Privacy Policy mu33 — Protection of Malaysian Users' Personal Data

1 Introduction and Scope of Privacy Policy

Mu33 is an online entertainment platform trusted by hundreds of thousands of players across Malaysia. We understand that your privacy is invaluable, and we are committed to handling it with full responsibility, transparency, and respect.

This Privacy Policy explains in detail how mu33, as the data controller, collects, processes, stores, protects, and under certain circumstances discloses your personal information when you use the mu33 website, mobile app, and all related platform services.

By registering an account, accessing, or using any part of the mu33 platform, you are deemed to have read, understood, and agreed to this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to close your account.

2 Personal Information We Collect

Mu33 only collects personal information that is strictly necessary to provide a quality, secure, and regulatory-compliant service. The categories of data we collect are as follows:

Mu33 does not collect sensitive data such as health information, political views, or religious beliefs unless you voluntarily provide it in the context of responsible gaming or self-support programmes.

• Information you provide directly during registration or KYC verification.
• Data automatically generated when you use the mu33 platform.
• Information we receive from legitimate third parties, such as payment providers, to verify transactions.
• Written or verbal communications you send to the mu33 support team.

3 How We Use Your Information

All use of personal data by mu33 is based on legitimate and transparent purposes. We do not process your data for unrelated purposes without obtaining your separate consent.

• Account management: Registering new accounts, verifying identity, processing logins, and managing your account settings.
• Transaction processing: Handling all deposits, withdrawals, and bonus payments securely and efficiently via methods such as DuitNow, FPX, Touch 'n Go eWallet, GrabPay, and Boost.
• Service provision: Enabling you to access over 1,000 games, sports betting, Live Casino, and all features of the mu33 platform.
• Service communications: Sending important notifications related to your account, transactions, security, and policy updates.
• Fraud prevention: Monitoring suspicious activity, detecting unauthorised access attempts, and protecting your account from security threats.
• Legal compliance: Meeting regulatory requirements, including anti-money laundering (AML) and know your customer (KYC) obligations.
• Platform improvements: Analysing aggregated usage patterns to enhance the gaming experience and mu33 platform features.
• Responsible gaming: Monitoring playing behaviour to support players who may need assistance or gaming limits.
• Related marketing: Sending relevant promotional offers and bonuses — only when you have given consent to receive marketing communications.

4 Data Sharing and Disclosure

Mu33 does not sell, rent, or trade your personal data to any external party for their own marketing purposes. However, in the course of operating the platform, we may share your personal data with the following categories of parties within strict and necessary limits only:

• Payment service providers: Banks, digital wallet operators, and payment processors required to securely handle your deposit and withdrawal transactions.
• Technology providers: Companies that provide the technical infrastructure, cloud hosting, gaming software, and customer support services that enable the mu33 platform to operate.
• Analytics providers: Analytics services that help us understand how players use the platform for improvement purposes — data is shared in anonymised or aggregated form only.
• Regulatory bodies and law enforcement: Where required by law or by a lawful directive from relevant authorities, mu33 will disclose the necessary information.
• Business partners: In the event of a takeover, merger, or sale of mu33 assets, player data may be transferred to the new entity subject to prior notice and equivalent protections.

All third parties we work with are required to comply with strict data protection standards and may only process your data for purposes specified by mu33. We use legally binding data processing agreements with all third parties that handle player data.

5 Your Personal Data Security

The security of your personal data is mu33's highest priority. We implement multiple layers of technical and organisational security measures to protect your information from unauthorised access, modification, disclosure, or destruction.

• 256-bit SSL encryption for all data transmitted between your device and mu33 servers.
• Encryption of sensitive data stored in databases using the AES-256 standard.
• Two-factor authentication (2FA) is available for all user accounts as an added layer of protection.
• 24/7 security monitoring by the mu33 cybersecurity team to detect and respond to threats.
• Regular security audits conducted by independent third parties to identify and address system vulnerabilities.
• Strict access controls ensure that only authorised staff can access players' personal data, and only to the extent required for their specific duties.
• Mandatory information security training for all mu33 staff who handle player data.

6 Use of Cookies and Tracking Technologies

The mu33 platform uses cookies and similar tracking technologies to enhance your experience, analyse platform performance, and personalise content based on your preferences. The types of cookies we use are as follows:

• Required cookies: These cookies are essential for the platform's core functions, such as login verification and session management. Disabling them will affect platform functionality.
• Performance cookies: Helping us understand how players interact with the platform — for example, which pages are visited most and where players encounter difficulties.
• Functional cookies: Saving your preferences such as language, display settings, and login details to streamline repeat visits.
• Analytics cookies: We use third-party analytics tools that receive data in anonymised form to help us improve the platform.

You can manage cookie settings through your web browser settings. However, disabling certain cookies may affect the functionality or your user experience on the mu33 platform. Continued use of the platform is considered consent to the use of necessary cookies.

7 Your Rights Over Your Personal Data

As a mu33 player, you have certain rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA). mu33 fully respects and facilitates the exercise of these rights:

8 Data Retention Period

Mu33 only retains your personal data for as long as it is needed for the purposes stated in this Privacy Policy, or as required by applicable laws and regulations.

• Active account data: Retained for as long as your account is active and during the required period following account closure to fulfil legal obligations.
• Financial transaction records: Retained for a minimum of 7 years from the date of transaction, in accordance with applicable financial and audit legal requirements in Malaysia.
• Security logs: Retained for 12 months to facilitate investigation of any security incidents or fraud that may occur.
• Customer support communications: Retained for 3 years for reference purposes and service quality improvement.
• Marketing data: Deleted within 30 days after you withdraw consent or close your account.

Once the relevant retention period has elapsed, your personal data will be securely deleted or anonymised so that it can no longer be personally associated with you. We follow data deletion procedures that comply with recognised information security standards.

9 Child Protection

The mu33 platform is strictly restricted to individuals aged 18 and above. We do not knowingly collect, process, or store any personal data from individuals under the age of 18.

If you believe that a minor has provided personal information to mu33 without your knowledge, please contact us immediately. We will take prompt steps to verify and, if necessary, delete the relevant data from our systems as quickly as possible.

10 Amendments to the Privacy Policy

Mu33 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data management practices, new legal requirements, or improvements to our services.

When we make significant amendments, we will notify you through one or more of the following methods:

• Prominent notices on the homepage or within your account on the mu33 platform.
• Notification via the email address registered to your account.
• In-app notifications on the mu33 mobile app when you start your next session.

The "Last Updated" date at the top of this document always reflects the latest version of mu33's Privacy Policy. We encourage you to review this policy periodically. Your continued use of the mu33 platform after any amendments take effect will be considered your acceptance of the updated policy.

11 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding mu33's Privacy Policy or how we handle your personal data, our team is ready to assist you.

• Live chat: Available 24/7 via the chat icon at the bottom-right corner of the mu33 platform.
• Support email: [email protected] — we aim to respond to all privacy inquiries within 2 business days.
• Response time: Data rights requests are processed within 30 business days from the date of receipt.

If you are not satisfied with how mu33 handles your privacy complaint, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection or the relevant data protection authority in your jurisdiction.