Atm2u Privacy Policy – Malaysian Player Data Protection

When you register and use the atm2u, there are several types of information we collect. All of it is collected for a clear purpose and used only for the purposes stated in this Privacy Policy.

Information you provide directly during registration:

• An active Malaysian phone number (used for OTP verification and account communications).
• Your chosen username.
• Encrypted passwords — we do not store passwords in plain text.
• Identity verification information (if required for withdrawals above a certain amount): full name and national identification number.

Information collected automatically during platform use:

• IP address and device information (device type, operating system, browser version).
• In-platform activity logs — games played, bets placed, session duration.
• Transaction data — deposit amounts, withdrawals, and payment methods used.
• Technical performance data — page load times, errors encountered, for platform improvement purposes.

We do not collect sensitive information such as biometric data, medical records, or credit card details. All payments at atm2u via eWallet and FPX — namely Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, Maybank2u, and CIMB Clicks — is processed by the respective payment providers in accordance with their own privacy policies.

atm2u uses collected data solely for purposes related to delivering the platform's services to you. The specific purposes for which this data is used are as follows:

• Identity verification and fraud prevention — to verify that each account belongs to the correct individual and to detect any suspicious activity.
• Financial transaction processing — ensures your deposits and withdrawals are processed correctly and reach the right destination.
• Provision of customer support services — account and transaction history helps our support team atm2u resolve your issue more quickly.
• Platform improvements — anonymised usage data is analysed to understand usage patterns and improve the platform's interface and performance.
• Account-related communications — sends important notifications such as transaction confirmations, security alerts, and terms updates via SMS to your registered number.
• Legal compliance — to comply with applicable legal requirements, including financial transaction record retention obligations.

atm2u does not use your data to make automated decisions that materially affect you without human review. Any action taken on your account based on data — such as an account suspension for security reasons — can be reviewed by our team upon your request.

atm2u does not sell players' personal data to anyone. This is a commitment we uphold without exception. That said, within the context of platform operations, there are limited situations where data may be shared with specific third parties:

• Payment providers — Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost, ShopeePay, Maybank2u, and CIMB Clicks receive only the minimum transaction information required to process your payment. All these providers are bound by strict data privacy agreements and maintain their own privacy policies.
• Licensed game providers — to enable games to function correctly, your username and account ID may be transmitted to the game provider's servers. This does not include your financial information or phone number.
• Law enforcement agencies — Where required by a court order or a lawful request from Malaysian authorities, atm2u may be required to disclose certain information. We will notify you of any such disclosure to the extent permitted by law.
• Technical service providers — Infrastructure and cloud service providers that support platform operations atm2u may have limited access to data in a strictly technical capacity. They are bound by strict confidentiality agreements and are not permitted to use the data for any other purpose.

In all the data-sharing cases described above, atm2u ensures that only the minimum necessary data is shared, and all third parties involved are bound by confidentiality and data protection obligations that are equivalent to or stricter than our own standards.

atm2u implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure.

Technical measures implemented:

• Data encryption in transit — all communications between your browser/app and the atm2u encrypted using TLS 1.3 with a 256-bit SSL certificate.
• Data encryption at rest — sensitive data such as identity verification information and financial records are encrypted within the database using robust encryption standards.
• Role-based Access Control — only staff with a legitimate operational need may access player data, and all such access is logged and audited.
• Two-factor authentication (2FA) — available to all player accounts and mandatory for staff accounts with access to data.
• 24/7 Security Monitoring — an intrusion detection system continuously monitors for unusual activity.

Organisational measures:

• Independent security audits are conducted regularly by accredited third parties.
• All staff who handle player data undergo privacy and data security training.
• A clear incident response procedure is in place to address any data breaches in a timely manner.

While we take all reasonable precautions, no system can guarantee absolute security in a digital environment. We encourage you to take your own security measures — in particular, keeping your password confidential and enabling 2FA on your account atm2u you.

Platform atm2u uses cookies and similar tracking technologies to ensure the platform functions properly and to provide you with a better experience. The following are the types of cookies we use:

You can manage your cookie settings through your browser. However, disabling essential cookies may affect the functionality of the platform atm2u significantly. For the best experience, we recommend keeping cookies enabled while using our platform.

atm2u does not use third-party cookies for advertising or cross-site tracking purposes. The analytics cookies we use are limited to the atm2u.xyz domain only.

