BetMGM Privacy Policy

Introduction and Scope

This Privacy Policy applies to personal information processed through BetMGM, including information provided during registration, identity verification, deposits, withdrawals, gaming, sports betting, support requests, and responsible gambling reviews. It also covers technical information generated when a visitor accesses BetMGM through a desktop, tablet, or mobile device.

By using BetMGM, you acknowledge the processing described in this policy. This policy should be read together with the Terms & Conditions. Where a separate notice is presented for a specific feature, that notice supplements this Privacy Policy for the relevant activity.

BetMGM serves users in Malaysia, including players in Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, and Johor Bahru. Privacy requirements can vary by jurisdiction. BetMGM therefore applies internal privacy and security standards while recognising that individual rights and legal obligations may depend on the circumstances.

Definitions

For the purposes of this Privacy Policy:

• “Personal data” means information relating to an identified or reasonably identifiable individual.
• “Processing” includes collecting, recording, organising, using, reviewing, storing, sharing, restricting, or deleting personal data.
• “Account data” means information associated with a registered BetMGM player profile.
• “Service provider” means an organisation that performs defined services supporting BetMGM operations.
• “Technical data” means device, browser, network, session, diagnostic, security, and interaction information.
• “You” means a visitor, registered player, or other individual whose information is processed by BetMGM.

Information BetMGM Collects

The information BetMGM collects depends on how a person uses the platform. Some data is provided directly by the player, while other data is generated through account activity, devices, games, payments, and security systems.

BetMGM may also receive information from payment providers and financial institutions supporting DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, or Hong Leong transactions. The information received depends on the payment route and may include confirmation of ownership, transaction status, and fraud-prevention signals.

How Personal Data Is Collected

BetMGM collects information directly when a user registers, updates an account, completes KYC checks, communicates with support, sets a deposit limit, requests self-exclusion, enters a promotion, or makes a transaction. Players are responsible for ensuring that information submitted to BetMGM is accurate and relates to them.

Information is also collected automatically when the platform is used. For example, BetMGM systems may record login attempts, pages visited, buttons selected, game sessions, betting activity, connection details, and error reports. These records help BetMGM maintain security, investigate disputes, improve mobile performance, and identify platform misuse.

BetMGM may receive relevant information from identity-verification services, payment processors, game systems, sports data services, anti-fraud tools, and customer support platforms. Any provider receiving personal information is expected to use it only for authorised purposes and to apply appropriate confidentiality and security measures.

Purposes of Data Processing

BetMGM may process personal information for the following purposes:

• Creating, maintaining, verifying, securing, and closing BetMGM accounts.
• Confirming that users meet the minimum age requirement of 21 years.
• Processing MYR deposits, withdrawals, refunds, adjustments, and payment investigations.
• Providing casino games, live dealer services, EPL and Liga Super Malaysia markets, UFC betting, and other platform content.
• Detecting account takeover, fraud, collusion, money laundering, bonus abuse, and prohibited activity.
• Responding to support requests, complaints, technical incidents, and payment questions.
• Applying deposit limits, cooling-off periods, self-exclusion, and other responsible gambling controls.
• Testing platform reliability, analysing aggregate performance, and improving the BetMGM mobile experience.
• Maintaining records needed for disputes, security reviews, internal governance, and applicable legal obligations.

Where consent is required for a particular optional activity, BetMGM will seek consent through an appropriate notice or preference. Where processing is necessary to provide an account service, protect users, prevent fraud, or satisfy an obligation, BetMGM may process information on the corresponding lawful or contractual basis available in the circumstances.

Cookies and Similar Technologies

BetMGM may use cookies, local storage, session identifiers, and comparable technologies to maintain secure logins, remember preferences, support account features, measure technical performance, and detect suspicious activity. Essential technologies are required for core BetMGM functions such as authentication, transaction security, and session continuity.

Analytics information may be used to understand general navigation patterns, identify errors, and improve page speed across different Malaysian mobile networks and devices. BetMGM aims to use this information in a proportionate manner. Browser controls may allow users to remove or block selected cookies, although disabling essential storage may prevent account or security functions from working correctly.

Disclosure of Personal Data

BetMGM does not sell personal data. BetMGM may disclose information to carefully selected service providers where disclosure is reasonably necessary to operate the platform. Relevant recipients may include identity-verification providers, payment processors, fraud-prevention services, hosting providers, customer support systems, game platform providers, security specialists, and professional advisers.

