Privacy Policy — How mahkota78 Handles Your Information

1 Introduction

mahkota78 ("we", "us", "our", "the Platform") operates the website located at https://mahkota78.cam. This Privacy Policy describes how mahkota78 collects, uses, stores and protects personal and technical data obtained when you ("User", "you", "your") access or use any part of the Platform.

mahkota78 is an English-language information platform providing Malaysian users with educational content covering online casino entertainment, sports betting markets, Malaysian payment methods and responsible gambling practices. We do not operate a casino, accept wagers or process financial transactions on behalf of any User or Operator.

By accessing the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with any part of this policy, please discontinue use of the Platform immediately.

2 Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" — Any information that directly or indirectly identifies a living individual, including IP addresses, device identifiers and behavioural data where these can be linked to a specific person.
• "Processing" — Any operation performed on Personal Data, including collection, storage, use, disclosure, erasure or any combination thereof.
• "Controller" — mahkota78, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Processor" — Any third-party service provider that processes Personal Data on behalf of mahkota78 under a data processing agreement.
• "Cookies" — Small text files placed on a User's device by the Platform to facilitate session management, preference retention and, where applicable, usage analytics.
• "Analytics Data" — Aggregated, typically anonymised data about how Users navigate and interact with the Platform, used to improve content structure and performance.
• "Data Subject Request" — A formal request from a User exercising one of the legal rights described in Section 10 of this Policy.

3 Data We Collect

mahkota78 collects a limited and proportionate set of data categories. The table below describes what is collected, how it arises and its purpose:

mahkota78 does not collect names, physical addresses, payment card numbers, bank account details, national identification numbers or sensitive personal categories such as health data or biometric identifiers through the Platform.

4 How We Use Your Data

The data collected by mahkota78 is used exclusively for the following operational and improvement purposes:

• Platform delivery: Serving the correct version of pages, maintaining session continuity and ensuring the site loads reliably for users across Malaysia — from Kuala Lumpur and Petaling Jaya to Penang, Johor Bahru and Shah Alam.
• Performance and diagnostics: Identifying slow-loading pages, broken navigation paths or rendering issues on mobile devices commonly used by Malaysian readers.
• Content improvement: Understanding which guides — such as DuitNow payment walkthroughs, Asian Handicap betting explanations or responsible gambling resources — receive the most engagement, to prioritise updates.
• Security and abuse prevention: Detecting and blocking automated scraping, denial-of-service patterns or other technical threats to Platform availability.
• Legal compliance: Retaining records as required by applicable laws and responding to lawful regulatory requests where they arise.
• Responding to enquiries: Using contact information provided directly by you to answer queries about the Platform, data rights or editorial content.

We do not use your data to build advertising profiles, personalise commercial offers or sell audience segments to third parties.

5 Legal Basis for Processing

mahkota78 processes Personal Data on the following legal grounds, applied on a purpose-by-purpose basis:

• Legitimate interests: Processing technical and analytics data to maintain a secure, functional and well-structured information platform. We have assessed that this processing does not override Users' fundamental rights given the limited and non-sensitive nature of the data involved.
• Consent: Where analytics or non-essential cookies are used, we seek consent through appropriate notice mechanisms. You may withdraw consent at any time by adjusting your browser settings or contacting us as described in Section 14.
• Legal obligation: Retaining certain records as required by applicable law or responding to lawful requests from regulatory or law enforcement authorities.
• Contract performance: Where a User has made a direct enquiry and data processing is necessary to respond to that request.

6 Cookies and Tracking Technologies

mahkota78 uses cookies and similar lightweight tracking technologies to support core Platform functionality. The categories of cookies we use are as follows:

• Strictly necessary cookies: Required for the Platform to function. These include session identifiers that keep your visit coherent as you navigate between pages. These cannot be disabled without breaking the Platform experience.
• Analytics cookies: Used to collect aggregated, anonymised data about how pages are accessed and how content is consumed. Where we use a third-party analytics tool, it is configured to anonymise IP addresses and is prohibited from sharing data for advertising purposes.
• Preference cookies: Where applicable, used to remember settings such as language or display preferences across sessions.

mahkota78 does not use third-party advertising cookies, retargeting pixels or cross-site tracking technologies that build commercial profiles of individual Users.

7 Data Sharing and Disclosure

mahkota78 does not sell or rent Personal Data to any third party. Data may be shared in the following limited and controlled circumstances:

• Service providers (Processors): Hosting infrastructure providers, content delivery networks and analytics platforms that process data on behalf of mahkota78 under written agreements requiring them to use data only for the specified purpose and to apply appropriate security measures.
• Legal and regulatory obligations: Where mahkota78 is required by applicable law, court order or lawful regulatory request to disclose data, we will comply while endeavouring to notify affected Users where legally permissible to do so.
• Business transfers: In the event of a merger, acquisition or asset sale affecting mahkota78, User data may form part of the transferred assets, subject to the same privacy protections described in this Policy or a replacement policy of equivalent standard.
• Protection of rights: Where disclosure is reasonably necessary to investigate suspected fraud, enforce the mahkota78 Terms & Conditions, or protect the safety of the Platform and its users.

