This Privacy Policy explains how 22club collects, uses, stores, and protects the personal data of users who access our online gaming and sports betting platform. Your privacy is important to us and we are committed to handling your data with care and transparency.
All personal and financial data processed by 22club is protected by 256-bit SSL encryption at rest and in transit. We take technical security seriously at every layer of our platform.
22club does not sell, rent, or trade your personal information to third-party marketers. Data shared with service partners is strictly limited to what is necessary for platform operations.
You have the right to access, correct, and request deletion of your personal data at any time. Our support team will respond to data rights requests within the timeframes set out in this Policy.
22club ("the Platform", "we", "us", "our") is committed to protecting and respecting the privacy of every individual who accesses and uses our online gaming and sports betting platform at https://22club.cam. This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed.
This Policy applies to all Users of the 22club platform, including registered account holders, visitors who browse the platform without registering, and individuals who interact with our customer support channels. By accessing the platform or creating an account, you acknowledge that you have read and understood this Policy and consent to the data processing practices described herein.
22club operates in compliance with applicable data protection laws and regulations, including Malaysia's Personal Data Protection Act 2010 (PDPA) and any associated regulations or guidelines issued by the relevant authorities. We process personal data only for the purposes set out in this Policy and only to the extent necessary for those purposes.
Personal Data Protection Act 2010 (Malaysia): As a platform serving Malaysian users, 22club processes personal data in accordance with the seven principles of the PDPA: General Principle, Notice and Choice Principle, Disclosure Principle, Security Principle, Retention Principle, Data Integrity Principle, and Access Principle.
For the purposes of this Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — including name, identification number, contact details, financial information, and device identifiers. |
| "Processing" | Any operation performed on personal data, including collection, storage, use, disclosure, erasure, or any combination thereof. |
| "Data Subject" | Any individual whose personal data is collected, held, or processed by 22club — including registered Users and platform visitors. |
| "Data Controller" | 22club, the entity that determines the purposes and means of processing personal data collected through the platform. |
| "Third-Party Processor" | Any external service provider engaged by 22club to process personal data on its behalf, subject to contractual data protection obligations. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of a Data Subject's agreement to the processing of their personal data for a stated purpose. |
| "Cookies" | Small text files stored on a User's device by the platform for the purpose of session management, analytics, and personalisation. |
22club collects different categories of personal data depending on how you interact with the platform. The categories and specific data points we collect are set out in the table below:
| Category | Data Points Collected |
|---|---|
| Identity Data | Full legal name, date of birth, nationality, gender, government-issued ID number (e.g., Malaysian MyKad or passport number), and a copy of identity documentation submitted for KYC verification. |
| Contact Data | Email address, mobile telephone number, and residential address (city, state, postcode). Malaysian city references such as Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, and Shah Alam are accepted address inputs. |
| Account Data | Username, encrypted password, account creation date, account status, communication preferences, and self-exclusion or limit settings. |
| Financial Data | Payment method details (e-wallet identifiers, bank account numbers — last four digits only), deposit and withdrawal transaction records, bonus activity, and wallet balance history. Covers methods including Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, Boost, GrabPay, and cryptocurrency wallet addresses. |
| Gaming & Betting Data | Game session history, bet placements, wagering activity, live betting interactions, and game outcome records. |
| Technical Data | IP address, browser type and version, device type, operating system, screen resolution, time zone, and session duration logs. |
| Usage Data | Pages visited, features accessed, navigation patterns, search queries within the platform, and interaction with promotional content. |
| Communications Data | Records of live chat interactions, support tickets, email correspondence, and feedback submissions directed to 22club. |
We do not intentionally collect sensitive personal data (such as racial origin, political opinions, religious beliefs, or health information) unless specifically required for responsible gambling compliance or regulatory purposes, in which case you will be notified and your consent obtained.
22club collects personal data through the following methods:
Data you provide directly when you register an account, complete KYC verification, make a deposit or withdrawal, submit a support request, respond to a survey, or contact us by any other means.
As you navigate and interact with our platform, we automatically collect technical and usage data via cookies, server logs, and similar tracking technologies. This includes your IP address, device fingerprint, and session behaviour. Please refer to Section 10 (Cookies & Tracking) for full details.
We may receive personal data about you from third parties in the following circumstances:
22club processes your personal data for the following purposes. Where a purpose relies on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
Under applicable data protection law, 22club relies on the following lawful bases when processing your personal data:
22club does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following circumstances and only to the extent strictly necessary:
We engage carefully selected third-party service providers who process data on our behalf and under our instruction, including: payment processors and e-wallet providers (Touch 'n Go, DuitNow, FPX, etc.); KYC and identity verification providers; game software providers and live dealer studios; cloud hosting and data storage infrastructure providers; and customer support platform providers. All processors are bound by contractual data protection obligations and are not permitted to use your data for any purpose beyond the services they provide to us.
