Official Documents · Data Protection

Mahjong333 Privacy Policy – Your Personal Data Protection

Mahjong333 treats every member's privacy as a trust that must be upheld responsibly. This document clearly explains how we collect, use, store, and protect your personal data as a member of our platform in Malaysia.

Last Updated: 1 January 2026 · Version 3.5

Mahjong333's Six Privacy Guarantees to Every Member

Privacy is more than a slogan at mahjong333. Here are six concrete commitments we uphold in managing your personal data.

256-bit SSL Encryption at All Times

Every communication between your device and mahjong333's servers is protected by 256-bit SSL encryption — the same security standard used by Malaysia's leading financial institutions. Your data is never transmitted in plain, readable form.

Your Data Is Never Sold to Third Parties

Mahjong333 has never sold, rented, or traded members' personal information to any third party for marketing or commercial purposes, and never will. Your data is used solely to operate the services you have registered for.

Passwords Stored in Hashed Form

Your mahjong333 account password is never stored in plain text. We use a one-way, irreversible hashing algorithm — meaning even mahjong333 staff cannot read your password.

Personal Data Protection Act Compliance

All of mahjong333's data management practices comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We take these compliance obligations seriously and continually review our policies to ensure full adherence.

Right to Data Erasure Upon Request

Mahjong333 members have the right to request deletion of their personal data following account closure, subject to legally mandated record-retention obligations. Deletion requests will be processed within 30 business days.

Immediate Data Breach Notification

In the event of any security breach involving members' personal information, mahjong333 is committed to notifying affected members within 72 hours of the incident being detected, in line with international best practices.


Contents
Security Layers
SSL 256-bit
Encryption of all traffic
Active
2FA
Two-factor authentication
Active
Password Hash
One-way bcrypt
Active
Encrypted Database
AES-256 at rest
Active
Important Note

By registering for or using the mahjong333 platform, you agree to this Privacy Policy. If you do not agree with any part of it, please refrain from using our platform. This document should be read together with Terms & Conditions mahjong333.

01

Introduction and Scope of This Privacy Policy

This Privacy Policy ("Policy") is published by mahjong333 and applies to all registered members, website visitors, and users of the mahjong333 mobile application. This document outlines our personal data management practices, including how we collect, process, store, disclose, and protect your personal information.

Mahjong333 is committed to managing your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection. We believe that privacy is not merely a legal obligation, but a fundamental part of the trust you place in us when you choose to use the mahjong333 platform.

This Policy covers all services provided by mahjong333, including slots, live casino, roulette, lottery, Sports Betting, and all other platform features. Any new services added in the future will also be subject to this Policy unless otherwise stated.

02

Types of Personal Data We Collect

Mahjong333 collects only the personal data necessary to deliver our services effectively, comply with legal requirements, and maintain platform security. The categories of data we collect are as follows:

Data Categories Sample Information Status
Identity Full name, MyKad/passport number, date of birth Required
Contact Malaysian phone number, email address Required
Financial Bank account number, e-wallet holder name, transaction history Required
Technical IP address, device type, web browser, OS, and session logs Automatic
Gaming Activity Betting history, games played, wins and losses Automatic
Preferences Preferred language, notification settings, favourite games Optional
Communications Customer support records, emails, and live chat logs As required

Data We Do NOT Collect

Mahjong333 does not collect biometric data beyond what is required for specific KYC verification, does not store full credit/debit card details (only encrypted tokens retained by payment processors are kept), and does not knowingly collect information from anyone under 18 years of age.

03

How Mahjong333 Uses Your Personal Data

Personal data collected by mahjong333 is used for legitimate purposes and is limited to what is necessary to provide our services. The following are the primary purposes for which data is used:

Account Management and Service Provision

Your data is used to create and manage your mahjong333 account, process deposits and withdrawals via your preferred payment methods (Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, Maybank2u, CIMB Clicks, and others), verify your identity during the KYC process, and provide effective customer support.

Security & Fraud Prevention

Technical data such as IP addresses and session logs are used to detect and prevent fraudulent activity, money laundering, bonus abuse, and unauthorised access attempts. This serves mahjong333's legitimate interests and also protects the interests of all honest members on our platform.

Personalisation & Service Improvement

With your consent, we use gaming activity data to personalise your experience on mahjong333 — such as recommending relevant games, tailoring promotional offers, and surfacing more relevant content. You may withdraw this consent at any time through your account settings.

Legal & Regulatory Compliance

Certain data is stored and processed solely to fulfil legal obligations, such as anti-money laundering (AML) reporting requirements, Malaysia PDPA compliance, and any directives from relevant regulatory bodies. In these instances, mahjong333 has no discretion and the data must be processed regardless of your express consent.

