Mahjong333 Privacy Policy

Mahjong333 ("we", "us", "our", "the Platform") operates the online gaming service available at https://mahjong333.buzz and is committed to protecting the personal data of every individual who accesses or interacts with our platform. This Privacy Policy ("Policy") sets out, in clear and formal terms, how we collect, process, store, share and protect personal information relating to our users ("you", "User", "Player").

This Policy applies to all data processing activities carried out by mahjong333, including information gathered during account registration, identity verification, payment processing, gameplay activity, customer support interactions and general platform browsing. It should be read in conjunction with our Terms & Conditions and our Responsible Gambling policy, both of which form part of the contractual framework governing your use of the mahjong333 platform.

By creating an account on mahjong333, you acknowledge that you have read, understood and accepted the data processing practices described in this Policy. If you do not agree with these practices, you must not create an account or continue using the platform.

The following terms carry the meanings assigned to them throughout this Policy:

Mahjong333 collects Personal Data across several categories, as detailed below. We collect only the information that is necessary for the specific purpose for which it is gathered.

3.1 Registration Data

• Full legal name, date of birth and nationality.
• Email address and mobile phone number.
• Residential address, including city (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya or Shah Alam).
• Chosen username and encrypted password credentials.

3.2 KYC Verification Data

• Scanned or photographed copies of government-issued identity documents (MyKad, Passport or Driver's Licence).
• Proof-of-address documents (utility bills from Tenaga Nasional, Syabas or Indah Water; bank statements from Maybank, CIMB, Public Bank or Hong Leong).
• Selfie photographs taken alongside an identity document.
• Supplementary payment-method verification documentation where requested.

3.3 Financial & Transaction Data

• Deposit and withdrawal records, including MYR amounts, timestamps and transaction references.
• Payment method type and last four digits or account reference (e.g., Touch 'n Go eWallet reference, FPX transaction ID, DuitNow transfer reference, Maybank2u or CIMB Clicks confirmation number).
• Bonus credit and wagering activity history.
• Chargeback and dispute records where applicable.

3.4 Technical & Behavioural Data

• IP address, browser type, operating system and device identifier.
• Session duration, login timestamps and pages visited.
• Game play history, stake amounts and outcome records.
• Geolocation data at login (where permitted by device settings).

3.5 Communications Data

• Records of live chat, email and any other correspondence with mahjong333 customer support or compliance teams.
• Responses to voluntary surveys or feedback requests.

Mahjong333 collects Personal Data through the following channels:

• Directly from you — when you complete the account registration form, submit KYC documentation, make a deposit or withdrawal, contact customer support or participate in a promotion.
• Automatically through platform use — through cookies, server logs and analytics tools that record technical and behavioural data as you navigate and interact with mahjong333.
• From third-party payment processors — when payment providers such as FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank Online or Hong Leong Connect transmit transaction confirmation and reference data to complete your requested transaction.
• From KYC and identity verification partners — third-party services engaged by mahjong333 to perform automated or manual document verification may return verification status and risk-score data.
• From fraud prevention and anti-money-laundering screening services — where required under our compliance obligations, we may receive flagging or screening results from specialist providers.

Mahjong333 processes Personal Data for the following specific purposes:

Mahjong333 relies on the following legal bases to process your Personal Data, consistent with internationally recognised data protection principles:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted upon account registration, including account management, payment facilitation and gameplay service delivery.
• Legal obligation: Processing necessary to comply with applicable legal requirements, including KYC/AML obligations under the platform's international gaming licence and financial crime prevention frameworks.
• Legitimate interests: Processing in pursuit of mahjong333's legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring and internal analytics, where these interests are not overridden by your fundamental rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided clear and freely given consent. You may withdraw consent at any time without detriment to your account status.

Mahjong333 does not sell your Personal Data to any third party. We share your data only in the limited circumstances described below, and only to the extent necessary for the specified purpose:

• Payment service providers — FPX, DuitNow network, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank Online and Hong Leong Connect receive transaction data necessary to process your requested deposits and withdrawals.
• KYC and identity verification partners — Specialist third-party verification services receive copies of identity documents solely to perform automated or manual identity and age verification on behalf of mahjong333.
• Fraud prevention and AML screening services — Compliance-focused third parties may receive pseudonymised or limited personal information for the purpose of financial crime screening.
• Technology and infrastructure providers — Cloud hosting, database management and platform security vendors who process data as Data Processors on behalf of mahjong333, subject to contractual data protection obligations.
• Legal and regulatory authorities — Where required by a valid court order, regulatory direction, law enforcement request, or as necessary to enforce our Terms & Conditions, prevent fraud or protect the rights and safety of third parties.
• Corporate transactions — In the event of a merger, acquisition, or sale of substantially all assets, Personal Data may be transferred to the successor entity subject to equivalent privacy protections.

As an internationally operated platform, mahjong333 may transfer your Personal Data to servers, processors or affiliate entities located outside Malaysia. Where such transfers occur, mahjong333 implements appropriate safeguards to ensure that your Personal Data receives a level of protection consistent with the principles set out in this Policy.

