Privacy Policy
At main24a, your privacy is not an afterthought. This Privacy Policy explains in clear terms what personal data we collect, why we collect it, how we use and protect it, and what rights you have as a user of our platform. We recommend reading this document in full before registering your Account.
1Introduction
This Privacy Policy ("Policy") issued by main24a ("the Platform", "we", "us", "our") and applies to all personal data collected from individuals ("Users", "you", "your") who access or register on the main24a website at https://main24a.cam and any associated subdomains, mobile interfaces, or software applications (collectively, "the Platform").
main24a is committed to protecting your personal data in accordance with applicable international data protection standards and the requirements of our gaming licence authority. This Policy sets out the types of personal information we collect, the purposes for which it is processed, the circumstances under which it may be disclosed, the safeguards we apply, and the rights available to you as a data subject.
By registering an Account on main24a or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, please discontinue use of the Platform and contact our support team to initiate Account closure.
2Definitions
The following definitions apply throughout this Privacy Policy:
- "Personal Data" means any information that identifies or can reasonably be used to identify a natural person, directly or indirectly. This includes names, identification numbers, contact details, location data, and online identifiers.
- "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, restriction, erasure, or destruction.
- "Data Controller" refers to main24a as the entity that determines the purposes and means of processing your Personal Data.
- "Data Processor" refers to any third-party service provider that processes Personal Data on behalf of main24a under a contractual data processing agreement.
- "KYC Data" refers to identity verification documents and information collected as part of the Know Your Customer compliance process.
- "Cookies" means small text files placed on your device by the Platform to facilitate session management, analytics, and personalisation.
- "Sensitive Data" refers to categories of Personal Data that warrant heightened protection, including financial information, identity document numbers, and data relating to health or vulnerability status.
3Data We Collect
main24a collects Personal Data across several categories, depending on the nature of your interaction with the Platform. The following table summarises the categories of data collected and the primary context in which they arise:
| Data Category | Specific Data Points | Collection Context |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, MyKad / Passport / Driver's License number | Account registration, KYC verification |
| Contact Data | Email address, mobile phone number, residential address (city, postcode, state) | Account registration, support interactions |
| Financial Data | Bank account details (partial), e-wallet account identifiers, deposit and withdrawal transaction records, wallet balance history | Payments processing, KYC, AML compliance |
| KYC Documents | Scanned identity documents, proof of address documents, selfie photographs | Mandatory KYC verification process |
| Technical Data | IP address, device type and OS, browser type, session duration, login timestamps, geolocation (approximate) | Platform access, security monitoring |
| Behavioural Data | Games played, bet amounts, wagering history, bonus utilisation, session frequency and duration | Platform use, responsible gambling monitoring |
| Communication Data | Live chat transcripts, email correspondence, support ticket content | Customer support interactions |
| Marketing Preferences | Opted-in promotional channels, communication frequency preferences | Account settings, opt-in forms |
4How We Collect Data
We collect Personal Data through the following means:
4.1 Direct Collection
Information you provide directly when registering an Account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or updating your Account profile. This includes all information entered into forms on the Platform, documents submitted for verification, and communications sent to our support team.
4.2 Automated Collection
Technical data collected automatically when you access the Platform, including IP addresses, device identifiers, browser fingerprints, session data, and behavioural analytics data generated through your interactions with the Platform interface.
4.3 Third-Party Sources
We may receive Personal Data from third-party sources in the following limited circumstances:
- Identity verification and fraud screening providers who supplement KYC data to assist in confirming your identity.
- Payment processors (including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong) who provide transaction confirmation data.
- Responsible gambling support organisations where self-exclusion registrations are received from third-party exclusion registers.
5Purposes of Data Processing
main24a processes your Personal Data for the following clearly defined purposes:
- Account Administration: Creating, maintaining, and managing your Account, including authentication, security, and account recovery.
- KYC & Identity Verification: Fulfilling our obligations under our gaming licence to verify the identity and age (21+) of all registered Users prior to processing withdrawals and in accordance with AML requirements.
- Payment Processing: Facilitating deposits and withdrawals in MYR and other supported currencies, including cryptocurrency transactions (BTC, ETH, USDT).
- Platform Delivery: Providing access to and operation of all Platform services including sports betting markets, live casino games, slots, and esports wagering.
- Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, account takeovers, and other security threats.
- Responsible Gambling: Monitoring player activity for indicators of problem gambling behaviour, enforcing deposit limits and self-exclusion, and administering responsible gambling interventions.
- Legal & Regulatory Compliance: Meeting obligations imposed by our gaming licence, applicable AML legislation, and any lawful requests from regulatory or law enforcement authorities.
- Customer Support: Handling enquiries, complaints, dispute resolutions, and general support communications.
- Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to Users who have opted in to receive such communications. You may withdraw marketing consent at any time through your Account Settings.
- Platform Improvement: Analysing aggregated and anonymised usage data to improve the Platform's performance, user experience, and product offerings.
6Legal Basis for Processing
main24a processes your Personal Data one or more of the following legal bases:
- Contractual Necessity: Processing required to perform the contract between you and main24a — namely, operating your Account and delivering Platform services.
- Legal Obligation: Processing required to comply with applicable laws, regulatory requirements, and our gaming licence conditions, including AML and KYC obligations.
- Legitimate Interests: Processing that serves our legitimate interests in maintaining Platform security, preventing fraud, and improving our services, where such interests are not overridden by your fundamental rights.
- Consent: Where we rely on your freely given, specific, and informed consent — primarily for marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.
7Data Sharing & Disclosure
main24a does not sell, rent, or trade your Personal Data to third parties for commercial purposes. We may share your Personal Data only in the following limited and controlled circumstances:
7.1 Service Providers (Data Processors)
We engage trusted third-party service providers to assist in delivering the Platform, including payment processors, KYC verification providers, fraud screening services, cloud infrastructure providers, customer support software providers, and analytics platforms. All such processors are bound by contractual data processing agreements requiring them to handle your data only as directed by main24a and to maintain appropriate security standards.
7.2 Legal and Regulatory Authorities
We may disclose Personal Data to regulatory authorities, law enforcement agencies, or courts where we are legally required to do so — for example, in response to a lawful court order, an AML investigation, or a request from our gaming licence authority. Such disclosures will be limited to what is strictly required.
7.3 Corporate Transactions
In the event of a merger, acquisition, restructuring, or sale of all or part of our business assets, your Personal Data may be transferred to the acquiring entity, subject to equivalent data protection obligations being assumed by the acquirer.
8International Data Transfers
main24a operates under an international gaming licence and may store and process your Personal Data on servers located outside of Malaysia. Where your data is transferred to countries that may not provide the same level of data protection as your home jurisdiction, we take the following safeguards:
- Data processing agreements with all third-party service providers that impose security and confidentiality obligations equivalent to those applying to main24a.
- Use of data centres and cloud infrastructure that maintain recognised international security certifications.
- Encrypted transmission of all Personal Data in transit using current industry-standard protocols.
By using the Platform, you acknowledge that your Personal Data may be transferred internationally for the purposes described in this Policy and consent to such transfers subject to the safeguards described above.
9Data Retention
main24a retains your Personal Data for as long as your Account is active and for a further period thereafter as required by applicable law, regulatory obligation, or our gaming licence conditions.
As a general principle, we apply the following retention guidelines:
- Account and Identity Data: Retained for a minimum of five (5) years following Account closure, in accordance with standard AML record-keeping requirements.
- Financial and Transaction Records: Retained for a minimum of seven (7) years to satisfy financial audit, AML, and licensing authority requirements.
- KYC Documents: Retained for a minimum of five (5) years following submission or Account closure, whichever is later.
- Support Communications: Retained for three (3) years following the resolution of the relevant query or dispute.
- Marketing Preferences: Retained until consent is withdrawn, plus a reasonable period to evidence the withdrawal of consent.
Upon expiry of applicable retention periods, Personal Data is securely deleted or anonymised so that it can no longer be attributed to an individual.
10Cookies & Tracking Technologies
main24a uses cookies and similar tracking technologies on the Platform. Cookies are small data files stored on your device that help us recognise you, maintain your session, and understand how the Platform is used.
10.1 Types of Cookies Used
- Strictly Necessary Cookies: Essential for the operation of the Platform, including session authentication and security tokens. These cannot be disabled without disrupting Platform functionality.
- Performance & Analytics Cookies: Used to collect anonymised information about how visitors use the Platform — such as pages visited and error messages — to help us improve the user experience.
- Functional Cookies: Allow the Platform to remember your preferences, such as language settings and display choices.
- Marketing Cookies: Used only where you have opted in to receive promotional communications. These cookies assist in measuring the effectiveness of marketing campaigns.
10.2 Managing Cookies
You may manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will impair Platform functionality, including your ability to log in and complete transactions.
11Your Rights as a Data Subject
Subject to applicable law and certain legal exemptions (for example, where retention is required for AML compliance), you have the following rights with respect to your Personal Data held by main24a:
Right of Access
You may request a copy of the Personal Data we hold about you, along with information about how it is processed. We will respond to verified access requests within 30 days.
Right to Rectification
You may request correction of any inaccurate or incomplete Personal Data. For identity data, corrections may require re-submission of supporting documentation.
Right to Erasure ("Right to be Forgotten")
You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to overiding legal retention obligations (such as AML record-keeping requirements).
