Privacy Policy

This Privacy Policy (the "Policy") is published by play2u (the "Company", "we", "us", or "our"), the operator of the online sportsbook and live casino platform accessible at https://play2u.cam (the "Platform" or "Service"). This Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by play2u.

play2u serves players across Malaysia, including users in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond. As a responsible operator, we are committed to processing personal data lawfully, transparently, and in accordance with applicable data protection legislation and internationally recognised privacy standards.

By accessing the play2u Platform, completing our registration process, or using any part of the Service, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree to this Policy, please discontinue use of the Platform immediately.

For the purposes of this Privacy Policy, the following definitions shall apply:

play2u collects personal data across several categories depending on how you interact with the Platform. The categories of data we may collect include:

3.1 Registration & Account Data

• Full legal name;
• Date of birth (for age verification — 21+ policy enforcement);
• Email address and mobile phone number;
• Username and encrypted password;
• Residential address (city, state, country);
• Preferred currency (MYR) and language settings.

3.2 Identity Verification (KYC) Data

• Copy of government-issued photo ID (Malaysian MyKad, passport, or driving licence);
• Proof of residential address (utility bill, bank statement dated within 3 months);
• Proof of payment method ownership (e.g., Touch 'n Go eWallet screenshot, bank statement);
• Selfie photograph where required for enhanced verification.

3.3 Financial Transaction Data

• Deposit and withdrawal transaction records, amounts, and timestamps;
• Payment method identifiers (e.g., last 4 digits of bank account, e-wallet account reference);
• Cryptocurrency wallet addresses where applicable (BTC, USDT);
• Internal account balance and transaction history.

3.4 Gameplay & Betting Data

• Betting history, including markets, stakes, odds, and outcomes;
• Game session logs for casino products;
• Bonus and promotion usage history;
• Responsible gambling tool settings (deposit limits, session reminders, self-exclusion status).

3.5 Technical & Device Data

• IP address and approximate geolocation (country/city level);
• Device type, operating system, and browser version;
• Session timestamps, login history, and access logs;
• Referral source and UTM parameters where applicable.

3.6 Customer Support Data

• Transcripts of live chat conversations and email correspondence;
• The nature and outcome of any complaint or support query.

play2u collects personal data through the following primary mechanisms:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to promotions;
• Automatically — through cookies, server logs, and tracking technologies when you access or interact with the Platform;
• From third-party payment providers — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and participating Malaysian banks (Maybank, CIMB, Public Bank, RHB, Hong Leong), in connection with deposit and withdrawal processing;
• From identity verification services — where we use licensed third-party KYC providers to verify identity documents and cross-reference data against public or regulatory databases;
• From fraud prevention and AML screening services — to comply with our legal obligations under applicable anti-money laundering regulations.

We process your personal data for the following purposes, each grounded in a specific lawful basis:

play2u does not sell, rent, or commercially exploit your personal data to third parties. We share personal data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

6.1 Payment Processing Partners

To process deposits and withdrawals, we share transaction-relevant data with our verified Malaysian payment providers, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and participating banks. These providers are contractually bound to process data solely for payment execution purposes.

6.2 Identity Verification Providers

KYC and AML screening may involve sharing identity documentation with licensed third-party verification services. These providers operate under strict data processing agreements and applicable regulatory standards.

6.3 Game Content Providers

Certain anonymised or pseudonymised gameplay data (e.g., session identifiers, bet outcomes) may be shared with our licensed game studio partners to resolve technical disputes or game integrity queries. No directly identifiable personal data is shared with game studios for marketing purposes.

6.4 Regulatory & Law Enforcement Authorities

play2u will disclose personal data to competent authorities, regulators, or law enforcement agencies where required to do so by applicable law, court order, or regulatory direction. We will notify affected users of such disclosure where legally permitted to do so.

6.5 Corporate Transactions

In the event of a merger, acquisition, or sale of all or substantially all of play2u's assets, personal data held by the Company may be transferred to the acquiring entity. Affected users will be notified of any such transfer and provided with relevant policy updates in advance.

