Official Documents

Privacy Policy 16Malaysia — Your Personal Data Protection

We take your privacy seriously. This document clearly explains how 16Malaysia collects, uses, protects and manages your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) Malaysia.

Updated: 1 January 2026

16Malaysia's Privacy Commitment

Six core principles that guide how we manage your data every day

PDPA 2010 Compliance

All personal data processing activities at 16Malaysia fully comply with Malaysia's Personal Data Protection Act 2010. You have every right to access, correct, and request the deletion of your data.

Malaysia PDPA
256-bit SSL Encryption

All data transmitted between your device and 16Malaysia's servers is protected by 256-bit SSL encryption — the same standard used by Malaysia's major banking institutions such as Maybank and CIMB.

Banking Standards
No Third-Party Data Sales

16Malaysia never sells, rents, or commercialises members' personal data to any third party. Your data is used solely for the purposes explicitly stated in this policy.

Your Data Belongs to You
Full Control in Your Hands

You may access, modify, or request deletion of your personal data at any time through your account settings or by contacting 16Malaysia support. Requests are processed within 14 business days.

Full Member Rights
Secure Data Storage

Your data is stored on servers protected by multi-layered security systems — including firewalls, intrusion detection systems, and round-the-clock monitoring by 16Malaysia's cybersecurity team.

24/7 Monitoring
Data Breach Notification

In the event of any data breach that may affect your information, 16Malaysia is committed to notifying you within 72 hours and taking all necessary remedial action promptly.

72-Hour Notification

This Privacy Policy describes our privacy practices 16Malaysia in full. By using our platform, you agree to the collection and use of information as described in this document. Please read it carefully before using our platform.

1 Introduction & Scope of This Policy

16Malaysia ("we", "platform", "company") is the data controller responsible for processing your personal information. This Privacy Policy explains how we collect, use, store, protect and disclose your personal data when you use the 16Malaysia platform — including the website, mobile app, online games, Sports Betting and all related services we provide.

This policy applies to all registered members, website visitors and any individual who interacts with 16Malaysia in any capacity. It is built on the principles established in Personal Data Protection Act 2010 (PDPA) Malaysia and recognised international data protection standards.

We believe transparency is the foundation of trust. That is why this document is written in plain, accessible language — not confusing legal jargon — so you truly understand what happens to your data on the 16Malaysia platform.

This policy was last updated on 1 January 2026. Continued use of the 16Malaysia platform following any updates will be considered your acceptance of the latest version of this policy.


2 Types of Personal Data We Collect

16Malaysia only collects data necessary to provide the services you request and to maintain platform security. The data we collect can be grouped into several categories:

Data Category Example Information Primary Purpose
Identity Data
Mandatory
Full name, date of birth, identification number (IC/passport) Identity verification, KYC compliance, fraud prevention
Contact Data
Mandatory
Email address, mobile phone number, Malaysian residential address Account communications, security verification, customer support
Financial Data
Mandatory
EWallet account numbers (Touch 'n Go, GrabPay), Malaysian bank account details for withdrawals Processing of deposits and withdrawals, anti-money laundering prevention
Usage Data
Automatic
Game history, betting records, login activity, session duration Account management, fraud detection, responsible gambling
Technical Data
Automatic
IP address, device type, operating system, web browser, cookie data Platform security, user experience optimisation, detection of unauthorised access
Communication Data
Optional
Live chat records with support, emails sent to us Complaint resolution and service quality improvement

We do not collect sensitive data such as health information, religious beliefs, or sexual orientation except in specific circumstances required by law. All data collection is carried out on the basis of clear and informed consent.


3 How 16Malaysia Uses Your Data

The personal data we collect is used solely for legitimate and reasonable purposes. Below is a complete list of how data is used on the 16Malaysia platform:

  • Account Management: Creating, verifying and managing your member account, including the login process and two-factor authentication
  • Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u and CIMB Clicks, as well as withdrawals of winnings to your Malaysian account
  • Service Delivery: Giving you access to all games including slots, baccarat, blackjack, roulette, Live Casino, Sports Betting on badminton, Malaysian Super League football and much more
  • Security & Fraud Prevention: Detecting and preventing unauthorised access, fraud, money laundering and platform abuse
  • Legal Compliance: Meeting legal and regulatory obligations including KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements
  • Service Communications: Sending account notifications, security alerts, transaction confirmations and important service information
  • Customer Support: Resolving complaints, answering enquiries and providing technical assistance in Bahasa Melayu
  • Platform Improvements: Analysing usage patterns to improve the user experience, resolve technical issues, and develop useful new features
  • Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and offering appropriate support tools
  • Marketing Communications (with consent): Sending information about promotions, bonuses and the latest offers from 16Malaysia — only where you have given consent to receive such communications

16Malaysia does not use your data for any purpose not stated in this policy without first obtaining your renewed consent. You may withdraw consent for marketing communications at any time through your account settings.


