mgh5 Privacy Policy

Introduction

mgh5 (hereinafter "we", "us", "our", or "the Platform") operates the online gaming and sports betting service accessible at mgh5.cam. We are committed to protecting and respecting the privacy of all individuals who interact with our Platform, including registered members, prospective players, and visitors.

This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed. It applies to all personal information collected via the mgh5 website, mobile site, support channels, and any related digital touchpoints.

By accessing the mgh5 Platform, creating an account, or submitting any personal information to us, you acknowledge that you have read and understood this Policy and consent to the collection and use of your information as described herein. If you do not agree with any aspect of this Policy, please do not use the Platform.

Definitions

In this Policy, the following terms carry the meanings described below:

• "Personal Data" means any information relating to an identified or identifiable natural person. This includes, but is not limited to, name, identification number, contact details, location data, and online identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, or deletion.
• "Data Controller" means mgh5, the entity that determines the purposes and means of processing personal data collected through this Platform.
• "Data Processor" means any third-party service provider that processes personal data on behalf of mgh5, under documented instructions.
• "Data Subject" means you — the individual whose personal data is being processed.
• "KYC Data" means identity documents and supporting information collected for Know Your Customer verification purposes, including copies of government-issued identification such as MyKad or passports.
• "Cookies" means small text files stored on your device by your web browser at the instruction of the Platform, used to enhance functionality and support analytics.

Data We Collect

mgh5 collects personal data through several channels and for distinct purposes. The categories of data we collect are as follows:

3.1 Registration Data

When you create an account, we collect: full name, date of birth, email address, mobile phone number, residential address, and your chosen username. This information is required to establish and manage your account.

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering obligations and to verify your age and identity, we collect copies of government-issued identification documents such as your Malaysian identity card (MyKad), passport, or driving licence, and may request supplementary documents such as utility bills or bank statements as proof of address.

3.3 Financial Data

We collect data related to your financial transactions on the Platform, including deposit amounts, withdrawal requests, transaction timestamps, and the payment method used (e.g., Maybank2u, Touch 'n Go eWallet, DuitNow, FPX). We do not store full payment card numbers. Card processing is handled by PCI-DSS compliant third-party payment processors.

3.4 Gaming Activity Data

We record your gaming activity on the Platform, including bets placed, games played, wager amounts, win/loss records, and session durations. This data is used for account management, dispute resolution, responsible gambling monitoring, and regulatory compliance.

3.5 Technical and Device Data

When you access the Platform, we automatically collect certain technical data, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session timestamps. This information is used for security monitoring, fraud prevention, and Platform optimisation.

3.6 Communications Data

If you contact our support team via live chat or email, we retain records of those communications, including the content, timestamps, and any attachments, for quality assurance, dispute resolution, and regulatory purposes.

3.7 Data Collected via Cookies

We collect data through cookies and similar tracking technologies as described in Section 9 of this Policy. This may include session identifiers, preference settings, and analytical data relating to your navigation patterns on the Platform.

The table below summarises the primary data categories and their collection methods:

How We Use Your Data

mgh5 uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your mgh5 account, process login requests, and manage account settings and preferences.
• Identity Verification: To verify that you meet the minimum age requirement of 21 years and to confirm your identity as required by our KYC and AML obligations.
• Payment Processing: To process deposits made via Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and supported cryptocurrencies, and to process withdrawal requests to your registered payment method.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, money laundering, account takeover attempts, and other prohibited activities. This includes IP monitoring, device fingerprinting, and behavioural analysis.
• Regulatory Compliance: To meet our obligations under applicable anti-money laundering laws, gaming licence conditions, and other regulatory requirements, including retention of transaction records and reporting obligations.
• Responsible Gambling: To monitor gaming patterns and identify potential indicators of problem gambling behaviour, enabling us to apply responsible gambling interventions as appropriate.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and deliver support services effectively.
• Service Improvement: To analyse Platform usage data, identify performance issues, test new features, and generally improve the quality, reliability, and user experience of mgh5 for all players including those in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam.
• Marketing Communications: Where you have opted in to receive promotional communications, to send you information about offers, bonuses, and Platform updates relevant to your interests. You may opt out of marketing communications at any time.

Legal Basis for Processing

mgh5 processes personal data on the following legal bases:

• Contractual Necessity: Processing that is necessary to perform our contract with you — i.e., to operate your account, process your transactions, and deliver the gaming service.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC verification, AML transaction monitoring, and record retention.
• Legitimate Interests: Processing that is necessary for our legitimate business interests, including fraud prevention, Platform security, and service improvement, where such interests are not overridden by your rights.
• Consent: Processing based on your freely given, specific consent, such as for marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Sharing & Disclosure

mgh5 does not sell, rent, or trade your personal data to third parties. We may share your data in limited circumstances as described below:

6.1 Payment Processors

We share transaction data with payment service providers (including banking partners facilitating Maybank2u, CIMB Clicks, DuitNow, FPX, and e-wallet integrations) to the extent necessary to process your deposits and withdrawals. These processors are contractually bound to handle your data securely and solely for the specified purpose.

6.2 Identity Verification Providers

We may use third-party identity verification services to assist with KYC processing. These services receive only the data necessary to perform the verification and are bound by strict confidentiality obligations.

