At my36, we take the privacy of our players seriously. This Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have as a registered player on the my36 platform. Please read this document carefully before using our services.
This Privacy Policy ("Policy") is published by my36 ("Company", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at https://my36.cam ("Platform"). This Policy applies to all individuals who visit, register on, or interact with the Platform, including registered Players, prospective Players, and visitors ("you", "User", "Data Subject").
my36 is committed to handling personal data responsibly, transparently, and in compliance with applicable data protection law. We collect only the data necessary to operate our services, verify player identity, process financial transactions, and comply with our legal and regulatory obligations. We do not sell personal data to third parties, and we do not use your data for purposes that are incompatible with those disclosed in this Policy.
This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern the broader contractual relationship between you and my36. Where there is any conflict between the two documents on data-related matters, this Privacy Policy shall prevail.
For the purposes of this Policy, the following terms carry the meanings assigned below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, identity number, contact details, financial information, IP address, and device identifiers. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, erasure, or destruction. |
| "Data Controller" | my36, the entity that determines the purposes and means of Processing Personal Data collected through the Platform. |
| "Data Processor" | A third party that Processes Personal Data on behalf of my36 under a contractual arrangement — such as payment service providers, KYC verification vendors, or cloud hosting providers. |
| "KYC" | Know Your Customer — the identity verification process mandated for all registered Players before withdrawal of funds is permitted. |
| "Sensitive Personal Data" | A subset of Personal Data that warrants heightened protection, including identity document details, financial account information, and, where applicable, health-related data submitted in the context of responsible gambling support requests. |
| "Cookie" | A small text file stored on your device by the Platform for the purposes of session management, analytics, and user experience optimisation. |
my36 collects Personal Data across several categories depending on the nature of your interaction with the Platform. The categories of Personal Data we hold are summarised below:
When you register an Account, we collect: full legal name, date of birth, gender, nationality, residential address, Malaysian mobile phone number, and email address. This data is required to create and maintain your Account and to fulfil our age verification and KYC obligations.
To process withdrawals and comply with anti-money-laundering requirements, we collect copies of identity documents such as your MyKad, Malaysian driver's licence, or passport; proof of current residential address (utility bill or bank statement not more than three months old); and a live selfie image holding the identity document. These documents constitute Sensitive Personal Data and are subject to heightened security measures.
We collect records of all deposits and withdrawals made through the Platform, including payment method used (e.g., Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, GrabPay, Boost, or cryptocurrency), transaction amounts in MYR, timestamps, and transaction reference numbers. We do not store full card numbers or e-wallet PIN codes.
We record your gaming activity on the Platform, including games played, bet amounts, outcomes, session durations, bonus claims, and VIP tier progression. This data is used for account management, bonus administration, responsible gambling monitoring, and fraud detection.
When you access the Platform, we automatically collect your IP address, browser type and version, operating system, device identifiers, screen resolution, referring URL, and Platform session data. This data is used for security monitoring, fraud detection, and Platform performance optimisation.
We retain records of communications between you and our support team via live chat, WhatsApp, Telegram, and email, including the content, timestamp, and outcome of each interaction. These records are retained for quality assurance, dispute resolution, and regulatory compliance purposes.
Personal Data is collected through the following means:
my36 processes Personal Data only where a valid lawful basis exists. The primary bases on which we rely are:
| Lawful Basis | Processing Activities |
|---|---|
| Contractual Necessity | Account creation and management, deposit and withdrawal processing, bonus administration, game result recording, and customer support interactions necessary to fulfil our obligations to you under the Terms & Conditions. |
| Legal Obligation | KYC identity verification, anti-money-laundering screening, age verification enforcement, responsible gambling monitoring, and data retention required by applicable regulations. |
| Legitimate Interests | Fraud detection and prevention, Platform security monitoring, abuse detection, analytics for Platform improvement, and internal audit and compliance functions — where those interests are not overridden by your fundamental rights and freedoms. |
| Consent | Optional marketing communications (promotional emails, SMS, or in-Platform notifications) where you have expressly opted in. You may withdraw consent at any time by updating your communication preferences in Account settings or by contacting support. |
Personal Data collected by my36 is used for the following purposes:
my36 does not sell, rent, or trade your Personal Data to any third party for their own commercial purposes. We may share Personal Data with the following categories of recipients, strictly for the operational and legal purposes described in this Policy:
Transaction data is necessarily shared with the payment processor handling each deposit or withdrawal — including Touch 'n Go eWallet (TnG Digital), DuitNow, FPX, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency network processors. These providers receive only the data required to execute the transaction and are bound by their own applicable data protection obligations.
Identity documents and verification data may be shared with licensed third-party KYC service providers engaged to authenticate documents and confirm your eligibility. These providers act as Data Processors under binding contractual data protection agreements.
Where required for compliance with anti-money-laundering obligations, account details may be checked against regulatory watchlists and sanction databases operated by licensed screening service providers.
