At 27th, we believe that privacy is more than a legal obligation — it is a fundamental right of every Malaysian player who entrusts their personal information to us. This Privacy Policy clearly sets out how we collect, use, store and protect your data at all times.
Six core principles that underpin how 27th handles the personal data of every Malaysian player with the utmost responsibility.
27th operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). Every aspect of how we collect, process, and store your data is carried out in accordance with applicable local legislation – not merely international best practice, but local legal obligations that we fully respect.
Every piece of information you submit to 27th – from your registration details to your Touch 'n Go eWallet or DuitNow transaction records – is protected by 256-bit SSL encryption, the highest security standard in the global banking and digital finance industry. Your data cannot be intercepted while in transit.
27th has never and will never sell, rent or disclose your personal information to any third party for marketing or commercial purposes without first obtaining your explicit consent. Your data belongs to you – it is not a business asset of ours.
You have the full right to access, view, correct, request an export of, or request the deletion of your personal data held by 27th at any time. The process is straightforward and can be completed simply by contacting our support team via email or live chat.
Your personal data is stored in a server environment with multiple layers of security and strict access controls. Only specifically authorised personnel are permitted to access player data, and every access is logged and continuously monitored by our security team 27th.
Privacy Policy 27th is reviewed and updated periodically to ensure it reflects changes in technology, relevant Malaysian legislation, and current industry best practices. All material updates will be communicated to players via their registered email.
This Privacy Policy explains how 27th (operating through the 27th.my website) collects, uses, discloses and protects your personal information when you use our platform. By registering for or using the services of 27th, you agree to the practices described in this Privacy Policy. Please read this document in full before registering.
27th takes the privacy of our players' data with the utmost seriousness. As an online entertainment platform serving Malaysian players, we collect and process various types of personal information in the course of providing our services to you. This document is written with the aim of explaining – transparently and clearly, without confusing legal jargon – every aspect of how your personal data is handled by 27th.
This Privacy Policy applies to all information collected through the 27th.my website, any associated mobile applications (if applicable), email and live chat communications, and any other interactions between you and the platform 27th. It also applies to individuals who browse our website without registering as a member, although the scope of data collected from unregistered visitors is more limited.
Legal Basis: This Privacy Policy has been prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and the regulations made thereunder. 27th is the responsible data processor under the Act and takes this responsibility seriously in every operational decision we make.
If you have any questions about how we handle your personal data that are not addressed in this document, you are welcome to contact us at any time by email at [email protected] and we will respond within 3 business days.
27th collect your personal data through several methods: directly when you register or fill in a form, automatically through your use of the platform, and in certain cases, through trusted third parties. The types of data we collect include:
| Data Category | Required? | How It Is Collected | Exemptable? |
|---|---|---|---|
| Personal Identification Information | Mandatory | Registration form | No |
| Financial Information | Mandatory | Deposit / Withdrawal | No |
| Game Activity Log | Partial | Automatic | No |
| Analytics Cookie Data | Optional | Automatic (browser) | Yes |
| KYC Documents | Mandatory | Manual upload | No |
27th only uses your personal data for purposes that are lawful, necessary and directly related to the provision of our platform services. We do not use your data for any other purpose without first obtaining your additional consent. The primary purposes for which we use your data are as follows:
Data Minimisation Principle: 27th only collects data that is strictly necessary for the stated purposes. We do not gather more information than required, and we regularly reassess whether the data we hold remains relevant and necessary.
27th does not sell, rent or disclose your personal data to third parties for their own marketing purposes. This is an absolute commitment we have never compromised on. However, there are limited situations where we may need to share your data with other parties for legitimate operational purposes:
We may share your personal data with third-party service providers who assist us in operating the platform – such as payment processors (payment gateways for Touch 'n Go eWallet, DuitNow, and others), identity verification (KYC) service providers, and technical infrastructure providers. All such providers are bound by strict confidentiality agreements and are only permitted to use your data for the specific purposes we have defined.
27th may be required to disclose your personal data to Malaysian authorities or regulatory bodies when directed by a valid court order, lawful legal process, or other binding legal obligations. In such cases, we will endeavour to notify you where permitted by law to do so.
In situations where data disclosure is necessary to protect the safety or vital interests of an individual – for example, in cases involving a serious threat to safety or health – 27th reserves the right to disclose relevant information to the appropriate authorities.
Our Promise: We have never sold, and will never sell, your personal data to advertisers, data companies, or any third-party commercial party for financial gain. This is a firm line we will not cross under any circumstances.
Protecting your personal data from unauthorised access, loss, misuse or alteration is the foremost technical and operational priority at 27th. We continually invest in security technology and processes to ensure the highest protection standards are maintained at all times.
Key security measures we implement include data encryption in transit using TLS/SSL 256-bit, storage of passwords in an irreversible hashed format, multi-layered access controls based on the principle of least privilege, continuous 24-hour system monitoring by our cybersecurity team, periodic security audits by independent third parties, and regular data backup procedures to prevent data loss. Every login to internal systems that store player data is recorded and fully auditable.
Data Breach Notification: In the event of a security breach involving your personal data, 27th is committed to notifying you within the timeframe required by applicable Malaysian law, along with details of the nature of the breach, the data that may have been affected, and the steps we are taking to address it.
27th only retains your personal data for as long as necessary to fulfil the original purpose of collection or as required by Malaysian law. Once data is no longer needed, it will be securely deleted or anonymised in accordance with established procedures.
Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered by any party. In cases where immediate deletion is not practicable (for example, data within backup systems), it will first be anonymised.
