Privacy Policy

maju36 ("we", "us", "our", "the Company") operates the online gaming and sports betting platform accessible at https://maju36.cam (the "Platform"). We recognise that our players entrust us with sensitive personal information when they register, deposit funds, and participate in games on the Platform. This Privacy Policy ("Policy") sets out how maju36 collects, processes, stores, shares, and protects that information.

This Policy applies to all individuals who access, register on, or otherwise interact with the Platform, including players from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other regions of Malaysia, as well as any other jurisdiction from which access is permitted.

By using the Platform, creating an Account, or submitting your personal information to us, you acknowledge that you have read, understood, and consent to the practices described in this Policy. If you do not agree to the terms of this Policy, please discontinue your use of the Platform immediately.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

maju36 collects Personal Data that is necessary for the operation of the Platform, compliance with regulatory obligations, and the delivery of a high-quality gaming experience to our players. The categories of data we may collect are set out in the table below:

maju36 collects Personal Data through the following channels and mechanisms:

• Direct submission: Information you provide when registering an Account, completing KYC verification, making deposits or withdrawals, contacting our support team, or responding to surveys and promotions.
• Automated technologies: Technical data collected automatically when you access the Platform, including through cookies, web beacons, pixel tags, and server logs. See Section 9 (Cookies & Tracking) for further details.
• Third-party sources: Data received from payment processors (such as FPX, DuitNow, Maybank, CIMB, and Public Bank integrations), identity verification providers, and fraud detection services who share information with us in connection with your Account.
• Publicly available sources: In limited circumstances, where required for regulatory compliance or fraud prevention, we may verify information against publicly available data sources.

maju36 processes your Personal Data for the following purposes:

• Account management: To create, maintain, and administer your player Account, including processing registrations, managing balances, and facilitating login authentication.
• Payment processing: To process deposits and withdrawals via Malaysian payment providers including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and direct bank transfers with Maybank, CIMB, Public Bank, and Hong Leong Bank, as well as cryptocurrency transactions.
• Regulatory compliance and KYC: To verify your identity, age (21+), and eligibility in accordance with our international gaming licence conditions and applicable anti-money laundering obligations.
• Service delivery: To provide access to games, sports betting markets (including Liga Super Malaysia, EPL, UFC, and others), bonuses, promotions, and customer support.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, account misuse, money laundering, and other prohibited conduct.
• Responsible gambling: To monitor player behaviour for indicators of problem gambling and to implement self-exclusion, deposit limits, and other player protection tools where appropriate.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided consent to receive such communications.
• Analytics and platform improvement: To analyse usage patterns, optimise the Platform experience, and develop new features for Malaysian users.
• Legal obligations: To comply with applicable laws, regulatory requirements, court orders, and directives from competent authorities.

maju36 processes your Personal Data only where a valid legal basis exists. The legal bases upon which we rely are as follows:

• Performance of a contract: Processing that is necessary to fulfil our contractual obligations to you as a registered player, including Account creation, payment processing, and game delivery.
• Legal obligation: Processing required to comply with our regulatory and legal obligations, including KYC verification, anti-money laundering checks, and age verification (minimum 21 years).
• Legitimate interests: Processing carried out to pursue our legitimate business interests where those interests are not overridden by your privacy rights. This includes fraud detection, platform security, and analytics for service improvement.
• Consent: Where we rely on your consent — for example, for marketing communications — you may withdraw that consent at any time by contacting our support team or updating your notification preferences in your Account settings. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

maju36 does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment service providers: Financial institutions and e-wallet operators (including DuitNow/FPX infrastructure, Touch 'n Go, Boost, GrabPay, and partnering banks) who process transactions on the Platform.
• Identity verification and KYC providers: Third-party specialists engaged to verify the identity, age, and eligibility of players in accordance with our regulatory obligations.
• Game content providers: Software providers whose games are offered on the Platform, to the extent necessary to facilitate gameplay and maintain fair play integrity.
• Customer support platforms: Technology providers who power our live chat and support ticketing systems, under binding data processing agreements.
• Fraud prevention and security services: Specialist providers who assist us in detecting unusual activity, preventing account compromise, and investigating suspected fraud.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or lawful request from a competent authority, we may disclose Personal Data to regulators, law enforcement agencies, or other governmental bodies.
• Professional advisers: Lawyers, auditors, and accountants who require access to data in the course of providing professional services to maju36, subject to confidentiality obligations.

maju36 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention principles apply:

