Updated: 1 January 2026

Club 22 Privacy Policy – Malaysian Player Data Protection

Club 22 values your privacy. This Privacy Policy clearly explains how we collect, use, store, and protect your personal information as a member of our betting platform in Malaysia.

Club 22's Privacy Commitment: We do not sell, rent, or disclose your personal information to third parties for marketing purposes without your consent. Your privacy is not just a promise — it is a core operating principle Club 22.

1Introduction & Scope of Privacy Policy

Club 22 is an online Sports Betting and live casino platform operating in Malaysia via the website club22.my. We understand that your trust in us depends greatly on how responsibly and transparently we handle your personal information.

This Privacy Policy explains in detail how Club 22 collects, processes, stores, and protects your personal data when you use our platform. It applies to all users who browse the website Club 22, register as a member, or interact with any of the services we offer — including Malaysia Super League and EPL Sports Betting, live casino games, online lottery, roulette, and all other sections of our platform.

By using the platform Club 22, you agree to the data collection and usage practices described in this Privacy Policy. If you disagree with any part of this policy, please stop using the platform and contact us to close your account.

This Privacy Policy should be read together with our Terms & Conditions and Responsible Gaming Policy ours, which forms part of the overarching agreement between you and Club 22.


2Types of Information We Collect

Club 22 collects your personal information through various means — directly when you register or use the platform, and automatically through tracking technologies we use to enhance the user experience.

A. Information You Provide Directly

  • Identity information: Full name, date of birth, MyKad or passport number
  • Contact information: Active Malaysian phone number, email address, residential address
  • Financial information: Bank account number, bank name, digital wallet details (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow)
  • Account information: Username, password (stored in encrypted form), security questions
  • Verification documents: MyKad copy, bank statement, or other requested KYC documents

B. Information Collected Automatically

  • Usage data: Pages visited, session duration, buttons clicked, types of games played
  • Device data: Device type, operating system, phone model, screen resolution
  • Network data: IP address, browser type, approximate location (state within Malaysia)
  • Transaction data: Deposit, withdrawal, betting, and winnings history on the platform
  • Cookie data: User preferences, login status, session data stored in the browser

Note: We do not store credit or debit card numbers directly on our servers Club 22. All payment processing via FPX, Touch 'n Go, GrabPay, and other payment methods is handled by payment providers that maintain their own security standards.


3How We Use Your Information

Club 22 uses the information collected solely for legitimate and necessary purposes in operating our platform. Below is a summary of our data usage:

Purpose of Use Types of Data Used Legal Basis
Registration & account management Name, email, phone number, password Contract performance
Identity verification (KYC) MyKad, date of birth, address Legal obligations
Deposit & withdrawal processing Bank account details, e-wallets Contract performance
Fraud detection & security IP address, device data, transaction patterns Legitimate interest
Customer support Transaction history, account information Contract performance
Platform improvements Usage data, analytics cookies Legitimate interest
Responsible gambling compliance Betting patterns, deposit limits Legal obligations
Marketing communications (with consent) Email, phone number Consent

Club 22 will not use your data for any purposes not listed in the table above without obtaining your consent first. You may withdraw consent for marketing communications at any time through your account settings or by contacting our support team.


4 Information Sharing & Disclosure

Club 22 does not sell or rent your personal information to any third party. However, there are limited situations where we may need to share your information with certain parties, as outlined below:

  • Payment service providers: FPX, Maybank2u, CIMB Clicks, Touch 'n Go, GrabPay, Boost, ShopeePay, and DuitNow providers to securely process your financial transactions
  • Technology service providers: Hosting companies, cloud services, and software providers that help us operate the platform — all bound by strict confidentiality agreements
  • Regulatory authorities: When required by Malaysian law or a valid court order, we may be required to disclose certain information
  • Fraud prevention agencies: To detect and prevent fraudulent activity, money laundering, or misuse of the platform
  • Business partners: In the event of a merger, acquisition, or sale of company assets where user data may be transferred as part of the business assets — you will be notified in advance

In all of the above data-sharing scenarios, Club 22 ensure that recipients comply with data protection standards equivalent to or higher than our own. We do not permit third parties to use your data for their own marketing purposes.

If Club 22 receives a legal request to disclose your data, we will endeavour to notify you in advance unless prohibited from doing so by a court order or applicable law.


5Data Security Measures

Club 22 implements multiple layers of technical and organisational security measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction.

  • 256-bit SSL/TLS encryption: All data transmitted between your browser and our servers Club 22 is protected with industry-standard encryption
  • Secure password storage: Your password is never stored in plain text — we use a bcrypt hashing algorithm that is irreversible
  • Two-factor authentication (2FA): We encourage all members to enable 2FA for an added layer of protection on their accounts
  • 24/7 Monitoring: Our systems are continuously monitored to detect any unusual activity or intrusion attempts
  • Internal access controls: Only authorised personnel may access users' personal data, and every access is logged for audit purposes
  • Regular security testing: Platform Club 22 undergoes regular penetration testing and vulnerability assessments by independent security experts

In the event of a data breach: Should a security incident occur that affects your personal data, Club 22 will notify you within 72 hours of confirming the incident, along with details of what occurred and the steps we have taken.


