Your privacy is our priority. This document clearly explains how club22 collects, uses, stores, and protects your personal information in accordance with applicable data protection laws in Malaysia.
Six core pillars that guarantee the personal data protection of every club22 member.
All data transmitted between your device and club22 servers is encrypted using 256-bit SSL protocol — the same level of security used by Malaysia's leading banking institutions.
Club22 never sells, rents, or discloses members' personal data to any third party for marketing purposes without your explicit prior consent.
Club22 operates in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. All data collection and management processes comply with the stipulated legal requirements.
You have the right to access, correct, or delete your personal data at any time. The Club22 support team will process your request within 14 working days.
We use cookies solely for technical, analytical and experience personalization purposes. You can manage your cookie preferences through your browser settings at any time.
Members' personal data is stored on servers protected by advanced firewalls, intrusion detection systems, and multi-layered access controls accessible only to authorised personnel.
Club22 is committed to protecting the privacy of every individual using our platform. This Privacy Policy explains in detail how we manage your personal data — from the method of collection through to storage, use, and containment of that information.
This document forms part of the binding agreement between you and Club22. It should be read together with Terms and Conditions and Responsible Gaming Policy page. Continued use of the club22 platform after any policy changes are published means you accept the updated terms.
Club22 acts as the "Data Controller" as defined under Malaysia's Personal Data Protection Act 2010 (PDPA). This means we are fully responsible for how your data is processed and protected.
We understand that your trust is our most valuable asset. That is why club22 has never taken privacy lightly — every data-related decision is made with care, putting the interests and security of our members above all else.
Club22 only collects personal data that is genuinely necessary to provide quality, secure services in compliance with legal requirements. The following are the categories of data we collect:
Club22 does not collect sensitive personal data such as your medical information, religious beliefs, or political views. We only collect what is necessary to provide you with the best and safest gaming experience.
| Data Category | Primary Purpose | Retention Period |
|---|---|---|
| Identity Verification | Identity verification & KYC | 5 years after account closure |
| Contact Information | Communication & customer support | Throughout active account + 2 years |
| Transaction Records | Financial compliance & audit | 7 years (legal requirement) |
| Usage Data | Platform & security improvements | 24 rolling months |
| Cookie Data | User experience & analytics | 30 days to 2 years depending on cookie type |
The personal data we collect is used solely for legitimate purposes that are clearly stated. Club22 will not use your data for any purpose you are unaware of or have not consented to.
Club22 does not use any automated decision-making systems that could have a legal or similarly significant effect on you without human involvement. All important decisions such as account suspension or withdrawal rejection involve manual review by our team.
Club22 does not sell your personal data. However, in the course of operating the platform, we may share data with certain parties under very limited and controlled circumstances as follows:
We work with carefully selected third-party service providers to support platform operations, including payment processing providers, identity verification services, analytics platforms and cloud infrastructure providers. All these providers are bound by strict confidentiality agreements and may only use your data for the specified purposes.
Club22 may disclose your data when required by law, court order, instruction from law enforcement authorities, or a relevant regulatory body. Such disclosures are made after careful legal review and only to the extent necessary.
In the event of a merger, acquisition, or sale of Club22's business assets, your personal data may be transferred as part of those assets. We will notify you in advance and ensure that continuous privacy protection is maintained by the new entity.
Before sharing data with any third party, club22 ensures that an equivalent or higher level of data protection is upheld by the receiving party. We will never disclose your data to third-party advertisers without your explicit consent.
Club22 continuously invests in the latest security technologies and practices to ensure your personal data is always protected against unauthorised access, loss, destruction, or accidental disclosure.
Access to members' personal data within the Club22 system is restricted solely to staff who genuinely require it to carry out their job duties. All access is logged and monitored. Every staff member with access to sensitive data is required to undergo background checks and sign a legally binding confidentiality agreement.
In the event of a data security breach affecting your personal information, club22 will notify you within 72 hours of the breach being detected, in line with industry best practices. The notification will include details about the nature of the breach, the data affected, and the steps being taken to address it.
Club22's server infrastructure is hosted in certified data centers with international security certifications. All data is automatically backed up and stored at geographically separate locations to ensure service continuity.
Club22 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.
| Cookie Types | Purpose | Duration |
|---|---|---|
| Essential Cookies | Required for core platform functions such as login and session security | Session only |
| Preference Cookies | Save your language preferences, theme and personal settings | 1 year |
| Analytics Cookies | Collect anonymized usage data for platform improvements | 2 years |
| Security Cookies | Detect suspicious activity and protect against CSRF attacks | 30 days |
You can control or delete cookies through your browser settings. Please note that disabling essential cookies may affect platform functionality. For more information on managing cookies, refer to your browser's documentation.
As a data subject, you have certain rights regarding your personal data that club22 is obligated to respect and uphold in accordance with Malaysia's Personal Data Protection Act 2010. Your full rights are as follows:
To exercise any of the above rights, you may contact our Data Protection Officer team via the in-platform live chat or support email. Your request will be processed within 14 working days. In complex cases, this period may be extended up to 30 days with written notification to you.
Please note that the right to data deletion may be limited in situations where we are legally required to retain certain records, such as financial transaction records needed for audit and AML compliance purposes.
The club22 platform is strictly for individuals aged 18 and above. We do not knowingly collect, store, or process personal data from anyone under the age of 18.
Should we discover that personal data has been collected from a minor without our knowledge, we will take immediate steps to delete that data and terminate the account in question. Parents or guardians with concerns about their child's use of the platform are advised to contact our support team immediately.
If you suspect that someone under the age of 18 is using the club22 platform, please contact our support team immediately at [email protected] so that appropriate action can be taken without delay.
The club22 platform may contain links or references to third-party websites such as payment providers or service partners. This Privacy Policy applies solely to the club22 platform and does not cover the privacy practices of any third-party websites.
Club22 is not responsible for the privacy policies, content, or security practices of those third-party websites. We encourage you to read the privacy policy of each website you visit independently. The decision to use third-party services is entirely your own responsibility.
Payment providers that partner with club22 — including DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay — have their own privacy policies governing how they handle your transaction information. Please refer to their respective privacy policies for more details.
Club22 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or service improvements. All amendments take effect immediately upon publication on this page.
For material or significant changes, Club22 will notify you via your registered email or in-platform notification at least 14 days before the changes take effect. This gives you sufficient time to review and make decisions regarding your continued use of our platform.
It is your responsibility to review this page periodically. The "Updated" date at the top of this document indicates when this Privacy Policy was last amended. Continued use of the platform after the amendment effective date constitutes acceptance of the updated terms.
The latest version of this Privacy Policy is always available on our /privacy-policy. You may contact our team if you have any questions regarding the changes made. All previous versions are archived and can be requested through customer support.
If you have any questions, concerns or complaints regarding this Privacy Policy or how club22 handles your personal data, we encourage you to reach out to us directly. Our Data Protection Officer team is ready to assist you.
When contacting us regarding a privacy request, please include the following information to expedite the process: your full name, Club22 account username, type of request being submitted, and a brief description of the request. This helps us process your request faster and more accurately.
If you are not satisfied with the response provided by club22, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant authority in your jurisdiction.
Club22 is committed to resolving every privacy complaint fairly, transparently, and within a reasonable timeframe. Member satisfaction and trust are our absolute priority in every interaction.
Effective date of this document: 1 January 2026 | Version: 3.1
With industry-grade privacy protection and full commitment to data security, you can enjoy entertainment on Club22 with complete peace of mind and confidence.