Safeguards for international transfers may include contractual clauses requiring the recipient to maintain data protection standards equivalent to those described herein, or transfer to jurisdictions recognised as providing adequate data protection under relevant frameworks. By using the mahjong333 platform, you acknowledge and consent to such transfers as described in this Section.

Mahjong333 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory or licensing obligations. The following indicative retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

Mahjong333 uses cookies and similar tracking technologies to operate essential platform functions, maintain session security and analyse aggregate usage patterns. The categories of cookies we deploy are as follows:

• Strictly Necessary Cookies: Essential for core platform functionality, including maintaining your authenticated session, enforcing security controls and managing load-balancing. These cookies cannot be disabled.
• Functional Cookies: Retain your preferences such as language settings and game lobby configuration to improve usability across visits. Disabling these may degrade your experience.
• Analytics Cookies: Collect anonymised and aggregated data on how users navigate mahjong333 to help us identify usability improvements. No individually identifying information is sent to analytics providers.
• Security Cookies: Support fraud detection and login anomaly identification by tracking device fingerprint signals and unusual access patterns.

You may manage non-essential cookies through your browser settings. Note that disabling cookies may affect the functionality of certain platform features. We do not use cookies to deliver third-party advertising or to share behavioural profiles with advertising networks.

Subject to applicable law and any overriding legal obligations on mahjong333, you have the following rights in relation to your Personal Data:

• Right of Access: You may request a copy of the Personal Data mahjong333 holds about you. We will respond within a reasonable period, typically 30 days of a valid request.
• Right to Rectification: If Personal Data held by us is inaccurate or incomplete, you may request that it be corrected. Account profile data can be updated directly from within your account settings for certain fields.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (if consent was the sole basis), or in certain other circumstances. This right is subject to overriding legal retention obligations, particularly AML and gaming licence requirements.
• Right to Restriction of Processing: In defined circumstances, you may request that we restrict processing of your data (for example, while a correction request is being considered).
• Right to Data Portability: Where processing is based on consent or contractual necessity and conducted by automated means, you may request that we provide your data in a structured, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based solely on your consent (e.g., marketing communications), you may withdraw consent at any time by contacting us or using the unsubscribe mechanism in marketing emails.

To exercise any of the above rights, please contact our privacy team at [email protected] with the subject line "Data Rights Request". We may require you to confirm your identity before processing your request.

Mahjong333 implements a layered set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, alteration or disclosure. These measures include:

• 256-bit Transport Layer Security (TLS/SSL) encryption on all data transmitted between your browser and the mahjong333 platform.
• Encryption of sensitive data fields at rest, including KYC document storage and payment reference data.
• Multi-factor authentication options for account access, including two-step verification to reduce the risk of unauthorised login.
• Access controls limiting Personal Data access to authorised personnel on a need-to-know basis, with role-based permission levels.
• Regular security assessments and penetration testing of platform infrastructure.
• Documented incident response procedures with defined notification timelines in the event of a data breach.

Whilst we take all reasonable precautions, no internet-based transmission is 100% secure. You are responsible for keeping your account credentials confidential. If you suspect your account has been compromised, contact us immediately at [email protected].

The mahjong333 platform is strictly for individuals aged 21 years and above. We do not knowingly collect or process Personal Data from any person under the age of 21. If mahjong333 discovers or is notified that Personal Data has been provided by or relates to a person under 21, we will immediately suspend the relevant account, delete the associated Personal Data to the extent permitted by law, and report the matter in accordance with our responsible gambling obligations.

If you are a parent or guardian and believe your child has registered on mahjong333, please contact us immediately at [email protected] so that we can take prompt action.

The mahjong333 platform may contain references to or integrations with third-party services, including payment processors such as FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank Online and Hong Leong Connect. When you interact with these external services, your data is processed by the respective third party under their own privacy policies, over which mahjong333 has no control.

Mahjong333 is not responsible for the privacy practices, content or data handling of any third-party services. We encourage you to review the privacy policy of any third-party service with which you interact, particularly payment providers, before completing transactions.

Mahjong333 reserves the right to update, amend or replace this Privacy Policy at any time. Where changes are material — meaning they significantly affect how we use your Personal Data or the rights available to you — we will provide notice by updating the "Last updated" date at the top of this page and, where practicable, displaying an in-platform notification at least seven (7) calendar days before the revised Policy takes effect.

Your continued use of the mahjong333 platform after the effective date of any revision constitutes acceptance of the updated Policy. We recommend that you review this page periodically to remain informed of how your Personal Data is being handled.

If you have any questions about this Privacy Policy, wish to exercise a data subject right, or wish to make a complaint regarding our data handling practices, please contact us using the details below. All contact information is presented as plain text only and should not be used as a clickable link.

We aim to respond to all data subject requests within 30 days. Complex requests may require additional time, in which case we will acknowledge receipt and provide an estimated response timeline. Mahjong333 does not provide legal advice; if you require guidance on data protection rights specific to Malaysia, please consult a qualified legal professional.