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding personal data held by 27th. We are committed to facilitating the exercise of these rights without unnecessary barriers:
You have the right to request and receive a copy of the personal data we hold on you at any time. Requests will be processed within 21 business days.
If the personal data we hold about you is inaccurate or incomplete, you have the right to request an immediate correction and we are obliged to update it accordingly.
You may request the deletion of your personal data under certain circumstances – for example, where the data is no longer needed or where you have withdrawn your consent – subject to applicable legal obligations.
In certain circumstances, such as when the accuracy of your data is in dispute, you have the right to request that we restrict how we process your data while the matter is being resolved.
You have the right to receive your personal data in a machine-readable format (such as CSV or JSON) for the purpose of transferring it to another platform where applicable.
You have the right to object to the processing of your data for specific purposes such as direct marketing. Opting out of marketing communications is straightforward – simply click the "unsubscribe" link in any of our emails.
To exercise any of the above rights, please contact our privacy team at [email protected] with the subject line "PDPA Rights Request". Please include your full name and registered email address to facilitate identity verification. We will respond within 21 business days of receiving your request.
27th uses cookies and similar tracking technologies to enhance your experience on our platform, ensure proper technical functionality, and understand how players interact with our website. The following are the types of cookies we use:
You can manage cookie preferences through your web browser settings. Please note that disabling certain cookies may affect the functionality of some platform features 27th.
27th does not target, collect data from, or permit individuals under 18 years of age to use our platform under any circumstances. This is an absolute policy with no exceptions.
We implement an age verification process at registration and conduct periodic checks to ensure compliance. Should we find that personal data has been collected from an individual under 18 years of age without guardian consent, we will take immediate steps to delete that data and close the account in question. Any deposits made will be frozen while an investigation is carried out.
If you become aware or suspect that a minor under the age of 18 has registered for or is using the platform 27th, please contact us immediately at [email protected] so that prompt action can be taken.
In certain operational scenarios, your personal data may be processed or stored on servers located outside Malaysia – for example, when we utilise global cloud infrastructure services for platform performance and reliability purposes. Where cross-border data transfers occur, 27th ensures that:
27th prioritises the use of local Malaysian infrastructure and service providers where practical and available, in order to minimise the need for cross-border data transfers.
27th reserves the right to update or amend this Privacy Policy from time to time in response to changes in Malaysian law, technological developments, shifts in industry practice, or improvements to how we operate. Whenever a material amendment is made to this Privacy Policy:
Continued use of the platform 27th after the effective date of the amendment will be deemed acceptance of the revised policy. If you do not agree with any changes, you have the right to close your account and request data deletion before the effective date.
If you have any questions, concerns or complaints regarding how 27th regarding the handling of your personal data, our privacy team is ready to assist. We are committed to providing meaningful responses and addressing every privacy concern with seriousness and professionalism.
Related Documents: To fully understand how 27th operates responsibly, please also refer to Terms & Conditions and page Responsible Gaming of ours that supplements this Privacy Policy.
Understanding the importance of privacy in the context of an online entertainment platform such as 27th – and why we invest so much in protecting it.
When you register at 27th, you are entrusting us with far more than just your name and email address — you are sharing sensitive financial information such as your Touch 'n Go e-wallet details or DuitNow account, transaction records that reflect your financial habits, and in some cases, copies of official identity documents such as your MyKad. This is a trust we do not take lightly.
In the Malaysian context, where cybercrime and online fraud are on the rise, savvy players are increasingly cautious about which platforms they entrust with their personal data. Reports from CyberSecurity Malaysia indicate a growing number of phishing and identity theft cases targeting users of digital financial services – including e-wallets and online platforms. That is why 27th invests seriously in robust security infrastructure and a strong privacy policy.
We also understand that some Malaysian players may play on 27th privately – they may not wish for family members or colleagues to know about their online entertainment activities. This is a personal choice we fully respect. Your gameplay data will never be disclosed to any party except in the situations outlined in this Privacy Policy, and it will not be used to make inferences or build profiles that could cause harm to you.
Approach 27th towards privacy is "privacy by design" – meaning privacy protection is built into our systems and processes from the ground up, rather than added later as an external layer. Every new feature developed by our technology team undergoes a privacy review to ensure it does not introduce unnecessary new privacy risks for players.
One of the aspects that sets 27th from many other online platforms is our transparency about what we do with your data. Too many companies write lengthy, convoluted privacy policies with the intention of concealing their data practices behind complex legal language. At 27th, our philosophy is the opposite – we want you to genuinely understand what happens with your data, and we have written this policy in plain language that any person can read and follow.
Finally, we want you to know that this Privacy Policy is not merely a document that exists out of obligation – it is a reflection of the core values of 27th. Whether you're playing at a Lightning Roulette table, trying your luck on Sea Treasure slots, or enjoying a Live Fan Tan session with fellow Malaysian players, you deserve to play with peace of mind, free from any concern about the safety of your data. That is our promise to you, and it's one we honour every single day.
The layers of technical and operational safeguards we put in place to ensure your personal data remains secure at all times at 27th.
The highest-level encryption protects all data in transit between your device and 27th's servers
Multi-layered protection that filters and blocks unauthorised access to 27th's infrastructure
Two-factor authentication as an additional layer of security for your account on the 27th platform
The security team continuously monitors 27th's systems to detect and respond to threats
Your data is automatically and regularly backed up to multiple secure locations to prevent data loss
Regular security audits conducted by independent third parties ensure that 27th's data protection standards remain up to date
Only specifically authorised personnel may access player data, with every instance of access fully recorded
Full operations comply with Malaysia's Personal Data Protection Act 2010 in all aspects of data handling