04

Data Sharing With Third Parties

Mahjong333 does not sell members' personal data to anyone. However, there are specific situations where sharing data with third parties is necessary and legally permitted:

  • Payment Processors: Information required to process transactions is shared with verified payment processors such as the FPX gateway and service providers for Touch 'n Go, GrabPay, DuitNow, and others. These parties are bound by strict confidentiality agreements.
  • Technical Service Providers: Cloud infrastructure providers, transactional email platforms, and analytics tools used to operate the mahjong333 platform may process your data as third-party data processors acting under our instructions.
  • Regulatory Bodies and Law Enforcement: Mahjong333 will comply with any lawful request from Malaysian authorities with the legal power to obtain such information.
  • Game Service Providers: In certain cases, third-party game providers that supply live casino or slots games on the mahjong333 platform may receive the minimum data required to operate, limited to session IDs and relevant balances.
Third-Party Protection Guarantee

All third parties that receive data from mahjong333 are required to sign a Data Processing Agreement (DPA) aligned with Malaysia's PDPA guidelines. They may only use the data for the stated purpose and are prohibited from using it for any other reason.

05

Data Security Measures at Mahjong333

Mahjong333 continually invests in security infrastructure to ensure members' personal data is protected to the highest standard. The key security layers we have in place are as follows:

Technical Security

  • Encryption in Transit: All data transmitted between your device and mahjong333's servers is encrypted using TLS 1.3 with a 256-bit SSL certificate.
  • Encryption at Rest: Sensitive data stored in the mahjong333 database is encrypted using AES-256 — one of the strongest encryption standards available.
  • Password Hashing: Your password is processed using bcrypt with a unique salt — an algorithm recognised as the industry best practice for password storage.
  • Two-Factor Authentication (2FA): We encourage all members to enable 2FA via an authenticator app or SMS for an added layer of security.
  • Firewall & Threat Monitoring: mahjong333's servers are protected by a multi-layered firewall system and 24/7 real-time threat monitoring.

Organisational Security

Access to members' personal data within mahjong333 is governed by a strict need-to-know basis. All staff who handle personal data undergo data protection training and are bound by rigorous confidentiality agreements. Internal security audits are conducted regularly to ensure ongoing compliance with this Privacy Policy.

What You Need to Do

Data security is a shared responsibility. We encourage you to use a strong and unique password, enable 2FA, keep your login credentials confidential, and report any suspicious activity on your mahjong333 account immediately.

06

Data Retention & Deletion

Mahjong333 retains your personal data for as long as necessary for the purpose it was collected, or as required by Malaysian law. The following are our data retention guidelines:

  • Active Account Data: Retained for as long as your mahjong333 account remains active and updated on a regular basis.
  • Data After Account Closure: In most cases, basic personal data is retained for a minimum of 5 years following account closure to meet AML compliance requirements and Malaysian financial regulations.
  • Financial Transaction Records: Records of deposits and withdrawals made via Touch 'n Go, DuitNow, GrabPay, FPX, and other methods are retained for 7 years in accordance with Malaysian accounting and tax requirements.
  • Communication Logs: Customer support records and communications are retained for 3 years for service quality and dispute resolution purposes.
  • Anonymised Analytics Data: Usage data that has been fully anonymised (and cannot be re-linked to any individual) may be retained indefinitely for analytics and service improvement purposes.

Once the retention period expires, your personal data will be securely deleted or anonymised using procedures that ensure the data cannot be recovered or re-linked to you.

07

Your Rights Regarding Personal Data

As a mahjong333 member and data subject under Malaysia's PDPA, you have the following rights in relation to your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 business days.

Right to Rectification

If your personal data on mahjong333 is inaccurate or out of date, you have the right to request a correction via your account settings or through customer support.

Right to Erasure

You may request deletion of your personal data following account closure, subject to applicable legal record-retention obligations.

Right to Object

You may object to the processing of your personal data for direct marketing purposes at any time, easily through your account notification settings.

Right to Data Portability

You may request an export of your personal data in a structured, machine-readable format for transfer to another platform if desired.

Right to Restrict Processing

Under certain circumstances, you may request that mahjong333 restrict the processing of your data while a review or dispute is pending.

To exercise any of the rights above, please contact the mahjong333 support team via live chat or email at support@mahjong333.im. We will verify your identity before processing any data-related request to ensure the security of your account.

08

Cookies, Analytics, and Tracking Technologies

Mahjong333 uses cookies and similar tracking technologies to enhance the user experience, analyse usage patterns, and maintain platform security. The types of cookies used are as follows:

Essential Cookies (Cannot Be Disabled)

These cookies are essential for the basic functionality of the mahjong333 platform — including login session management, CSRF security, and language settings. Without them, the platform will not function properly. They do not store any personally identifiable information other than an encrypted session token.

