Privacy Policy 20oz – Personal Data Protection for Malaysian Members

This Privacy Policy clearly and transparently describes how the platform 20oz ("we", "platform") collects, stores, processes, protects and, in certain circumstances, shares your personal information as a member or visitor to our website. This document has been prepared to ensure clear understanding for all our Malaysian users.

Platform 20oz operates as a premium online gaming service provider in Malaysia, offering a wide range of options including slots, live casino with live dealers, card games and much more. In the course of delivering these services, we need to collect and process your personal data for lawful and specific purposes, which will be explained in detail in the sections that follow.

This Policy applies to all individuals who interact with the platform 20oz — whether as a registered member actively using the platform, an individual in the process of registering, or simply a visitor browsing our website without an account. We operate in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), the country's primary legislation governing the collection and processing of personal data.

Platform 20oz only collects personal data that is strictly necessary to provide you with a quality, secure and legally compliant service. We do not collect excessive or irrelevant data. The following are the categories of data we collect:

Financial data relating to your payment method — whether Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or bank transfer via FPX (Maybank2u, CIMB Clicks and others) — is processed through secure, encrypted payment channels. The 20oz does not store your card number or full bank account details directly within our systems.

Platform 20oz uses your personal data exclusively for lawful and necessary purposes in order to provide you with the best, safest and most legally compliant gaming experience. Every use of data has a clear legal basis — whether grounded in contract (the service agreement between you and 20oz), legal obligations, legitimate interests, or your own consent.

• Account Management: Creating and managing your account on the platform 20oz, including the registration process, identity verification, password setup and profile updates.
• Transaction Processing: Processes all deposits and withdrawals in MYR via approved local payment methods, ensuring your funds move quickly and securely.
• Security & Fraud Prevention: Detecting, investigating, and preventing any suspicious activity, fraud attempts, multi-account usage, and other security threats against the platform 20oz and our member community.
• Legal Compliance: Fulfilling our obligations under applicable Malaysian laws, including anti-money laundering (AML) requirements and data protection legislation (PDPA 2010).
• Service Improvements: Analysing platform usage patterns in aggregate and anonymised form to improve interface design, game selection and the overall quality of the user experience at 20oz.
• Account-Related Communications: Sending important notifications regarding your account — including security alerts, transaction confirmations, and critical service updates.
• Responsible Gaming: Monitoring your gambling patterns to detect early warning signs of problem gambling and offer appropriate support, in line with the platform's commitment to 20oz towards the wellbeing of our members.
• Marketing Communications (with consent): Sending information about promotions, bonuses, and new offers from the platform 20oz — only if you have given consent to receive such communications. You may withdraw this consent at any time.

Platform 20oz does not sell, rent or disclose your personal data to third parties for their own marketing purposes. This is an unconditional commitment. However, there are limited circumstances in which we may need to share your data with certain parties in order to provide our services to you:

• Payment Service Providers: Transaction information that must be shared with the payment processors handling your deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, FPX and other methods. All such providers are bound by strict confidentiality agreements with 20oz.
• Game Providers: The minimum technical data required by our partner game providers (such as Pragmatic Play, PG Soft, Evolution, and others) to ensure games function correctly and to verify fair play.
• Security & Anti-Fraud Services: Technical data shared with third-party security service providers who assist us in detecting and preventing fraud, money laundering and other security threats.
• Legal Authorities: Personal data may be disclosed to government agencies, law enforcement authorities or Malaysian courts where required by a valid court order or other legal obligation. 20oz will not voluntarily disclose this data beyond what is legally required.

All third parties we engage with in this context are bound by data protection agreements ensuring they handle your data to a standard no lower than the one we set for ourselves at 20oz.

Protecting your personal and financial data is among the platform's highest priorities 20oz. We continually invest in the latest security technologies and processes to ensure your information remains protected at all times against unauthorised access, loss, misuse or accidental destruction.

• 256-bit SSL Encryption: All communications between your browser or app and the 20oz is encrypted using TLS/SSL protocols with 256-bit keys — the same standard employed by leading banking and financial institutions in Malaysia.
• Internal Access Controls: Access to members' personal data within the system 20oz restricted to personnel who genuinely need it to carry out legitimate duties, and all access is logged and continuously monitored.
• 24/7 Security Monitoring: Our security team continuously monitors all platform activity using sophisticated intrusion detection systems capable of identifying and responding to threats in real time.
• Regular Security Audits: Platform 20oz undergoes regular independent security audits by certified third-party experts to identify and address any vulnerabilities before they can be exploited.
• Two-Factor Authentication (2FA): Additional verification systems are available to protect your account from unauthorised access, even in the event that your password is compromised.
• Incident Response Plan: 20oz has detailed incident response procedures and trained staff to handle any data security breach efficiently and minimise the impact on members.

