Privacy Policy —
mu888 Data Protection Statement

mu888 ("mu888", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who access or use the mu888 Platform at mu888.one (the "Platform"). This Privacy Policy ("Policy") sets out how mu888 collects, uses, stores, shares, and protects your personal data in connection with your use of the Platform and associated services.

This Policy applies to all registered players, prospective players who visit the Platform without registering, and any individual whose personal data is processed by mu888 in connection with Platform operations. This Policy should be read in conjunction with the mu888 Terms and Conditions, which govern your use of the Platform.

By registering an Account on the mu888 Platform or by continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

For the purposes of applicable data protection legislation, mu888 acts as the Data Controller in respect of personal data collected from players and Platform visitors. As Data Controller, mu888 determines the purposes and means by which your personal data is processed.

mu888 operates under an international gaming authority licence and is subject to data protection obligations under the applicable legal framework of its licensing jurisdiction, as well as applicable Malaysian data protection regulations including the Personal Data Protection Act 2010 (PDPA) where relevant to Malaysian players.

If you have any questions regarding mu888's role as Data Controller or wish to exercise any of your data subject rights, please contact us at [email protected].

mu888 collects the following categories of personal data from players and Platform users:

3.1 Registration Data. When you create an Account, we collect your full legal name, date of birth, email address, mobile phone number, and your chosen username. This information is mandatory for Account creation.

3.2 Identity Verification (KYC) Data. Prior to processing your first withdrawal, mu888 is required to verify your identity. KYC data collected includes a government-issued photo identification document (such as a Malaysian MyKad or passport), proof of residential address, and in some cases a selfie or video verification for identity confirmation.

3.3 Financial Data. mu888 collects records of all deposits and withdrawals made through your Account, including transaction amounts, dates, payment method references (such as Touch n Go eWallet account references, Boost references, or bank account numbers used for bank transfers with Maybank, CIMB, or Public Bank), and transaction status. Full payment card details are not stored by mu888 — they are processed directly by our payment service providers.

3.4 Gaming Activity Data. mu888 maintains records of your wagering activity, including games played, bet amounts, win/loss outcomes, session durations, and responsible gaming tool usage. This data is used for Platform operation, regulatory compliance, and responsible gaming monitoring.

3.5 Technical Data. When you access the Platform, we automatically collect technical data including your IP address, browser type and version, operating system, device type, referring URLs, and session timestamps. This data is used for security monitoring, fraud prevention, and Platform performance optimisation.

3.6 Communication Data. Records of your communications with the mu888 support team, including live chat transcripts, email correspondence, and support ticket records, are retained for quality assurance, dispute resolution, and training purposes.

mu888 collects personal data through the following means:

• Directly from you — when you register an Account, complete KYC verification, make deposits or withdrawals, contact our support team, or respond to surveys or promotional communications.
• Automatically — through cookies, session tracking technologies, and server logs when you visit or interact with the Platform. See Section 8 for details on cookies.
• From third parties — from payment processors and banking partners when processing your transactions, from KYC verification service providers who assist in identity document authentication, and from fraud detection services that help us identify suspicious activity.

mu888 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to create and manage your Account, process deposits and withdrawals, and provide gaming services under the mu888 Terms and Conditions.
• Legal obligation: Processing required to comply with applicable anti-money laundering legislation, gaming authority licence conditions, KYC requirements, and other regulatory obligations.
• Legitimate interests: Processing for fraud prevention, Platform security, responsible gaming monitoring, and internal analytics — where such processing does not override your fundamental privacy rights.
• Consent: Processing for marketing communications, which is subject to your explicit opt-in consent and may be withdrawn at any time.

mu888 uses your personal data for the following purposes:

• Creating, verifying, and managing your mu888 Account.
• Processing deposits and withdrawals in MYR via your selected payment method.
• Conducting mandatory KYC identity verification prior to withdrawal processing.
• Detecting, investigating, and preventing fraud, money laundering, and other prohibited activities on the Platform.
• Monitoring player behaviour for responsible gaming purposes, including identifying patterns of potential gambling harm and triggering appropriate responsible gaming interventions.
• Providing 24/7 customer support and resolving Account queries, disputes, and technical issues.
• Complying with legal obligations, including reporting requirements to regulatory and licensing authorities and law enforcement agencies where required by law.
• Improving Platform functionality, game offerings, and user experience based on aggregated and anonymised analytics.
• Sending marketing communications about mu888 promotions, bonuses, and new features — only where you have provided explicit consent to receive such communications.

7.1 mu888 does not sell your personal data. Your personal data is never sold, rented, or traded to third parties for their independent marketing or commercial purposes.

7.2 Service Providers. mu888 shares personal data with carefully selected third-party service providers who process data on our behalf under contractual data processing agreements. These include payment processors (Touch n Go eWallet, Boost, and banking partners), KYC and identity verification providers, fraud detection and security service providers, and licensed game technology providers. All such providers are obligated to handle data securely and in accordance with applicable data protection requirements.

7.3 Regulatory Disclosure. mu888 may disclose personal data to regulatory authorities, gaming licence bodies, law enforcement agencies, or courts where required to do so by applicable law, regulatory obligation, or valid legal process. mu888 will notify affected players of such disclosures where legally permitted to do so.

