Privacy Policy m500 – Malaysian Member Data Protection

1 Introduction & Scope of Privacy Policy

m500 ("we", "our platform") is an online casino platform operator based in Malaysia, accessible via the official website m500.my. We understand that your trust in us depends not only on the quality of our games and the speed of our withdrawals, but also on how responsibly we handle your personal information.

This Privacy Policy covers all information we collect through:

• The official m500.my website and all associated subdomains;
• The m500 mobile app for Android and iOS devices (where available);
• All interactions you have with the m500 customer support team via Live Chat, email, or any other channel;
• Any forms, surveys, or other data collection mechanisms operated by m500.

This Privacy Policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), which governs how data processors such as m500 required to handle the personal information of users in Malaysia. We take these legal obligations very seriously and continually strive to exceed the minimum requirements set by law.

2 Personal Data We Collect

m500 only collects information that is genuinely necessary to provide our services safely and efficiently. The following are the categories of data we collect:

3 How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. m500 uses your personal information for the following purposes:

• Account Management: Creating, verifying, and securely maintaining your m500 account — including identity verification as required by law;
• Transaction Processing: Processing all deposits made via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX, and CIMB Clicks, as well as withdrawals of your winnings to your registered account;
• Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, account duplication, and any misuse of the m500 platform;
• Customer Support: Providing effective and accurate assistance whenever you contact the m500 support team via Live Chat or email;
• Responsible Gaming: Monitoring gameplay patterns to identify members who may need support and to enforce self-imposed limits;
• Platform Improvements: Analysing usage data in aggregate (not at an individual level) to improve the user experience, platform performance, and the range of games we offer;
• Service Communications: Sending important notifications relating to your account, security, transactions, and any changes to m500's terms or policies;
• Legal Compliance: Fulfilling the reporting and compliance obligations prescribed by applicable Malaysian law.

m500 does not use your data to make automated decisions that significantly affect you without appropriate human review. Every case involving account suspension or withdrawal rejection will be assessed by our trained staff before any action is taken.

4 Information Sharing & Disclosure

This is one of the most important things for you to understand: m500 does not sell, rent, or transfer your personal information to third parties for their own marketing or commercial purposes.

However, there are limited circumstances in which we may need to share your information:

• Payment Service Providers: Minimum required transaction information will be shared with e-wallet and online banking providers such as Touch 'n Go, GrabPay, and DuitNow solely for the purpose of processing your deposits and withdrawals;
• Technical Service Providers: Companies that assist us in operating the m500 platform (such as server hosting and cybersecurity service providers) may have limited access to the data necessary to carry out their functions — all such parties are bound by strict confidentiality agreements;
• Legal Compliance: m500 will disclose information to Malaysian government authorities where required to do so by a valid court order, directive from a law enforcement agency, or reporting obligations under Malaysian law;
• Crime Prevention: Where there is strong suspicion of fraud or money laundering involving your account, m500 reserves the right to report the matter to the relevant authorities without prior notice to you.

5 Data Security & Technical Safeguards

m500 invests heavily in security infrastructure to ensure your data is protected at all times. The security measures we have in place include:

• 256-bit SSL/TLS Encryption: All communications between your browser or application and m500 servers are encrypted using the highest commercially available security protocols;
• Layered Access Controls: Member data is accessible only to m500 staff with a legitimate business need, and all access is automatically logged and monitored;
• Two-Factor Authentication: Your m500 account login can be secured with two-factor authentication (2FA) for an additional layer of security, which we strongly encourage;
• Regular Security Scanning: m500 systems undergo regular penetration testing and security audits conducted by independent cybersecurity experts;
• Data-at-Rest Encryption: Sensitive information such as passwords and financial data is stored in encrypted form on our servers — even m500 staff cannot view your password in its original form.

6 Cookies & Tracking Technologies

Like most modern websites, m500 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

You can manage your cookie settings through your internet browser settings. However, disabling certain cookies may affect the functionality of some parts of the platform. m500.

7 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and our internal policies m500, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact our support team m500 via Live Chat or email at [email protected]. We will verify your identity before processing any data-related requests to ensure your security and privacy are protected.

8 Data Retention & Deletion

m500 does not retain your personal data for longer than is necessary for the stated purposes, or longer than required by Malaysian law. Our general data retention guidelines are as follows:

• Active Account Data: Retained for the duration your account remains active with m500, plus any additional period required by law;
• Financial Transaction Records: Retained for a minimum of 7 years from the date of the relevant transaction, in compliance with Malaysia's accounting and anti-money laundering legal requirements;
• Support Communication Logs: Retained for 2 years after a support ticket is closed, for reference and quality assurance purposes;
• Analytics Cookie Data: Anonymous session data is retained for no longer than 13 months;
• Closed Accounts: Following account closure, any personal data no longer required for legal purposes will be permanently deleted or anonymised within 90 days.

Once the retention period expires, m500 will securely delete or anonymise data using industry-standard methods — ensuring that deleted data cannot be recovered.

9 Child Protection & Age Restrictions

Platform m500 is exclusively for individuals aged 18 years and above. We do not knowingly collect or process personal data from anyone under the age of 18.

The measures we take to protect minors include:

• Age verification requirements upon registration of a new m500 account;
• Identity document verification when required to confirm a member's age eligibility;
• Immediate closure of accounts suspected to belong to individuals under the age of 18;
• Any data inadvertently collected from a minor will be deleted immediately upon our becoming aware of it.

10 Third-Party Links & Services

Platform m500 may contain links to third-party websites or services in certain contexts. This Privacy Policy applies solely to the m500 platform and does not cover the privacy practices of any third party.

Third-party service providers involved in m500's operations include:

• Game Providers: Game developers such as PG Soft, Playtech, and others may process certain gameplay data through their own platforms. All such providers are selected based on their compliance with security and privacy standards;
• Payment Providers: Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX, and CIMB Clicks are independent entities with their own privacy policies. We recommend that you review their respective privacy policies;
• Security Services: Third-party cybersecurity tools we use to protect the m500 platform are subject to strict confidentiality agreements with us.

m500 is not responsible for the privacy practices or content of any third-party websites that may be linked from our platform. Please exercise caution and review the privacy policy of any other website before providing them with your personal information.

11 Amendments to This Privacy Policy

m500 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or technological developments. When we make significant changes:

• The "Updated" date at the top of this page will be revised to reflect the date of the latest version;
• Notifications of significant changes will be sent to all active m500 members via email or in-platform notifications;
• For amendments that materially affect your privacy rights, we will seek your renewed consent before those changes take effect;
• Previous versions of this Privacy Policy are available upon request by emailing [email protected] should you need them for reference.

It is your responsibility as a member to review this page periodically. Your continued use of the platform m500 following the publication of any amendments shall constitute your acceptance of the updated Privacy Policy.

12 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy m500 or the way we handle your personal data, please do not hesitate to get in touch with us:

• 24/7 Live Chat: The fastest option — available on the m500 website at all times, with responses typically within seconds;
• Privacy Email: [email protected] — please include the subject line "Privacy Enquiry" for faster processing. We are committed to responding within 48 hours;

If you are dissatisfied with our response to your privacy enquiry, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia under the Personal Data Protection Act 2010.