At CardGames, we recognise that your personal data is a trust you place in us. This Privacy Policy clearly explains how we collect, use, store, and protect that information in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010.
Welcome to the Privacy Policy page CardGames. This document forms part of the service agreement between you and the platform CardGames accessible at cardgames.run. By registering an account or using any part of our platform, you agree to the personal data handling practices described in this Privacy Policy.
At CardGames, we do not view data protection as merely a legal obligation to be fulfilled. For us, it is the foundation of trust that defines the relationship between our platform and every player who registers. Many Malaysian players share sensitive financial and personal information when using online betting platforms — and we understand the weight of responsibility that comes with that trust.
We have written this Privacy Policy in plain, easy-to-understand language so that every player CardGames can genuinely understand what happens with their data — not just be presented with a lengthy, convoluted document that no one will read. If anything remains unclear after reading this document, our Bahasa Melayu-speaking support team is ready to help explain.
Six principles that guide the way we handle your personal data
All data transmitted between your device and our servers CardGames protected by 256-bit SSL encryption — the same technology used by Malaysia's leading banks, including Maybank and CIMB, to secure their customers' online transactions.
Your e-wallet details (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow account, and FPX banking information are never stored directly in our systems CardGames. All transactions are processed through separate licensed payment gateways.
CardGames never sells, rents, or shares players' personal data with advertising companies, data brokers, or any third party not directly involved in the operation of our platform. Your data is not our business commodity.
All data handling practices CardGames is designed and implemented to fully comply with Malaysia's Personal Data Protection Act (PDPA) 2010. We have an internal data protection officer who ensures ongoing compliance.
We only collect data that is strictly necessary to operate the services you request. CardGames does not collect excessive information or information that is not directly relevant to the provision of our online betting platform services.
As a data subject, you have the right to access, correct, port, and under certain circumstances request the deletion of your personal data from the system CardGames. Requests may be submitted at any time through our support team.
CardGames collects various types of personal data when you register, use the platform, or interact with our services. Below is a detailed description of each category of data we collect:
When you register an account CardGames, we will ask for the following information:
When you make a deposit or withdrawal on the platform CardGames, our systems record:
Important note: Your bank account number, card number, or sensitive e-wallet details not stored in CardGames' systems — this information is handled entirely by the licensed payment gateways we use.
To ensure fair play, detect fraud, and provide effective customer support, CardGames records:
Automatically, the system CardGames collects technical information when you access our platform:
CardGames does not collect sensitive data such as health information, religion, sexual orientation, or political views. The only data that may be classified as sensitive is your MyKad number for identity verification purposes — and this is handled with a higher level of protection.
Every piece of data that CardGames collected has a specific and lawful purpose. We do not collect data for any purpose unrelated to the provision of our platform services. The following are the primary purposes for which your personal data is used:
| Purpose of Use | Type of Data Used | Legal Basis |
|---|---|---|
| Identity verification & KYC | Name, MyKad number, date of birth | Compliance requirements |
| Account management & login | Email, phone number, password (hashed) | Contract performance |
| Financial transaction processing | Transaction data, payment methods | Contract performance |
| Fraud detection & security | IP address, session data, game history | Legitimate interests |
| Customer Support | All data relevant to the reported issue | Contract performance |
| Promotion & bonus management | Deposit history, game activity | Contract performance |
| Service communications | Email, phone number | Legitimate interest / Consent |
| Legal compliance & reporting | Financial and identity data | Legal obligations |
CardGames does not use your personal data for third-party marketing purposes. Marketing communications from CardGames itself (such as the latest promotion notifications or exclusive offers) are only sent to players who have consented to receive such communications at or after registration. You may withdraw this consent at any time through your account settings.
The security of your personal data is an ongoing investment that CardGames take very seriously. We implement multiple layers of technical and organisational safeguards to protect your data from unauthorised access, disclosure, alteration, or destruction.
