mu888 Privacy Policy – How We Protect Your Personal Data

1. Who We Are

mu888 is an online gaming platform operating at mu888.asia, offering casino games, live dealer tables, sports betting, and related services to registered players, with a primary focus on the Malaysian market. References to "mu888", "we", "us", or "our" in this Policy refer to the operator of the mu888 platform.

mu888 is the data controller in respect of the personal data collected through your use of the Platform. This means we determine the purposes for which, and the manner in which, your personal data is processed. Where third-party service providers process data on our behalf, they do so as data processors acting under our written instructions.

2. Data We Collect

mu888 collects personal data in the following categories:

3. How We Collect Data

mu888 collects personal data through the following means:

• Direct submission: Data you provide when registering an Account, completing KYC verification, making a deposit or withdrawal request, contacting support, or opting into a promotion.
• Automated collection: Technical and usage data collected automatically as you interact with the mu888 Platform, including via cookies, pixel tags, and server logs.
• Third-party sources: Identity and fraud screening data received from KYC verification service providers, payment processors (including Touch n Go, Boost, Maybank, CIMB, and Public Bank), and sanctions screening databases in connection with AML compliance obligations.

4. Legal Basis for Processing

mu888 processes your personal data only where a lawful basis exists. The primary legal bases we rely on are:

• Contractual necessity: Processing required to perform the contract between mu888 and you as a registered user, including account management, processing transactions, and delivering the Services you have requested.
• Legal obligation: Processing required to comply with applicable laws and regulatory obligations, including KYC identity verification, AML transaction monitoring, age verification (21+), and record-keeping requirements imposed by mu888's licensing authority.
• Legitimate interests: Processing necessary for mu888's legitimate business interests, where those interests are not overridden by your privacy rights — including fraud prevention, platform security, service improvement, and responsible gaming monitoring.
• Consent: Where you have given specific, informed consent, such as opting in to receive promotional communications from mu888. You may withdraw consent at any time by contacting support or updating your Account preferences.

5. How We Use Your Data

mu888 uses the personal data we collect for the following purposes:

• Creating and managing your Account, including authenticating your identity at login.
• Processing deposits and withdrawals via your registered payment methods (Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and cryptocurrency where applicable).
• Conducting KYC identity verification and ongoing monitoring required by our licensing authority and anti-money laundering obligations.
• Verifying that all Account holders are aged 21 or above, in compliance with our age restriction policy.
• Detecting, investigating, and preventing fraudulent transactions, bonus abuse, and other prohibited activities.
• Providing customer support and resolving disputes related to your Account or gameplay.
• Monitoring gameplay activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling behaviour and triggering intervention protocols where appropriate.
• Personalising your experience on the mu888 Platform, including recommending games and promotions based on your activity history where you have not opted out of personalisation.
• Sending transactional communications related to your Account, including deposit confirmations, withdrawal notifications, and security alerts — these are not marketing messages and are sent regardless of marketing opt-out status.
• Sending promotional communications about mu888 offers, bonuses, and new game releases, where you have given consent or where we have a legitimate interest and you have not objected.
• Complying with legal obligations, including responding to lawful requests from regulatory authorities, law enforcement agencies, and courts.
• Analysing aggregated, anonymised usage data to improve the Platform's features, performance, and user experience.

6. Data Sharing & Disclosure

mu888 does not sell your personal data to third parties. We may share your data with the following categories of recipients, solely to the extent necessary for the relevant purpose:

• Payment processors: Financial institutions and e-wallet operators including Touch n Go, Boost, Maybank, CIMB, and Public Bank, for the purpose of processing your deposits and withdrawals.
• KYC and identity verification providers: Third-party identity verification services that assist mu888 in completing mandatory Know Your Customer checks. These providers act as data processors under written agreements.
• Fraud prevention and AML screening services: Providers of sanctions screening, politically exposed persons (PEP) screening, and fraud detection services used to meet mu888's AML compliance obligations.
• Game content providers: Licensed game studios and aggregators who supply the games available on the mu888 Platform may receive limited technical data (such as session tokens and wager amounts) necessary for game functionality and RNG certification audits.
• Regulatory authorities: mu888's licensing authority and other applicable regulatory bodies as required by law. This includes mandatory reporting of suspicious transactions under AML regulations.
• Law enforcement and courts: Where mu888 is legally required to disclose data in response to a court order, subpoena, or lawful request from a competent authority.
• Group companies: Affiliated entities within the mu888 corporate group, for internal administrative, compliance, and risk management purposes, subject to equivalent data protection obligations.