Financial data privacy is among the most critical aspects of data protection at atm2u. We understand that payment-related information is highly sensitive and we handle it with the highest level of protection.

Platform atm2u accepts deposits and withdrawals via the following Malaysian payment methods: Touch 'n Go eWallet, GrabPay, DuitNow, FPX Maybank2u, CIMB Clicks, Boost, and ShopeePay. All transactions are processed through encrypted and audited payment channels.

• atm2u does not store your bank account or eWallet details directly. We only retain transaction records (amount, date, method, status) for bookkeeping and customer support purposes.
• All transaction data is encrypted within our database and accessible only to authorised finance personnel.
• Transaction records are retained for a minimum of 7 years in line with standard financial compliance requirements — this is common practice across the industry.
• If you request a withdrawal, your name and eWallet or FPX account number are used solely for payment processing and are not shared with any other party.

For anti-money laundering (AML) compliance purposes, atm2u may need to retain and monitor certain transaction patterns. This is a standard industry compliance requirement and does not mean we monitor your personal activity outside the platform.

As a user of the platform atm2u, you have the following rights regarding your personal data. We fully respect these rights and make it straightforward for you to exercise them.

To exercise any of the rights above, contact the support team at atm2u via email at support@atm2u.xyz, clearly stating the right you wish to exercise and your account details for identity verification. We will acknowledge your request within 3 business days and resolve it within 14 business days.

atm2u does not retain your personal data for longer than necessary. Retention periods depend on the type of data and the purpose for which it was collected.

• Active account data — retained for as long as your account is active and for a reasonable period after account closure for support and dispute purposes.
• Financial transaction records — retained for a minimum of 7 years in accordance with standard financial compliance requirements in Malaysia.
• Platform activity logs — retained for 90 days for technical support and security purposes, then automatically deleted.
• Customer support communications — retained for 2 years to allow us to provide consistent support services.
• Session cookie data — session cookies expire when you log out. Preference cookies are stored for up to 12 months or until you delete them.

Once the defined retention period has passed, data is deleted or converted into anonymised form that cannot be used to identify you personally. The deletion process runs automatically on a set schedule and is audited on a regular basis.

If you close your account atm2u, data that is no longer required for operational or compliance purposes will be deleted within 30 days. Financial data that must be retained for legal compliance will remain stored for the minimum prescribed period, but will not be used for any marketing or operational purpose.

atm2u reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements to how we protect your data. All amendments will be published on this page with a clear update date.

When a material amendment occurs — meaning a change that directly affects how your data is collected or used in a way that may impact you — we will notify you via SMS to your registered phone number or through an in-platform notification at least 14 days before the amendment takes effect.

Continued use of the platform atm2u after any amendments to this Privacy Policy take effect will be considered your acceptance of those changes. If you disagree with any of the changes, you have the right to close your account and request deletion of your data that is no longer required for legal compliance purposes.

We encourage you to review this page regularly, especially before making any significant transactions or providing additional information to atm2u. The latest version of this Privacy Policy is always available at atm2u.xyz/privacy-policy. This document is version v3.1, updated on 1 January 2026.

If you have any questions, concerns, or complaints regarding how atm2u handles your personal data, we encourage you to reach out to us directly. We are committed to providing a clear and satisfactory response to every privacy-related enquiry.

• Privacy Email: support@atm2u.xyz — for specific enquiries relating to personal data, data access requests, or privacy complaints. Please include "Privacy Enquiry" in your email subject line.
• Live Chat: Available on the platform atm2u for general privacy enquiries, responded to in under 2 minutes.
• Frequently Asked Questions: Visit atm2u FAQ page for answers to the most frequently asked privacy questions.

All privacy-related complaints will be taken seriously. We will acknowledge receipt of your complaint within 3 business days, conduct an internal investigation, and provide a substantive response within 14 business days. If your issue is more complex and requires additional time, we will keep you updated on the progress of the investigation at least every 7 business days.

Support and privacy team atm2u operates 24 hours a day, 7 days a week. Your trust is our most valuable asset — and we will always do our best to uphold it.