7.4 Business Transfers. In the event of a merger, acquisition, or sale of substantially all assets of mu888, personal data held by mu888 may be transferred to the acquiring entity. Players will be notified of any such transfer and the applicable privacy arrangements of the new entity.

The mu888 Platform uses cookies and similar tracking technologies to enable Platform functionality, maintain session security, and collect analytics data. Cookies are small text files stored on your device by your browser.

8.1 Essential Cookies. These cookies are required for the Platform to function correctly. They include session authentication cookies that keep you logged in to your mu888 Account during your visit, and security cookies that help protect against fraudulent access attempts. These cookies cannot be disabled without affecting Platform functionality.

8.2 Analytics Cookies. mu888 uses analytics cookies to collect aggregated, anonymised information about how players use the Platform — including pages visited, time on site, and navigation patterns. This data helps us improve Platform design and performance. Analytics cookies can be managed through your browser settings.

8.3 Preference Cookies. These cookies remember your Platform preferences such as language settings and display preferences. They improve your experience by not requiring you to re-enter preferences on each visit.

You may configure your browser to refuse or delete cookies. Please note that disabling essential cookies will affect your ability to log in to and use the mu888 Platform.

mu888 implements comprehensive technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction.

9.1 Encryption. All data transmitted between your device and the mu888 Platform is encrypted using 128-bit SSL/TLS protocols. Personal data stored in our systems is encrypted at rest using industry-standard encryption algorithms.

9.2 Access Controls. Access to personal data within mu888 is restricted to authorised personnel on a strict need-to-know basis. Internal access controls are enforced through role-based permissions and multi-factor authentication for administrative system access.

9.3 Security Audits. mu888 conducts regular security audits and vulnerability assessments of its systems and data handling processes. Third-party penetration testing is periodically commissioned to identify and address potential security weaknesses.

9.4 Breach Response. In the event of a personal data breach that poses a risk to your rights and freedoms, mu888 will notify affected individuals and relevant regulatory authorities within applicable timeframes as required by law.

mu888 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to applicable legal and regulatory retention obligations.

10.1 Active Accounts. Personal data associated with active mu888 Accounts is retained for the duration of Account activity and for a minimum period following account closure.

10.2 Closed Accounts. Following account closure, mu888 retains personal data — including KYC documents, transaction records, and gaming history — for a minimum of five years. This retention period is mandated by anti-money laundering regulations and gaming authority licence conditions applicable to mu888's operating jurisdiction.

10.3 Anonymised Data. Anonymised or aggregated data from which individuals cannot be identified may be retained indefinitely for analytical, statistical, and Platform improvement purposes without restriction.

10.4 Deletion Requests. Where you exercise your right to data deletion (Section 11.3), mu888 will delete personal data not subject to mandatory legal retention obligations within 30 days of a verified deletion request.

Subject to applicable data protection law, you have the following rights in respect of your personal data held by mu888:

• 11.1 Right of Access. You have the right to request a copy of the personal data mu888 holds about you, together with information about how that data is processed.
• 11.2 Right of Rectification. You have the right to request correction of inaccurate or incomplete personal data held by mu888.
• 11.3 Right of Erasure. You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to mu888's legal obligations to retain certain data.
• 11.4 Right to Restriction. You have the right to request that mu888 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to processing based on legitimate interests.
• 11.5 Right to Object. You have the right to object to processing of your personal data based on mu888's legitimate interests, including profiling for direct marketing purposes.
• 11.6 Right to Data Portability. You have the right to receive your personal data in a structured, machine-readable format, and to request transfer of that data to another controller where technically feasible.

To exercise any of these rights, please contact the mu888 Data Protection team at [email protected]. Please include your registered Account email address and a description of the right you wish to exercise. mu888 will respond to verified data subject requests within 30 days.

mu888 may send you marketing communications about promotions, bonuses, new game releases, and special offers on the Platform, but only where you have provided explicit consent to receive such communications at the time of registration or subsequently through your Account settings.

You may withdraw your consent to receive marketing communications at any time by updating your communication preferences in Account settings, or by contacting the support team at [email protected]. Withdrawal of marketing consent does not affect the lawfulness of prior processing based on consent, and does not affect the processing of operational communications (such as transaction confirmations, account security alerts, and KYC notifications) which are sent on the basis of contractual necessity.

The mu888 Platform is strictly restricted to individuals aged 21 years and above. mu888 does not knowingly collect personal data from individuals under the age of 21. If mu888 becomes aware that personal data has been collected from an individual under the minimum age, the associated Account will be immediately suspended and all associated data will be deleted, subject only to any legally mandated retention requirements.

If you are the parent or guardian of a minor and believe that your child has provided personal data to mu888, please contact us immediately at [email protected] so that we can take appropriate action.

mu888 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — such as changes to the categories of data collected, the purposes of processing, or data sharing arrangements — mu888 will provide notice via the Platform or by email to your registered address at least 14 days prior to the changes taking effect, where practicable.

The date of the most recent revision is shown at the top of this Policy. Your continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed of how mu888 protects your personal data.

For any questions, concerns, or requests relating to this Privacy Policy or mu888's personal data practices, please contact the mu888 Data Protection team:

Email: [email protected]

Please indicate "Privacy Policy Enquiry" or "Data Subject Request" in the subject of your correspondence to ensure it is directed to the appropriate team. mu888 is committed to responding to all privacy-related enquiries promptly and no later than 30 days from receipt of your communication.