PRIVACY POLICY – my30.net

My 30 Privacy Policy – Malaysian Player Data Protection

My 30 treats your privacy as a trust that must never be taken lightly. This Privacy Policy clearly explains how we collect, use, store, and protect your personal information as a member of our platform.

Last updated: 1 January 2026

my 30 Privacy Commitment: We never sell your personal data to any third party for marketing purposes. This policy transparently covers every aspect of how your data is managed on the my 30 platform. If you have any enquiries, contact us at support@my30.net.

1Introduction & Scope of my 30's Privacy Policy

This Privacy Policy is published by my 30 (my30.net), an online Sports Betting and casino platform operating for users in Malaysia. This policy outlines our privacy practices in the context of the services we provide, including Malaysia Super League and EPL football betting, Live Casino, slots, poker, Virtual Sports, and e-sports.

As a platform serving Malaysian players, my 30 views personal data protection as more than a legal obligation — it is part of our commitment to the trust placed in us by every member. We process your data in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA) and applicable international standards.

By registering and using the my 30 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us for assistance with closing your account.

Who Does This Policy Apply To?

This Privacy Policy applies to all users of the my 30 platform, including registered members, website visitors who have not yet registered, customer support applicants, and anyone who interacts with my 30's services in any capacity.

2Types of Personal Data We Collect

my 30 collects various types of personal data depending on how you interact with our platform. We only collect data that is genuinely necessary for the purposes stated in this policy — no excessive or unjustified data collection.

The main categories of data we collect are as follows:

Identity Data
  • Full name as per identity card
  • Malaysian identity card number (MyKad)
  • Date of birth
  • Gender
  • Nationality
  • Identity card image (if requested for KYC verification)
Contact Data
  • Active email address
  • Malaysian phone number
  • Residential address (where required for verification)
  • Username chosen at registration
  • Telegram account (if voluntarily provided)
Financial & Transaction Data
  • Deposit and withdrawal records
  • Payment method used (TNG, DuitNow, GrabPay, Boost, ShopeePay, FPX)
  • E-wallet account number (partially masked)
  • Betting and gaming history
  • Account balance and bonus records
  • Cash-out and winnings withdrawal records
Technical & Usage Data
  • IP address and approximate location
  • Device type and operating system
  • Web browser type
  • Login time and date
  • Pages visited within the platform
  • Cookie and session data
Sensitive Data

My 30 does not collect sensitive data such as health information, religion, or political views unless required by applicable law. We will never request your password through any communication channel — our support team will never ask for your account password.

3How my 30 Uses Your Personal Data

Every use of personal data by my 30 has a clear purpose and a valid legal basis. We do not use your data for purposes unrelated to the services we provide. The following are the primary purposes for which we use the data collected:

  • Account Management: Creating, verifying, and maintaining your my 30 account, including the KYC process and age verification
  • Transaction Processing: Processing deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX; and processing your winnings withdrawal requests
  • Service Delivery: Enabling you to access all features on the my 30 platform, including Sports Betting, Live Casino, slots, poker, and e-sports
  • Customer Support: Assisting with your enquiries, complaints, and technical support requests in Bahasa Melayu
  • Platform Security: Detecting and preventing fraud, money laundering, bot activity, and bonus abuse
  • Legal Compliance: Fulfilling reporting obligations to the relevant Malaysian authorities when required by law
  • Platform Improvements: Analysing usage patterns in aggregate (non-individually identifiable) to improve the my 30 user experience
  • Service-Related Communications: Sending important notifications regarding your account, transactions, terms changes, and security updates
  • Responsible Gaming: Monitoring gameplay patterns to identify signs of concern and offer appropriate support

For marketing and promotional purposes, my 30 will only send you offers and bonus-related communications if you have given explicit consent during registration or through your account's communication preference settings. You may withdraw this consent at any time via your account settings or by contacting our support team.

Notification Controls

You can manage all communication preferences from my 30 — including promotional emails, SMS notifications, and in-platform alerts — directly from your account settings page. Important notifications relating to account security and transactions cannot be disabled, as they form part of your account protection.

4Data Sharing with Third Parties

my 30 never sell, rent, or share your personal data with third parties for their own marketing purposes. This is an absolute commitment we have upheld without exception since my 30 first launched.