8 Data Retention

mahkota78 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The general retention principles applied are:

• Technical and server log data (including IP addresses): Retained for a maximum of 90 days under standard log rotation policy, unless a specific security investigation requires extended retention.
• Analytics data: Retained in aggregated form for up to 26 months to allow meaningful year-on-year content performance comparison. Individual session identifiers within analytics data are anonymised after 14 months.
• Contact enquiry correspondence: Retained for up to 24 months following resolution of the enquiry to maintain a quality and compliance record. Users may request deletion of correspondence data earlier in accordance with Section 10.
• Cookie data: Session cookies expire at the end of the browser session. Persistent cookies have a maximum lifespan of 12 months unless earlier renewal consent is obtained.

When data is no longer required, it is securely deleted or irreversibly anonymised in accordance with mahkota78's internal data management procedures.

9 Data Security

mahkota78 implements technical and organisational measures proportionate to the nature and volume of data processed on the Platform. These measures include:

• Encrypted data transmission using TLS (Transport Layer Security) across all pages of the Platform.
• Access controls limiting who within mahkota78's operational team can access server logs and analytics dashboards.
• Regular review of third-party Processor security credentials and contractual data protection commitments.
• Prompt internal notification and investigation procedures in the event of a suspected data security incident.

No digital system can guarantee absolute security. mahkota78 makes no warranty that the Platform is entirely immune to unauthorised access, and Users transmit data to the Platform at their own risk. Where a significant breach affecting User rights occurs, mahkota78 will take steps to notify affected individuals accordance with applicable notification obligations.

10 User Rights

Subject to applicable data protection law, Users have the following rights in relation to Personal Data held by mahkota78:

• 👁
  Right of Access — You may request a copy of the Personal Data mahkota78 holds about you and information about how it is used.
• ✏
  Right to Rectification — You may request correction of any Personal Data that is inaccurate or incomplete.
• 🗑
  Right to Erasure — You may request deletion of your Personal Data where it is no longer necessary for the purpose it was collected, or where you withdraw consent and no overiding legal basis exists.
• ⏸
  Right to Restriction — You may request that processing of your Personal Data be restricted in certain circumstances, such as while the accuracy of data is disputed.
• 📦
  Right to Data Portability — Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, commonly used and machine-readable format.
• 🚫
  Right to Object — You may object to processing based on legitimate interests. mahkota78 will cease such processing unless compelling legitimate grounds that override your interests can be demonstrated.
• ↩
  Right to Withdraw Consent — Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please submit a Data Subject Request to mahkota78 via the website email address listed in Section 14. We will aim to acknowledge your request within five business days and to respond substantively within 30 calendar days, subject to identity verification requirements.

11 Children and Minors

The mahkota78 Platform publishes content related to online casino entertainment and sports betting. This content is strictly intended for adults aged 21 and above only. mahkota78 does not knowingly collect Personal Data from individuals below the age of 21.

Parents and guardians are encouraged to use appropriate parental control tools to prevent minors from accessing gambling-related information. Responsible gambling guidance for families is available on our Responsible Gambling page.

12 Third-Party Content and Links

For the avoidance of doubt, the mahkota78 Platform does not embed third-party advertising networks, affiliate tracking pixels or external social media widgets that independently collect User data. All content and navigational links on mahkota78 are internal to the Platform.

Educational references to third-party brands — including Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay and DuitNow — are made for descriptive accuracy only. mahkota78 has no data-sharing relationship with these brands arising from their mention on the Platform.

This Privacy Policy does not govern the data practices of any Operator or payment provider that a User may choose to engage with independently following their use of mahkota78. Users are responsible for reviewing each service provider's own privacy policy before submitting personal or financial information to that provider.

13 Changes to This Privacy Policy

mahkota78 reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, Platform functionality or data processing practices. When material changes are made, the "Last reviewed" date at the top of this page will be updated accordingly.

• It is your responsibility to check this page periodically to remain informed of any updates.
• Continued use of the Platform following the publication of a revised Privacy Policy constitutes your acceptance of the revised terms.
• Where a change materially affects how previously collected data is processed, mahkota78 will take reasonable steps to notify Users through a prominent notice on the Platform.

14 Contact Us

For any privacy-related queries, Data Subject Requests or concerns about how mahkota78 handles your Personal Data, please contact our team using the following channel:

For concerns specifically related to responsible gambling, self-exclusion or support resources, please visit our dedicated Responsible Gambling page, which contains relevant contacts including Talian Kasih (15999) for Malaysian users requiring support.