• Active Account data: Retained for the duration of your Account's active status and for a period thereafter as required by our licence conditions and anti-money laundering obligations (typically a minimum of five years following account closure).
• Transaction records: Financial transaction data, including deposits, withdrawals, and betting records, is retained for the period required under applicable financial regulations.
• KYC documentation: Identity verification documents are retained for the period stipulated by applicable anti-money laundering regulations.
• Communication records: Support correspondence and chat transcripts are retained for a period of up to two years, or longer where relevant to an active dispute or regulatory investigation.
• Marketing consent records: Consent records for marketing communications are retained for as long as the consent remains current, and for a reasonable period thereafter as evidence of consent.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be linked to an identified individual.

maju36 uses cookies and similar tracking technologies to enhance your experience on the Platform, remember your preferences, analyse usage patterns, and support fraud detection. A cookie is a small text file placed on your device when you visit a website.

The types of cookies we use include:

• Strictly necessary cookies: Essential for the Platform to function. These cannot be disabled as they enable core features such as login sessions, balance display, and security verification.
• Functional cookies: Allow the Platform to remember your preferences, such as language settings and notification preferences, to provide a more personalised experience.
• Analytical cookies: Collect aggregated, anonymised information about how visitors interact with the Platform (e.g., pages visited, session length, device type). This data is used solely to improve the Platform experience.
• Security cookies: Help us detect and prevent fraudulent activity, bot traffic, and suspicious login patterns.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may impair the functionality of the Platform. We do not use third-party advertising cookies or behavioural targeting cookies on the Platform.

maju36 implements a multi-layered technical and organisational security framework to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the Platform.
• AES-256 encryption applied to Personal Data stored in our databases.
• Strict role-based access controls limiting employee access to Personal Data to those with a genuine operational need.
• Regular third-party security audits and penetration testing of Platform infrastructure.
• Multi-factor authentication options for player Accounts.
• Real-time fraud and anomaly detection systems monitoring for unusual Account activity.

While we apply industry-standard security measures, no data transmission over the internet can be guaranteed to be 100% secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, maju36 will notify affected individuals in accordance with applicable legal requirements.

As an individual whose Personal Data is processed by maju36, you hold a number of rights in relation to that data. These rights may be subject to certain conditions and limitations as provided by applicable law.

• Right of access: You have the right to request confirmation of whether maju36 processes Personal Data about you, and to request a copy of that data.
• Right to rectification: If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request correction without undue delay.
• Right to erasure: In certain circumstances, you may request that we delete your Personal Data. This right is subject to any overriding legal or regulatory obligation requiring us to retain the data.
• Right to restriction: You may request that we restrict the processing of your Personal Data in certain circumstances — for example, while a query about the accuracy of your data is being resolved.
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interests, and to object to receiving direct marketing communications at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of the above rights, please contact our Data Protection team via live chat or by email at [email protected]. We will respond to all requests within 30 calendar days. In complex or high-volume cases, this period may be extended by a further 30 days, and we will notify you accordingly.

The Platform is strictly intended for individuals aged 21 years and above. maju36 does not knowingly collect Personal Data from any person under the age of 21. We implement age verification controls at registration and require KYC documentation to confirm age eligibility.

If we become aware that we have inadvertently collected Personal Data from a person under 21 years of age, we will take immediate steps to delete that data and close the associated Account. Any funds deposited to an Account held by an underage individual will be handled in accordance with our Terms & Conditions and applicable regulatory guidance.

As maju36 operates under an international gaming licence and engages service providers across different jurisdictions, your Personal Data may be transferred to, stored in, or processed in countries outside Malaysia. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your data, including contractual protections with receiving parties that meet equivalent data protection standards.

By using the Platform, you acknowledge and consent to the transfer of your Personal Data to jurisdictions outside Malaysia for the purposes set out in this Policy, subject to the safeguards described above.

maju36 reserves the right to update or revise this Privacy Policy at any time. Material changes will be communicated to registered players via email notification or an in-Platform notice at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this page reflects the most recent revision. We encourage you to review this Policy periodically. Your continued use of the Platform after updated terms are published constitutes your acceptance of the revised Policy.

If you have any questions, requests, or concerns regarding this Privacy Policy, or if you wish to exercise any of your rights as a Data Subject, please contact the maju36 Data Protection team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the Platform. This is the fastest channel for all privacy-related queries.
• Email: [email protected] — please include "Privacy Request" in the subject line for priority handling.

Our Data Protection team is based in the same operational timezone as Malaysia and is fully equipped to handle requests from players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other regions. We aim to acknowledge all privacy-related correspondence within two (2) business days and provide a substantive response within the statutory 30-day window.