Privacy Policy

M2 Casino Privacy Policy – How We Protect Your Personal Data

Your privacy is our priority. This document clearly explains what data we collect, why we collect it, how we use it, and what rights you have over your personal information at m2 casino.

Last updated: 1 January 2026
Data Protection Summary
Encryption: 256-bit SSL
No sale of data to third parties
Full control of your data, in your hands
No Sharing Without Consent
International standards compliance

M2 Casino's Privacy Commitment to Malaysian Players

Six core principles that guide how we handle every player's personal data

Industry-Grade Encryption

All data transmitted between your device and m2 casino servers is protected by TLS 1.3 and AES 256-bit encryption — the same standard used by leading financial institutions worldwide. Your information cannot be read by any third party while in transit.

No Data Sales

M2 casino has never sold, rented, or traded players' personal data to any third party for marketing or commercial purposes, and never will. Your data is used solely for the operational purposes you have consented to — nothing more.

Data Control in Your Hands

You have the full right to access, correct, download, or request deletion of your personal data at any time. This process can be initiated directly through your account settings or by contacting our privacy team by email.

Secure Data Storage

Player personal data is stored on secure servers protected by multi-layered firewalls, strict access controls, and 24/7 security monitoring. Access to player data within our internal systems is restricted to staff who genuinely require it.

A Clear Data Retention Policy

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy or as required by law. Once the retention period expires, data is securely deleted using methods that ensure it cannot be recovered.

Immediate Data Breach Notification

In the event of any security breach affecting your personal data, m2 casino is committed to notifying affected players within 72 hours of detecting the breach — well ahead of the minimum industry requirement.

Important Note

By registering an account or using any m2 casino service, you agree to the collection and use of your personal information as described in this Privacy Policy. Please read the entire document carefully. If you have any questions, contact us at support@m2casino.click before proceeding with registration.

1 Introduction

M2 casino operates an online gambling platform at m2casino.click and acts as the data controller for the personal information you provide to us. This Privacy Policy transparently explains how we collect, use, store, share and protect the personal data of players using the m2 casino platform.

This policy has been developed with Malaysian players in mind, alongside international data protection standards. We believe privacy is a fundamental right, not merely a compliance obligation. Every decision we make regarding player data is guided by the best interests and safety of our players.

This Privacy Policy applies to all data collected through the m2casino.click website, any communications you have with our team, and your use of any games or services offered on the platform — including slots, Live Casino, poker, lottery, and Sports Betting.

2 Data We Collect

M2 casino collects various types of personal information depending on how you interact with our platform. Below is a detailed breakdown of each data category we collect:

Data Category Example Information Collection Method
Identity Data Full name, date of birth, gender, identity card number Account registration and KYC verification
Contact Information Email address, Malaysian phone number Account registration, support forms
Financial Data Payment methods, deposit/withdrawal history in MYR Financial transactions processed through the platform
Technical Data IP address, device type, browser, operating system Collected automatically during platform use
Usage Data Games played, betting history, session duration Collected automatically during gameplay
Communication Data Live chat records, support emails, feedback Interactions with the support team
Data We Do Not Collect
  • Full credit/debit card numbers — payment processing is handled by a separate licensed payment provider
  • Passwords in plain text — passwords are stored as hashes that cannot be decrypted
  • Health information or sensitive personal data unless directly relevant to a self-exclusion request

3 How We Use Your Data

M2 casino uses collected personal data solely for legitimate, clearly defined purposes. Every use of data has a clear legal basis — whether consent, contractual necessity, legitimate interest, or legal obligation. The primary purposes are as follows:

  • Operating and managing your account: Processing registrations, verifying identity, managing balances, and ensuring secure access to your account on the m2 casino platform.
  • Processing financial transactions: Securely and accurately processing deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX in MYR.
  • Providing gaming services: Enabling access to all games on the platform, including slots, Live Casino, poker, lottery, roulette and Sports Betting.
  • Customer support: Handling enquiries, complaints, and support requests you submit to the m2 casino support team through various channels.
  • Security and fraud prevention: Detecting and preventing fraudulent activity, money laundering, duplicate accounts, and system abuse.
  • Legal compliance: Meeting licensing obligations, audit requirements and directives from lawful authorities.
  • Platform improvements: Analyzing usage patterns in aggregated, anonymized form to improve the player experience at m2 casino for Malaysian users.
  • Service communications: Sending important account-related notices, changes to terms, security alerts and platform updates.