BetMGM may also disclose information where reasonably necessary to protect a player, enforce the Terms & Conditions, investigate suspected criminal conduct, respond to a valid legal requirement, establish or defend a claim, or protect the security and rights of BetMGM and its users.

Service providers are expected to process information according to documented purposes and suitable safeguards. BetMGM limits disclosure to information reasonably relevant to the service, investigation, or obligation concerned.

International Data Processing

BetMGM supports an international gaming platform, so personal data may be processed or stored outside Malaysia. Privacy laws and regulatory arrangements in another country may differ from those in Malaysia. Where an international transfer occurs, BetMGM seeks to use contractual, technical, and organisational measures appropriate to the nature of the data and the service.

International processing may be necessary for hosting, security monitoring, identity verification, payment support, game operation, and customer assistance. BetMGM assesses providers according to service needs, confidentiality expectations, security capability, and the sensitivity of information involved.

Data Security and Account Protection

BetMGM uses layered safeguards intended to reduce the risk of accidental loss, unauthorised access, alteration, disclosure, or misuse. Controls may include encrypted connections, restricted internal access, credential protection, system monitoring, transaction review, backup processes, and incident-response procedures.

No internet service can guarantee absolute security. Players also have an important role in protecting their information. A BetMGM password should be unique, difficult to guess, and kept confidential. Verification codes must not be shared, and devices should be secured with an appropriate lock. Suspected unauthorised access should be reported promptly.

If BetMGM identifies a personal data incident, the matter will be investigated and contained where possible. BetMGM will assess the likely impact and provide notifications where required or reasonably appropriate under the circumstances.

Data Retention

BetMGM retains personal data only for as long as reasonably necessary for the purposes described in this policy. Retention periods differ according to the type of record, account status, dispute risk, security needs, payment requirements, responsible gambling obligations, and applicable legal considerations.

Closing a BetMGM account does not necessarily result in immediate deletion of every record. BetMGM may retain identity, transaction, exclusion, fraud-prevention, complaint, and security information where required to protect players, prevent duplicate accounts, resolve disputes, or maintain appropriate operational records.

When information is no longer required, BetMGM may securely delete it, anonymise it, or restrict its use. Anonymised statistical information that no longer identifies a player may be retained for platform analysis and service planning.

Your Privacy Rights

Depending on the applicable rules and the nature of the request, a user may ask BetMGM to provide information about personal data, correct inaccurate details, delete eligible records, restrict selected processing, or explain a processing activity. BetMGM may need to verify identity before acting on a request.

These rights are not absolute. BetMGM may retain or continue processing certain information where necessary for account security, fraud prevention, payment disputes, responsible gambling exclusions, or another valid requirement. If a request cannot be completed, BetMGM will aim to explain the relevant reason.

Responsible Gambling and Sensitive Information

BetMGM may review account behaviour to identify possible indicators of gambling-related harm. Relevant information may include deposit frequency, stake changes, repeated cancelled withdrawals, long sessions, limit changes, support messages, or attempts to bypass account restrictions.

This information may be used to display safer-play messages, request a wellbeing conversation, apply an account review, suggest a cooling-off period, or enforce self-exclusion. Responsible gambling information is handled with care and shared internally only where reasonably necessary for player protection and account administration.

BetMGM is intended for adults aged 21 and above only. Further information about deposit limits, session controls, cooling-off periods, and self-exclusion is available on the Responsible Gambling page.

Children and Underage Users

BetMGM does not permit persons under 21 years of age to register or gamble. BetMGM may use age and identity verification measures and may suspend an account while age is being confirmed. If an underage person has provided information, the account may be closed and the information handled according to security, investigation, and retention requirements.

Parents and guardians should take reasonable steps to secure shared devices and payment methods. Passwords, verification messages, and account access must not be made available to a person under 21.

Policy Updates and Contact Us

BetMGM may revise this Privacy Policy when services, technology, security procedures, payment arrangements, or legal requirements change. The effective date at the top of the page will be updated when a revised version is published. Material changes may also be highlighted through an appropriate account or website notice.

Questions about this Privacy Policy, personal data, or a privacy request may be directed to BetMGM customer support. The website email is [email protected]. For security, BetMGM may ask for information sufficient to verify the requester's identity and connection to the relevant account.

Requests should clearly describe the information or issue concerned. BetMGM will review a valid request and respond within a reasonable period, taking account of its scope, complexity, security implications, and any applicable requirements.