6Cookies & Tracking Technologies

Website Club 22 uses cookies and similar tracking technologies to enhance your experience and help us understand how our platform is used. The types of cookies we use are as follows:

  • Essential cookies (required): Required for core platform functions such as login, game sessions, and security. These cookies cannot be disabled
  • Preference cookies: Saves your preferences such as language, display settings, and game preferences so you don't have to reconfigure them each time you visit
  • Analytics cookies: Helps us understand which pages are visited most frequently and where users encounter issues, so we can make improvements
  • Marketing cookies: Used to show you relevant promotions and offers based on your interests and activity on the platform — only with your consent

You can manage cookie settings through your internet browser at any time. However, disabling essential cookies may affect the functionality of the platform Club 22 and you may be unable to log in or use certain features properly.


7Your Rights Regarding Personal Data

As a user Club 22, you have certain rights regarding the personal data we hold about you. We are committed to respecting and facilitating the exercise of these rights.

Right of Access

You have the right to request a copy of all personal data we hold about you within 30 days of your request.

Right to Rectification

If any of your information is inaccurate or out of date, you may request a correction through your account settings or by contacting customer support.

Right to Erasure

You may request that we delete your personal data. Such requests are subject to our legal obligations to retain certain records.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time without providing a reason.

Right to Data Portability

You may request your data in a machine-readable format (such as CSV) for transfer to another platform if needed.

Right to Restrict Processing

In certain circumstances, you may request that we restrict how we process your data while a dispute is being resolved.

To exercise any of the rights above, please contact our Data Privacy Officer at privacy@club22.my. We will respond to all valid requests within 30 calendar days.


8Data Retention Period

Club 22 only retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required under applicable Malaysian law.

  • Active account data: Retained for as long as your account is active and in use on the platform Club 22
  • Financial transaction data: Retained for a minimum of 7 years from the transaction date to comply with financial and tax legal requirements
  • KYC Documents: Retained for a minimum of 5 years after account closure to comply with anti-money laundering regulations
  • Customer support communication logs: Retained for 2 years for reference and service improvement purposes
  • Analytics cookie data: Retained for no more than 13 months
  • Closed accounts: Personal data will be anonymised within 90 days of account closure, except for data that must be retained for legal reasons

When the retention period expires or upon a valid deletion request, Club 22 will securely delete or anonymise your data so that it can no longer be linked back to you.


9Children & Minors Privacy

Platform Club 22 is strictly for individuals aged 18 and above. We do not knowingly collect, process, or store personal information from individuals under the age of 18.

If you believe we have inadvertently collected personal information from someone under the age of 18, please contact us immediately at privacy@club22.my. We will take immediate steps to delete that information and close the associated account.

Parents and guardians are encouraged to monitor their children's internet usage and ensure they do not access adult betting platforms such as Club 22. Please use parental control software if necessary.


10Amendments to This Privacy Policy

Club 22 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes to the services we offer.

When we make material changes to this Privacy Policy, we will:

  • Updating the "Last Updated" date at the top of this page
  • Sending email notifications to all registered members at least 7 days before the changes take effect
  • Displaying a clear notice on the platform's main page Club 22 during the transition period

Continued use of the platform Club 22 after the effective date of any amendment to the Privacy Policy will be considered your acceptance of those changes. We encourage you to review this page from time to time.


11Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Privacy Officer Club 22 through the following channels:

  • Privacy email: privacy@club22.my
  • General support email: support@club22.my
  • Live chat: Available 24/7 within the platform

We are committed to responding to all privacy-related enquiries within 3 business days and resolve any valid complaints within 30 calendar days. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority.

We take every privacy enquiry seriously. Our team is available in Bahasa Malaysia and ready to help you understand your rights and how we protect your personal data every day.

Why Trust Club 22 with Your Data?

Data protection is more than a legal obligation for us — it is part of our commitment to being the most trusted betting platform in Malaysia.

Bank-Grade Encryption

All data transmitted on the platform Club 22 is protected with 256-bit SSL/TLS encryption — the same standard used by Malaysia's leading banks such as Maybank and CIMB.

No Sale of Data to Third Parties

Your personal data is never sold or shared with external advertisers. Every ringgit you deposit stays secure, and your financial information never leaves the Club 22.

Dedicated Data Privacy Officer

We have a Data Privacy Officer responsible for ensuring all our practices meet the highest standards. You may contact them directly at privacy@club22.my for any enquiries.

Regular Security Audits

Platform Club 22 undergoes periodic independent security audits to ensure our data protection systems remain up to date against the latest security threats.

Full Control in Your Hands

Through your account settings, you can manage your privacy preferences, opt out of marketing communications, and request an export or deletion of your data at any time without unnecessary delays.

Prompt Incident Notification

In the event of any security incident that affects your data, Club 22 will notify you within 72 hours — well ahead of the standard industry timeline.

Your Data Is Safe. Ready to Play?

Register with Club 22 today and enjoy a safe, transparent, and exciting Sports Betting and Live Casino experience with the Malaysian player community.

By registering, you agree to our Terms & Conditions and Club 22's Privacy Policy. This platform is for individuals aged 18 and above only. Please play responsibly — refer to Responsible Gaming Policy us for more information.

Bahasa Melayu