At 19myr, your privacy is more than a legal obligation — it is a core value we uphold. This Privacy Policy clearly explains what data we collect, how it is used, who can access it, and what rights you have as a 19myr platform user. We encourage you to read this document carefully.
This Privacy Policy is effective from 1 January 2026. 19myr will notify you by email of any material changes to this policy. The "Last Updated" date above will be revised whenever changes are made.
Six core principles that form the foundation of how 19myr manages the personal data of Malaysian players
19myr operates in full compliance with Malaysia's Personal Data Protection Act (PDPA) 2010. Every aspect of how we collect, process, and store users' personal data adheres to the applicable provisions of Malaysian law currently in force.
All data transmitted between your device and 19myr's servers is protected by 256-bit SSL encryption — the same industry-leading security standard used by major Malaysian financial institutions and banks. Passwords are stored in bcrypt hash format and cannot be decrypted.
19myr never sells, rents, or transfers your personal data to third parties for marketing or commercial purposes without your explicit consent. This is an absolute commitment — not just a policy statement.
You have the right to access, correct, delete, or transfer the personal data held by 19myr. Requests can be submitted at any time through our customer support and will be processed within 14 business days.
19myr only collects data that is strictly necessary to provide the platform's services and meet our legal obligations. We do not collect irrelevant or excessive data — every piece of information we retain has a clear and legitimate purpose.
Within 19myr, access to users' personal data is restricted to staff who genuinely need it to perform their duties. All access is logged and monitored, and all staff are bound by strict confidentiality agreements.
When you use the 19myr platform — whether registering an account, making a deposit, playing games, or contacting customer support — 19myr will collect certain categories of personal data. We want you to understand exactly what data we collect and why it is needed.
There are two main categories of data we collect: data you provide to us directly while using the platform, and data we collect automatically as you browse or use 19myr. We believe it's important to be transparent about both.
| Data Category | Example Information | How We Collect |
|---|---|---|
| Personal Identity | Full name, date of birth, MyKad/passport number | Registration form & KYC |
| Contact Information | Email address, phone number, residential address | Registration form |
| Financial Information | Payment methods (TNG, DuitNow, GrabPay, FPX), transaction history | Deposit & withdrawal process |
| Technical Data | IP address, browser type, operating system, device | Automatically collected during platform use |
| Usage Data | Game history, session duration, bets placed | Automatically collected during platform use |
| Communication Data | Live chat records, support emails, feedback | Interactions with customer support |
19myr does not store your full credit card number or digital wallet password. The financial information we retain is limited to the payment method name and a masked account number for withdrawal verification purposes only. All payments are processed through payment gateways that comply with PCI DSS standards.
The personal data we collect is used solely for legitimate purposes directly related to delivering the 19myr platform services to you. We do not use your data for any purpose you would not reasonably expect, or that is not described in this Privacy Policy.
The primary purpose of data use is to allow you to access the 19myr platform securely and seamlessly — including processing account registration, verifying your identity, handling deposits and withdrawals via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX and other supported methods, and managing your account and betting history.
For marketing communications — such as emails about the latest 19myr promotions and bonuses — we will only reach out to you if you have given your consent during registration or through your account settings. You may withdraw this consent at any time.
Certain usage data is analysed by 19myr's systems to identify behavioural patterns that may indicate problem gambling risks. This is done solely to protect your interests as a platform user and not for commercial purposes. More information on the Responsible Gaming.
19myr does not sell, rent, or share your personal data with third parties for their own marketing purposes. This is a core commitment to user privacy. That said, there are limited situations in the course of operating the platform where we may need to share your data with certain parties.
Third-party service providers we use to operate the 19myr platform — including payment processors handling DuitNow, Touch 'n Go, GrabPay, and FPX transactions, game software providers, and server infrastructure providers — may have limited access to the data needed to perform their services. All such providers are bound by strict data protection agreements and may only use the data for purposes specified by 19myr.
Some of our service providers may operate outside Malaysia. In such cases, 19myr ensures that all data transfers comply with Malaysia's PDPA requirements and that the providers in question offer a level of data protection equivalent to Malaysian standards. Further information about international data transfers can be requested at support@19myr.xyz.
