At Mahkota78, your privacy is more than a legal obligation — it is a core value. This document clearly explains how we collect, use, store, and protect the personal information of our players as a Malaysian online casino.
Six core data protection principles we uphold for every player
All data you send to and from the Mahkota78 platform is protected by HTTPS and 256-bit SSL encryption — the same security standard used by Maybank and CIMB for online banking. Stored data is further protected with AES-256 encryption, which cannot be deciphered without the correct key.
Mahkota78 has never and will never sell, rent, or share your personal information with any marketing company, advertiser, or third party for commercial purposes. Your data belongs to you — it is not an asset we can trade with anyone.
You have the right to access, review, correct, or request the deletion of your personal data held by Mahkota78. Every request will be processed within seven business days. You may also manage your communication preferences and cookie settings directly within your account.
All financial transactions at Mahkota78 — including deposits via Touch 'n Go eWallet, GrabPay, DuitNow, and FPX — are processed through a PCI DSS-certified payment gateway. Your payment information is never stored in an unencrypted state in our systems.
Mahkota78 uses cookies strictly for essential purposes — login session management, language preferences, and platform performance analytics that do not identify individual users. We do not use cross-site tracking cookies or collect behavioural data for third-party advertising.
In the event of any security incident involving player data, Mahkota78 is committed to notifying affected players within 72 hours of confirming the incident. We have a clear incident response protocol that is regularly tested by our cybersecurity team.
When you register and play on any online casino platform, you are entrusting that platform with highly sensitive information — your full name, phone number, bank account or e-wallet details, and your financial activity records. This is information that, in the wrong hands, could cause serious harm.
At Mahkota78, we are fully aware of this great responsibility. That is why we invest seriously in data security infrastructure — not merely to comply with regulations, but because we genuinely believe that players who feel safe are players who can enjoy their casino experience with peace of mind.
This Privacy Policy is written in plain, straightforward language — not confusing legal jargon — so you know exactly what happens to your information. We want you to genuinely understand it, not just click agree without reading.
Important Note: By registering for or using Mahkota78's services, you agree to the collection and use of your information as described in this Privacy Policy. Please read this document carefully. If there is any part you do not understand, contact our support team before continuing to use the platform.
Mahkota78 ("we", "our platform") operates under the domain mahkota78.click and provides online casino and digital betting services to players in Malaysia. We take our responsibility to protect the privacy and personal data security of every platform user seriously.
This Privacy Policy describes our practices regarding the collection, use, disclosure, and protection of information you provide to us or that we collect when you use Mahkota78's services. It applies to all platform users — whether you are browsing without an account, an active registered player, or a former member whose account has been closed.
We are committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA) in all aspects of managing our players' personal data. The data controller responsible for the purposes of this document is Mahkota78, reachable at support@mahkota78.click.
Mahkota78 collects personal data from you in several different ways. Below are the categories of data we collect and how they are obtained:
Data you provide directly:
Data collected automatically during platform use:
We do not collect unnecessary data. Every category of data we retain has a clear purpose directly related to platform operations, account security, or applicable legal compliance.
The data we collect is used solely for the operation and improvement of Mahkota78's services. Below is a full list of the purposes for which data is used:
We do not use your data to make fully automated decisions that materially affect your rights or interests without human oversight.
Mahkota78 does not sell players' personal data to any third party for commercial purposes. However, in the course of operating the platform, we may share your data with the following parties under limited and controlled circumstances:
In all cases of data sharing with third parties, we ensure that recipients maintain a level of security protection equal to or greater than our own. Binding data processing agreements (DPAs) are signed with all third parties that handle Mahkota78 player data.
We implement comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or alteration. These measures include:
While we implement all reasonable security measures, no system can be guaranteed 100% secure. We encourage players to play their part in protecting their accounts by using strong passwords, not sharing login credentials, and enabling two-factor authentication.
Mahkota78 retains your personal data only for as long as it is needed for the purpose it was collected, or as required by applicable law. Our data retention guidelines are as follows:
Once the retention period expires, data will be securely destroyed or anonymised in accordance with information security industry best practices.