6.3 Fraud Prevention and Security Services

We may share limited data with specialist fraud prevention and cyber-security service providers to protect the Platform and its users from fraudulent activity, account takeover, and other threats.

6.4 Regulatory and Legal Authorities

We may disclose personal data to regulatory bodies, law enforcement agencies, or courts where we are legally required to do so, or where disclosure is necessary to protect the legal rights of mgh5 or other users.

6.5 Corporate Transactions

In the event of a merger, acquisition, or sale of assets involving mgh5, personal data held by us may be transferred to the relevant acquiring or successor entity, subject to that entity agreeing to honour equivalent data protection obligations.

Data Retention

mgh5 retains personal data for no longer than is necessary for the purposes described in this Policy, subject to the following minimum retention periods:

• Account Data: Retained for the duration of your account's active status, plus a minimum of 5 years following account closure, in accordance with AML and gaming licence obligations.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, as required by applicable financial regulations.
• KYC Documentation: Retained for a minimum of 5 years following completion of the last transaction associated with your account, or longer if required by applicable law.
• Support Communications: Retained for up to 3 years from the date of the last communication, or longer in the event of an unresolved dispute or legal claim.
• Technical and Log Data: Retained for up to 12 months in most cases, except where retention is required for ongoing security investigation or legal proceedings.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an individual.

Security Measures

mgh5 implements a comprehensive range of technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• 256-bit TLS/SSL encryption for all data transmitted between your device and our servers.
• Encryption of sensitive data fields at rest within our database systems.
• Role-based access controls ensuring that only authorised personnel can access personal data, limited strictly to what is required for their function.
• Multi-factor authentication requirements for all internal administrative access to systems containing personal data.
• Regular independent security audits and penetration testing of Platform infrastructure.
• Intrusion detection and prevention systems, real-time monitoring, and automated alerting for suspicious activity.
• Staff training on data protection obligations and information security best practices.

Notwithstanding the above, no security system is entirely impenetrable. In the event of a data breach that is likely to result in a risk to your rights, mgh5 will notify affected data subjects in accordance with applicable legal requirements.

Cookies & Tracking Technologies

mgh5 uses cookies and similar technologies to operate and improve the Platform. The categories of cookies we use are as follows:

9.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They enable core features such as session management, authentication, and security. They cannot be disabled without affecting Platform functionality.

9.2 Performance and Analytics Cookies

These cookies collect aggregated and anonymised data about how users interact with the Platform — including which pages are most visited, how long sessions last, and where users encounter errors. This information is used solely to improve Platform performance and user experience.

9.3 Functional Cookies

These cookies allow the Platform to remember your preferences — such as your language setting, display preferences, and login state — to provide a more personalised experience on subsequent visits.

9.4 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Please note that disabling cookies may affect the functionality of certain Platform features. Detailed cookie management instructions are available in your browser's help documentation.

International Data Transfers

In the course of operating the mgh5 Platform, your personal data may be processed by systems or service providers located outside of Malaysia. Where such transfers occur, mgh5 takes appropriate steps to ensure that your data continues to receive an adequate level of protection, including by ensuring that receiving parties are bound by appropriate data protection agreements or are located in jurisdictions recognised as providing adequate protection for personal data.

By using the Platform, you acknowledge and consent to the transfer of your personal data in the manner described above.

Your Rights

Subject to applicable data protection laws, you have the following rights with respect to your personal data held by mgh5:

• Right of Access: You have the right to request a copy of the personal data we hold about you, together with information about how it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restrict Processing: In certain circumstances, you may request that we limit the processing of your personal data while a query or complaint is being resolved.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to our demonstrating compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

To exercise any of these rights, please contact our Data Protection team as described in Section 15 below. We will respond to verified requests within a reasonable timeframe and in any case within 30 days of receipt.

Minors & Age Policy

The mgh5 Platform is strictly for individuals who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21. Registration by minors is prohibited and, where discovered, will result in immediate account termination and deletion of all associated personal data to the extent permissible by our legal obligations.

Our registration process includes date-of-birth collection and mandatory KYC verification specifically to prevent underage access. If you have reason to believe that a minor has accessed the Platform, please contact us immediately at [email protected].

Third-Party Links

The mgh5 Platform does not intentionally include links to external third-party websites. However, if any such links are encountered — for example, through payment method information pages — please be aware that those external sites operate under their own privacy policies for which mgh5 is not responsible. We encourage you to review the privacy policy of any third-party site you visit.

Policy Amendments

mgh5 reserves the right to amend this Privacy Policy at any time. Where changes are material, we will provide notice to registered members via email or through an in-platform notification prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this page. Your continued use of the Platform following publication of a revised Policy constitutes your acceptance of the changes. If you do not accept the revised Policy, you should cease using the Platform and may request account closure as described in our Terms & Conditions.

Contact & Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a data protection concern, please contact us through the following channels:

• Live Chat Support: Available 24 hours a day, 7 days a week on the mgh5 Platform. This is the fastest channel for account-related privacy queries.
• Email: [email protected] — please use the subject line "Privacy Request" and include your registered username and a clear description of your request or concern. We aim to acknowledge all data requests within 5 business days and to resolve them within 30 calendar days.

Our support team serves players across Malaysia including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam, and is available to assist in English at all times.