Where you have given your consent, we may also use your data to send you information about promotions, new bonuses and special offers that may be of interest to you. You may withdraw this consent at any time through the notification settings in your account or by contacting us.

4 Data Sharing with Third Parties

M2 casino does not sell, rent, or trade players' personal data to any third party for their own marketing purposes. However, in the course of operating our services, there are limited situations in which data may be shared with other parties:

  • Payment service providers: Transaction information required for processing is shared with licensed payment providers (such as FPX processors and digital wallet gateway providers) solely to process your deposits and withdrawals.
  • Game software providers: Minimal username and session information is shared with licensed game providers such as Evolution Gaming and Pragmatic Play solely to enable access to their games within the m2 casino platform.
  • Technology service providers: Technical contractors assisting with hosting, anonymized analytics, and security infrastructure are bound by strict confidentiality agreements and may only use data for the stated purposes.
  • Legal authorities: m2 casino will disclose personal data to authorities when required by law, court order, or a legitimate investigation — and only to the extent required by that request.

Every third party that receives m2 casino player data is bound by strict data processing agreements, which prohibit them from using that data for any purpose beyond what has been specified and require them to maintain security standards equivalent to or exceeding our own.

5 Data Security

M2 casino implements multiple layers of technical and organisational security measures to protect players' personal data from unauthorised access, loss, alteration, or disclosure:

  • Encryption in transit: All communications between your browser and our servers are protected with TLS 1.3 and AES-256 encryption, rendering data unreadable during transmission.
  • Stored data encryption: Sensitive data in our databases is stored in encrypted form. Passwords are stored as one-way cryptographic hashes that cannot be decrypted.
  • Internal access controls: Access to player data within internal systems operates on a least-privilege basis — only staff who genuinely need access to carry out their responsibilities are granted permission.
  • Two-factor authentication (2FA): All staff accounts with access to internal systems are required to use two-factor authentication.
  • Regular security audits: The m2 casino platform undergoes regular penetration testing and independent security audits to identify and address any vulnerabilities.
  • 24/7 Monitoring: Automated monitoring systems run around the clock to detect unusual activity that may indicate an intrusion attempt or data breach.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure. You also play an important role in keeping your account safe — make sure your password is strong, unique, and not shared with anyone.

6 Cookies & Tracking Technologies

M2 casino uses cookies and similar tracking technologies to keep the platform running smoothly and deliver a personalised experience to players. The following are the types of cookies we use:

You can manage your cookie preferences through your browser settings. However, disabling essential cookies will affect your ability to use the m2 casino platform fully. Most modern browsers also offer an incognito mode that automatically blocks cookies from being stored.

7 Your Rights Over Personal Data

As an m2 casino player, you have the following rights regarding your personal data. We respect and facilitate the exercise of these rights:

Right of Access

You have the right to request a copy of all personal data we hold about you. This request will be processed within 30 days, and the information will be provided in a readily readable format.

Right to Rectification

If any data we hold about you is inaccurate or out of date, you have the right to request prompt correction. Accurate data is essential to ensuring you receive the right level of service.

Right to Erasure

You have the right to request the deletion of your personal data in certain circumstances — for example, if the data is no longer needed for its original purpose or if you withdraw your consent. Some data may need to be retained to meet legal requirements.

Right to Restriction of Processing

Under certain circumstances, you may request that we restrict the processing of your data — for example, while we investigate a dispute over data accuracy or while a complaint is being handled.

Right to Data Portability

You have the right to receive the personal data you have provided to us in a structured, machine-readable format, and to transfer it to another data controller if you wish.

Right to Object

You have the right to object to the processing of your personal data for specific purposes, including direct marketing. Once an objection to marketing is received, we will immediately stop using your data for that purpose.

