Mamajitu Privacy Policy – Malaysia Player Data Protection

To provide a secure and fully functional online casino service, Mamajitu we need to collect several categories of personal data from our players. Below is a full list of the data categories we collect, along with the primary purpose of each:

We want to emphasise that Mamajitu does not collect sensitive categories of personal data such as health information, political affiliations, religious beliefs, or biometric information unless specifically required by applicable law. Your financial data such as credit card numbers is not stored directly on Mamajitu — all transactions are processed through third-party payment platforms that maintain their own security certifications.

Mamajitu collects personal data through a number of different channels. It is important that you understand each of these channels so you know when and how your data is collected:

• During account registration: You provide basic information such as your name, phone number, and email address directly to Mamajitu when creating a new account.
• During identity verification (KYC): Documents such as a copy of your MyKad are collected when you complete the required verification process prior to your first withdrawal.
• During deposits and withdrawals: Information related to your payment method — Touch 'n Go eWallet, DuitNow, FPX (Maybank2u, CIMB Clicks), GrabPay, Boost, or ShopeePay — is collected to process your financial transactions.
• While using the platform: Activity data such as games played, bet amounts, wins, losses, and session duration are collected automatically for security and legal compliance purposes.
• Through cookies and similar technologies: Technical data such as IP addresses, device types, and usage patterns are collected via cookies when you browse the platform Mamajitu. Further details about cookies are explained in Section 7.
• Through communications with the support team: When you contact customer support at Mamajitu via live chat or email, a record of that conversation is retained for quality assurance and complaints resolution purposes.

Every piece of data we collect has a clear and legitimate purpose. Mamajitu uses player personal data for the following purposes only:

• Account management and identity verification: To create, verify, and manage your player account at Mamajitu, including the KYC process required for legal compliance.
• Financial transaction processing: To process deposits via Touch 'n Go eWallet, DuitNow, FPX, GrabPay, Boost and ShopeePay, and to handle your winnings withdrawals securely and accurately.
• Provision of gaming services: To allow you to access all games at Mamajitu — from slots and Live Casino to Malaysian Super League and EPL football betting, poker, roulette, and other Table Games.
• Platform security and fraud prevention: To detect and prevent fraud, money laundering, bonus abuse, and any activity that violates the terms Mamajitu.
• Legal compliance: To meet applicable legal compliance requirements, including Malaysia's PDPA, anti-money laundering (AML) requirements, and other relevant regulations.
• Service communications: To send important notifications related to your account, transactions, changes to terms, or security issues directly concerning your use of the platform Mamajitu yours.
• Platform improvements: Anonymised usage data is used to understand usage patterns and improve the overall platform experience Mamajitu for all players.
• Customer support: To identify you and understand the context of your issue when you contact our support team Mamajitu, enabling faster and more accurate resolution.

Mamajitu does not use your personal data for third-party marketing, commercial profiling for sale, or any other purpose not stated above without first obtaining your explicit consent.

Mamajitu does not sell, rent, or trade players' personal data to any third party. However, there are limited situations where we need to share certain data with selected third parties in order to operate the platform:

• Payment platform providers: Required transaction information is shared with providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, FPX operators, and relevant Malaysian banks solely for the purpose of processing your deposits and withdrawals. Each of these providers is bound by strict confidentiality agreements and their own privacy policies.
• Game providers: Minimal game session data is shared with third-party game providers (such as slots and Live Casino providers) solely for the technical purpose of ensuring games function correctly.
• Technology service providers: Companies that provide technical infrastructure, server hosting, or analytics tools to Mamajitu may have limited access to certain data — however, they are prohibited from using that data for any purpose other than assisting us in delivering our services.
• Legal authorities: Mamajitu will disclose personal data to law enforcement authorities or regulators where required to do so by applicable Malaysian law, court order, or valid official directive.

In all of the situations above, Mamajitu ensures that only the minimum necessary data is shared, and all parties receiving that data are bound by confidentiality agreements that protect your privacy interests. We do not permit any third party to use your data for their own marketing or commercial purposes.

Mamajitu continually invests in security infrastructure to ensure your personal data is always protected against threats and unauthorised access. The technical and operational security measures we implement include:

• 256-bit SSL Encryption: All communications between your web browser or mobile app and the Mamajitu is encrypted using TLS protocol with 256-bit encryption — the latest industry standard, ensuring no third party can intercept your data in transit.
• Data-at-rest encryption: Sensitive data stored in the database Mamajitu is also encrypted, meaning that even in the highly unlikely scenario of unauthorised access to the database, the data cannot be read without the appropriate decryption key.
• Multi-layered access controls: System Mamajitu is protected by strict access controls — each staff member can only access data relevant to their role, and all access is logged for audit purposes.
• 24/7 security monitoring: Our automated monitoring system watches for suspicious activity around the clock and triggers immediate alerts whenever unusual patterns are detected.
• Two-factor authentication (2FA): All accounts Mamajitu can be protected with an additional layer of security through two-factor authentication, which can be enabled from your account settings.
• Regular security testing: Mamajitu conducts regular penetration testing and security audits by independent security experts to identify and address vulnerabilities before they can be exploited.

