Encryption: All communications between your device and the cardgames encrypted using TLS 1.3 protocol with 256-bit key length — the highest standard used in Malaysia's banking and financial industry.
• Secure Password Storage: Your account password is never stored in plain text. We use the bcrypt hashing algorithm with a random salt, ensuring your password cannot be recovered even from our own internal records.
• Segregation of Funds: Account balance cardgames your funds are held in a separate account from the company's operational accounts, ensuring your money is safe and always accessible.
• Internal Access Controls: Access to players' personal data within the organisation cardgames is restricted on a "need-to-know" basis. Only staff who require access to perform their duties are authorised, and all access is logged and monitored.
• 24/7 Monitoring: An active security monitoring system runs around the clock to detect unauthorised access attempts, cyberattacks, or suspicious activity targeting player data cardgames.
• Regular Security Audits: Platform and infrastructure cardgames undergoes periodic security audits by independent third parties to identify and address potential vulnerabilities before they can be exploited.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure against all threats. In the event of a data breach affecting your personal information, cardgames will notify you via your registered email and take appropriate remedial steps within the timeframe required by applicable Malaysian law.

5Use of Cookies & Tracking Technologies

Platform cardgames uses cookies and similar technologies to enhance the user experience, maintain login session security, and analyse platform usage. Cookies are small text files stored on your device when you visit our website.

cardgames uses three main categories of cookies:

You can manage or delete cookies through your web browser settings. However, disabling essential cookies may affect your ability to log in and use certain features of the platform cardgames properly. cardgames does not use third-party cookies for third-party advertising purposes.

6Data Storage & Retention Period

cardgames retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable Malaysian law:

• Active Account Data: Personal data for active accounts is retained for as long as your account remains active at cardgames and for the required period following account closure for legal compliance purposes.
• Financial Transaction Records: All deposit, withdrawal, and betting records in MYR are retained for a minimum of seven (7) years in accordance with Malaysian financial legal requirements, including the Anti-Money Laundering Act 2001.
• Live Casino Session Recordings: Video recordings of live baccarat, live blackjack, and other live casino game sessions are retained for 90 days for dispute resolution purposes. After 90 days, recordings are automatically deleted unless there is an active related dispute.
• Communication Logs: Customer support chat records and email correspondence are retained for 24 months for staff training purposes and reference in the event of follow-up complaints.
• Closed Account: When an account is closed at a player's request, cardgames will delete or anonymise personal data that is no longer required within 90 days, unless retention is required by law.

Once the retention period has ended and there is no legal requirement for further retention, your personal data will be securely deleted using methods that ensure the data cannot be recovered.

7Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several important rights regarding the personal data you share with cardgames. We respect and facilitate the exercise of all these rights:

8Children's Data & Special Protections

Services cardgames is strictly for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18.

If we suspect or become aware that personal data belonging to an individual under the age of 18 has been collected without valid parental or guardian consent, we will immediately take the following steps:

• Suspending the relevant account immediately while an investigation is conducted.
• Deleting all personal data associated with that individual as promptly as possible.
• Returning any related account balance through an appropriate method.
• Reporting incidents to the relevant Malaysian authorities where required by law.

Parents or guardians who discover that their minor child may have registered for or used the platform cardgames are encouraged to contact us immediately at support@cardgames.win. We will take appropriate action without delay.

cardgames uses a multi-layered age verification system — including MyKad verification and registered Malaysian phone numbers — to prevent access by minors. We take this responsibility seriously as part of our commitment to responsible gambling.

9Privacy Policy Amendments

cardgames reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data handling practices, new Malaysian legal requirements, or improvements to our platform.

When we make material amendments to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this document.
• Sending email notifications to all registered members cardgames at least 14 days before the amendments take effect.
• Displaying a clear notice of changes on the platform's main page during the pre-effective period.

Continued use of the platform cardgames after the effective date of the amendments will be considered acceptance of the revised Privacy Policy. If you do not agree with any amendments, you have the right to close your account and request data deletion before the effective date.

We recommend revisiting this Privacy Policy page periodically to stay informed about how cardgames protecting your information.

10Contact Us – Privacy Enquiries

If you have any questions, concerns or requests regarding this Privacy Policy or the handling of your personal data by cardgames, please contact us through the following channels:

• Data Protection Officer Email: support@cardgames.win (please include "Privacy Inquiry" in the email subject line)
• Live Chat: Available 24/7 via the in-platform chat icon cardgames
• Target Response Time: General enquiries within 2 hours; data rights requests within 14 working days

We will make every effort to resolve any privacy concerns you raise with us directly. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant Malaysian data protection authority.

Thank you for trusting cardgames with your personal data. Your trust is something we do not take lightly, and we are committed to upholding your privacy to the highest standards we can maintain.