Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by menang29 ("menang29", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at menang29.one. This Policy applies to all personal data processed in connection with your use of the menang29 platform, including the Sportsbook, Live Casino (menang29 Casino), Slots, Virtual Casino, Plinko, account registration and management, customer support interactions, and marketing communications.

By registering for a menang29 account or using the menang29 platform, you acknowledge that you have read and understood this Policy. This Policy should be read alongside the menang29 Terms & Conditions, which govern the overall use of the Platform.

menang29 acts as the data controller in respect of personal data processed under this Policy, meaning we determine the purposes and means of processing your personal data.

2. Personal Data We Collect

menang29 collects personal data from you directly, automatically through your use of the Platform, and from third parties in certain circumstances. The categories of personal data we collect include:

menang29 does not intentionally collect sensitive personal data (such as racial origin, religious beliefs, or health data) unless required by applicable law or to support responsible gaming obligations.

3. How We Use Your Personal Data

menang29 uses the personal data we collect for the following purposes:

• Account Registration and Management: To create and maintain your menang29 account, process your registration, and verify your identity.
• Identity Verification (KYC): To fulfil our obligations under applicable anti-money laundering (AML) regulations and to verify that you meet the 21+ age requirement before processing withdrawals.
• Transaction Processing: To process deposits and withdrawals via your chosen payment method (including Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and Visa/Mastercard) and to maintain accurate financial records.
• Platform Delivery: To provide, operate, and maintain the menang29 gaming platform, including the Sportsbook, Casino, and Slots products.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Responsible Gaming: To monitor gaming activity, detect potential problem gambling behaviour, and apply responsible gaming tools including deposit limits, session controls, and self-exclusion where triggered or requested.
• Security and Fraud Prevention: To detect and prevent fraud, money laundering, account takeover, and other prohibited activities on the menang29 platform.
• Legal Compliance: To comply with applicable laws, regulations, court orders, and requests from regulatory authorities.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — where you have provided consent or where we have a legitimate interest to do so, subject to your right to opt out at any time.
• Platform Improvement: To analyse usage patterns and improve the menang29 platform, including game lobby design, payment flows, and mobile experience.

4. Legal Basis for Processing

menang29 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract with you — i.e., to operate your menang29 account, process transactions, and deliver gaming services.
• Legal Obligation: Processing required to comply with applicable laws, including KYC/AML obligations, regulatory reporting, and age verification requirements.
• Legitimate Interests: Processing for menang29's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your explicit consent, including direct marketing communications. Where consent is the legal basis, you may withdraw it at any time without affecting the lawfulness of prior processing.

5. Cookies & Tracking Technologies

5.1 What We Use. The menang29 platform uses cookies and similar tracking technologies (including pixel tags and session identifiers) to operate and improve the Platform. Cookies are small text files stored on your device when you visit menang29.one.

5.2 Types of Cookies. menang29 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your menang29 account and security tokens. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Enable personalised features such as remembering your language preference, display settings, and previously selected payment method.
• Analytics Cookies: Used to collect anonymised data about how players navigate the menang29 platform — which pages are visited, session length, and error reports — to improve Platform performance.
• Marketing Cookies: Used to deliver relevant promotional content and to measure the effectiveness of marketing campaigns, where you have provided consent.

5.3 Managing Cookies. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may prevent you from logging in to your menang29 account or using core Platform features.

6. Data Sharing & Disclosure

menang29 does not sell your personal data to third parties. We share personal data only in the following circumstances:

• Payment Processors: We share financial data with our payment processing partners (including Touch n Go eWallet, Boost, and banking partners) to process your deposits and withdrawals. These parties process data under their own privacy policies and applicable financial regulations.
• Game Providers: Game studios integrated into the menang29 platform may receive limited technical and session data necessary to deliver their games to you.
• Identity Verification Providers: Third-party KYC and identity verification services process identity documents and personal data on our behalf to fulfil regulatory requirements.
• Regulatory Authorities: We may disclose personal data to gaming regulators, financial intelligence units, or law enforcement agencies where required by applicable law or a valid legal order.
• Service Providers: We engage third-party service providers for IT infrastructure, customer support tooling, and analytics. These providers access data only as necessary to perform services on our behalf and are bound by confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of menang29's business, player data may be transferred as part of that transaction, subject to the acquiring party assuming obligations consistent with this Policy.

7. International Data Transfers

The menang29 platform is operated on infrastructure that may involve the transfer of personal data to servers located outside Malaysia. Where personal data is transferred internationally, menang29 ensures that appropriate safeguards are in place to protect your data in accordance with applicable data protection standards, including standard contractual clauses or equivalent mechanisms recognised under applicable law.

If you have questions about the safeguards applied to international data transfers from your menang29 account, please contact us using the details in Section 13.

8. Data Retention

menang29 retains personal data for as long as necessary to fulfil the purposes described in this Policy, including for the duration of your active menang29 account and for a period thereafter as required by applicable law.

Specifically:

• Account and Identity Data: Retained for the duration of your menang29 account plus a minimum of five (5) years following account closure, as required under applicable AML and gaming regulations.
• Transaction and Financial Data: Retained for a minimum of seven (7) years from the date of transaction, as required by financial record-keeping regulations.
• Gaming Activity Data: Retained for the duration of your account plus five (5) years.
• Support Communications: Retained for three (3) years from the date of the interaction.
• Marketing Consent Records: Retained for as long as required to demonstrate compliance with consent obligations, even where you have subsequently withdrawn consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

9. Your Data Rights

Subject to applicable law, you have the following rights in relation to personal data held by menang29:

• Right of Access: You may request a copy of the personal data menang29 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data in your menang29 account.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to menang29's legal retention obligations.
• Right to Restriction: You may request that menang29 restrict the processing of your data in certain circumstances.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing. Where you object to direct marketing, menang29 will cease processing for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact the menang29 support team using the details in Section 13. menang29 will respond to data rights requests within 30 days. In complex cases, this may be extended by a further 60 days, with notice provided to you.

10. Data Security

menang29 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or disclosure:

• SSL/TLS encryption on all pages and data transmissions, including the menang29 login page, deposit flows, and account management sections.
• Access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security assessments and penetration testing of the menang29 platform infrastructure.
• Two-factor authentication (2FA) available on all menang29 player accounts.
• Automated monitoring for suspicious login activity and anomalous transaction patterns.

While menang29 takes all reasonable precautions to protect your personal data, no internet transmission or electronic storage system is completely secure. You are responsible for maintaining the security of your menang29 account credentials. If you suspect unauthorised access to your account, please contact menang29 support immediately.

11. Children's Privacy

The menang29 platform is strictly for adults aged 21 years and above. menang29 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to close the associated account and delete the relevant data. If you believe that a minor has registered for a menang29 account, please contact us immediately using the details in Section 13.

12. Changes to This Privacy Policy

menang29 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered menang29 players via email or through a prominent notice on the Platform prior to the change taking effect.

The "Last Updated" date at the top of this Policy reflects when the most recent changes were made. Your continued use of the menang29 platform following notification of changes constitutes your acknowledgement of the updated Policy. Where required by law, we will seek your consent before applying material changes to processing activities based on consent.

13. Contact Us

If you have any questions, concerns, or requests in relation to this Privacy Policy or the processing of your personal data by menang29, please contact us:

For responsible gaming enquiries and self-exclusion requests, please visit the Responsible Gaming page.