Privacy Policy

1. Introduction

main24 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all users ("you", "your", "the User") who access or use the services available at https://main24.cam. This Privacy Policy ("Policy") sets out in detail the nature of the personal data we collect, the purposes for which it is processed, the parties with whom it may be shared, and the rights available to you in relation to your personal information.

This Policy applies to all personal data collected through the main24 website, mobile-optimised platform, customer support channels (including live chat, email, and WhatsApp), and any other services or interactions associated with the main24 brand.

By creating an account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact us to close your account.

This Policy should be read in conjunction with our Terms & Conditions, which govern the overall use of the main24 Platform.

2. Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, either directly or indirectly. This includes, but is not limited to, name, identification number, contact details, location data, and online identifiers.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, storage, use, disclosure, and deletion.
• "Data Controller" means the entity that determines the purposes and means of processing personal data. For the purposes of this Policy, the Data Controller is main24 as operated through https://main24.cam.
• "Data Processor" means any third party that processes personal data on behalf of the Data Controller under a contractual arrangement.
• "KYC" means Know Your Customer — the identity verification process we conduct to confirm the identity and eligibility of Account holders.
• "Cookies" means small text files placed on your device by the Platform to maintain session state, preferences, and analytics data.
• "AML" means Anti-Money Laundering — regulatory requirements obligating us to monitor, record, and where applicable report certain financial transactions and account activity.

3. Personal Data We Collect

3.1 Account Registration Data

When you create an account on main24, we collect the following information:

• Full legal name;
• Date of birth (to verify that you are aged 21 or above);
• Malaysian mobile phone number;
• Email address;
• Chosen username; and
• Residential address.

3.2 KYC Verification Data

To comply with identity verification requirements and to activate full withdrawal privileges, we collect:

• Government-issued photo identification (Malaysian MyKad, driver's licence, or passport — including ID number, date of birth, and photograph);
• Proof of residential address (utility bill from TNB, Syabas, or equivalent; or a bank statement issued within the preceding three months);
• Selfie photograph of the User holding their identity document; and
• Evidence of payment method ownership (e.g., screenshot of e-wallet account or bank account bearing the User's name).

3.3 Financial Transaction Data

Each time you make a deposit or withdrawal, we record transaction details including the payment method used (e.g., Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB Bank, Public Bank, Hong Leong Bank, USDT TRC20, Bitcoin), transaction amount in Malaysian Ringgit (MYR), transaction timestamps, and reference identifiers.

3.4 Usage and Technical Data

We automatically collect technical and behavioural data when you access the Platform, including IP address, device type and operating system, browser type and version, session duration, pages visited, game history, betting activity, and feature usage patterns.

3.5 Customer Support Data

When you contact our support team via live chat, email ([email protected]), or WhatsApp, we record the content of those communications, your account identifier, and any attachments or documents you provide in the course of seeking assistance.

4. How We Collect Your Data

We collect personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, claim a promotion, or contact customer support;
• Automatically — through the use of cookies, web beacons, server logs, and similar tracking technologies as you interact with the Platform;
• Third-party sources — from payment processors (such as FPX-connected banks and e-wallet providers), identity verification services, and fraud detection partners, to the extent permitted by applicable law.

5. Legal Basis for Processing

We process your personal data on the following legal bases:

Processing Purpose	Legal Basis
Account creation and management	Performance of contract
KYC identity verification	Legal obligation; legitimate interests
Payment processing	Performance of contract
Fraud prevention and AML compliance	Legal obligation; legitimate interests
Customer support	Performance of contract; legitimate interests
Platform analytics and improvement	Legitimate interests
Marketing communications	Consent (where applicable)
Responsible gambling monitoring	Legal obligation; legitimate interests

6. How We Use Your Personal Data

main24 processes your personal data for the following purposes:

