Privacy Policy —
How ampm1 Protects Your Data

This Privacy Policy ("Policy") describes how ampm1 ("ampm1", "We", "Us", "Our"), the operator of the online gaming platform accessible athttps://ampm1.cam/, collects, uses, stores, discloses, and otherwise processes personal data relating to individuals who access or use the Platform ("User", "Player", "Your").

ampm1 is committed to handling your personal data responsibly and in accordance with applicable data protection laws and internationally recognised privacy principles. This Policy is incorporated by reference into ourTerms & Conditions, which together with this Policy form the complete agreement governing your relationship with ampm1.

By registering an account on ampm1, accessing the Platform, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you must refrain from registering an account or continuing to use the Platform.

For the purposes of this Privacy Policy, the following terms shall have the meanings ascribed to them below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial data, device identifiers, and behavioural data.
• "Data Controller" means ampm1, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of ampm1, including payment processors, fraud prevention services, and technology providers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Consent" means a freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their Personal Data.
• "KYC" means Know Your Customer — the identity verification process required by ampm1 to validate account ownership and comply with AML obligations.
• "MYR" means Malaysian Ringgit, the primary currency used for financial transactions on the Platform.

ampm1 collects the following categories of personal data, depending on how you interact with the Platform:

ampm1 collects personal data through the following channels:

• Directly from you — information you provide when creating an account, completing KYC, making deposits or withdrawals, setting responsible gambling limits, or contacting customer support.
• Automatically during Platform use — technical data such as IP addresses, device identifiers, browser information, and session activity is collected automatically when you access the Platform using cookies, server logs, and similar technologies.
• From payment processors — confirmation and transaction reference data is received from payment partners including FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong Connect when you conduct financial transactions.
• From identity verification providers — during KYC, ampm1 may use regulated third-party identity verification services that cross-check submitted documents against reference databases.
• From fraud prevention and AML partners — where required for compliance purposes, ampm1 may receive data from regulated screening services to verify that accounts are not associated with sanctions lists or known fraud patterns.

ampm1 processes your personal data for the following defined purposes:

1. Account operation — creating, managing, and maintaining your account, verifying identity, and enabling login and authentication.
2. Transaction processing — processing deposits and withdrawals in MYR via all supported Malaysian payment methods, and maintaining accurate financial records.
3. Regulatory compliance — fulfilling Know Your Customer (KYC) obligations, Anti-Money Laundering (AML) checks, and complying with applicable laws and regulatory directives.
4. Fraud prevention & security — detecting, investigating, and preventing fraudulent transactions, multi-accounting, unauthorised account access, and other security threats.
5. Responsible gambling — monitoring gaming behaviour to enable self-exclusion, deposit limits, cooling-off periods, and other player protection tools as described in our Responsible Gambling Policy.
6. Customer support — handling enquiries, resolving disputes, and maintaining records of communications for quality assurance purposes.
7. Platform improvement — analysing aggregated usage data to improve Platform performance, identify technical issues, and optimise the user experience for Malaysian players.
8. Direct communications — sending account-related notifications, security alerts, and (where you have opted in) promotional communications about bonuses and Platform updates.

ampm1 processes your personal data one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity — processing required to perform the contract between you and ampm1, including account management and transaction processing.
• Legal obligation — processing required to comply with applicable laws, including AML regulations, KYC requirements, and responses to lawful regulatory or law enforcement requests.
• Legitimate interests — processing undertaken to further ampm1's legitimate business interests in fraud prevention, platform security, and service improvement, where such interests are not overridden by your data protection rights.
• Consent — processing based on your explicit and freely given consent, particularly for optional marketing communications and non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

ampm1 does not sell, rent, or lease your personal data to any third party. We may share your personal data only in the circumstances described below, and only to the extent strictly necessary for each purpose:

• Payment processors — financial transaction data is shared with regulated payment partners (including FPX gateway operators, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and cryptocurrency processors) solely to facilitate deposits and withdrawals.
• Identity verification providers — identity documents and biometric data submitted for KYC may be processed by certified third-party identity verification services operating under binding data processing agreements.
• Fraud prevention & AML services — relevant data may be shared with regulated fraud detection and AML screening services to meet compliance obligations.
• Technology and infrastructure providers — cloud hosting, database and security infrastructure providers may access data as part of their service provision, under strict contractual confidentiality and data processing agreements.
• Legal and regulatory authorities — ampm1 may disclose personal data to law enforcement agencies, courts, regulatory bodies, or other government authorities where required by applicable law, court order, or regulatory direction.
• Business transfers — in the event of a merger, acquisition, or sale of all or part of ampm1's business, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

ampm1 retains personal data only for as long as is necessary to fulfil the purposes set out in this Privacy Policy, or as required by law. The following general retention principles apply:

When personal data is no longer required and no legal obligation to retain it exists, ampm1 will securely delete or anonymise the data so that it can no longer be linked to any individual.

ampm1 uses cookies and similar tracking technologies on the Platform to ensure core functionality, enhance your experience, and collect anonymised analytics data. The following categories of cookies are used:

• Strictly Necessary Cookies — essential for Platform operation, including session management, authentication, and security. These cannot be disabled without impairing Platform functionality.
• Performance & Analytics Cookies — collect anonymised information about how Players use the Platform (page visits, session durations, error events). This data is used to improve Platform performance and the overall user experience for Malaysian players.
• Functional Cookies — remember your preferences such as language settings and responsible gambling limit configurations to personalise your experience on return visits.
• Marketing Cookies — used only where you have explicitly opted in. May be used to deliver relevant promotional information about ampm1 bonuses and events.

You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to log in and use core Platform features. Detailed cookie consent preferences can also be managed through the consent interface displayed on your first visit to the Platform.

As a data subject, you hold the following rights with respect to your personal data processed by ampm1. To exercise any of these rights, please contact our data protection team using the details in Section 12.

ampm1 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• Transport Layer Security (TLS 1.3) — all data transmitted between your device and ampm1's servers is encrypted in transit using TLS 1.3 or higher.
• AES-256 encryption at rest — personal data stored in ampm1's databases is encrypted using AES-256 symmetric encryption.
• Two-Factor Authentication (2FA) — available to all registered accounts as an additional layer of login security.
• Role-based access controls — access to personal data by ampm1 staff is restricted to personnel who require it for their job function, governed by the principle of least privilege.
• Audit logging — all access to production databases and sensitive data is logged with timestamped records, subject to regular review.
• Penetration testing — ampm1's infrastructure and application layer undergo scheduled security testing to identify and remediate vulnerabilities.
• Incident response — ampm1 maintains a formal data breach response procedure. In the event of a breach affecting your personal data, you will be notified in accordance with applicable law.

Despite these measures, no digital system is entirely immune to security threats. ampm1 encourages all Players to use strong, unique passwords, enable2FA, and promptly report any suspected security incidents to our support team.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ampm1, please contact our data protection team through the following channels:

When submitting a data subject request, please provide sufficient information to enable us to verify your identity and locate your account. ampm1 may request a copy of your identity document to process access, correction, or deletion requests securely. We will not use identity documents submitted for verification purposes for any purpose other than processing your request.

ampm1 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered Players via email. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of the Platform following notification of changes constitutes acceptance of the revised Policy.