Right to Restriction of Processing
You may request that we limit our processing of your data in certain circumstances — for example, where you contest its accuracy or have objected to processing pending verification of our legitimate grounds.
Right to Data Portability
Where processing is based on consent or contractual necessity, you may request that we provide your Personal Data in a structured, commonly used, machine-readable format for transfer to another service provider.
Right to Object
You may object to processing based on our legitimate interests at any time. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
Right to Withdraw Consent
Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time through your Account Settings or by contacting support. Withdrawal does not affect the lawfulness of processing before withdrawal.
To exercise any of the above rights, please contact our Privacy team via live chat or email at [email protected]. We may require verification of your identity before processing your request.
12Children & Minors
The main24a Platform is strictly intended for individuals aged21 years and above. We do not knowingly collect Personal Data from any person under the age of 21. If you are under 21, you are prohibited from registering an Account or using any part of the Platform.
If we become aware that we have inadvertently collected Personal Data from a person under 21, we will take immediate steps to delete that data from our systems and close the associated Account. If you believe we may have collected data from a minor, please contact our support team immediately at [email protected].
13Security Measures
main24a implements a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These include:
- Transport Layer Security (TLS/SSL): All data transmitted between your device and the Platform is encrypted using industry-standard TLS protocols.
- Data Encryption at Rest: Sensitive Personal Data, including KYC documents and financial records, is stored in encrypted form using AES-256 encryption or equivalent.
- Access Controls: Access to Personal Data within our systems is restricted on a strict need-to-know basis, with role-based access controls, multi-factor authentication for staff, and comprehensive access logging.
- Penetration Testing & Security Audits: Our systems are subject to regular security assessments and penetration testing by qualified third-party security professionals.
- Incident Response: We maintain a documented data breach response procedure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you without undue delay in accordance with applicable requirements.
- Vendor Security: All third-party service providers with access to Personal Data are required to maintain security standards at least equivalent to our own, evidenced through contractual obligations and periodic review.
While we take all reasonable precautions, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. You are responsible for maintaining the security of your Account credentials and for notifying us promptly if you suspect any unauthorised access to your Account.
14Third-Party Links & Services
The main24a Platform may contain references to or integrations with third-party services, including payment processors such as DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong. Once you navigate away from the main24a Platform to interact with a third-party service, this Privacy Policy no longer applies.
main24a does not control and is not responsible for the privacy practices of third-party services. We recommend reviewing the privacy policies of any third-party service before providing your personal information to it. Links or integrations present on the Platform do not constitute an endorsement of the third party's data handling practices.
15Updates to This Privacy Policy
main24a reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, regulatory requirements, our Platform services, or our data handling practices. The current version of this Policy is always available at https://main24a.cam/privacy-policy, and the date of the most recent revision is displayed at the top of this page.
Where changes are material — meaning they substantively affect how your Personal Data is processed or your rights in relation to it — we will provide notice to registered Users via email to your registered address or via a prominent notice displayed upon next login, prior to the changes taking effect.
Your continued use of the Platform after the effective date of any amendment to this Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree to the amended Policy, please cease use of the Platform and request Account closure.
16Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your Personal Data by main24a, please contact our Privacy and Data Protection team using the details below:
Please include "Privacy Request" in your subject line. We respond within 3–5 business days formal data subject requests.
For formal data subject access requests, erasure requests, or complaints relating to our data processing activities, we recommend submitting your request in writing to the above email address with sufficient information to verify your identity. We will acknowledge receipt within 3 business days and aim to resolve all requests within 30 days.
What We Promise on Data Privacy
Six specific commitments that define how main24a handles your personal data — every day, without exception.
We Never Sell Your Data
Your Personal Data is never sold, rented, or commercially licensed to third-party advertisers, data brokers, or marketing firms under any circumstances.
256-Bit Encryption
All data in transit is protected by TLS/SSL encryption. Sensitive stored data including KYC documents and financial records is encrypted at rest with AES-256.
Minimal Data Collection
We collect only the data strictly necessary to deliver Platform services, comply with our licensing obligations, and protect both you and the Platform from fraud.
You Control Your Data
Access, correct, export, or request deletion of your Personal Data at any time. Our Privacy team handles all data subject requests within 30 days.
Transparent Breach Notification
In the event of a data breach that poses a risk to your rights, we will notify you without undue delay — notbury it in a quarterly report.
Clear Retention Limits
We do not retain your Personal Data indefinitely. Defined retention schedules ensure data is securely deleted or anonymised as soon as legal requirements permit.
Confident in How We Handle Your Data?
main24a is built on transparency and trust. Review our full Terms & Conditions, explore our responsible gambling tools, or visit the homepage to learn more about the platform.
For players aged 21 and above only. main24a promotes responsible gambling.