4 Legal Basis for Data Processing

16Malaysia processes your personal data on valid legal grounds under Malaysia's PDPA 2010. We rely on the following bases depending on the type of processing:

  • Consent: When you register an account and agree to this Privacy Policy, you provide consent for data processing for the stated purposes. You may withdraw this consent at any time.
  • Contractual Fulfilment: Processing required to deliver the services you have requested — including processing deposits, running games and handling withdrawals — is necessary to fulfil the agreement between you and 16Malaysia.
  • Legal Obligation: Certain data processing is mandatory to comply with Malaysian law, including KYC requirements, AML reporting, and financial record retention.
  • Legitimate Interests: 16Malaysia has a legitimate interest in processing data for platform security, fraud prevention and service improvement — provided that this interest does not override your privacy rights.

5 Data Sharing With Third Parties

16Malaysia does not sell or commercialize members' personal data to any third party. However, in the course of operating our platform, we may share data with the following categories of parties under strictly limited and controlled circumstances:

  • Payment Service Providers: eWallet and banking providers such as Touch 'n Go, GrabPay, Boost, ShopeePay and Malaysian banking institutions, for the purpose of processing your financial transactions. They receive only the data necessary to complete the relevant transaction.
  • Game Providers: Companies such as Pragmatic Play, Evolution Gaming and other licensed providers receive only the minimum data required to deliver the gaming experience — typically a player ID, without any name or full personal details.
  • Technology Service Providers: Companies that provide technical infrastructure, server hosting, and cybersecurity services to 16Malaysia — all bound by strict data protection agreements.
  • Legal Authority: 16Malaysia will disclose data to Malaysian authorities (such as PDRM or BNM) when required by law, a valid court order or a financial crime investigation.

All third parties receiving data from 16Malaysia are required to protect that data to a standard equal to or exceeding our own. They are not permitted to use your data for any purpose other than what is specified in their agreement with us.

16Malaysia never shares members' personal data with marketing companies, data brokers, social media platforms, or any party not listed above. If you receive any communication claiming to use your data from 16Malaysia, please report it to us immediately.


6 Data Security Measures at 16Malaysia

We invest seriously in both technical and organisational security to protect your personal data from unauthorised access, disclosure, alteration or destruction. Our key security measures include:

  • Data in Transit Encryption: All communications between your browser or app and 16Malaysia's servers are protected by 256-bit SSL/TLS encryption — the same standard used by Malaysia's leading banks.
  • Data at Rest Encryption: Sensitive data stored in our databases — including passwords and financial information — is stored in encrypted form using modern encryption algorithms.
  • Layered Access Control: Only 16Malaysia staff with a legitimate business need are permitted to access member personal data, and every access is logged for audit purposes.
  • Continuous Security Monitoring: 16Malaysia's cybersecurity team monitors our systems around the clock to detect any suspicious activity or intrusion attempts.
  • Two-Factor Authentication: Two-factor authentication is available on all member accounts as an additional layer of security beyond your password.
  • Regular Security Audits: We conduct regular penetration testing and security audits to identify and address any vulnerabilities before they can be exploited.

While we take all reasonable steps to protect your data, no system can guarantee 100% security in the digital world. We therefore also encourage you to take your own protective measures, such as using a strong password and keeping your login credentials confidential.


7 Data Retention Period

16Malaysia retains your personal data only for as long as necessary for its stated purpose, or as required under Malaysian law. The following are our data retention guidelines:

  • Active Account Data: For as long as your account remains active on the 16Malaysia platform, we will retain your profile data and account information to enable you to use our services.
  • Financial Transaction Data: Deposit and withdrawal records are retained for a minimum of 7 years as required under Malaysia's accounting and AML compliance regulations.
  • Game & Betting History: Gaming activity records are retained for 3 years after each session for dispute resolution and Responsible Gaming compliance purposes.
  • Communication Records: Customer support chat logs are retained for 2 years to allow reference should any recurring issues arise.
  • Closed Account Data: After account closure, personal data will be deleted or anonymised within 90 days, except for records that are legally required to be retained.

If you request data deletion before the legally mandated retention period has ended, we will inform you which data can be deleted immediately and which must be retained under legal requirements, along with the applicable retention period.


8 Your Rights as a Data Subject

Under Malaysia's PDPA 2010, you have the following rights regarding your personal data processed by 16Malaysia:

Right of Access

You have the right to request a copy of the personal data we hold about you. Requests will be processed within 14 working days.

Right to Rectification

If your data is inaccurate or incomplete, you have the right to request a correction through your account settings or via 16Malaysia support.

Right to Erasure

You may request the deletion of your personal data, subject to any applicable minimum legal retention obligations.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time, without needing to provide any reason.

Right to Restrict Processing

Under certain circumstances, you may request that the processing of your data be restricted while awaiting a review or the resolution of a dispute.

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider.

To exercise any of the rights above, please contact the 16Malaysia Data Protection Officer team by email at support@16malaysia.com stating the right you wish to exercise along with your account information for identity verification purposes. We will acknowledge receipt of your request within 2 business days and complete it within 14 business days.


9 Cookies & Tracking Technologies

The 16Malaysia platform uses cookies and similar tracking technologies to enhance the user experience, maintain account security and understand how members use our platform. The following are the types of cookies we use:

You can manage cookie settings through your web browser. However, disabling certain cookies may affect platform functionality. Browsers such as Chrome, Firefox and Safari all provide options to manage cookies within their respective privacy settings menus.