While we take all reasonable steps to protect your data, no security system can guarantee 100% protection. Should a security incident materially affect your data, Mamajitu will notify you within the timeframe required by Malaysia's PDPA and take appropriate remedial action.

On your end, you can help protect your Mamajitu your account by using a strong, unique password, enabling two-factor authentication, not sharing your password with anyone, and reporting to us immediately if you suspect any unauthorised access to your account.

Mamajitu retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by applicable Malaysian law:

• Active account data: Retained for as long as your account remains active at Mamajitu and for a reasonable period following account closure to allow for the resolution of any disputes that may arise.
• Financial transaction records: Retained for a minimum of 7 years as required by Malaysia's tax and anti-money laundering laws.
• Identity verification documents (KYC): Retained for the duration of account operation and a minimum of 5 years after account closure in accordance with legal compliance requirements.
• Customer support records: Retained for 2 years from the date of interaction for reference and service quality assurance purposes.
• Log and technical data: Retained for 12 months for security purposes and technical troubleshooting.

When the retention period expires or when data is no longer required, Mamajitu will securely delete or anonymise that data. Anonymised data is no longer considered personal data and may be retained for analytical purposes indefinitely.

Mamajitu uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse our platform. The following are the types of cookies we use:

• Strictly necessary cookies: These cookies are required for the basic functioning of the platform Mamajitu — including login verification, session management, and security. Without these cookies, the platform will not function properly. These cookies cannot be disabled.
• Preference cookies: Saving your personal preferences such as language, display size, and other configurations so you do not have to reset them each time you visit the platform Mamajitu.
• Analytics cookies: Helps us understand how players interact with the platform — which pages are visited most, how long play sessions last, and where players typically exit. This data is used in aggregated and anonymised form to improve the overall user experience.
• Security cookies: Assists security systems Mamajitu identify legitimate sessions and detect suspicious activity or any attempts to access an account without authorisation.

You can manage your cookie settings through your web browser settings. However, disabling certain cookies may affect the functionality of the platform Mamajitu. Essential cookies cannot be disabled as they are required for the security and core functionality of the platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a player Mamajitu have the following rights regarding your personal data:

To exercise any of the rights above, please contact the Mamajitu via email to support@mamajitu.best with the subject line "Personal Data Rights Request", along with your account ID number and a clear description of your request. We will acknowledge receipt within 3 business days and aim to resolve it within 21 business days.

Platform Mamajitu is intended exclusively for individuals aged 18 and above. We do not knowingly collect any personal data from individuals under the age of 18.

If you are a parent or guardian and believe that your child or dependant under the age of 18 has registered an account at Mamajitu, please contact us immediately at support@mamajitu.best. We will take prompt action to verify the age of the account in question, close the account if verification confirms the player is under 18, and delete all associated personal data within a reasonable timeframe.

Mamajitu uses a strict age verification system during the registration process, including a requirement to provide a valid Malaysian MyKad number during KYC. However, we acknowledge that no online age verification system is foolproof, and we rely on the cooperation of all parties to ensure the platform is not accessed by minors.

Mamajitu reserves the right to update or amend this privacy policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer. The "Last updated" date at the top of this document will always reflect the current version of this privacy policy.

When we make material changes to this privacy policy, we will notify you via:

• In-platform notifications when you log in to your account Mamajitu for the first time after the changes take effect.
• Email to the registered email address on the account Mamajitu at least 7 days before the changes come into effect.
• A clear notice on the main privacy policy page stating what has changed and when it takes effect.

Continued use of the platform Mamajitu after the effective date of the changes will be considered acceptance of the updated privacy policy terms. If you do not agree with any of the changes, you have the right to close your account before they take effect by contacting our support team.

For any enquiries, clarifications, or concerns regarding this privacy policy or the handling of your personal data by Mamajitu, you can reach us via:

• Privacy-specific email: support@mamajitu.best — please include "Data Privacy Enquiry" in your email subject line. We aim to respond within 3 business days for all privacy-related enquiries.
• 24/7 Live Chat: Directly accessible from the platform Mamajitu for general enquiries relating to your privacy and data protection.
• FAQ: Our FAQ page contains answers to the most frequently asked questions about privacy and data security at Mamajitu.

We are committed to providing clear, complete, and accurate responses to all privacy-related enquiries. If you are not satisfied with our response, you have the right to file a complaint with the Department of Personal Data Protection Malaysia under the Ministry of Communications and Digital Malaysia.