As play2u operates with an internationally licensed infrastructure, certain personal data may be processed or stored in jurisdictions outside Malaysia. Where such international transfers occur, play2u ensures that appropriate safeguards are in place to protect your personal data to an equivalent standard as that provided under applicable Malaysian data protection law.

Safeguards used for international transfers include, but are not limited to:

• Standard contractual clauses approved by recognised data protection authorities;
• Transfers to jurisdictions that have been assessed as providing an adequate level of data protection;
• Binding corporate rules where applicable within affiliated group entities.

You may request details of the specific safeguards applied to any international transfer of your personal data by contacting our Data Protection contact as specified in Section 14.

play2u retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following indicative retention periods apply:

Following expiry of the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.

play2u uses cookies and similar technologies (including web beacons and local storage) to improve your experience on the Platform, maintain session continuity, analyse usage patterns, and deliver relevant promotional content.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session management, authentication, and security cookies. They cannot be disabled without rendering the Service non-functional.
• Functional Cookies: Remember your preferences such as language settings, account display options, and responsible gambling tool configurations.
• Analytical Cookies: Help us understand how players interact with the Platform, which pages are visited most frequently, and where technical errors occur. Data collected is aggregated and anonymised.
• Marketing Cookies: Used to deliver personalised promotional content relevant to your betting preferences and activity on the Platform. Activated only where you have provided consent.

9.2 Managing Cookies

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling cookies may affect the functionality of certain features on the play2u Platform. To withdraw consent for marketing cookies, contact our support team via live chat.

As a Data Subject, you hold the following rights in relation to the personal data play2u processes about you. These rights are provided in accordance with applicable data protection legislation and apply regardless of whether you are accessing the Platform from Kuala Lumpur, Penang, or elsewhere in Malaysia.

To exercise any of the above rights, please contact us via live chat or email as specified in Section 14. We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. Where requests are complex or numerous, we may extend this period by a further 30 days with prior notification.

play2u implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. Key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using industry-standard SSL/TLS protocols;
• Data Encryption at Rest: Sensitive stored data, including KYC documents and financial records, is encrypted at rest using AES-256 encryption;
• Access Controls: Personal data is accessible only to play2u staff and contractors with a demonstrated operational need. All access is logged and audited;
• Two-Factor Authentication: Account login supports two-factor authentication (2FA) to protect against unauthorised account access;
• Regular Security Audits: Our platform undergoes periodic penetration testing and third-party security assessments to identify and remediate vulnerabilities;
• Data Breach Response: In the event of a personal data breach, play2u will notify affected users and relevant authorities within the timeframe required by applicable law, typically within 72 hours of becoming aware of the breach.

play2u enforces a strict minimum age requirement of 21 years for all registered Members. The Platform is not directed at, and does not knowingly collect personal data from, individuals under the age of 21.

If play2u becomes aware that personal data has been collected from an individual under the age of 21 without verified parental or guardian consent, that data will be deleted promptly and the associated Account will be suspended in accordance with our Terms & Conditions.

If you are a parent or guardian and believe your child may have registered on the play2u Platform, please contact our support team immediately via live chat so we can investigate and take appropriate action.

play2u reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or business operations. Where material changes are made, we will provide reasonable advance notice via a prominent notice on the Platform or by email to your registered address.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of the play2u Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

We recommend reviewing this Privacy Policy periodically. If you disagree with any changes made, please contact us to discuss your options or request account closure in accordance with our Terms & Conditions.

For any privacy-related enquiry, data subject request, or complaint regarding the way play2u processes your personal data, please contact us using the following details:

• Live Chat: Available 24 hours a day, 7 days a week directly on the play2u Platform. Mention "Privacy Request" at the start of your chat for priority routing to our data protection team.
• Email (no clickable link): [email protected] — please include "Privacy Policy Request" in the subject line.

We acknowledge all privacy queries within 5 business days. Formal data subject requests are processed within 30 calendar days, with a possible extension of a further 30 days for complex cases.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection or regulatory authority in your jurisdiction. We will cooperate fully with any such inquiry.

For general terms of use, please refer to our Terms & Conditions. For responsible gambling tools and support resources, please visit our Responsible Gambling page.