Privacy Policy

1Introduction

This Privacy Policy ("Policy") is issued by mu888 ("mu888", "we", "us", "our") and applies to all personal data collected and processed through your use of the mu888 online casino and sports betting platform, accessible at https://mu888.casa and all associated sub-domains and services (collectively, "the Platform").

mu888 is committed to protecting the privacy and security of every player who uses our Platform. We understand that the personal data you share with us is sensitive — particularly financial information, identity documents, and account activity data — and we treat it accordingly. This Policy sets out, in plain and formal terms, exactly what data we collect, the purposes for which we process it, how we safeguard it, and the rights available to you as a data subject.

By accessing the Platform, registering an account, or otherwise providing your personal data to mu888, you acknowledge that you have read and understood this Policy. This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform more broadly.

2Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly — including name, date of birth, email address, telephone number, financial account details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, alteration, or deletion.
• "Data Subject" means any natural person whose Personal Data is processed by mu888 — primarily, registered Players on the Platform.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data. mu888 acts as Data Controller in respect of the Personal Data described in this Policy.
• "KYC" means Know Your Customer — the identity, age, and address verification process conducted by mu888 for regulatory compliance and fraud prevention.
• "Cookies" means small text files placed on your device by the Platform that enable session management, analytics, and personalisation functions.
• "Third-Party Processor" means any external service provider engaged by mu888 to perform data processing activities on our behalf (for example, payment processors, KYC verification providers, and fraud detection services).

3Personal Data We Collect

mu888 collects Personal Data through several distinct channels. The categories of data collected, together with the method of collection, are set out below:

4How We Use Your Personal Data

mu888 processes your Personal Data for the following specific, legitimate purposes. We do not use your data for any purpose not listed below without first providing you with notice and, where required, obtaining your consent:

5Legal Basis for Processing

mu888 processes your Personal Data on one or more of the following legal bases, depending on the specific purpose of processing:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and mu888 (i.e., the Terms & Conditions governing your Account). This includes account creation, payment processing, KYC verification, and customer support.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory requirements under mu888's operating licence, including anti-money laundering (AML) obligations, age verification requirements, and record-keeping mandates.
• Legitimate Interests: Processing is necessary for mu888's legitimate business interests, where those interests are not overridden by your rights and interests. This includes fraud prevention, security monitoring, platform optimisation, and responsible gambling monitoring.
• Consent: For processing activities that are not covered by the above bases — principally, direct marketing communications — we rely on your freely given, specific, informed consent. You may withdraw consent at any time without detriment to your Account.

6Data Sharing & Third-Party Disclosure

mu888 does not sell, rent, or otherwise transfer your Personal Data to third parties for their own commercial purposes. We may, however, disclose your Personal Data to the following categories of Third-Party Processors operating strictly on our behalf and subject to contractual data protection obligations:

• KYC and Identity Verification Providers: Third-party identity verification services that assist in processing and validating KYC documentation submitted by Players.
• Payment Processing Partners: Financial service providers and payment gateways that facilitate deposit and withdrawal transactions, including operators of DuitNow, FPX, Touch 'n Go eWallet, and banking partners.
• Fraud Detection and AML Services: Third-party providers of automated fraud detection, transaction monitoring, and anti-money laundering screening services.
• Cloud Infrastructure and Hosting Providers: Secure cloud infrastructure providers that host the Platform and associated data in accordance with applicable security standards.
• Customer Support Technology Providers: Providers of live chat and customer relationship management (CRM) platforms used by our support team.
• Regulatory and Legal Authorities: We may disclose your Personal Data to regulatory bodies, law enforcement agencies, or courts of competent jurisdiction where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of mu888, its players, or the public.

7Cookies & Tracking Technologies

The mu888 Platform uses cookies and similar technologies (including web beacons, pixel tags, and local storage objects) to enable core platform functionality, maintain session integrity, and improve your experience. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They maintain your login session, remember your game preferences during a session, and ensure security features operate properly. These cookies cannot be disabled without impairing core platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised data about how players use the Platform — pages visited, time spent, errors encountered, and navigation paths. This data is used to improve Platform performance and user experience. No personally identifiable information is included in analytics data sets.
• Functional Cookies: These cookies remember your preferences (such as display language, default game category, and notification settings) to provide a more personalised experience across sessions.
• Marketing and Retargeting Cookies (Opt-In Only): Where you have consented, these cookies may be used to present relevant promotional content. You may withdraw consent for marketing cookies at any time via your browser settings without affecting your Account.

You can control or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of some Platform features. For specific browser instructions on managing cookies, please refer to your browser's help documentation.

