Privacy Policy mm38 — Protection of Your Personal Data

Mm38 ("we", "Platform", or "mm38.run") values the privacy of every player who uses our services. This Privacy Policy explains in detail how we collect, process, store, and protect your personal information when you use the mm38 online gambling platform.

This policy applies to all users of mm38.run, the mm38 mobile app, and all related services provided by mm38. It is formulated in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection.

We understand that your trust in mm38 depends largely on how we handle your personal information. That is why we are committed to being transparent and honest about our privacy practices. If at any time you have questions or concerns about how your data is handled, our support team is ready to assist.

Mm38 collects various types of personal information depending on your interactions with our platform. The table below summarises the data categories we collect and their purposes:

We do not collect special categories of personal data such as health information, biometric data, religious beliefs, or political views unless specifically required to fulfil certain legal obligations.

Your personal data is collected through several different channels as you interact with the mm38 platform:

• Account Registration: Information you enter directly during the new account registration process.
• KYC Verification: Identification documents and supplementary information you submit for identity verification purposes.
• Financial Transactions: Information collected during the deposit and withdrawal process via supported payment methods.
• Platform Usage: Data generated automatically as you browse the website, play games, or use platform features.
• Customer Support Interactions: Information you share when communicating with our support team via live chat, email, or other channels.
• Devices & Apps: Technical data automatically collected by the mm38 mobile app includes device type and operating system version.
• Cookies & Tracking Technologies: Information collected through cookies, web pixels, and other tracking technologies as further described in Section 9.

Mm38 uses collected personal data for legitimate and transparent purposes. Every data usage purpose is grounded in a solid legal basis:

• Account Management: Creating, verifying, and managing your player account including mandatory KYC processes.
• Transaction Processing: Processing deposits, withdrawals, and other financial transactions efficiently and securely.
• Service Delivery: Ensuring you can access all available games, promotions, and platform features.
• Security & Fraud Prevention: Detecting and preventing fraud, money laundering, and other illegal activities through continuous monitoring.
• Legal Compliance: Fulfilling legal obligations under Malaysia's PDPA, anti-money laundering laws (AMLA), and other relevant regulations.
• Relevant Marketing: Sending you relevant promotional information, bonuses, and offers aligned with your interests — only if you have given your consent.
• Platform Improvement: Analysing usage patterns to improve the overall user experience and platform performance.
• Customer Support: Providing technical support and effectively resolving complaints or disputes.

Mm38 will not use your data for any purpose other than those stated above without first obtaining your renewed consent.

Mm38 handles your personal data with care and only shares information in limited and lawful circumstances. The following are scenarios in which your data may be shared with other parties:

• Authorised Service Providers: Technical partners such as cloud service providers, payment platforms, and gaming software providers that require data access to perform services on behalf of mm38. All such third parties are bound by strict confidentiality agreements.
• Legal Requirements: When required by a court, regulatory body, or competent law enforcement agency through valid legal process.
• Fraud Prevention: To fraud prevention agencies or relevant authorities where there is strong evidence of fraudulent activity or financial crime.
• Business Transfer: In the event of a merger, acquisition, or asset sale, user data may be transferred to the successor entity with adequate notice provided to you.

Mm38 continuously invests in the latest security infrastructure to ensure your personal data remains protected at all times. The security measures we employ include:

• 256-bit SSL Encryption: All data transmitted between your device and mm38 servers is fully encrypted using the latest TLS 1.3 protocol.
• Secure Data Storage: Personal data is stored on servers protected by multi-layered firewalls, intrusion detection systems, and strict access controls.
• Two-Factor Authentication (2FA): This additional security feature is available to all player accounts and we actively encourage its use.
• Regular Security Audits: mm38 undergoes regular penetration testing and security audits conducted by independent cybersecurity firms.
• Internal Access Control: Access to players' personal data among mm38 staff is restricted on a "need-to-know" basis only.
• 24/7 Monitoring: Our automated monitoring system operates around the clock to detect any suspicious activity or unauthorised access attempts.

While we take all reasonable steps to protect your data, no system is 100% secure. We encourage you to play your part by using a strong password and not sharing your login credentials.

Mm38 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. The following are the retention period guidelines we follow:

• Active Account Data: Throughout the duration your mm38 account remains active, plus any statutory retention period required under Malaysian law.
• Financial Transaction Records: Minimum 7 years after the transaction occurs, in line with Malaysia's financial and tax legal requirements.
• KYC Documents: Up to 5 years after account termination, as required under anti-money laundering laws.
• Support Communication Logs: 2 years from the date of communication, unless related to an active dispute requiring a longer retention period.
• Technical Data & Logs: 90 days for most technical logs, unless related to an ongoing security investigation.

When data is no longer required, mm38 will securely delete it using methods that ensure it cannot be recovered. You may request early deletion subject to limitations prescribed by law.

Under Malaysia's PDPA 2010 and mm38's internal policies, you have the following rights regarding your personal data:

To exercise any of the above rights, contact the mm38 customer support team. We will respond to your request within 14 business days. Some requests may require identity verification beforehand to ensure the security of your account.

Mm38 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as maintaining your login session. These cookies cannot be disabled.
• Performance Cookies: Collecting information about how you use the platform to help us improve overall performance and user experience.
• Functional Cookies: Saving your preferences such as language and theme settings to deliver a more personalised experience.
• Analytics Cookies: Helping us understand platform usage patterns in aggregate and anonymous form for continuous improvement purposes.

You can manage your cookie settings through your web browser. Please note that disabling certain cookies may affect platform functionality. Continued use of the mm38 platform after a cookie notice is displayed will be considered as your consent to the stated use of cookies.

Mm38 is strictly for individuals aged 18 and above. We do not intentionally collect or process personal data of individuals under the age of 18.

If we find that we have collected personal data from minors without proper age verification, we will take immediate action to delete that data and close the associated account. Our age verification system is designed to prevent registration by minors.

Mm38 reserves the right to amend this Privacy Policy from time to time to reflect changes in our business practices, new legal requirements, or improvements in how we handle personal data.

When we make material changes to this Privacy Policy, we will:

• Notifying you via your registered email at least 14 days before the changes take effect.
• Displaying a clear notice on the mm38 platform homepage regarding upcoming changes.
• Updating the "Last Updated" date at the top of this document.

Continued use of the mm38 platform after the effective date of the updated Privacy Policy constitutes your acceptance of those changes. If you disagree with the changes made, you have the right to close your account without any penalty.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how mm38 handles your personal data, please contact us through the following channels:

• Privacy Email: [email protected]
• Live Chat: Available 24/7 at mm38.run
• General Support: [email protected]

Our data protection team will review and respond to your enquiry within 14 business days. For more serious complaints or issues requiring immediate attention, we prioritise responses within 48 hours.

You also have the right to file a complaint with Malaysia's Personal Data Protection Department (PDPD) if you believe that mm38's processing of your personal data violates the provisions of PDPA 2010.