Mahjong222 Privacy Policy — Protection of Your Personal Data

This Privacy Policy is published by mahjong222 ("we", "Platform", or "Company") to explain how we handle the personal data of users and members of our platform in Malaysia. This document applies to all users who access the official mahjong222 website, mobile app, and any other digital services we operate.

We take your privacy seriously. All information you provide to us — whether during registration, day-to-day platform use, or when dealing with our customer support team — is handled with the highest level of confidentiality and care. We only collect data that is genuinely necessary to provide you with the best possible service.

This Privacy Policy is to be read together with Terms and Conditions mahjong222 and our Responsible Gaming Policy. By registering for or using the mahjong222 platform, you consent to the processing of your personal data as described in this document.

Mahjong222 collects several categories of personal data depending on how you interact with our platform. Below is a summary of the data types and their collection sources:

We do not collect sensitive data such as your medical information, political views, or religious beliefs. All data collection is carried out on the basis of clear consent and only for the purposes stated in this policy.

The data we collect is used solely for legitimate and necessary purposes to enable us to provide the mahjong222 platform services effectively. The following are the primary purposes for which your data is used:

• Identity verification and KYC: To verify that you meet the age eligibility requirements and confirm your identity before authorising fund withdrawals.
• Financial transaction processing: Includes deposits, withdrawals, bonus payments, and related account adjustments.
• Account management and security: To detect suspicious activity, prevent fraud, and ensure your account remains protected at all times.
• Customer Support: To help our team understand the context of a reported issue and provide accurate, effective assistance.
• Legal compliance: To fulfil our obligations under applicable laws including PDPA, Anti-Money Laundering (AML) regulations, and Know Your Customer (KYC) requirements.
• Platform improvements: Non-identifiable usage data is used to analyze usage patterns and improve the overall user experience.
• Promotional communications (with consent): If you have consented to receive marketing communications, we will send you information about the latest offers, bonuses, and promotions via email or platform notifications.

We will not use your data for any purpose beyond those stated above without first obtaining your explicit consent.

Mahjong222 does not sell, rent, or trade your personal data to any external party for marketing or commercial purposes. However, in limited and specific circumstances, we may need to share your information with the following parties:

• Payment service providers: Financial institutions, payment gateways, and eWallet providers integrated with our platform to securely process deposit and withdrawal transactions.
• Game software providers: Technology partners providing slot games, Sports Betting, and betting products within the mahjong222 platform, who require limited access to game session data.
• Identity verification services: Third parties that assist us in conducting KYC processes and document verification securely and efficiently.
• Authorities and regulatory bodies: When required by Malaysian law, court order, or a valid request from a law enforcement agency.
• Technical infrastructure services: Includes cloud hosting providers, cybersecurity services, and analytics tools used to ensure stable and secure platform operations.

All third parties we work with are bound by strict confidentiality agreements and must comply with data protection standards equivalent to or higher than our own. We regularly monitor their compliance with these data protection obligations.

Mahjong222 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

We use several types of cookies for different purposes:

• Essential cookies: Required for the platform to function properly, including maintaining your login session and processing transactions. These cookies cannot be disabled.
• Performance cookies: Collecting information on how you use the platform (pages visited, time spent) to help us improve performance and site navigation.
• Functional cookies: Remembering your preferences such as language, display settings, and login details to deliver a more personalised experience.
• Security cookies: Used to detect suspicious login attempts and protect your account from unauthorized access.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality of some parts of the mahjong222 platform. For more information on managing cookies, please refer to your web browser's help guide.

The security of your personal data is an absolute priority for mahjong222. We implement multiple layers of technical and organizational controls to protect your information from unauthorized access, disclosure, alteration, or destruction.

Key security measures we practice include:

• Encryption of data in transit using TLS 1.3 protocol and 256-bit SSL certificates.
• Encryption of sensitive personal data stored in databases using the latest industry-standard encryption algorithms.
• Role-based access control (RBAC) ensuring only authorized personnel can access specific data.
• Round-the-clock system monitoring using intrusion detection systems (IDS) and security information and event management (SIEM) tools.
• Regular security testing including penetration testing and security audits by independent third parties.
• Mandatory cybersecurity awareness training for all staff who handle member personal data.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold about you:

To exercise any of the above rights, please contact our privacy team via live chat or support email. We will review and respond to your request within 21 business days as required by PDPA.

Mahjong222 retains your personal data only for as long as necessary for the purposes stated in this policy, or as required by applicable law. Retention periods vary by data category:

• Active account data: Retained for the duration your account remains active on the mahjong222 platform.
• Financial transaction records: Retained for a minimum of 7 years in compliance with Malaysian financial and tax regulations.
• KYC Documents: Retained for 5 years after account closure in accordance with AML/KYC requirements.
• Customer service communication records: Retained for 2 years after the last interaction.
• Technical data and system logs: Retained for 12 months for security and troubleshooting purposes.

Once the retention period expires, your personal data will be securely deleted or anonymised so it can no longer be identified. Deletion is carried out using methods that ensure the data cannot be recovered.

Mahjong222 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or platform service improvements. All amendments will be published on this page with the latest "Updated" date.

For material or significant changes that affect how we process your personal data, we will notify you through one or more of the following methods:

• Prominent notice on the mahjong222 platform homepage.
• In-account notification upon your next login.
• Notification email sent to your registered address.

Your continued use of the mahjong222 platform after any amendments to the Privacy Policy take effect will be considered your acceptance of the updated terms. We encourage you to review this page periodically to stay informed of how we protect your privacy.

If you have any questions, concerns, or wish to exercise your rights under the PDPA regarding the processing of your personal data by mahjong222, please contact our privacy team through the following channels:

• Live Chat: Available on the mahjong222 platform, 24 hours a day, 7 days a week.
• Email: [email protected] (response within 1–3 business days)
• FAQ Page: Visit our FAQ page for answers to frequently asked questions.

We are committed to addressing all privacy inquiries seriously and within a reasonable timeframe. Our Data Protection Officer will ensure every request is handled efficiently and in accordance with Malaysia's PDPA.