Mh123 Privacy Policy – Protection of Malaysian Users' Personal Data

1Introduction – Why Your Privacy Matters to mh123

When you register an account at mh123, making deposits via Touch 'n Go or DuitNow, betting on Malaysia Super League football or All England badminton matches, or reaching out to our support team — you are trusting us with your personal information. That trust is not something we take lightly.

Mh123 is an online Sports Betting and entertainment platform operating exclusively for Malaysian users. We understand the sensitivity of financial and personal information, and we believe every user has the right to know exactly what happens to their data — without complex technical language or hidden clauses.

This Privacy Policy is written in plain, easy-to-understand language to ensure every Malaysian user can make informed decisions about their use of the platform mh123. We are committed to never selling, renting, or disclosing your personal data to third parties for marketing purposes without your consent.

2Types of Personal Data We Collect

Mh123 collects various types of information depending on how you interact with our platform. The following are the main categories of data collected:

Mh123 does not collect information beyond what is necessary for the platform's operations. You are not required to provide any additional information that is not requested during registration or normal use.

3How mh123 Uses Your Personal Data

Personal data collected by mh123 used solely for legitimate and necessary purposes. The following outlines specifically how we use your information:

• Account Management: Creating and managing your mh123 account, including identity verification, processing logins, and maintaining accurate account records.
• Transaction Processing: Processing deposits via Malaysian eWallets and online banking, handling withdrawal requests to your account, and settling all bets placed on the platform.
• Platform Security: Detecting and preventing fraud, multi-account use, unauthorized access, money laundering, and any activity that violates Terms & Conditions mh123.
• Customer Support: Providing technical assistance and account-related support, resolving complaints, and maintaining service quality in Bahasa Melayu.
• Legal Compliance: Complying with legal and regulatory obligations applicable in Malaysia, including reporting requirements and record retention periods as stipulated by law.
• Platform Improvements: Analysing usage patterns to improve the user experience, identify technical issues, and develop new features relevant to Malaysian users.
• Service Communications: Sending important notices about your account, changes to terms or policies, promotions you are eligible for, and information related to ongoing tournaments or events.
• Responsible Gaming: Monitoring betting patterns to identify users who may need self-control assistance, and providing appropriate tools or support.

4Third-Party Data Sharing & Disclosure

Mh123 does not sell, rent, or disclose users' personal data to third parties for marketing purposes. However, there are limited situations where mh123 may need to share your information with other parties, and this is done responsibly:

• Payment Service Providers: To process deposits and withdrawals via methods such as Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX, Maybank2u, and CIMB Clicks, minimal transaction information must be shared with the respective payment service providers. All such providers maintain their own privacy policies and are subject to applicable Malaysian laws.
• Authorities and Legal Compliance: mh123 will disclose the necessary information to competent authorities in Malaysia when required by law, court order, or legitimate investigation. This includes compliance with Malaysia's anti-money laundering laws.
• Technology Service Providers: Technical infrastructure providers such as cloud computing services, cybersecurity providers, and analytics vendors contracted by mh123 may process personal data on our behalf. All such providers are bound by strict data protection agreements.
• Business Transfer: In the event of a merger, acquisition, or transfer of mh123's business assets, user data may form part of the transferred assets. Users will be notified in advance of any changes in data ownership or control.

5Security Measures to Protect Your Data

Mh123 invests in the latest security technologies and procedures to protect users' personal and financial data. Key security measures we have in place include:

• 256-bit SSL Encryption — All communication between your device and mh123 servers is encrypted using the latest TLS protocols, making any transmitted data unreadable to unauthorised parties.
• Hashed Password Storage — User passwords are not stored in plain text. We use strong cryptographic hashing to ensure your password cannot be recovered, even by mh123 staff.
• Strict Access Controls — Access to user data within mh123's internal systems is restricted on a need-to-know basis. Only staff who require access to perform their duties are permitted.
• Two-Factor Authentication (2FA) — mh123's internal administration system uses two-factor authentication to prevent unauthorized access even in the event that staff credentials are compromised.
• 24/7 Security Monitoring — An automated monitoring system operates around the clock to detect unusual activity, intrusion attempts, or suspicious access patterns and respond immediately.
• Regular Security Audits — mh123 undergoes regular security audits by independent experts to identify and address any vulnerabilities in the system.
• Identity Verification (KYC) — The Know Your Customer (KYC) process ensures that accounts are only used by legitimately verified individuals, protecting you against identity misuse.

While mh123 takes all reasonable steps to protect your data, no system can be guaranteed 100% secure against every threat. You also play an important role — keep your password safe, do not share your login details with anyone, and notify us immediately if you suspect your account has been accessed without authorisation.

