PDPA Compliant 256-bit SSL Encryption Data Not Sold

Privacy Policy my36 – Malaysia Member Data Protection

Your privacy is more than a legal obligation to us — it is a genuine commitment. Find out exactly how my36 collects, uses, and protects your personal data at all times.

Updated: January 2026
256-bit SSL Encryption
0 Third-Party Data Sales
PDPA Full Compliance
24/7 Security Monitoring

How my36 Protects Your Data

End-to-End Encryption

All data transmitted between your device and my36 servers is protected with 256-bit SSL encryption — the same standard used by leading banking institutions in Malaysia.

Strict Access Control

Member personal data is only accessible by authorized my36 staff who genuinely require it. Access logs are reviewed regularly by the internal security team.

Malaysia PDPA Compliance

The my36 Privacy Policy is designed in full compliance with the Personal Data Protection Act 2010. Your rights to access, correct, and delete your data are always respected.

Secure Server Infrastructure

Sensitive data is stored in a tightly controlled server environment with multi-layered firewalls, real-time intrusion detection, and automatic data backups every 24 hours.

No Data Sales

My36 has never and will never sell, rent, or trade your personal data to any third party for marketing or commercial gain.

Member Control Rights

You have the full right to access, update, and request deletion of your personal data at any time through the account centre or by contacting our support team.

1. Introduction & Policy Scope

This Privacy Policy ("Policy") describes in detail how my36 ("Platform", "We") collects, processes, stores, and protects your personal data ("Member", "You") when you use our services through the official my36 website or our mobile app.

This Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and forms part of the my36 Terms and Conditions. By registering or using our platform, you consent to the processing of your personal data as described in this document.

My36 takes your privacy seriously. We understand that your trust is our most valuable asset, and we never take that responsibility lightly. Every data-related decision is made with full priority given to protecting your information.

Important Note

This Privacy Policy applies only to services operated directly by my36. Third-party websites or services that may be linked from our platform have their own separate privacy policies.

2. Data We Collect

My36 collects your personal data through several channels — directly from you during registration and platform use, and automatically through tracking technologies used in our platform operations.

2.1 Data You Provide Directly

  • Full name as shown on official ID
  • National Identity Card number (MyKad) or passport number
  • Email address and mobile phone number
  • Full current residential address
  • Date of birth for age verification
  • Bank account or e-wallet details for financial transactions
  • KYC Documents — copy of ID card and proof of address
  • Information you share when contacting customer support

2.2 Automatically Collected Data

  • IP address and location information based on your network
  • Device type, operating system, and browser version
  • In-platform activity logs including games played and session duration
  • Deposit and withdrawal transaction history
  • Cookie data and session identifiers for security purposes
  • Technical information for troubleshooting and service improvement
Data Category Example Primary Purpose
Identity Name, IC, date of birth Account verification & KYC
Contact Email, phone, address Communication & support
Financial Bank account, transaction records Deposit, Withdrawal & AML
Technical IP, device, cookies Security & improvements
Activity Game logs, betting history Responsible gaming

3. How We Use Your Data

My36 only uses your personal data for legitimate, necessary purposes that are directly related to delivering our services. We will never process your data for purposes not stated in this Policy without obtaining fresh consent from you.

3.1 Platform Operations & Member Services

  • Creating and managing your member account
  • Processing deposits, withdrawals, and all financial transactions securely
  • Providing access to all games and platform features
  • Crediting eligible promotional bonuses and rewards
  • Providing effective and personalized customer support

3.2 Security & Compliance

  • Verifying your identity through the required KYC process
  • Detecting and preventing fraud, money laundering, and system abuse
  • Complying with applicable legal and regulatory requirements in Malaysia
  • Reporting suspected transactions to the relevant authorities as required by law

3.3 Service Improvements

  • Analyzing usage patterns to improve the member experience
  • Developing new features more relevant to Malaysian users' needs
  • Optimizing platform performance and resolving technical issues
  • Sending account-related notifications, promotions, and important updates

4. Data Sharing & Disclosure

My36 does not sell, rent, or trade your personal data to any third party. Data sharing only occurs in the limited situations described below, and is always subject to strict confidentiality protections.

4.1 Trusted Service Providers

My36 works with selected third-party service providers for specific purposes such as payment processing, identity verification, and technical infrastructure. All these providers are bound by strict confidentiality agreements and are only permitted to process your data for the stated purposes.

4.2 Legal Requirements

My36 may disclose your personal data to the relevant authorities if required by Malaysian law, a court order, or an official investigation by a legitimate government agency. In such situations, we will notify you where possible unless prohibited from doing so by law.

4.3 Protection of Vital Interests

In exceptional circumstances involving the safety or vital interests of any individual, my36 may disclose the necessary data to appropriate parties. Such situations are extremely limited and carefully considered.

Protection Guarantee

In all data sharing arrangements, my36 ensures that recipients are bound by data protection obligations equivalent to or stricter than those set out in this Privacy Policy.

5. Cookies & Tracking Technologies

My36 uses cookies and similar tracking technologies to keep the platform running smoothly, enhance the user experience, and protect your account security.