As a Mahkota78 player whose information we hold, you have the following rights regarding your personal data:
| Your Rights | Description | How to Submit a Request |
|---|---|---|
| Right of Access | Request a copy of all personal data we hold about you | Email support@mahkota78.click |
| Right to Rectification | Correct data that is inaccurate or incomplete | Via account settings or support |
| Right to Erasure | Request deletion of data that is no longer needed | Email support@mahkota78.click |
| Right to Restrict Processing | Opt out of data use for marketing purposes | Communication settings within your account |
| Right to Data Portability | Receive a copy of your data in a structured, machine-readable format | Email support@mahkota78.click |
| Right to Object | Object to the processing of your data for specific purposes | Email support@mahkota78.click |
All data rights requests will be processed within seven business days from the date the request is received. We may require identity verification before processing any request to ensure we only disclose data to its rightful owner. Please note that the right to deletion may be limited for data we are required to retain due to legal obligations.
Cookies are small text files stored on your device when you browse a website. The Mahkota78 use cookies for limited and transparent purposes. Below are the types of cookies we use:
Mahkota78 not use cross-site tracking cookies, third-party marketing cookies, or any technology that collects information about your activity outside the Mahkota78 platform. You can manage cookie settings through your web browser, though please note that blocking essential cookies may affect platform functionality.
Platform Mahkota78 is exclusively for individuals aged 21 and above. We do not knowingly collect or process personal data from individuals under the age of 21.
Should we discover that personal data belonging to a minor has been collected without our knowledge — whether through the provision of false information during registration or for any other reason — we will take immediate steps to delete that data and close the account in question.
If you are a parent or guardian who believes your underage child has registered an account at mahkota78, please contact us immediately at support@mahkota78.click so we can take the appropriate action.
The mahkota78 platform does not contain links to third-party websites unrelated to our operations. Where integrations with third-party services are required for gaming functionality (such as live casino streaming from Evolution Gaming studios), those services have their own Privacy Policies governing how they handle data.
Mahkota78 is not responsible for the privacy practices or content of any third-party services or websites that may be involved in delivering games to you. We encourage you to read and understand the privacy policy of any service you use outside the mahkota78 platform.
Mahkota78 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, technologies used, legal requirements, or other relevant factors.
When we make material changes to this Privacy Policy, we will notify you via an in-platform notification or by email to your registered address at least seven days before the changes take effect. For minor, non-material changes, we will update this page with a new "Updated" date.
Continued use of the Mahkota78 platform after the effective date of any changes constitutes acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed of the latest version of our policy.
For any enquiries, concerns, or requests relating to this Privacy Policy or how we handle your personal data, please contact the Mahkota78 team through the following channels:
We will acknowledge receipt of your request within 24 hours and provide a full response within seven business days. For complex requests such as data deletion or data portability, the response period may be longer and we will keep you informed of the expected completion time.
If you are not satisfied with our response to any privacy concern, you have the right to file a complaint with the Department of Personal Data Protection under the Ministry of Communications and Multimedia Malaysia.
Not just words — these are the concrete steps we put into practice every day
We only collect data that is strictly necessary to operate the platform safely and in accordance with the law. There is no excessive data collection for vague or unclear purposes. Every data field in the registration form has a clear and specific reason for being required.
All of mahkota78's data management practices are designed and implemented to comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We conduct regular compliance reviews and update our procedures whenever the law changes or evolves.
All Mahkota78 staff who handle player data undergo comprehensive data protection training and regular refresher sessions. They understand their responsibilities and the consequences of breaching our privacy policy. A culture of data protection starts from within our organisation.
Our data security infrastructure is reviewed and tested regularly by both our internal security team and independent external auditors. Any vulnerabilities identified are addressed promptly in accordance with established incident response protocols.
In the event of any data breach affecting players, we are committed to notifying those affected within 72 hours of confirming the incident. We believe that transparency during a crisis is the mark of a trustworthy company.
Once data is no longer needed, it is deleted using secure erasure methods that ensure it cannot be recovered. We do not simply "delete" in the conventional sense — we ensure the data is entirely inaccessible to anyone after the retention period ends.
Answers to the most frequently asked questions about your data privacy
All transactions processed through a PCI DSS-certified gateway — your financial data is always protected
Payment information is processed by a PCI DSS-certified gateway. Mahkota78 does not store your payment app PIN or password.
This Privacy Policy should be read alongside mahkota78's other policy documents for a complete understanding of how we operate. Please also read the Terms & Conditions which governs the overall terms of use for the platform, and the Responsible Gaming for information on the responsible gaming tools and controls we provide.
Register for free and enjoy over 2,000 premium casino games with the confidence that your personal information is protected to the highest security standards. A Malaysian platform that truly understands the needs of local players.