While CardGames takes all reasonable precautions, no online security system can guarantee 100% absolute protection. You also play an important role in keeping your account secure — use a strong and unique password, never share your login credentials, and contact us immediately if you suspect any unauthorised access to your CardGames account.
CardGames maintains a strict policy on sharing players' personal data. Our core principle is straightforward: your data is never sold, rented, or shared with third parties for marketing purposes or any commercial purpose not directly related to the services you use.
In the course of normal platform operations, CardGames may share necessary personal data with the following categories of third parties — and only for the stated purposes:
All third-party providers that CardGames used are selected based on their compliance with high data security standards. We conduct due diligence checks before engaging any new vendor that will process our players' personal data.
In circumstances where player personal data needs to be processed by systems located outside Malaysia (for example, cloud computing infrastructure), CardGames ensures that such data transfers comply with Malaysia's PDPA requirements and are protected by contractual safeguards equivalent to those provided under Malaysian law.
Platform CardGames uses cookies and similar tracking technologies to provide you with a better gaming experience, maintain the security of your session, and understand how players use our platform for continuous improvement.
You can manage or disable cookies at any time through your web browser settings. Please note that disabling essential cookies will affect your ability to log in and use the platform CardGames in full. Non-essential cookies can be disabled without affecting the platform's core functionality, though some convenience features may not work as expected.
CardGames does not use third-party cookies for targeted advertising or to track your activity on other websites outside our platform.
Under Malaysia's Personal Data Protection Act (PDPA) 2010, you as a data subject hold several important rights regarding the personal data we hold about you. CardGames respect and facilitate the exercise of all these rights.
You have the right to request a copy of the personal data that CardGames hold about you. We will provide the records within 21 business days from the date the request is received.
If the data we hold is inaccurate or outdated, you have the right to request a correction. You can update much of your profile information directly in your account settings CardGames you.
You may opt out of receiving marketing communications from CardGames at any time — either through the unsubscribe link in an email or through the notification settings in your account.
If you believe CardGames handles your data in violation of the PDPA, you have the right to file a complaint with the Personal Data Protection Commissioner of Malaysia, or contact us directly for an early resolution.
In certain circumstances, you may request the deletion of your personal data. However, financial record-keeping and legal compliance obligations may limit the scope of this request for accounts that have been active.
Where data processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the validity of any processing that took place prior to the withdrawal.
To submit any request relating to the above rights, please contact the Data Protection Officer CardGames via email at privacy@cardgames.run or through our general support team. We will acknowledge receipt of your request within 3 business days and process it within the timeframe stipulated by the PDPA.
CardGames does not retain personal data longer than necessary for the purpose it was collected, or as required under Malaysian law. The following are retention period guidelines for key data categories:
When the retention period expires or when a valid deletion request is received (and no legal obligation prevents deletion), CardGames will erase or de-identify that data using secure methods so that it cannot be recovered or reused.
Data may remain in CardGames' backup systems for a limited period after deletion from active systems. This is a standard technical requirement for disaster recovery purposes. Data held in backups is not used for any active processing and will be purged during regular backup cycles.
CardGames reserves the right to update this Privacy Policy from time to time to reflect changes in our data handling practices, applicable law, or the services we offer. When significant changes are made, we will notify you via:
The "Updated" date at the top of this page reflects when this Privacy Policy was last reviewed. Your continued use of the platform CardGames after the changes take effect will be considered acceptance of the latest version of this Privacy Policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by CardGames, please contact us via:
We are committed to responding to all privacy-related enquiries within 5 business days. For more complex requests such as data access or deletion requests, processing may take longer, but we will keep you updated on progress regularly.
This Privacy Policy should be read in conjunction with Terms & Conditions and the Responsible Gambling CardGames for a full overview of your rights and responsibilities as a user of our platform.
CardGames is for players 21 years and above. Play for entertainment, within limits you can afford.
Responsible Gambling GuideAnswers to the most frequently asked questions about personal data protection on our platform