Certain gaming activities on the Platform are powered by third-party software providers. These providers may receive limited gameplay data (bet amounts, game outcomes, session identifiers) necessary to operate their games. They do not receive your full identity or payment details.
my36 may disclose Personal Data to governmental, regulatory, or law enforcement authorities where required by applicable law, court order, or regulatory direction. We will, where legally permitted, notify you of any such disclosure requirement.
my36 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal and regulatory retention obligations. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account Registration Data | Duration of account plus 5 years following account closure, or longer where required by applicable law. |
| KYC Identity Documents | Duration of account plus 5 years following account closure, in accordance with anti-money-laundering record-keeping requirements. |
| Financial Transaction Records | Minimum 7 years from the date of each transaction, in accordance with financial record-keeping obligations. |
| Gaming and Betting History | Duration of account plus 3 years following account closure, or longer where relevant to an ongoing dispute or investigation. |
| Support Communications | 3 years from the date of each communication, or until resolution of any related dispute. |
| Technical and Device Logs | Up to 12 months from the date of collection, unless retained longer for active fraud investigation purposes. |
| Marketing Consent Records | Until you withdraw consent, plus a reasonable period thereafter to demonstrate compliance. |
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.
my36 implements comprehensive technical and organisational security measures to protect Personal Data against unauthorised access, disclosure, alteration, or destruction. Our security infrastructure includes:
The Platform uses cookies and similar tracking technologies to operate core Platform functions, remember your preferences, and analyse usage patterns. The categories of cookies used are:
These cookies are essential for the Platform to function. They enable session management, authentication, and security features. They cannot be disabled without preventing you from using the Platform.
These cookies remember your preferences — such as language settings, display preferences, and your last-used payment method — to improve your experience on the Platform. Disabling them may affect some Platform features but will not prevent basic access.
We use analytics tools to understand how players navigate and use the Platform. Data collected is aggregated and anonymised where possible. Analytics cookies help us identify popular games, problematic page flows, and performance issues so we can improve the Platform for Malaysian users.
You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Note that blocking strictly necessary cookies will prevent you from logging in or using core Platform features. Instructions for managing cookies are available in your browser's help documentation.
Subject to applicable law, you have the following rights in relation to your Personal Data held by my36. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request":
my36 will respond to Data Rights Requests within 30 calendar days of receipt. Where a request is complex or where we receive multiple requests from the same individual, we may extend this period by a further 60 days, with notice provided to you within the initial 30-day window.
my36 does not knowingly collect Personal Data from persons under 21 years of age. The Platform is strictly intended for adults aged 21 and above. Age verification is conducted as part of the registration and KYC process to prevent underage access.
If my36 becomes aware that Personal Data belonging to a person under 21 has been collected — whether through misrepresentation during registration or any other means — we will immediately: (a) close the associated Account; (b) delete or anonymise the Personal Data to the extent legally permissible; (c) refund any Real Money deposits after completing fraud screening; and (d) forfeit any associated gaming winnings.
my36 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services we offer. When material changes are made, we will update the "Last updated" date at the top of this document and, where the changes are significant, notify registered Players by email or in-Platform notification.
Your continued use of the Platform after publication of an updated Policy constitutes your acknowledgement of the revised terms. If you do not accept any change, you should cease using the Platform and contact us to arrange Account closure and, where appropriate, erasure of your Personal Data in accordance with our retention obligations.
The current and binding version of this Privacy Policy is always accessible at https://my36.cam/privacy-policy. We recommend reviewing this Policy periodically, particularly before making significant account actions such as major deposits or requesting withdrawal of accumulated winnings.
If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact our dedicated Data Protection team through the following channels. Please mark any written correspondence as "Privacy / Data Rights Enquiry" to ensure it is directed to the appropriate team.
These are the practical measures behind our Privacy Policy — the concrete standards we hold ourselves to when handling your personal information.
Every page on the my36 Platform — including login, deposit, and KYC upload pages — operates over HTTPS with 256-bit TLS encryption. Data transmitted between your device and our servers cannot be intercepted in transit.
Identity documents and sensitive financial data are encrypted at rest using AES-256 encryption. Even in the event of an infrastructure compromise, stored data remains protected from unauthorised access.
Access to your Personal Data within my36's internal systems is restricted to authorised personnel on a verified need-to-know basis. All access is logged, audited, and subject to regular review to prevent unauthorised internal access.
my36 does not sell, rent, or trade your personal information to data brokers, advertisers, or any third party for their own commercial purposes. Your data is used solely to operate your Account and fulfil our legal obligations.
Access, rectification, erasure, portability, restriction, objection — we respond to all Data Rights Requests within 30 days. Contact [email protected] with "Privacy / Data Rights Enquiry" to exercise any of your rights.
We don't keep your data indefinitely. Clear retention schedules govern how long each category of data is held — from 12-month technical logs to 7-year financial records — after which data is securely deleted or anonymised.
Our support team handles all data protection enquiries promptly and professionally. Whether you want to access your data, update your details, or withdraw marketing consent — we're ready to help.
For players aged 21 and above only. Gamble responsibly. Responsible Gambling