However, in the course of operating the platform, my 30 may need to share your data with the following categories of third parties under limited and controlled circumstances:

  • Payment Providers: Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks) service providers receive the transaction data necessary to process your deposits and withdrawals. This data is governed by each provider's own privacy policy, all of which comply with Malaysian financial standards.
  • Game Software Providers: International-standard Live Casino and slots game providers receive only the minimum technical data required to deliver a safe and fair gaming experience. All such providers are bound by strict data confidentiality agreements with my 30.
  • Legal Authorities: my 30 will disclose the necessary data to the relevant Malaysian authorities when required by law, court order, or lawful investigation. We will notify you of any such request unless prohibited by law from doing so.
  • Technical Service Providers: Companies that assist us in managing technical infrastructure, cloud storage, and cybersecurity systems may have limited access to data in the course of fulfilling their contractual duties. All such parties are bound by strict confidentiality agreements.

In all of the data-sharing scenarios above, my 30 ensures that data is shared on a minimum necessity basis — only the data strictly required for the specific purpose is shared, and nothing beyond that.

Cross-Border Data Transfers

Some of my 30's technical service providers may store data on servers located outside Malaysia. In such cases, my 30 ensures that protection equivalent to Malaysia's PDPA is upheld through appropriate contractual agreements with each relevant service provider.

5Data Retention & Security

my 30 retains your personal data for as long as necessary to fulfil the purposes set out in this Privacy Policy, subject to retention obligations prescribed by Malaysian law.

The general retention periods for key data categories are as follows:

  • Active account data: For the duration your account remains active, plus 7 years following closure for legal compliance purposes
  • Financial transaction records: Minimum 7 years as required under Malaysian financial regulations
  • Customer support communication logs: 3 years from the date of last interaction
  • Technical log data (login activity, IP addresses): 12 months
  • Live casino recordings: Minimum 90 days for dispute resolution
  • Marketing data (if applicable): Until consent is withdrawn, plus 1 year

In terms of technical security, my 30 implements comprehensive protection measures to keep your data secure at all times:

SSL 256-bit Encryption 2-Factor Authentication (2FA) 24/7 Monitoring Encrypted Database Strict Access Controls Secure Backups Regular Security Audits Penetration Testing

In the event of a data breach affecting your personal data, my 30 is committed to notifying you within 72 hours of detecting a breach, in line with international best practices. The notification will include details on the nature of the breach, the data involved, and the steps taken to mitigate its impact.

Shared Responsibility

While my 30 implements the best technical safeguards, the security of your account also depends on your own actions. Use a strong password, enable 2FA, never share your login credentials, and contact us immediately if you suspect any suspicious activity on your account.

6Cookies & Tracking Technologies

Platform my 30 uses cookies and similar tracking technologies to enhance the user experience, maintain platform security, and understand how players use our services. This section explains the types of cookies we use and how you can manage them.

You can manage cookies through your web browser settings. Most modern browsers allow you to view, delete, or block cookies from specific websites. Please note that disabling essential cookies may affect the login functionality and account security of my 30.

7Your Personal Data Rights

As a data subject under Malaysia's Personal Data Protection Act 2010, you hold certain rights regarding your personal data held by my 30. We fully respect these rights and provide clear mechanisms for you to exercise them.

Right of Access

You have the right to request a copy of the personal data my 30 holds about you. Such requests will be processed within 14 business days.

Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request a correction or update via your account settings or my 30 customer support.

Right to Erasure

You may request the deletion of your personal data. This right is subject to legal retention obligations — financial transaction records must be retained for the period stipulated under Malaysian law.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time. This objection will take effect immediately and without conditions.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format (JSON or CSV) for transfer to another service provider should you choose to do so.

Right to Withdraw Consent

For processing that relies on your consent (such as marketing communications), you may withdraw that consent at any time via your account settings or by contacting us.

To exercise any of the above rights, contact the my 30 Privacy Officer by email at support@my30.net with the subject line "Privacy Rights Request". Please include your account number and the type of request to help us process it faster. We will respond within 14 business days.

8Children's Data Protection

Platform my 30 is intended for users aged 18 and above only. We do not knowingly collect personal data from individuals under the age of 18. If you are a parent or guardian who believes your child has registered a my 30 account, please contact us immediately at support@my30.net.

