1. Introduction
ampm wallet takes our responsibility to protect user privacy extremely seriously. This Privacy Policy details how we collect, use, disclose, and protect your personal information when you use the website, mobile app, and all services offered by ampm wallet.
This document is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and constitutes a binding agreement between you as the user and ampm wallet as the data controller. By continuing to use our services, you provide informed consent to the data processing practices described herein.
2. Data We Collect
Ampm wallet collects several categories of personal information depending on your interaction with our platform. We only collect data that is strictly necessary to deliver quality services, ensure account security, and meet our legal obligations.
| Data Category | Type of Information | How Collected |
|---|---|---|
| Identity | Full name, date of birth, gender, identity card number | Registration form, KYC process |
| Contact | Email address, mobile number, residential address | Account registration, profile updates |
| Financial | Bank name, account number (masked), transaction history | Deposits and withdrawals |
| Technical | IP address, device type, browser, operating system, access logs | Automatically upon use |
| Behaviour | Game history, game preferences, usage patterns | In-platform activity |
| Communications | Support chat records, sent emails, feedback | Interactions with our team |
Us does not collect sensitive information such as biometric data, health records, religious beliefs, or political views unless specifically required by law and with your explicit consent.
3. How We Use Your Data
The personal data we collect is used solely for the following purposes. We will not use your data for any other purpose without first obtaining your additional consent:
- Identity Verification (KYC): Verifies your identity during registration and when required to meet Anti-Money Laundering (AML) legal requirements.
- Service Provision: Allows you to access all games, manage your account, and process deposits and withdrawals seamlessly.
- Account Security: Detects and prevents fraudulent activity, unauthorised access, and suspicious behaviour on the platform.
- Service Communications: Sends important notifications regarding your account, transactions, changes to terms, and security updates.
- Platform Improvements: Analyses usage patterns on an aggregated and anonymised basis to improve the overall user experience.
- Legal Compliance: Fulfils reporting and compliance obligations to Malaysian authorities when required.
- Customer Support: Provides relevant and effective assistance when you contact our support team.
4. Data Processing Basis
Under Malaysia's PDPA, ampm wallet processes your personal data on the following lawful bases:
- Consent: You provide explicit consent during registration for data processing for specific purposes.
- Contractual Requirements: Processing required to fulfil the service agreement between you and ampm wallet.
- Legal Obligations: Processing mandated by Malaysian law, including AML/CFT requirements and tax reporting obligations.
- Legitimate Interests: Processing for fraud prevention and platform security purposes, carried out in a manner balanced against your privacy rights.
You have the right to withdraw your consent at any time. Withdrawal of consent does not affect the validity of any processing that took place prior to the withdrawal. However, withdrawing certain consents may limit your ability to use some platform features.
5. Data Sharing with Third Parties
ampm wallet does not sell or rent your personal data to any party. However, we may share certain information with selected third parties in the following circumstances:
- Payment Providers: Required transaction information is shared with payment processors (FPX, DuitNow, Touch 'n Go, Boost) to process your deposits and withdrawals. These providers are bound by strict data confidentiality agreements.
- Game Providers: Usernames and player IDs are shared with game software providers to enable access to games on the platform. Full financial information is not shared.
- Authority: Information is shared with law enforcement agencies, Bank Negara Malaysia, or other regulatory bodies when required by law or court order.
- Auditors & Professional Advisors: Required information is shared with auditors, lawyers, or consultants within the scope of their professional duties, subject to professional confidentiality obligations.
6. Cookies & Tracking Technologies
Website and App ampm wallet uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The following are the types of cookies we use:
- Essential Cookies: Required for core website functions such as login session authentication and language preferences. These cookies cannot be disabled without affecting platform functionality.
- Performance Cookies: Collects anonymised information about how users interact with the website to help us identify areas for improvement.
- Functional Cookies: Saves your preferences such as account settings and display preferences for a smoother return experience.
- Security Cookies: Helps detect and prevent fraudulent activity and ensures the integrity of user sessions.