While we take all reasonable measures to protect your data, no security system in the world can guarantee absolute 100% protection. You also play an important role in keeping your account secure — please ensure your password is strong, unique, and not shared with anyone. Contact support 20oz immediately if you suspect any suspicious activity on your account.

Platform 20oz uses cookies and similar tracking technologies to enhance your experience, enable essential platform functions to operate correctly, and help us understand how visitors use our website. Cookies are small text files stored on your device by your web browser when you visit our site.

Types of cookies we use on the platform 20oz:

• Essential Cookies: Required for core platform functions such as login, play sessions and security. These cookies cannot be disabled without affecting the basic functionality of the platform 20oz.
• Performance Cookies: Collects information on how visitors use the platform — which pages are visited most frequently, how long sessions last, and so on — to help us improve overall performance and user experience.
• Functional Cookies: Saves your preferences such as display language, favourite game types and other settings so you do not need to reconfigure them each time you visit the platform 20oz.
• Analytics Cookies: Helps us understand platform usage patterns on an aggregate, anonymised basis for the purpose of continuous improvement. This data does not identify you as an individual.

You can manage or disable cookies at any time through your web browser settings. Please note that disabling certain essential cookies may affect your gaming experience on the platform 20oz. Most modern browsers offer straightforward options to manage cookies through their settings menu or privacy preferences.

As a member of the platform 20oz and individuals protected under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several important rights regarding your personal data. The 20oz respects and facilitates the exercise of all these rights:

To exercise any of the above rights, please contact the customer support team 20oz via live chat or email at [email protected]. We will process your request within 30 business days. No fee is charged for a reasonable first-time request. Repeated or excessive requests may be subject to a reasonable administrative fee.

Platform 20oz is a service intended for individuals aged 18 and above only. We do not knowingly collect personal data from any individual under the age of 18. This is an absolute, non-negotiable commitment.

If you are a parent or guardian and discover that a child under your care has registered an account on the platform 20oz using false information about their age, please contact us immediately via email at [email protected] or through live chat. We will take prompt action to close the account in question and delete all associated data without delay.

Should we suspect that personal data of a child has been collected without the knowledge or consent of a parent or guardian, 20oz will take the necessary steps to verify the user's age, and if confirmed to be underage, the relevant data will be deleted immediately.

Platform 20oz does not retain your personal data for longer than is necessary. Retention periods depend on the type of data, the purpose for which it was collected, and applicable legal requirements:

• Active Account Data: For as long as your account remains active on the platform 20oz, your account data will be retained to ensure uninterrupted service.
• Data After Account Closure: When you close your account or request data deletion, we will delete or anonymise your data within a reasonable timeframe, except for data we are legally required to retain under Malaysian law.
• Financial & Transaction Records: Malaysian law (including anti-money laundering requirements) obliges us to retain financial transaction records for a minimum period of seven (7) years after the transaction occurs, even if the account has been closed.
• Security Logs: Security logs and activity records related to fraud prevention are retained for the period required for investigation and legal compliance purposes.
• Support Communications: Records of conversations and emails with the support team 20oz retained for a period of up to three (3) years for service quality purposes and the resolution of any disputes that may arise.

Once the relevant retention period has expired and there are no legal obligations preventing deletion, 20oz will delete or destroy the relevant data securely to ensure it cannot be recovered or accessed by any unauthorised party.

Platform 20oz reserves the right to amend, update or replace this Privacy Policy from time to time in line with changes to Malaysian law, industry practices, the services we offer, or feedback received from our members.

Any amendments made will be published on this page with a clear effective date. For changes deemed material (significant and substantial), 20oz will endeavour to notify members via email or in-platform notification at least 14 days before any changes take effect, giving you sufficient time to review and understand the updates.

It is your responsibility as a member to review this Privacy Policy page periodically, particularly before providing us with any additional data. Your continued use of the platform 20oz following any amendments taking effect constitutes your acceptance of the revised terms. If you do not agree with the changes made, please contact our support team to discuss your options, including the possibility of closing your account.

If you have any questions, concerns or complaints regarding this Privacy Policy, the way we handle your personal data, or if you wish to exercise any of the data rights outlined above, the 20oz with Bahasa Malaysia support is available to assist you across a range of channels, 24 hours a day, 7 days a week:

• Live Chat: The fastest channel — click the live chat icon within the platform 20oz to connect with a support agent in under 2 minutes.
• Official Email: Send privacy-related enquiries to [email protected]. This is the only official email address 20oz.
• WhatsApp and Telegram: For urgent enquiries, you can reach us via WhatsApp or Telegram @20ozSupport.

Formal complaints relating to privacy and data protection must be submitted in writing via email to allow us to properly process and document your case. We are committed to acknowledging receipt of every complaint within 24 hours and endeavour to resolve privacy matters within 14 business days, or sooner where possible.