When we become aware or suspect that data collected belongs to a minor, we will take the following actions immediately: close the account in question, delete all associated personal data, and refund any remaining balance (where applicable) to the original payment method.

Underage Account Reports

If you are aware of any underage individual using the my 30 platform, please report it to us at support@my30.net. my 30 takes the protection of minors seriously and will act promptly on every report received.

9Third-Party Links & Services

Platform my 30 may include links or integrations with third-party services in the course of our operations, including payment providers (Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX) and live casino game providers.

When you leave the my 30 platform to access these third-party services — for example, when you are redirected to the Touch 'n Go eWallet or GrabPay payment interface to complete a deposit transaction — your activity on those third-party platforms is governed by their own privacy policies, not the my 30 Privacy Policy.

My 30 is not responsible for the privacy practices of any third party. We encourage you to read the privacy policy of each third-party service you use in connection with the my 30 platform.

10Amendments to the Privacy Policy

my 30 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Each updated version will be published on this page with a revised update date.

For material amendments that affect how we use your data or your rights, my 30 will provide at least 14 days' advance notice via email or an in-platform notification. Minor amendments that do not alter the fundamental basis of data processing may take effect immediately upon publication.

We encourage you to review this page periodically to stay informed of our latest privacy practices my 30. Continued use of the my 30 platform following any amendment constitutes acceptance of the revised policy.

11Contact the my 30 Privacy Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact our Privacy Officer my 30 through the following channels:

  • Email: support@my30.net (use the subject line "Privacy Policy Enquiry")
  • Live Chat: Available 24 hours a day, 7 days a week within the my 30 platform
  • Response Time: Privacy-related requests are processed within 14 business days

We are committed to addressing all privacy-related enquiries and concerns seriously and transparently. If you believe that my 30 has not handled your data in accordance with Malaysia's PDPA after contacting us, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP), the relevant regulatory body.

Response in Bahasa Malaysia

All privacy-related requests and enquiries submitted in Bahasa Malaysia will be responded to in Bahasa Malaysia by the my 30 support team, who are well-versed in Malaysia's local privacy requirements.

🔐 my 30 Data Protection Commitment

Six core principles that ensure your privacy is fully protected

Bank-Grade Encryption

All data transmitted between your browser and the my 30 platform is protected by SSL 256-bit encryption — the same standard used by Malaysia's leading banks, including Maybank and CIMB. This ensures your account information, passwords, and transaction data cannot be intercepted by any third party.

Your Control Over Your Data

My 30 gives you full control over your personal data. Update your profile information, manage communication preferences, download a copy of your data, or close your account entirely — all of this can be done on your own through your account settings, with no approval required from any party.

No Sale of Data to Third Parties

This is a commitment we have never and will never compromise on: my 30 does not and will never sell or rent members' personal data to any third party for their marketing purposes. Your data belongs to you — it is not a commodity of our business.

Malaysia PDPA Compliance

All data management practices at my 30 comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We conduct regular compliance audits to ensure our processes remain aligned with applicable local legal requirements.

Data Minimisation Principle

My 30 only collects data that is strictly necessary to provide our services. We do not collect data excessively "just in case". Every type of data collected has a defined purpose, a set retention period, and will be deleted once it is no longer needed.

Breach Notification Within 72 Hours

In the event of a security incident affecting your personal data, my 30 is committed to notifying you within 72 hours of detecting the incident. We do not conceal or delay notification of serious data breaches.

Play with Confidence at my 30

Your data privacy and security are my 30's absolute priority. With the confidence of knowing how we protect your information, register today and enjoy a safe Sports Betting, Live Casino, and slots experience with Malaysia's player community.

Your data is protected by 256-bit SSL · Malaysia PDPA Compliant · 24/7 Bahasa Malaysia Support

my 30 Terms & Conditions

This Privacy Policy should be read together with Terms & Conditions my 30. Together, both documents form the complete agreement between you and my 30 regarding your use of our platform.

Responsible Gaming

My 30 is committed to responsible gaming and member wellbeing. Please set your deposit and loss limits before playing. For more information, visit our Responsible Gaming us. Age restriction: 18 and above only.

Bahasa Melayu