🔒 ATM2U – your personal data is protected with bank-grade 256-bit SSL encryption 🛡️ ATM2U does not sell members' personal information to third parties — your privacy is our priority ⚡ Secure deposits via DuitNow, Touch 'n Go, GrabPay, Boost & ShopeePay at atm2u 🏆 Over 980,000 Malaysian members have trusted atm2u since 2018 – join us today 📋 atm2u's Privacy Policy complies with Malaysia's Personal Data Protection Act 2010 🔒 ATM2U – your personal data is protected with bank-grade 256-bit SSL encryption 🛡️ ATM2U does not sell members' personal information to third parties — your privacy is our priority ⚡ Secure deposits via DuitNow, Touch 'n Go, GrabPay, Boost & ShopeePay at atm2u 🏆 Over 980,000 Malaysian members have trusted atm2u since 2018 – join us today 📋 atm2u's Privacy Policy complies with Malaysia's Personal Data Protection Act 2010
Official Documents
Updated: 1 January 2026

Privacy Policy ATM2U – Our Commitment to Protecting the Personal Data of Malaysian Members

ATM2U takes its responsibility to protect every member's privacy seriously. This document clearly and transparently explains how atm2u collects, uses, stores and safeguards your personal information. It also outlines your rights as a member and how to exercise them. Please read this carefully before using the atm2u platform.

ATM2U Official Privacy Policy
Version 3.1 • Effective 1 Jan 2026 • Compliant with Malaysia's PDPA 2010
10
Section
PDPA
Compliance
256-bit
SSL Encryption

How ATM2U Protects Your Privacy

Six core principles that guide every decision we make regarding members' personal data

Bank-Grade Encryption
All data transmitted between your device and atm2u's servers is protected using 256-bit SSL encryption technology — the same standard used by Maybank, CIMB and Malaysia's leading financial institutions. Data is stored on servers secured by multiple layers of protection.
No Data Sales
ATM2U has never and will never sell, rent or trade members' personal information to any third party for marketing or commercial purposes. Your data belongs to you — we use it only for purposes you have explicitly consented to or that are required by law.
PDPA 2010 Compliance
The atm2u Privacy Policy is designed to be fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA). This means all collection, processing, and storage of Malaysian members' personal data is carried out within a legal framework that is valid and recognised in this country.
Full Control in Your Hands
Every atm2u member has the right to access, correct, delete, and restrict the processing of their personal data. You may submit a personal data request at any time through atm2u's customer service channels, and we will process it in accordance with PDPA 2010.
Data Minimisation
ATM2U only collects data that is strictly necessary to provide services to members. We do not collect excessive information unrelated to platform operations. Each type of data collected has a clearly defined purpose and a set retention period.
Data Breach Notification
In the event of any data security breach involving members' personal information, atm2u is committed to notifying affected members within the timeframe required by Malaysian law. We continuously monitor our systems to detect security threats at an early stage.
1

Introduction & Scope of This Policy

This Privacy Policy ("Policy") is issued by ATM2U ("atm2u", "we", "us") and describes our privacy practices regarding the collection, use, disclosure, and protection of personal information provided by you ("Member", "User") when using the atm2u online entertainment platform accessible at atm2u.click.

This policy covers all services provided by atm2u, including account registration, gaming activities (slots, Live Casino, football betting such as Liga Super Malaysia and EPL, e-sports, lottery and jackpot), financial transactions via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and FPX, as well as any interactions with the atm2u customer support team.

This Privacy Policy is to be read together with Terms & Conditions atm2u. By registering for or using the atm2u platform, you confirm that you have read and fully agree to this Privacy Policy. If you do not agree, please discontinue your use of the atm2u platform.

ATM2U operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and all related laws in force in Malaysia. We respect every member's privacy and are committed to handling your personal data responsibly, transparently and with integrity.

2

Types of Personal Data Collected

ATM2U collects members' personal data through various means, including account registration, platform usage, financial transactions, and interactions with our support team. We only collect data that is strictly necessary for the purposes stated in this Policy.