Performance & Analytics Cookies

We use internal analytics tools to understand how members interact with the mahjong333 platform — including the most visited pages, time spent, navigation flows, and more. This information is used in aggregate form to improve the platform's design and functionality. You may opt out of optional analytics cookies through your cookie settings.

Preference Cookies

These cookies remember your preferences, such as your display language, game display settings, and other choices that make your experience on mahjong333 more comfortable and personalised.

09

Privacy in Payment Processing and KYC

Payment processing at mahjong333 involves sensitive financial information, which we handle with the highest level of protection. When you make a deposit or withdrawal via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, Maybank2u, CIMB Clicks, or other FPX methods, your financial data is processed through encrypted and secured channels.

KYC (Know Your Customer) Verification

The mahjong333 KYC process is a mandatory legal compliance requirement to prevent money laundering and identity theft. During KYC, the documents you submit (MyKad, passport, bank statement) are stored in a secure server environment with strictly limited access. These documents are not shared with any third party unless required by law or a regulatory authority.

Financial Information Protection

Mahjong333 does not store your full credit/debit card numbers. All sensitive payment data is processed directly by PCI-DSS certified payment processors. Our platform receives only payment tokens, which cannot be used to carry out transactions without additional verification.

10

Children's Privacy Protection

The mahjong333 platform is strictly for users aged 18 and above. We do not knowingly collect, process, or store personal data from individuals under the age of 18. If we discover that a member has registered using information indicating they are under 18, the account will be closed immediately and all collected data will be deleted within 30 days.

If you are a parent or guardian and discover that your child has registered on the mahjong333 platform without your knowledge, please contact our support team immediately at support@mahjong333.im for prompt action. We take child protection extremely seriously.

11

Updates to This Privacy Policy

Mahjong333 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technologies we use. Where material changes are made, we will notify members via:

  • In-platform notification on mahjong333 upon your next login
  • Email notification to your registered address (for material changes)
  • Update the "Last Updated" date at the top of this page

Minor, non-material changes (such as spelling corrections or language clarifications) may be implemented without specific notification. We encourage you to review this page periodically to stay informed about how we manage your personal data. Your continued use of the mahjong333 platform after any updates are published constitutes your acceptance of the latest version of this Privacy Policy.

12

Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how mahjong333 handles your personal data, our team is here to help:

Privacy Contact Information

Privacy Email: privacy@mahjong333.im
General Support: support@mahjong333.im
Live Chat: Available 24/7 via the mahjong333 platform
Response Time: Within 72 business hours for privacy enquiries

We are committed to handling every privacy enquiry seriously and providing a clear, helpful response within the stipulated timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection under Malaysia's Ministry of Communications and Digital.

Frequently Asked Questions About mahjong333's Privacy

Mahjong333 does not sell or rent your personal data to third parties for marketing purposes. Data sharing occurs only in limited circumstances: with payment processors to facilitate your transactions, with technical service providers who operate platform functions under our instruction, and with authorities when required by Malaysian law. All third parties that receive your data are bound by strict confidentiality and data protection agreements.

To request access to or deletion of your personal data at mahjong333, please contact us by email at privacy@mahjong333.im, stating the nature of your request (access, correction, or deletion). We will first verify your identity before processing your request within 21 business days for access requests and 30 business days for deletion requests. Some data may not be fully deletable if it remains subject to legal retention obligations.

Yes, the security of your financial information is an absolute priority at mahjong333. We do not store full credit/debit card numbers — this data is processed directly by certified payment processors. All transactions via Touch 'n Go, DuitNow, GrabPay, FPX, and other methods are carried out through 256-bit SSL-encrypted channels. Your transaction history on the mahjong333 platform is stored in an encrypted database with strictly controlled access.

Yes, you can opt out of receiving promotional emails from mahjong333 at any time. There are two ways to do so: click the "Unsubscribe" link found at the bottom of any promotional email you receive, or log in to your mahjong333 account and update your notification preferences under account settings. Please note that important transactional emails — such as deposit confirmations, withdrawal notifications, and security alerts — cannot be disabled, as they are essential to the security and operation of your account.

Your Data Is Safe at mahjong333 – Register with Confidence

Over 1.2 million Malaysian members have trusted mahjong333 with their personal data. With 256-bit SSL protection, PDPA compliance, and an unwavering commitment to your privacy, playing at mahjong333 is a safe and responsible choice.

SSL 256-bit · PDPA Compliant · Data Never Sold · For users aged 18+ only

Responsible Gaming

Mahjong333 is committed to user protection. This platform is strictly for individuals aged 18 and above. If you need support with responsible gambling, please visit our page Responsible Gaming us for self-control tools and further support.

Bahasa Melayu