Protecting your personal data is both a technical and organisational priority we take seriously at 19myr. We invest in robust security infrastructure and practise a "privacy by design" principle — meaning privacy protection is built into every aspect of the platform from the ground up, not added as an afterthought.
On the technical side, the 19myr platform uses 256-bit SSL/TLS encryption for all communication between your browser and our servers. Account passwords are stored using the bcrypt hashing algorithm with a unique salt — meaning that even in the unlikely event of a data breach, your password cannot be decrypted. Sensitive financial data such as payment information is stored in tokenized format in accordance with PCI DSS standards.
On the organisational side, access to user data within 19myr's internal systems is restricted on a least-privilege basis — each staff member can only access the data required for their specific role. All access is automatically logged and reviewed on a regular basis. Staff who handle user data are required to complete data protection training and sign a confidentiality agreement.
While 19myr takes all reasonable steps to protect your data, the security of your account also depends on your own actions. Please use a strong, unique password, enable two-factor authentication, never share your login credentials, and report any suspicious activity to the 19myr support team immediately.
19myr uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse 19myr. They help us recognise you when you return and deliver a more personalised experience.
There are several types of cookies used on the 19myr platform. Essential cookies cannot be turned off as they are critical to the platform's core functions — including login sessions, security preferences, and payment processing. Without these cookies, the platform will not function properly.
Our performance and analytics cookies help us understand how players interact with the 19myr platform — which pages are visited most, how long a typical session lasts, and where players may encounter difficulties. This information helps us improve the platform for a better experience. Data is collected in aggregate form and does not identify individuals.
Cookie settings are stored on your device. You can update these settings at any time through your browser settings or by contacting the 19myr team.
Under Malaysia's Personal Data Protection Act (PDPA) 2010, you have several important rights regarding the personal data held by 19myr. We respect these rights and will fully facilitate their exercise upon receipt of a valid request.
You have the right to request a copy of all personal data we hold about you. Requests will be processed within 14 business days.
If any data we hold about you is inaccurate or out of date, you have the right to request that it be corrected or updated promptly.
In certain circumstances, you have the right to request the deletion of your personal data from 19myr's systems, subject to any legal retention obligations.
You may request that we restrict how we process your data in certain circumstances while a dispute is being resolved.
You have the right to receive your data in a structured, machine-readable format so it can be transferred to another platform if you choose.
You have the right to object to the processing of your data for direct marketing purposes at any time, with no justification required.
To submit any request relating to your data rights, contact the 19myr privacy team by email at support@19myr.xyz with the subject line "Personal Data Rights Request" or via the platform's live chat. Please include your full name and the email address registered to your 19myr account. Requests will be acknowledged within 3 business days and resolved within 14 business days.
19myr retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Malaysian law. We do not keep data longer than necessary.
In general, active account data is retained for the duration your account remains active, plus 7 years after account closure — a legal requirement relating to financial records in Malaysia. Financial transaction data specifically is retained for 7 years in accordance with the Companies Act and Malaysian tax legislation. Customer support communication records are kept for 3 years from the date of interaction.
Once the retention period has lapsed, or upon receipt of a valid deletion request where no legal obligation to retain the data exists, 19myr will securely delete or anonymise the data using methods that ensure it cannot be recovered.
If you have any questions, concerns, or complaints regarding how 19myr handles your personal data, please get in touch with us. We are committed to addressing every privacy inquiry seriously and within a reasonable timeframe.
For any enquiries regarding this Privacy Policy or your personal data rights, contact us at support@19myr.xyz with the subject line "Privacy Enquiry" or via 19myr's in-platform 24/7 live chat. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.
19myr's Privacy Policy is built in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010 — the primary legislation governing personal data processing in Malaysia.
Data rights requests are processed within 14 business days.
Answers to the most frequently asked questions from Malaysian players about how 19myr protects their personal data
At 19myr, we understand that player trust is not something that can be bought — it must be earned through consistent, transparent action over time. Our commitment to privacy is one of the ways we demonstrate that trust every day.
With privacy fully protected under Malaysia's PDPA and bank-grade encryption security, playing at 19myr means you can focus entirely on the game — without worrying about the safety of your data.
Minimum deposit RM 10 · 256-bit SSL · Malaysia PDPA Compliant · For players aged 18 and above