Data You Provide Directly

Data Category Sample Information Requirements
Identity Information Full name, MyKad number, date of birth Mandatory
Contact Information Malaysian phone number, email address Mandatory
Financial Information Bank account number, e-wallet name (TNG, GrabPay, etc.) Mandatory
Proof of Identity (KYC) MyKad copy, verification selfie Upon request
Account Information Username, password (stored in hashed format) Mandatory
Communications Live chat conversation records, emails to atm2u support Automatic

Automatically Collected Data

When you use the atm2u platform, our systems automatically record certain technical data required for safe and smooth platform operation. This data includes:

  • IP address of the device used to access atm2u
  • Web browser type and version, and operating system
  • General location data based on IP address (state/region, not precise location)
  • Login, logout, and session duration records
  • Gaming activity including game type, wager amount, and outcome
  • Records of all deposit and withdrawal transactions
  • Cookie data and similar tracking technologies (see Section 6)

ATM2U does not collect your device's precise location data (GPS) without your explicit consent. General location information derived from your IP address is used solely for security purposes – for example, to detect logins from unusual locations that may indicate a compromised account.

3

Purpose of Data Collection & Processing

ATM2U uses members' personal data for lawful and transparent purposes. Every use of data is based on one of the following legal grounds: your consent, contractual necessity (to provide the services you requested), a legal obligation, or atm2u's legitimate interests that do not override your fundamental rights.

  • Account management – registering your account, verifying your identity, enabling secure login and managing your atm2u account profile.
  • Transaction processing – processing deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, Maybank2u, and CIMB Clicks, as well as withdrawals to your account.
  • Gaming services provision – enabling you to play slots, live casino, bet on Malaysian Super League and EPL football, e-sports, lottery, and jackpot games on the atm2u platform.
  • Customer support – responding to enquiries, resolving complaints and providing technical support to you as an atm2u member.
  • Security & fraud prevention – to detect and prevent fraudulent activity, money laundering, multiple accounts, and any misuse of the atm2u platform.
  • Legal compliance – fulfilling legal obligations under PDPA 2010, anti-money laundering laws (AMLA), and any court orders or directions from Malaysian authorities.
  • Product improvement – analysing aggregated usage patterns (not at an individual level) to improve the gaming experience on the atm2u platform.
  • Relevant marketing – sending you promotional information, bonuses, and the latest atm2u offers based on your preferences (you may unsubscribe at any time).

ATM2U does not use your personal data to make automated decisions that have a significant impact on you without any human involvement, except for fraud detection purposes that require immediate automated action to protect your account. In such cases, you may always request a manual review.

4

Data Sharing & Disclosure

ATM2U does not sell, rent, or disclose members' personal data to third parties for their own marketing purposes. However, in the course of operating the atm2u platform, there are limited situations where we may share your personal data with certain parties as outlined below.

Trusted Service Providers

ATM2U works with a selected group of third-party service providers to help us operate the platform. These include payment processors (such as DuitNow providers and FPX gateways), gaming software providers (such as Pragmatic Play and PG Soft), cloud infrastructure providers, and analytics service providers. All of these service providers are required to comply with strict data security standards and may only use your data for purposes specified by atm2u – nothing beyond that.

Legal Obligation

ATM2U may be required to disclose members' personal data to Malaysian regulatory authorities, law enforcement agencies, or competent courts and tribunals where mandated by applicable law or a valid court order. Such disclosures are a legal obligation and not discretionary. In all permitted cases, atm2u will disclose only the minimum information necessary to fulfil that obligation.

Business Transfer

In the event that atm2u undergoes any corporate restructuring, merger, acquisition or asset sale, members' personal data may be transferred to the successor entity as part of the business operation. In such cases, members will be notified in advance, and the successor entity will be required to honour this Privacy Policy or provide notice of any changes to the applicable policy.

In all of the above situations, atm2u ensures that any data sharing is carried out with appropriate protective mechanisms in place, including confidentiality agreements and data processing agreements binding all parties involved. Your data will never be used by third parties for purposes you have not consented to.

5

Data Security Measures

ATM2U invests seriously in security infrastructure to protect the personal data and financial information of all members. Our approach to security is multi-layered – no single mechanism is considered sufficient, as security threats continue to evolve and we constantly update our measures in response.

  • 256-bit SSL Encryption – all communication between your device and atm2u's servers is encrypted using the latest TLS protocol, ensuring no third party can read the data in transit.
  • Passwords are not stored in plain text – atm2u member passwords are stored using a strong one-way hashing algorithm, meaning even atm2u staff cannot view your original password.
  • Tiered access control – only atm2u staff with a legitimate business need may access members' personal data, and every instance of access is logged for audit purposes.
  • Round-the-clock 24/7 monitoring – atm2u's systems are continuously monitored to detect any suspicious activity, intrusion attempts, or anomalies that may indicate a security threat.
  • Regular security testing – atm2u conducts regular penetration testing and security audits by independent experts to identify and address vulnerabilities before they can be exploited.
  • Secure data backup – data is regularly backed up to a secure, separate location to ensure service continuity and data recovery in the event of any technical incident.