To exercise any of the above rights, contact our privacy team at support@m2casino.click, stating the right you wish to exercise along with the necessary identity verification information. We will respond within 30 days of receiving a complete request.

8 Child Data Protection

The m2 casino platform is strictly for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18. Should we discover that personal data belonging to someone under 18 has been collected without proper verification, we will take immediate steps to delete that data and close the account in question.

If you are a parent or guardian who believes your underage child has registered an account at m2 casino, please contact us immediately at support@m2casino.click so that prompt action can be taken.

9 Cross-Border Data Transfers

In operating the m2 casino platform, certain personal data may be transferred to and stored on servers located outside Malaysia — primarily in connection with licensed international game providers and cloud computing infrastructure.

When cross-border data transfers take place, m2 casino ensures that:

  • The recipient country provides an adequate level of data protection, or
  • Appropriate data transfer agreements have been put in place with recipient parties, including internationally recognised standard contractual clauses, and
  • All recipients are bound by confidentiality and security obligations equivalent to those in this Privacy Policy

You may request further information about the safeguards used for cross-border data transfers by contacting our privacy team.

10 Data Retention Period

M2 casino retains players' personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy or as required by applicable law. Our general retention guidelines are as follows:

  • Active account data: Retained for the duration of the active account plus any additional period required by licensing obligations after account closure (typically 5–7 years)
  • Financial transaction records: Retained for 7 years from the transaction date to meet financial accountability and anti-money laundering legal requirements
  • Support communication logs: Retained for 3 years from the date of communication for complaint resolution and quality training purposes
  • Technical data and security logs: Retained for 12 months for security and digital forensics purposes
  • Marketing data (with consent): Retained until consent is withdrawn or a deletion request is received

Once the retention period expires or a valid deletion request is received, data is securely deleted using methods that ensure it cannot be recovered by any party.

11 Changes to the Privacy Policy

M2 casino reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements to our services. Any material changes will be communicated to registered players by email at least 14 days before they take effect.

The "Updated" date at the top of this page will always reflect the date of the latest version of the Privacy Policy. We encourage you to check this page periodically to stay informed about how your data is protected. Continued use of the m2 casino platform after any changes take effect constitutes your acceptance of the updated policy.

12 Contact Us – Privacy Matters

If you have any questions, concerns, or requests regarding this Privacy Policy or the management of your personal data at m2 casino, our privacy team is here to help:

  • Privacy Email: support@m2casino.click — include "Privacy Request" in the subject line to be routed directly to the responsible team
  • Live Chat: Available 24/7 directly within the platform for general privacy enquiries
  • Response Time: We are committed to responding to all privacy inquiries within 5 business days and fulfilling data rights requests within 30 days

For information related to the platform's general terms of use, please refer to Terms & Conditions us. For information about responsible gambling tools including self-exclusion, please refer to the Responsible Gaming.

Data Privacy at M2 Casino – What It Means for Malaysian Players

For most Malaysian players using an online casino platform, data privacy can feel like a distant, abstract issue — something that only becomes relevant when something goes wrong. The reality is that how a platform handles its users' personal data has direct, practical implications for your everyday life as a player. At m2 casino, we want to make sure you have a clear understanding of what happens to the information you share with us, and why we do what we do.

When you make a deposit using Touch 'n Go eWallet or GrabPay at m2 casino, your transaction data passes through a licensed, independent payment gateway — m2 casino never sees or stores your full digital wallet account number. We only receive confirmation that the payment was successful and the amount in MYR to be credited to your account. This means that even in the highly unlikely event of an m2 casino system breach, your sensitive financial information would not be at risk, as it was never stored by us in the first place.

Regarding your game history and activity data on the platform, this information is used primarily for two purposes — ensuring your account functions correctly (including processing winnings and resolving any disputes) and helping us identify signs of problem gambling within our responsible gambling program. m2 casino actively uses betting pattern data to detect players who may need support, not to exploit their vulnerabilities. This is a use of data we genuinely believe benefits players.