5.1 Types of Cookies We Use

  • Essential Cookies — Required for core platform functions such as login sessions and account security. These cookies cannot be disabled.
  • Performance Cookies — Collects data on how you use the platform to help us improve our services.
  • Functional Cookies — Saves your preferences such as language and display settings for a more personalized experience.
  • Analytics Cookies — Helps us understand aggregate usage patterns for continuous improvement.

5.2 Cookie Controls

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect the functionality and security of your my36 account.

6. Data Security

We continually invest in the best security technologies and processes to protect your personal data from unauthorized access, disclosure, alteration, or destruction.

  • 256-bit SSL encryption applied to all transmitted data
  • Sensitive data retained in isolated server environments
  • Two-factor authentication (2FA) available for all member accounts
  • 24/7 threat monitoring and real-time intrusion detection
  • Periodic security audits by independent teams
  • Mandatory privacy training for all staff who handle data
  • Automatic data backup every 24 hours to a secure location
  • Role-based access control (RBAC) for internal staff

While my36 takes comprehensive steps to protect your data, no system can guarantee absolute security. You also play an important role by keeping your account password confidential and reporting any suspicious activity to us promptly.

7. Your Rights as a Member

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by my36. We are committed to making it easy for you to exercise these rights.

7.1 Right of Access

You may request a copy of all personal data we hold about you. Requests will be processed within 21 business days of receiving a complete submission.

7.2 Right of Rectification

If any of your personal data is inaccurate or outdated, you may request a correction at any time via your account settings or by contacting our support team.

7.3 Right to Restrict Processing

You may request that we limit how we process your data under certain circumstances, such as when you are disputing the accuracy of the data or reviewing an objection to processing.

7.4 Right to Erasure

You may request deletion of your personal data when it is no longer needed for its original purpose, or when you withdraw your consent to processing. Deletion requests are subject to record retention obligations required by law.

7.5 Right to Object to Direct Marketing

You can opt out of direct marketing communications from my36 at any time by using the unsubscribe option in any marketing email or by contacting us directly.

How to Exercise Your Rights

To exercise any of the above rights, contact the my36 Privacy team by email at [email protected] or via live chat within the platform. Please include your account number to speed up the process.

8. Data Retention & Deletion

My36 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Malaysian law.

Data Type Retention Period Legal Basis
KYC & identity records 7 years after account closure AMLA & PDPA
Financial transaction history 7 years from the date of transaction Tax Act & AMLA
Support communication logs 3 years from the date of interaction Operational requirements
Game Log Data 2 years from the date of activity Responsible gaming
General account information Active period + 1 year Operational requirements

Once the relevant retention period has expired, your data will be securely deleted or anonymized using procedures that comply with the latest industry standards.

9. Privacy Policy Updates

My36 may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Each new version will be published on this page with a clear effective date.

For material changes — meaning changes that significantly affect how we process your data — my36 will send a notification to your registered email and display an in-platform notice at least 14 days before the change takes effect. This gives you sufficient time to review and decide on your continued use of our services.

Continued use of the my36 platform after any Privacy Policy change takes effect will be considered acceptance of that change. If you disagree with the changes made, you may close your account and request deletion of your personal data.

10. How to Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by my36, our team is ready to assist through multiple channels.

  • Live Chat — The fastest way to get an immediate response, available 24/7 within the platform.
  • Email — Contact us at [email protected] for privacy inquiries that require detailed clarification. We respond within 24 hours on business days.
  • Help Center — Visit the FAQ for answers to frequently asked questions about privacy and data security.

We are committed to handling every privacy inquiry seriously and providing a clear response within the stipulated timeframe. Your satisfaction and trust are my36's top priority.

FAQ – my36 Privacy Policy

Not at all. my36 has never and will never sell, rent, or trade your personal data to any third party for marketing or commercial gain. Your data is only shared with strictly vetted service providers for platform operational purposes, and is always subject to binding confidentiality agreements.

You can submit a data access request via live chat on the platform or by emailing [email protected]. Please include your full name and account number. my36 will process your request and provide the relevant data within 21 business days.

When you close your account, my36 will retain certain data such as KYC records and transaction history for the period required by Malaysian law (typically 7 years) for compliance purposes. Other data not subject to legal retention obligations will be deleted or anonymised within 90 days of account closure.

Yes. my36 uses 256-bit SSL encryption for all financial transactions. Sensitive payment details such as card numbers are not stored directly on our servers — this information is handled by licensed payment processors that comply with the highest PCI-DSS security standards.

Yes, you can unsubscribe from marketing emails at any time by clicking the "Unsubscribe" link at the bottom of any promotional email from us. You can also update your communication preferences directly in your account settings or contact our customer support team for assistance.

my36 has a comprehensive incident response procedure. Should a data breach occur, we will investigate immediately, take containment measures, and notify affected members and the relevant authorities within the timeframe required by law. Member data security is always our top priority in every decision we make.

Join my36 Today

Over 500,000 Malaysian members have trusted my36. Your data is always safe with us. Register now and enjoy a 150% welcome bonus on your first deposit.

Register Free

Your Privacy, Our Priority

My36 is committed to safeguarding every detail of your personal data to the highest security standards. Play with peace of mind knowing your privacy is always protected.

Bahasa Melayu