While atm2u takes all reasonable security measures, no system is entirely free from risk. You also play an important role in keeping your account secure – do not share your password, use a strong and unique password, and contact atm2u immediately if you suspect any suspicious activity on your account.

6

Cookies, Tracking Technologies & Analytics

ATM2U uses cookies and similar tracking technologies to enhance the user experience, maintain platform security and understand general usage patterns. Cookies are small text files stored on your device by your web browser when you visit the atm2u website.

Types of Cookies Used

  • Essential cookies – required for core atm2u platform functions such as maintaining login sessions, processing transactions, and ensuring security. These cookies cannot be disabled without affecting platform functionality.
  • Performance cookies – collects data on how members use the atm2u platform (for example, the most frequently visited pages and time spent in each section) to help us improve the user experience. All data is collected in aggregate and anonymised form.
  • Functional cookies – remembering your personal preferences such as chosen language, display settings, and gaming preferences to deliver a more personalised experience on the atm2u platform.
  • Security cookies – helps detect and prevent fraudulent activity, ensuring that only you can access your atm2u account from the current session.

You can manage and delete cookies through your web browser settings. However, disabling essential cookies may affect the functionality and security of your experience on the atm2u platform. For guidance on managing cookies in your browser, please refer to the relevant browser help documentation.

7

Data Retention & Deletion Period

ATM2U does not retain members' personal data longer than necessary for the purposes stated in this Policy or as required by Malaysian law. Our data retention policy is as follows:

  • Active account data – retained for the duration your atm2u account remains active and for a defined period after account closure for audit and legal compliance purposes.
  • Financial transaction records – retained for 7 years from the date of transaction, in accordance with Malaysia's accounting and anti-money laundering legal requirements.
  • Customer service communication records – retained for 3 years for reference purposes and to resolve any disputes that may arise at a later stage.
  • Security logs – retained for 2 years for the purpose of investigating security incidents where required.
  • Marketing data – retained until you withdraw consent or request deletion, whichever comes first.

Once the retention period expires, personal data will be securely deleted or anonymised so that it can no longer be linked to you. The deletion process uses methods that ensure the data cannot be recovered by unauthorised parties.

In certain situations, atm2u may need to retain your data for longer than the periods stated above — for example, if there is an unresolved dispute, an active investigation by authorities, or other applicable legal obligations. In such cases, data will be retained until the matter is fully resolved.

8

Your Rights as a Data Subject

As an atm2u member and data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data. ATM2U respects these rights and has clear procedures in place to handle any requests relating to them.

Right of Access
You have the right to request a copy of the personal data atm2u holds about you. We will provide this information in a readable format within 21 days of receiving your request.
Right to Rectification
If the personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. Updates can be made directly through your atm2u account profile settings or by contacting our support team.
Right to Erasure
Under certain circumstances, you may request the deletion of your personal data from atm2u's systems. Please note that complete deletion may not always be possible where there are legal obligations to retain certain records.
Right to Restrict Processing
You may request to restrict how atm2u uses your personal data in certain situations — for example, while the accuracy of your data is being verified or while a complaint investigation is ongoing.
Right to Object
You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on atm2u's legitimate interests in certain circumstances.
Right to Data Portability
You have the right to receive the personal data you have provided to atm2u in a structured, machine-readable format, and to transmit that data to another data processor if you wish.

To exercise any of the rights above, please send a written request to atm2u via email at support@atm2u.click with the subject line "Personal Data Rights Request", along with your full name, registered phone number and details of your request. ATM2U will process your request within 21 days as required under PDPA 2010.

9

Children's Privacy & Protection of Minors

The atm2u platform is strictly for users aged 18 and above. ATM2U does not knowingly collect personal data from individuals under the age of 18. The protection of minors is our absolute priority, and we have stringent age verification procedures in place during the atm2u account registration process.

If atm2u discovers that personal data has been collected from an individual under the age of 18 without valid parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe your underage child has registered an account with atm2u, please contact us immediately at support@atm2u.click so we can take the appropriate action.

ATM2U regards the protection of minors from gambling as our most serious moral responsibility. Any account proven to have been registered by an individual under the age of 18 will be terminated immediately with no possibility of recovery, and the case may be reported to the relevant authorities in Malaysia.