10 Children's Data Protection

The 16Malaysia platform is for users aged 18 and above only. We do not knowingly collect, store or process personal data of individuals under the age of 18.

If we become aware or are advised that we have processed data belonging to an individual under the age of 18, we will take immediate action to delete that data, close the associated account and refund any funds that may have been deposited.

If you believe a child has registered an account on the 16Malaysia platform, please notify us immediately at support@16malaysia.com. We will investigate and take action within 24 hours.


11 Changes to This Privacy Policy

16Malaysia reserves the right to modify or update this Privacy Policy from time to time to reflect changes in our privacy practices, the latest legal requirements or platform developments. Each new version will be published on this page with a clearly stated update date.

For significant changes that materially affect how we use your data, we will notify you via your registered email or through an in-platform notification at least 14 days before changes take effect — giving you sufficient time to review and decide whether to continue using our platform.

Continued use of the 16Malaysia platform after the effective date of any changes constitutes your acceptance of the updated policy. If you do not agree with the changes, you have the right to close your account before they take effect.


12 Contact Our Data Protection Officer

16Malaysia has appointed a Data Protection Officer responsible for ensuring PDPA compliance and handling all privacy-related enquiries from members. For any questions, complaints or requests relating to this Privacy Policy, please contact us through the following channels:

  • Email: support@16malaysia.com
  • Live Chat: Available 24 hours a day, 7 days a week via the 16Malaysia platform
  • Language of Service: Bahasa Melayu and English
  • Response Time: Acknowledgement within 2 business days, resolution within 14 business days

You also have the right to lodge a complaint with the Department of Personal Data Protection Malaysia if you are dissatisfied with how 16Malaysia has handled your personal data, after first submitting a complaint to us.

We encourage you to contact us directly first for any privacy concerns. Our team will work to resolve every issue fairly, transparently and within the committed timeframe.

FAQ — 16Malaysia Privacy Policy

Simple answers to the most frequently asked questions about privacy on our platform

No. 16Malaysia does not sell, rent or share your personal data with any third party for marketing purposes. We share only the minimum data necessary with service providers who help us operate the platform — such as payment providers (Touch 'n Go, GrabPay, DuitNow) and licensed game providers. All such third parties are bound by strict data protection agreements and may not use your data for their own purposes.

You may submit a data deletion request by emailing support@16malaysia.com with "Data Deletion Request" as the subject line. Please include your full name and registered email address for identity verification. We will process your request within 14 business days. Please note that certain data may need to be retained to fulfil legal obligations — such as financial records for 7 years — and we will inform you of any data that cannot be deleted, along with the reasons.

16Malaysia does not store your full credit card details. For transactions via eWallets such as Touch 'n Go, GrabPay, Boost or ShopeePay, payments are processed through a secure payment gateway and 16Malaysia receives only transaction confirmations — not your full financial details. For withdrawals to Malaysian bank accounts via DuitNow or FPX, we store your account number solely for legitimate processing purposes, protected with full encryption.

When you close your 16Malaysia account, your personal data will be anonymised or deleted within 90 days. However, financial records and transaction data will be retained for 7 years in accordance with Malaysia's accounting legal requirements. Customer support communication data will be retained for 2 years. All retained data will not be used for marketing purposes or shared with any third party, and will be permanently deleted once the mandatory retention period has expired.

16Malaysia uses 256-bit SSL encryption for all communications, stores passwords in an irreversible hashed format, conducts regular penetration testing and monitors systems 24 hours a day. All staff access to member data is logged and audited. We also employ two-factor authentication for sensitive internal access. In the event of any data breach that may affect your information, we are committed to notifying you within 72 hours and taking immediate remedial action.

Yes, you can opt out of promotional emails from 16Malaysia at any time. Simply click the "unsubscribe" link at the bottom of any promotional email we send, update your communication preferences in your account settings, or contact our support team at support@16malaysia.com. Requests will be processed within 7 business days. Please note that opting out of promotional emails does not affect transactional emails such as deposit confirmations, withdrawal notifications and account security alerts, which will continue to be sent.

Your Data is Secure. Your Experience is Guaranteed at 16Malaysia.

Register a free account in two minutes and enjoy over 3,500 games with the confidence that your personal data is fully protected under Malaysia's PDPA. Deposit easily via Touch 'n Go eWallet or GrabPay, with withdrawals processed in 5–10 minutes.

🔒
256-bit SSL
Your Data is Fully Protected
Responsible Gaming — A Core Value of 16Malaysia

The 16Malaysia platform is for entertainment and must remain that way. Set deposit and play-time limits before starting each session. Never play with money you cannot afford to lose. This platform is strictly for users aged 18 and above. Use our self-exclusion tools if you feel you need a break from the platform.

Deposit Limit Session Time Limit Self-Exclusion 18+ Only

Have Questions About Your Data Privacy at 16Malaysia?

Our Malay-speaking support team is available 24 hours a day. Reach us via live chat or email for any queries relating to your privacy or personal data.

Register for Free Log In
Bahasa Melayu