7. International Data Transfers

mu888 may transfer your personal data to countries outside of Malaysia in connection with the delivery of Services, cloud infrastructure, or the engagement of third-party processors located overseas. Where such transfers occur, mu888 ensures that appropriate safeguards are in place, including contractual data protection clauses equivalent in effect to internationally recognised data transfer standards.

By registering an Account with mu888, you acknowledge that your data may be transferred to and processed in jurisdictions outside Malaysia. You can obtain further information about the safeguards applied to international transfers by contacting mu888 support.

8. Data Retention

mu888 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following general retention periods apply:

• Account and identity data: Retained for a minimum of five (5) years following account closure, as required for AML record-keeping compliance.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Communication records: Support interactions and dispute records are retained for three (3) years from the date of the interaction.
• Marketing data: Retained until you withdraw consent or object, at which point marketing communications will cease within 30 days. Underlying contact data may be retained on a suppression list to ensure opt-out status is honoured.
• Technical and usage data: Log data and session records are typically retained for twelve (12) months, unless specific retention is required for an ongoing fraud investigation or dispute.

At the expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be attributed to an identified individual.

9. Cookies & Tracking Technologies

mu888 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies: Required for the Platform to function correctly, including maintaining your login session, preserving your game state, and ensuring secure transmission. These cannot be disabled without disrupting Platform functionality.
• Performance and analytics cookies: Used to collect anonymised data on how users navigate the Platform, enabling us to identify performance issues and improve the user experience.
• Functional cookies: Used to remember your preferences, such as language settings and responsible gaming limits you have configured.
• Marketing cookies: Where you have consented, used to measure the effectiveness of promotional campaigns and deliver relevant offers based on your activity.

You may control non-essential cookies through your browser settings. Disabling certain cookies may affect the functionality of some Platform features. mu888 does not use cookies to track your activity across unaffiliated third-party websites.

10. Your Rights

Subject to applicable law, you have the following rights in respect of your personal data held by mu888:

• Right of access: You may request a copy of the personal data mu888 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data, subject to mu888's legal obligations that require certain data to be retained.
• Right to restriction: You may request that processing of your personal data be restricted in certain circumstances.
• Right to data portability: You may request your personal data in a structured, commonly used, machine-readable format where processing is based on consent or contractual necessity.
• Right to object: You may object to processing based on legitimate interests, including direct marketing. Where you object to direct marketing, mu888 will cease that processing immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact mu888's support team via live chat or by email at support@mu888.asia. mu888 will respond to verified requests within 30 days. We may need to verify your identity before processing your request.

11. Children's Privacy

The mu888 Platform is strictly for individuals aged 21 years or older. mu888 does not knowingly collect personal data from individuals under the age of 21. If we become aware that an Account has been created by or on behalf of a person under 21, that Account will be immediately suspended, the data will be deleted, and any associated funds may be forfeited in accordance with our Terms & Conditions.

If you believe that mu888 may have inadvertently collected data from an underage individual, please contact our support team immediately at support@mu888.asia so that the appropriate action can be taken without delay.

12. Security Measures

mu888 implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and mu888 servers.
• Encrypted storage of sensitive data, including financial records and identity documents.
• Role-based access controls ensuring that staff can only access data necessary for their specific function.
• Multi-factor authentication for administrative systems that hold personal data.
• Regular security audits and penetration testing of the mu888 Platform infrastructure.
• Incident response procedures for detecting, containing, and reporting data security incidents.

While mu888 takes security seriously and maintains industry-standard protections, no online platform can guarantee absolute security. You are encouraged to protect your Account by using a strong, unique password and enabling two-factor authentication (2FA). Report any suspected security incidents involving your Account to mu888 support immediately.

13. Changes to This Policy

mu888 may update this Privacy Policy periodically to reflect changes in applicable law, our data practices, or the Services we offer. When material changes are made, we will update the "Last Updated" date at the top of this page and, where practicable, notify registered users by email or in-platform notification.

We encourage you to review this Policy periodically. Your continued use of the mu888 Platform following the publication of an updated Policy constitutes your acknowledgement of the changes. Where applicable law requires your consent for specific changes in data processing activities, we will seek that consent before the updated practices take effect.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way mu888 handles your personal data, please contact our team:

• Live Chat: Available 24/7 on the mu888 Platform. Average response time under 3 minutes.
• Email: support@mu888.asia

If you are not satisfied with mu888's response to a data-related complaint, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.