10

Contact Us & Policy Amendments

ATM2U reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, developments in Malaysian law, or relevant changes in technology. For material amendments, atm2u will notify members via their registered email address or through a prominent notice on the atm2u website, with at least 14 days' notice before the amendment takes effect.

The date this policy was last updated is clearly displayed at the top of this document. Continued use of the atm2u platform after an amendment's effective date constitutes your acceptance of the revised policy. If you disagree with any amendment, you have the right to close your account before it takes effect.

How to Contact ATM2U's Data Protection Officer

For any enquiries, concerns, or requests relating to this Privacy Policy or the processing of your personal data by atm2u, please contact our Data Protection Officer through the following channels:

  • Email: support@atm2u.click (subject: "Privacy Policy Enquiry")
  • Live Chat: Available 24/7 directly on the atm2u website
  • Response time: Within 24 hours on business days for email; under 3 minutes for live chat

If you believe that atm2u has processed your personal data in a manner that violates Malaysia's PDPA 2010 and we have failed to resolve your concern satisfactorily, you have the right to file a complaint with the Personal Data Protection Commissioner of Malaysia. ATM2U will cooperate fully with any investigation by the relevant authorities.

Your privacy is not merely a legal obligation for atm2u – it is a core value we uphold. We believe that member trust is our most valuable asset, and protecting your privacy is the primary way we maintain it. Thank you for trusting atm2u.

Frequently Asked Questions About ATM2U's Privacy Policy

Plain-language answers to the most frequently asked questions about data privacy on the atm2u platform

No. ATM2U never sells, rents, or discloses members' personal information to other companies for their own marketing purposes. The only instances where atm2u shares data with third parties are with service providers who assist us in operating the platform (such as payment processors and game providers) – and they may only use your data for purposes specified by atm2u, not for their own independent marketing. You may also opt out of marketing communications from atm2u itself at any time by updating your account settings or contacting our support team.

ATM2U does not store your full bank card details or e-wallet login credentials in our systems. All deposit transactions via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, Maybank2u or CIMB Clicks are processed directly by licensed, PCI DSS-certified payment gateways — the highest international security standard for payment data processing. ATM2U only receives confirmation that a payment was successful, not your sensitive financial details. This means that even in the highly unlikely scenario where the atm2u system is compromised, your financial information remains secure.

Yes, you may request deletion of your personal data by contacting atm2u via email at support@atm2u.click. However, please be aware that full deletion may not always be possible — particularly for financial transaction records that atm2u is required to retain for 7 years under Malaysia's anti-money laundering laws. In such cases, atm2u will delete or anonymize as much data as legally permissible, while retaining only the minimum data required by law. The deletion process will be completed within 30 days from the date the request is received.

Yes, atm2u maintains a complete record of all your gaming activity, including the date and time of every slots round, football bet, live casino game, e-sports match, lottery, or jackpot session you participate in, along with the wager amount and outcome. These records are kept for several important purposes: to allow you to review your gaming history, to resolve any disputes regarding game outcomes, to ensure compliance with bonus and rollover terms, and to meet audit and legal compliance requirements. You can access your own gaming history through the atm2u account dashboard at any time.

ATM2U has a comprehensive security incident response plan. In the event of any data security breach involving members' personal information, we will take immediate action to contain the breach and minimise its impact. Affected members will be notified within the timeframe stipulated by Malaysian law – in most cases, within 72 hours of discovering the incident. The notification will include details about the nature of the breach, the types of data potentially affected, the steps atm2u has taken and is taking to address it, and the steps you can take to protect yourself. ATM2U will also report the incident to the Personal Data Protection Commissioner of Malaysia as required by law.

Yes. Identity verification (KYC) is a standard compliance requirement in the regulated financial services and gaming industry. When you submit a copy of your MyKad or other identity document to atm2u, it is stored with strong encryption in systems accessible only to atm2u staff who have undergone background checks and have a legitimate business need. Your identity document is used solely for identity verification and legal compliance purposes, and for no other reason. Should you close your account and there is no legal obligation to retain it, your identity document will be deleted within the timeframe specified in atm2u's data retention policy.
🛡️

Your Data is Safe at ATM2U – Join Us with Confidence

Your privacy and data security are atm2u's top priority. Register for free today and enjoy a safe, fair, and responsible online entertainment experience alongside more than 980,000 Malaysian members.

18+ only • Gamble responsibly • Protected under Malaysia's PDPA 2010
SSL 256-bit PDPA Compliant DuitNow & TNG 24/7 Support
Bahasa Melayu