• Account management: Creating, maintaining, and administering your user account, including password resets and security notifications;
• Service delivery: Providing access to casino games, live dealer tables, sports betting markets (including EPL, Liga Super Malaysia, and UFC), and all other platform features;
• Payment processing: Facilitating deposits and withdrawals through your chosen payment methods and maintaining accurate transaction records;
• KYC and age verification: Verifying that you are at least 21 years of age and confirming your identity in compliance with our legal and regulatory obligations;
• Fraud prevention and AML: Monitoring account activity for patterns indicative of fraud, money laundering, account sharing, or other prohibited conduct;
• Responsible gambling: Monitoring gameplay data to identify signs of problem gambling behaviour and to apply self-imposed limits or exclusions as requested by the User;
• Customer support: Responding to queries, resolving disputes, and providing assistance in English, Bahasa Melayu, and Mandarin Chinese;
• Platform improvement: Analysing usage data to identify technical issues, optimise game loading performance, and improve the overall user experience;
• Legal compliance: Meeting record-keeping, reporting, and disclosure obligations under applicable financial, anti-money laundering, and data protection laws.

7. Data Sharing & Disclosure

main24 does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. We may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to contractual data protection obligations:

• Payment processors: Including operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX-connected banks (Maybank, CIMB Bank, Public Bank, Hong Leong Bank), and cryptocurrency network providers — for the purpose of processing deposits and withdrawals;
• Identity verification providers: Third-party KYC service providers who assist in verifying the identity and age of Account holders;
• Fraud and AML compliance services: Providers of fraud detection, transaction monitoring, and sanctions screening services;
• IT and infrastructure providers: Cloud hosting, content delivery, and platform security service providers who process data on our behalf under strict data processing agreements;
• Regulatory and law enforcement authorities: Where we are required by law, court order, or regulatory directive to disclose information — including to financial intelligence units in connection with AML obligations;
• Dispute resolution bodies: Where you raise a formal complaint or dispute that requires involvement of a third-party resolution service.

8. International Data Transfers

Given the international nature of online gaming infrastructure, your personal data may be transferred to, stored in, or processed in countries outside of Malaysia. Where such transfers occur, main24 takes appropriate measures to ensure that your personal data is protected to a standard at least equivalent to the protections afforded under applicable data protection law. These measures may include contractual clauses with receiving parties and technical security controls.

By using the main24 Platform, you consent to the transfer of your personal data to third countries where necessary for the provision of our services, subject to the safeguards described in this Policy.

9. Data Retention

We retain personal data for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:

• Account data: Retained for the duration of the account's active status, plus five years following permanent account closure;
• KYC documents: Retained for a minimum of five years from the date of verification, in accordance with AML record-keeping requirements;
• Transaction records: Retained for a minimum of five years from the date of each transaction;
• Customer support communications: Retained for three years from the date of the last interaction;
• Usage and analytics data: Retained in aggregated, anonymised form indefinitely; individual session data retained for up to 24 months.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

10. Data Security

main24 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• Encryption of sensitive data fields at rest within our database infrastructure;
• Role-based access controls limiting staff access to personal data strictly to those with a legitimate operational need;
• Regular internal security audits and penetration testing;
• Multi-factor authentication requirements for administrative access to our systems.

Notwithstanding these measures, no data transmission over the internet or method of electronic storage is entirely secure. While we strive to protect your personal data, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users without undue delay in accordance with applicable notification requirements.

11. Cookies & Tracking Technologies

11.1 Essential Cookies

We use essential cookies that are strictly necessary for the Platform to function correctly. These cookies maintain your logged-in session state, preserve your language preferences, and protect against cross-site request forgery attacks. These cookies cannot be disabled without impairing core platform functionality.

11.2 Analytics Cookies

With your consent, we use analytics cookies to collect anonymised data about how users navigate the Platform — including which pages are visited most frequently, session durations, and device types. This information is used exclusively to improve platform performance and user experience. No personally identifying data is shared with analytics providers beyond what is necessary for this purpose.

11.3 Managing Cookies

You can manage or delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Guidance on managing cookies is available through your browser's help documentation.

12. Your Rights as a Data Subject

Subject to applicable data protection law, you have the following rights in relation to your personal data held by main24. To exercise any of these rights, please contact our support team via live chat or at [email protected]. We will respond to all valid requests within a reasonable timeframe.