Privacy Policy – How clubmy14 Handles Your Data

1. Introduction

clubmy14 ("the Company", "we", "us", "our") operates the online gaming platform accessible at clubmy14.net (the "Platform"). We are committed to protecting the personal data of our users and handling it responsibly, transparently, and in accordance with applicable data protection laws.

This Privacy Policy applies to all personal data collected from registered members, prospective users, and visitors to the clubmy14 Platform. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

This Policy should be read alongside the clubmy14 Terms & Conditions. Defined terms not otherwise defined in this Policy have the meaning given to them in the Terms & Conditions.

2. Personal Data We Collect

clubmy14 collects personal data that is necessary for the provision of the Platform's services, the fulfilment of regulatory obligations, and the improvement of the user experience. The categories of personal data we collect include:

We do not collect special categories of sensitive personal data (such as health, biometric, or racial/ethnic origin data) unless required for responsible gaming assessments or as mandated by applicable law.

3. How We Collect Personal Data

clubmy14 collects personal data through the following channels:

• Direct collection: Data you provide when registering an account, completing KYC verification, contacting support, or filling in any form on the Platform.
• Automated collection: Technical data collected automatically when you access or use the Platform, including through cookies, log files, and session tracking technologies.
• Third-party sources: Identity verification data from KYC/AML service providers; payment data from payment processors (Touch 'n Go, Boost, FPX gateways, etc.); fraud detection data from third-party security providers.
• Publicly available sources: In limited circumstances relevant to AML obligations, we may cross-reference publicly available databases including sanctions lists and PEP registries.

4. How We Use Your Personal Data

clubmy14 uses your personal data for the following purposes:

• To create, verify, and maintain your clubmy14 account;
• To process deposits and withdrawals in MYR and maintain accurate financial records;
• To provide access to gaming products including the sportsbook, live casino, slots, crash games, and esports betting;
• To carry out identity verification and KYC/AML compliance checks as required by our international gaming licence;
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities;
• To apply and monitor responsible gaming tools including deposit limits, self-exclusion, and account restrictions;
• To communicate with you regarding your account, transactions, promotions, and important policy updates;
• To improve the Platform, personalise your experience, and conduct internal analytics;
• To comply with applicable laws and regulatory obligations and to cooperate with competent authorities where legally required.

clubmy14 does not use your personal data for unsolicited third-party marketing. Promotional communications from clubmy14 relate only to clubmy14's own products and services, and you may opt out at any time through your account notification settings.

5. Legal Basis for Processing

clubmy14 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the clubmy14 Terms & Conditions, including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money-laundering legislation, KYC requirements, and gaming licence conditions.
• Legitimate interests: Processing for fraud prevention, platform security, internal analytics, and service improvement, where such interests are not overridden by your privacy rights.
• Consent: Where we rely on your consent (for example, for certain marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

6. Sharing Your Personal Data

clubmy14 does not sell your personal data to third parties. We may share your data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment processors: FPX gateway operators, Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, and other payment service providers necessary to process your transactions;
• Identity verification providers: Third-party KYC/AML service providers who verify your identity documents against regulatory databases;
• Game content providers: Software providers (such as Pragmatic Play, PG Soft, and others) who operate game servers require session tokens and account data to deliver game content;
• Security and fraud prevention providers: Third-party services that help us detect suspicious activity, prevent fraud, and protect the integrity of the Platform;
• Regulatory and law enforcement authorities: Where we are legally required to disclose data to gaming regulators, financial intelligence units, or law enforcement agencies;
• Professional advisers: Legal counsel, auditors, and compliance consultants who are bound by confidentiality obligations.

All third parties with whom we share personal data are required to implement appropriate technical and organisational measures to protect your data and to process it only for the purpose for which it was shared.

7. Data Retention

clubmy14 retains personal data for as long as necessary to fulfil the purposes outlined in this Policy, or as required by applicable law. Specific retention periods include:

• Account data and gaming records are retained for a minimum of five (5) years from the date of account closure, in accordance with anti-money-laundering record-keeping requirements;
• Financial transaction records are retained for a minimum of seven (7) years;
• KYC and identity verification documents are retained for five (5) years following the end of the business relationship;
• Communications data (support tickets, chat logs) is retained for three (3) years.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you. Where data is anonymised rather than deleted, it may continue to be used for statistical or analytical purposes.

8. Data Security

clubmy14 implements technical and organisational security measures commensurate with the sensitivity of the personal data we process. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the clubmy14 servers;
• Industry-standard password hashing algorithms — your actual password is never stored in plain text and is not accessible to clubmy14 staff;
• Role-based access controls limiting staff access to personal data to those with a demonstrated operational need;
• Regular security assessments and penetration testing of the Platform infrastructure;
• Automated monitoring for suspicious login activity, including alerts for access from unrecognised locations or devices.

Notwithstanding the above, no method of electronic transmission or storage is entirely secure. While clubmy14 takes data security seriously, we cannot guarantee absolute security. In the event of a data breach that is likely to result in high risk to your rights and freedoms, clubmy14 will notify affected users without undue delay in accordance with applicable notification obligations.

9. Cookies & Tracking Technologies

clubmy14 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function correctly, including session management, login state persistence, and security features. These cannot be disabled without impairing your ability to use the Platform.
• Functional cookies: Used to remember your preferences such as language settings and display options between sessions.
• Analytics cookies: Used to understand how users navigate the Platform — which pages are visited, how long sessions last, and where users encounter difficulties — in order to improve the Platform experience. Data collected for analytics purposes is aggregated and not linked to individually identifiable users.

clubmy14 does not use third-party advertising cookies or share browsing data with advertising networks. You may manage cookie preferences through your browser settings, though disabling essential cookies will affect Platform functionality.

10. Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data held by clubmy14:

• Right of access: You may request a copy of the personal data we hold about you.
• Right of rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data, subject to our legal retention obligations. Note that we are required to retain certain data (e.g., transaction records) for regulatory purposes even after account closure.
• Right to restriction: You may request that we restrict the processing of your data in certain circumstances, for example while a rectification request is being resolved.
• Right to data portability: Where processing is based on consent or contractual necessity, you may request a machine-readable copy of data you have provided to us.
• Right to object: You may object to processing based on legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time via your account settings or by contacting [email protected].

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. We may need to verify your identity before processing your request.

11. Minors

The clubmy14 Platform is strictly for persons aged 21 years and above. clubmy14 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on the Platform, please contact us immediately at [email protected].

12. International Data Transfers

In order to provide certain services — including game content delivery, payment processing, and identity verification — your personal data may be transferred to and processed in countries outside Malaysia. Where such transfers occur, clubmy14 ensures that appropriate safeguards are in place, including contractual data protection clauses with receiving parties that require them to provide a level of protection equivalent to that applied within Malaysia.

By using the clubmy14 Platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Malaysia as described in this section.

13. Changes to This Privacy Policy

clubmy14 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform features. Where changes are material, we will notify registered users via email to their registered address or via an in-Platform notification before the revised Policy takes effect.

The "Last updated" date at the top of this page will always reflect the most recent revision. Continued use of the Platform following the effective date of any update constitutes acceptance of the revised Policy. If you do not accept the revised Policy, you should cease using the Platform and may request account closure in accordance with the Terms & Conditions.

14. Contact Us

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a privacy-related concern, please contact the clubmy14 data team through the following channel:

• Email: [email protected]
• Live Chat: Available 24/7 through the clubmy14 member portal
• WhatsApp: Available to verified members following login

Please include your registered username (never your password) and a clear description of your query so we can respond efficiently. Data subject requests will be acknowledged within 5 business days and resolved within 30 days where possible.