We may disclose personal data to regulatory bodies, law enforcement agencies, courts, or other competent authorities where we are required to do so by applicable law, by court order, or where disclosure is necessary to protect the rights, property, or safety of 22club, our users, or the public.
In the event that 22club undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the relevant successor entity. You will be notified of any such transfer and any change in the applicable privacy policy before your data is transferred or becomes subject to a different privacy policy.
No Third-Party Marketing: We will never sell your personal data to third-party advertisers, data brokers, or marketing organisations. Any data sharing is strictly limited to operational necessity and legal compliance.
22club retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with an identifiable individual.
22club implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:
While we take every reasonable precaution to protect your data, no online platform can guarantee absolute security. If you suspect that your account has been compromised, please contact our support team immediately. In the event of a personal data breach that poses a risk to your rights, we will notify you and the relevant authorities in accordance with our legal obligations.
22club uses cookies and similar tracking technologies to operate, maintain, and improve the platform. Cookies are small text files stored on your device that allow us to recognise your browser and remember certain information about your visit.
You can manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies, or to receive a notification before a cookie is placed. Please note that disabling certain cookies may affect the functionality of the 22club platform, particularly strictly necessary cookies that are essential for account access and security.
Under the Malaysian Personal Data Protection Act 2010 and applicable data protection principles, you have the following rights in respect of your personal data held by 22club. To exercise any of these rights, please contact us using the details provided in Section 15:
You may request a copy of the personal data we hold about you and information about how it is being used. We will respond within 21 days of a valid access request.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request its correction. We will update your records and notify you once the correction is made.
Where we rely on your consent to process personal data — such as for marketing communications — you may withdraw that consent at any time. Withdrawal does not affect prior lawful processing.
You may request that we limit or cease processing your personal data in certain circumstances — for example, where you contest the accuracy of the data or where processing is no longer necessary for the original purpose.
Where technically feasible and applicable under law, you may request that certain personal data be provided to you in a structured, machine-readable format for transfer to another service provider.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 22club's legal retention obligations under applicable law.
We will acknowledge all data rights requests within 7 business days and will provide a substantive response within 21 calendar days. In complex cases, this period may be extended by a further 30 days, and you will be notified accordingly. We will not charge a fee for responding to data rights requests unless a request is manifestly unfounded or excessive.
The 22club platform is strictly intended for adults aged 21 years and above. We do not knowingly collect or process personal data from individuals under the age of 21. If we become aware that personal data has been submitted by or on behalf of a minor, we will take immediate steps to delete that data and close any associated account.
If you are a parent or guardian and believe that a minor in your care has registered on or used the 22club platform, please contact us immediately at the email address provided in Section 15. We will investigate and take appropriate action without delay. We recommend the use of parental control software on all household devices accessible to minors.
Age verification is a mandatory step in the 22club account and withdrawal process. We rely on KYC document checks — including submission of a valid Malaysian MyKad or passport — to verify that all registered Users satisfy the 21+ age requirement.
In the course of providing platform services, your personal data may be transferred to and processed in countries outside Malaysia — for example, in connection with our cloud infrastructure, game software providers, or KYC verification services. Where such transfers occur, 22club takes steps to ensure that appropriate safeguards are in place to protect your personal data in accordance with the standards required under the Malaysian Personal Data Protection Act 2010.
Safeguards used for cross-border transfers may include: contractual data transfer agreements with receiving parties; ensuring that the destination country provides an adequate level of protection for personal data; or obtaining your explicit consent where required.
If you would like further information about the safeguards applied to a specific cross-border transfer, please contact us using the details in Section 15.
22club reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. The effective date at the top of this page will be updated whenever a revision is made.
Where changes are material — for example, where we introduce a new purpose for processing your data — we will provide advance notice by email to the address associated with your account, or via a prominent notice on the platform, before the changes take effect. Your continued use of the platform following such notification constitutes your acceptance of the revised Policy.
We encourage you to review this Policy periodically. If you have any concerns about a particular change, please contact our support team before the revised Policy takes effect.
If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact our Data Privacy team through the following channels. We are committed to responding to all data-related enquiries promptly and transparently.
For matters relating to the general rules governing your account and use of the platform, please refer to our Terms & Conditions. For information about responsible gambling tools and support resources, please visit our Responsible Gambling page.
This Privacy Policy was last reviewed and updated on 1 January 2026.
All personal and financial records stored on 22club servers are encrypted at rest. Even in the unlikely event of a server-level breach, your data remains protected by strong encryption.
Our data practices are designed in accordance with Malaysia's Personal Data Protection Act 2010. We handle your data the way the law requires — and often to a higher standard than the minimum.
If you've consented to marketing communications and change your mind, you can opt out at any time through your account preferences or by contacting support. Your preference will be updated immediately.
Now that you understand how we handle your data, you can enjoy everything 22club has to offer with full confidence. Your information is safe, your rights are respected, and support is always available.
For players aged 21 and above only. Gambling involves financial risk. Please play responsibly and within your means.