6Cookies & Tracking Technologies

The mh123 platform uses cookies and similar tracking technologies to ensure a smooth and secure user experience. The types of cookies used are as follows:

• Essential Cookies: Required for core platform functionality — login, user sessions, security, and bet processing. These cookies cannot be disabled as they are essential to platform operation. For example, session cookies that keep you logged in as you navigate between pages on mh123.
• Preference Cookies: Saving your preferences such as language, display settings, and other personal configurations so you do not have to reset them each time you log in to mh123.
• Analytics Cookies: Helps mh123 understand how users interact with the platform — the most frequently visited pages, time spent, and navigation patterns. This information is used in aggregate form and cannot directly identify any individual.
• Security Cookies: Used to detect suspicious activity such as repeated login attempts, unusual access patterns, or attempts to circumvent mh123's security systems.

Most web browsers allow you to control or delete cookies through browser settings. Please note, however, that disabling essential cookies may affect the functionality of the mh123 platform and your overall user experience. For guidance on managing cookies in your specific browser, refer to that browser's help section.

7Your Rights as a mh123 User

As a user mh123 who are domiciled in Malaysia, you have certain rights regarding your personal data. mh123 respects and facilitates the exercise of these rights:

Mh123 will process data rights requests within 30 days of receipt. In complex cases, this period may be extended to up to 60 days, with appropriate notice provided to you. Please note that some deletion requests may not be fully fulfillable where retention of the relevant data is required under Malaysian law.

8Data Retention & Deletion

Mh123 does not retain your personal data longer than is necessary for the stated purposes. The following is a general guide to our data retention periods:

• Active Account Data: Account information and activity records are retained for as long as your account remains active and in use on mh123.
• Financial Transaction Records: Records of deposits, withdrawals, and bets in MYR are retained for a minimum of 7 years after each transaction, in accordance with Malaysian accounting and anti-money laundering legal requirements.
• Identity Verification (KYC) Data: Identity verification documents such as copies of MyKad are retained for a minimum of 5 years following account closure, in accordance with legal compliance requirements.
• Support Communication Records: Live chat transcripts and support emails are retained for 2 years for service quality and dispute resolution purposes.
• Security Logs: Access logs and security logs are retained for 12 months for fraud detection and security incident response purposes.
• Closed Account Data: When an account is closed at the user's request, mh123 will delete or de-identify it within 90 days, except for data that must be retained in accordance with applicable laws.

9Children's & Minors' Privacy

Mh123 is a platform intended for individuals aged 18 years and above only. We do not knowingly collect or process personal data from children or individuals under the age of 18.

If you believe that a child or person under 18 has registered an account on mh123 — whether using their own information or someone else's — please notify us immediately by email at support@mh123.click. mh123 will take prompt action to investigate and close the account in question, and to delete all associated data.

Parents and guardians concerned about their children's use of online platforms are advised to enable the parental controls available on devices and web browsers used at home. mh123 also encourages open family discussions about responsible internet use.

10Links to Third-Party Services

The mh123 platform may contain links to third-party services such as the Malaysian payment providers mentioned earlier. When you click a link to a third-party website or application — such as the Touch 'n Go login page or the DuitNow payment portal — you will be leaving the mh123 platform environment.

Mh123 has no control over the privacy policies or data security practices of those third-party websites or services. Your use of such third-party services is subject to their own privacy policies, which we encourage you to read before proceeding with any transaction outside the mh123 platform.

Please note that mh123 only accepts the listed local Malaysian payment methods — Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX, Maybank2u, and CIMB Clicks. Never use foreign or unlisted payment methods for transactions on mh123, as doing so may compromise your security and privacy.

11How to Contact mh123 Regarding Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how mh123 handles your personal data, we encourage you to reach out to us:

• Email: support@mh123.click — Send an email with a clear subject line such as "Privacy Policy Enquiry" or "Data Access Request". We will respond within 2 to 4 hours on business days.
• Live Chat: Access live chat within the mh123 platform after logging in — available 24/7 with a response time of 2 to 5 minutes. For complex privacy inquiries, live chat may direct you to email for more thorough documentation.
• WhatsApp: A WhatsApp link is available within the platform after logging in. Support is provided in Bahasa Malaysia by a trained team.

When contacting mh123 regarding privacy, please provide sufficient information for us to identify your account (such as your registered phone number or username) so we can process your request efficiently. Do not share your password through any communication channel.

12Amendments to This Privacy Policy

Mh123 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in data management practices, evolving Malaysian legal requirements, or improvements in how we protect user information.

• Users will be notified of any material changes to this Privacy Policy via their registered email address or through a prominent notice on the mh123 platform, prior to the changes taking effect.
• The "Updated" date at the top of this page will always reflect the most recent date this Privacy Policy was revised.
• Continued use of the mh123 platform after a policy change takes effect constitutes your acceptance of the updated terms.
• If you do not agree with the amendments made, you have the right to close your account and request data deletion in accordance with the procedures set out in Sections 7 and 8 above.

FAQ – mh123 Privacy Policy