Data Protection

Privacy Policy mm38 — Your Personal Data Protection

Your privacy is our priority. This document transparently explains how mm38 collects, uses, stores, and protects your personal information — so you can use the platform with full confidence at all times.

Last Updated: 1 January 2026

How mm38 Protects Your Privacy

Industry-Grade Encryption

All data transmitted between your device and mm38 servers is protected with 256-bit SSL encryption — the same standard used by major Malaysian banking institutions — ensuring your information cannot be intercepted in transit.

Secure Data Storage

Your personal data is stored on servers protected by layered access controls, advanced firewalls and continuous 24-hour security monitoring. Only authorised personnel may access your information for legitimate purposes.

No Data Sales

Mm38 has never and will never sell, rent, or trade your personal data to any third party for marketing purposes. Your information belongs to you and we fully respect that right of ownership.

Controls in Your Hands

You have the full right to access, correct, transfer or request deletion of your personal data held by mm38. The process is straightforward and can be initiated by contacting our support team at any time.

Legal Compliance

Mm38 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and all relevant data protection regulations. We ensure that all our data handling practices remain aligned with applicable legal requirements.

Breach Notification

In the event of any security incident affecting your data, mm38 is committed to notifying affected users within the timeframe required by law and taking immediate steps to minimise any risks that may arise.

1 Introduction and Scope of This Policy

Mm38 values the trust you place in us when you register and use our online entertainment platform. This Privacy Policy explains in detail how we collect, process, store, and protect your personal data when you interact with mm38.plus, our mobile app, and all related services.

This document applies to all mm38 platform users — including website visitors, registered users and any individual who interacts with our services through any channel. By using our platform, you acknowledge that you have read and understood this policy.

Important Note

This Privacy Policy should be read together with Terms and Conditions mm38. Both documents together form a complete framework governing the relationship between you and our platform. In the event of any conflict between the two documents, this Privacy Policy shall prevail on matters relating to personal data.

2 Types of Personal Data We Collect

Mm38 collects several categories of personal data depending on how you interact with our platform. We only collect information that is genuinely necessary to provide you with a safe, compliant, and high-quality service.

Data You Provide Directly

  • Full name as shown on official identification documents
  • Date of birth and age information for eligibility verification
  • Email address and mobile phone number
  • Registered bank account details or payment method information
  • Copies of identity documents (identification card, passport) for the KYC process
  • Current residential address

Automatically Collected Data

  • IP address, device type and operating system used
  • Your web browser type and version
  • Pages visited, time of visit and navigation patterns within the platform
  • Gaming session data including game type, bets and results
  • General location data based on IP address
Data Categories Example Primary Purpose
Identity Data Name, date of birth, IC/Passport KYC verification & AML compliance
Contact Data Email, phone number Account communications & support
Financial Data Bank account details, transaction history Deposit & withdrawal processing
Technical Data IP address, device type, cookies Security & platform improvements
Gaming Data Betting history, wins, time played Responsible gaming & audits

3 How We Use Your Data

Every piece of data we collect is used for legitimate and transparent purposes. mm38 does not use your data for purposes unrelated to the provision of our services without your prior consent.

Account Management and Verification

Your identity data is used to verify your eligibility as a user, process account registration and ensure compliance with KYC (Know Your Customer) requirements mandated by industry regulations. This is an essential step to protect all platform users from fraud and money laundering.

Financial Transaction Processing

Your financial data is used solely to process deposits, verify payments and manage your fund withdrawals securely and efficiently. This information is shared with trusted payment processors only to the extent necessary to complete the relevant transaction.

Security and Fraud Prevention

Technical data such as IP address, device information and login patterns is used to detect and prevent unauthorised access, fraudulent activity and security threats that may compromise your account. Our automated monitoring system operates around the clock for this purpose.

Service Communications

We use your email address and phone number to send important account notifications such as transaction confirmations, security alerts, and policy updates. This is separate from marketing communications, which you can control through your preference settings.

Platform Improvement and User Experience

Aggregated and anonymised usage pattern data is used to understand how users interact with our platform, identify areas for improvement and develop better new features for you.

mm38 applies a "data minimisation" principle — we only collect what is necessary and nothing more. Any new use of data requires an internal review to ensure it is legitimate and proportionate to the intended purpose.

4 Data Sharing and Disclosure

Mm38 does not sell, rent, or trade your personal data to any third party for marketing purposes. However, in certain limited situations, we may need to share your data with the following parties:

Trusted Service Providers

We work with third-party service providers who help us operate the platform — including payment processors, cloud service providers, KYC/AML service providers and customer support providers. All these partners are bound by strict confidentiality agreements and are only permitted to use your data for purposes we specify.

Legal and Regulatory Requirements

Mm38 may be required to disclose your data to relevant authorities — including law enforcement agencies, regulatory bodies, or courts — where there is a valid legal obligation to do so. In such situations, we will endeavour to notify you in advance unless we are prohibited from doing so by law.