You can manage your cookie settings through your internet browser. Disabling certain cookies may affect the functionality of some platform features. For more information on managing cookies, refer to your browser's help documentation.
7. Data Storage & Transfer
Your personal data is stored on servers located in secure data centres. ampm wallet sets data retention periods based on service requirements and legal obligations:
- Active Account Data: Retained for the duration your account is active and in use.
- Transaction Data: Retained for a minimum of 7 years for compliance with Malaysian financial and taxation laws.
- Security Logs: Retained for 12 months for security incident investigation purposes if required.
- Closed Account Data: Following account closure, personal data will be deleted or anonymised once the mandatory retention period has lapsed, unless there is a legal requirement to retain it for longer.
In the event of cross-border data transfers (where applicable), ampm wallet ensures that appropriate transfer mechanisms are in place to protect your data in accordance with recognised standards.
8. Your Rights as a Data Subject
As a user ampm wallet, you have the following rights under Malaysia's PDPA regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:
Right of Access
You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 business days.
Right to Rectification
You have the right to request correction of inaccurate or incomplete data via your profile settings or our support team.
Right to Erasure
You may request deletion of your data under certain circumstances, subject to legal retention obligations.
Right to Object
You may object to the processing of your data for specific purposes such as direct marketing.
Right to Data Portability
You have the right to receive your data in a machine-readable format for transfer to another provider.
Withdraw Consent
You may withdraw consent for data processing at any time without affecting prior processing.
To exercise any of the above rights, please contact our Privacy Officer via live chat or support email. We will respond within 7 business days and resolve requests within the timeframe required by law.
9. Data Security Measures
ampm wallet implements multiple layers of technical and organisational safeguards to protect your personal data from unauthorised access, alteration, disclosure, or destruction:
- Encryption of Data in Transit: All communications are secured with TLS 1.3 protocol and continuously updated 256-bit SSL certificates.
- Encryption of Data at Rest: Sensitive data such as passwords and financial information is stored in encrypted form using the latest encryption algorithms.
- Two-Factor Authentication (2FA): 2FA is available and encouraged for all user accounts as an additional layer of security.
- Continuous Monitoring: An intrusion detection system (IDS) operates 24/7 to identify and respond to security threats in real time.
- Internal Access Controls: Staff access to user data is governed by the principle of least privilege — only personnel who require access to perform their duties are granted it.
- Regular Security Testing: Penetration testing and independent security audits are conducted periodically to identify and address potential vulnerabilities.
10. Children's Privacy
Services ampm wallet is intended solely for individuals aged 18 and above. We do not knowingly collect, process, or store personal data from individuals under the age of 18.
If we determine that personal data has been collected from an individual under the age of 18 without proper verification, we will take immediate steps to delete that data and close the relevant account. Parents or guardians who suspect their child has registered an ampm wallet account are advised to contact us immediately.
11. Amendments to the Privacy Policy
ampm wallet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or regulatory guidance. Whenever amendments are made, the "Updated" date at the top of this document will be refreshed.
For significant amendments that materially affect how we process your data, we will provide advance notice via in-app notifications, email, or a prominent notice displayed on the website. Continued use of the platform after the amendment's effective date constitutes acceptance of the updated terms.
12. Contact Our Privacy Officer
If you have any questions, concerns, or wish to exercise your rights under this Privacy Policy, you may contact the ampm wallet Data Privacy Officer (DPO) through the following channels:
- Live Chat: Available 24/7 directly within the ampm wallet mobile app and website.
- Privacy Email: [email protected]
- Response Time: Privacy-related inquiries will be responded to within 7 business days; data rights requests will be resolved within 21 business days.
If you are dissatisfied with how we have handled your privacy complaint, you have the right to refer the matter to the Personal Data Protection Commissioner of Malaysia. For general enquiries, you may also refer to the page FAQ us or read Terms and Conditions for a more comprehensive understanding of the terms governing your use of this platform.