8Data Retention

mu888 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or our operating licence conditions. The following retention principles apply:

• Active Account Data: Personal Data associated with an active Account is retained for the duration of the Account's existence and for a minimum period of five (5) years following Account closure, to satisfy our AML record-keeping obligations.
• KYC Documentation: Identity and address verification documents are retained for a minimum of five (5) years following the date of verification or Account closure, whichever is later, in accordance with regulatory requirements.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of each transaction.
• Support Communications: Customer support correspondence is retained for a minimum of two (2) years from the date of the last communication in a support thread.
• Marketing Data: Where processing is based on consent, Personal Data used for marketing purposes is retained until consent is withdrawn, after which it is deleted or anonymised within thirty (30) days.

Upon expiry of applicable retention periods, Personal Data is securely deleted or irreversibly anonymised in accordance with our data disposal procedures.

9Data Security

mu888 implements a comprehensive range of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes, but is not limited to, the following:

• 256-bit SSL/TLS Encryption on all data transmitted between your device and mu888 servers;
• Encryption at rest for all sensitive personal data stored on mu888 infrastructure;
• Role-based access controls limiting staff access to Personal Data strictly to those whose job functions require it;
• Multi-factor authentication for all staff accessing administrative systems;
• Penetration testing and vulnerability assessments conducted on a regular basis;
• Automated intrusion detection systems monitoring platform infrastructure for anomalous activity; and
• Segregated player funds maintained in accounts separate from mu888's operational funds.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, mu888 will notify affected players as soon as practicable and, where required by our operating licence conditions, report the breach to the relevant regulatory authority.

You also have a role in maintaining the security of your Personal Data. You are responsible for keeping your Account password confidential, not sharing your login credentials with any third party, and logging out of your Account after each session — particularly when using shared or public devices.

10Your Data Rights

Subject to applicable law and the limitations of our regulatory obligations, you have the following rights in relation to your Personal Data held by mu888. To exercise any of these rights, please contact our support team using the details in Section 15.

mu888 will respond to all valid data rights requests within thirty (30) calendar days of receipt. Where a request is complex or numerous, we may extend this period by a further sixty (60) days, in which case we will notify you of the extension and the reason for it within the initial thirty-day period.

11Minors & Age Policy

The mu888 Platform is strictly for individuals aged twenty-one (21) years and above. mu888 does not knowingly collect, process, or retain Personal Data belonging to any person under the age of 21.

Age verification is a mandatory component of our KYC process. Any Account found to have been registered by a person under the age of 21 will be immediately closed upon discovery, and all Personal Data associated with that Account will be securely deleted in accordance with our data disposal procedures. Any funds deposited to such an Account will be handled in accordance with our Terms & Conditions and applicable regulatory guidelines.

If you become aware that a minor may have accessed the mu888 Platform or provided Personal Data without appropriate consent, please contact our support team immediately at [email protected] so that we may take prompt action.

12International Data Transfers

Some of the Third-Party Processors engaged by mu888 may process Personal Data outside the country in which the Platform operates. Where such international transfers occur, mu888 takes reasonable steps to ensure that your Personal Data receives an adequate level of protection in the destination jurisdiction, including through the use of appropriate contractual safeguards with the relevant Third-Party Processors.

Malaysian users should be aware that data transferred outside Malaysia may be subject to the laws of the destination jurisdiction, which may differ from Malaysian law. By providing your Personal Data to mu888, you acknowledge that such transfers may occur.

13Third-Party Links & Services

The mu888 Platform may, from time to time, reference or display content from third-party services (for example, game content provided by third-party game studios). This Privacy Policy applies solely to data collected directly by mu888 through the Platform. It does not extend to the data practices of third-party game studios, payment processors operating their own customer interfaces, or any other third party whose services you access independently.

mu888 is not responsible for the privacy practices of any third-party service. We encourage you to review the privacy policies of any third-party service you interact with directly.

14Changes to This Privacy Policy

mu888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered Players via the email address associated with their Account and/or by displaying a prominent notice on the Platform prior to the changes taking effect.

The revised Policy will become effective on the date indicated at the top of the document ("Last updated" date). Your continued use of the Platform following that effective date constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, please discontinue use of the Platform and contact our support team to request Account closure.

We recommend that you review this Policy periodically to stay informed of any updates. Archived versions of prior policies are available upon request by contacting [email protected].

15Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your Personal Data by mu888, please contact our Data Protection team using the details below. We aim to acknowledge all privacy related enquiries within twenty-four (24) hours and to provide a substantive response within thirty (30) calendar days.