Business Transfer

In the event of a merger, acquisition, or transfer of mm38 business assets, user data may be transferred as part of those assets. You will be notified in advance and given the opportunity to opt out before your data becomes subject to a different privacy policy.

Our Guarantee

In all data sharing situations, mm38 ensures that recipients meet data protection standards equal to or higher than our own. We never compromise on the security of your data under any circumstances.

5 Cookies and Tracking Technologies

Mm38 uses cookies and similar tracking technologies to enhance your experience on our platform, ensure the platform functions correctly, and understand how users interact with our content.

Types of Cookies We Use

  • Essential Cookies: Required for the platform to function properly. This includes login session cookies, security verification and basic preferences. These cookies cannot be disabled.
  • Performance Cookies: Collects information on how you use our platform — the most frequently visited pages and error messages received — to help us improve the user experience.
  • Functional Cookies: Allows the platform to remember your preferences such as language, region, and settings to provide a more personalised experience.
  • Analytics Cookies: Used to collect aggregated statistical data on platform usage for continuous improvement purposes.

Managing Cookie Preferences

You can manage your cookie preferences through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality or your experience on the mm38 platform. Detailed instructions for managing cookies can be found in your browser's help section.

6 Data Security and Protection Measures

The security of your personal data is a responsibility we take extremely seriously at mm38. We continuously invest in high-grade security infrastructure to ensure your data is always protected against unauthorised access, loss, or misuse.

Technical Security Measures

  • 256-bit SSL/TLS encryption for all data transmitted between the platform and your device
  • Encryption of sensitive data in databases using the AES-256 encryption algorithm
  • Two-factor authentication (2FA) system for user account login
  • High-tech firewall and active intrusion detection system
  • Regular security audits conducted by independent third parties
  • Round-the-clock 24/7 security monitoring by a dedicated cybersecurity team

User Responsibilities

While we do everything we can to protect your data, your account security also depends on your own actions. Please ensure you use a strong, unique password, do not share your login credentials with anyone, and report any suspicious activity to our support team immediately.

7 Data Retention Period

Mm38 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by applicable law.

  • Active account data: Retained for as long as your account is active and for a specified period following account closure.
  • Financial transaction records: Retained for a minimum of 7 years in accordance with accounting and anti-money laundering legal requirements.
  • KYC documents: Retained for as long as required by applicable licensing and compliance regulations.
  • Technical and security logs: Retained for 12 to 24 months for security investigation and fraud detection purposes.
  • Marketing data: Retained until you withdraw consent or request data deletion.

Once the retention period has ended, your data will be securely deleted or anonymised so that it can no longer be personally linked to you.

8 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 and related data protection regulations, you have several important rights regarding your personal data held by mm38.

Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide this information within a reasonable timeframe upon receipt of a valid request.

Right to Rectification

If the data we hold about you is inaccurate or outdated, you have the right to request a correction. Basic account information can be updated directly through your profile settings.

Right to Erasure

You may request the deletion of your personal data under certain circumstances. This right is subject to our legal obligations to retain specific records for prescribed periods.

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format and to transfer it to another service provider where applicable.

Right to Object

You have the right to object to the processing of your data for specific purposes such as direct marketing. Such objections will be acted on immediately without any conditions.

Right to Restrict Processing

In certain situations, you may request that the processing of your data be temporarily restricted — for example, while you verify the accuracy of your data or await the outcome of an objection.

To submit any request related to the rights above, contact the mm38 customer support team via live chat on the platform. We will process your request within the timeframe required by applicable law.

9 Children's and Underage User Privacy

The mm38 platform is exclusively for individuals aged 18 and above. We do not knowingly collect, process, or store personal data from children or underage individuals.

Should we find that personal data has been collected from underage users without our knowledge, we will take immediate action to delete that data and close the relevant account. Parents or guardians who become aware that a child under their care has registered an mm38 account are encouraged to contact us immediately.

10 Privacy Policy Amendments and Contact Us

Mm38 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Any material changes will be communicated to you via email notification or a prominent notice on the platform.

The "Last Updated" date at the top of this document indicates when this policy was most recently revised. Continued use of the mm38 platform following the publication of any amendments constitutes your acceptance of the updated policy terms.

How to Contact Us

If you have any questions, concerns or feedback regarding this Privacy Policy or how mm38 handles your personal data, our team is ready to assist through the following channels:

  • Live Chat on platform — available 24 hours a day, 7 days a week
  • Support email: [email protected]
Our Commitment

Mm38 is committed to responding to privacy-related inquiries within a reasonable timeframe. We view the protection of your personal data not merely as a legal obligation, but as the foundation of trust that builds a lasting relationship between you and our platform.

A Secure, Transparent, and Trusted Platform

Your privacy and security are our priority. Register your mm38 account today and enjoy a responsible, safe, and enjoyable online entertainment experience with the Malaysian player community.

Bahasa Melayu