One concern we know is on many Malaysian players' minds is whether their personal data will be used to send unwanted advertising or shared with third parties for marketing purposes. The short answer is no. m2 casino does not engage in such practices, and we do not sell or permit other companies to use player data for their own marketing. Any promotional email you receive from m2 casino is because you have explicitly consented to receive it, and you can opt out at any time by clicking the "unsubscribe" link in any email or by updating your notification settings in your account.

We also want to be transparent about our use of analytics cookies. When you browse the m2 casino platform, we collect data on the pages you visit, how long you spend on each page, and how you navigate between sections. This data is gathered in aggregate — we look at overall player patterns rather than tracking individuals in detail. The goal is to understand which areas are working well and which need improvement. For example, if data shows that many players leave a particular page quickly, that may be a signal that the page needs to be simplified or its information presented more clearly.

For players who use the m2 casino platform for Sports Betting on the Malaysia Super League or EPL, your sports preferences may be used to surface more relevant content within the platform — such as the latest odds for leagues you follow or promotions tied to sporting events you are interested in. This is personalisation intended to enhance your experience, not to exploit your data. If you prefer not to have a personalised experience, you can disable this feature in your account settings.

Finally, we want to emphasize that m2 casino views data privacy protection not merely as a cost or a compliance burden, but as an investment in long-term trust. Players who feel confident that their data is safe and handled responsibly are more comfortable — and more loyal. That trust is the foundation of the lasting relationship we aim to build with our Malaysian player community, and it starts with complete transparency in how we manage every aspect of your data privacy.

FAQ – M2 Casino Privacy Policy

Answers to the most frequently asked questions about privacy and data protection at m2 casino

No. m2 casino has never sold, rented, or traded players' personal data to any third party for their own marketing or commercial purposes, and we never will. Your data is shared only in the limited situations outlined in this Privacy Policy — namely with service providers directly involved in operating the platform (such as licensed payment processors and game providers) and with legal authorities when required by law. All such parties are bound by strict confidentiality agreements.

You may request a copy of your personal data by emailing support@m2casino.click with the subject line "Data Access Request". In your email, include your full name, account username, and registered phone number for identity verification. We will process your request and deliver a data report in a readable format within 30 days of receiving a complete request. One free request is available every 12 months; additional requests may be subject to a reasonable processing fee.

Yes, you have the right to request deletion of your personal data in certain circumstances. However, please note that some data must be retained by m2 casino for legal reasons — in particular, financial transaction records that are required to be kept for the period prescribed by financial compliance laws. Data that must be retained under legal obligations cannot be deleted upon individual request. For data not subject to such requirements, we will delete or anonymize your data within 30 days of receiving a valid request. Contact support@m2casino.click to initiate this process.

Once your account is closed, m2 casino will disable your access to the platform and restrict the use of your data for marketing or gaming activity. However, certain records must be retained for periods prescribed by law — financial transaction records are typically kept for 7 years from the date of the last transaction to meet financial compliance and anti-money laundering requirements. Basic account data may be retained for 5 years after closure for verification purposes in the event any future disputes arise. All data not subject to legal retention requirements will be securely deleted or anonymised once the applicable retention period has expired.

Payment processing at m2 casino is handled by a separate, licensed payment gateway — m2 casino never stores or views your full digital wallet account number (Touch 'n Go, GrabPay, Boost, ShopeePay) or your online banking details (Maybank2u, CIMB Clicks via FPX). When you make a deposit, you are directed to the payment provider's secure interface to authorise the transaction. M2 casino only receives confirmation that the payment was successful along with the amount in RM — not the account details used. This provides an important additional layer of protection for your financial information.
🔐

Your Data Is Safe at M2 Casino – Join Us Today

Create a free account at m2 casino with confidence — a platform that safeguards your privacy with 256-bit SSL encryption, a strict no-data-sale policy, and full control in your hands. Trusted by over 60,000 Malaysian players.

256-bit SSL Encryption No data sales Full Data Control

Useful links: About Us  ·  Terms & Conditions  ·  Responsible Gaming  ·  FAQ

Bahasa Melayu