Privacy Policy mm98 — Our Commitment to Protecting Malaysian Players' Data

Mm98 is an online casino and sports betting platform that has served hundreds of thousands of Malaysian players since 2017. Over these eight years, player trust has been the foundation that sustains our community's growth. A key part of that trust is your confidence that the personal information you provide to mm98 — from your name and phone number to your financial transaction records — is handled with full integrity, transparency and security.

This Privacy Policy clearly explains what data is collected when you register and use the mm98 platform, the purposes for which it is used, who it is shared with (if anyone), how it is protected, and your rights as the owner of that data. This document forms part of the overall agreement between you and mm98 — and like all our official documents, it is written in plain language that every Malaysian player can understand.

Mm98 only collects data that is strictly necessary to deliver a secure, fair and efficient platform experience. We do not gather irrelevant data, nor do we retain information beyond the period required by law and business operations.

Categories of Data Collected

Data We Do NOT Collect

• Full credit or debit card numbers — all transactions are processed through certified third-party payment gateways
• Passwords in plain text — passwords are stored in a hashed format that is unreadable even to mm98 staff
• Biometric data such as fingerprints or facial recognition
• Data relating to minors — the mm98 platform is strictly for users aged 18 and above

Every piece of data we collect has a specific and legitimate purpose. mm98 does not use player data for purposes unrelated to the delivery of platform services without your explicit consent.

Purpose of Data Use

• Account verification and security — ensuring only you can access your mm98 account through OTP verification and suspicious activity monitoring
• Deposit and withdrawal processing — verifies your financial transactions via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay and FPX, securely and instantly
• Gaming service provision — stores your betting records, account balance, bonus history and VIP programme progress
• Customer support — enabling mm98 support agents to verify your identity and resolve your queries efficiently in Bahasa Melayu
• Fraud prevention and legal compliance — identifying suspicious activity patterns, preventing multi-account use and meeting anti-money laundering reporting requirements
• Product improvement — understanding how players use the platform to improve the gaming experience, site speed and relevant new features
• Account-related communications — sending important notifications such as transaction confirmations, security updates and alerts related to your active bonuses

Mm98 never sells player personal data to any third party for marketing or commercial purposes. This is an absolute commitment we have never compromised and never will. That said, in the course of operating the platform, there are limited situations where data must be shared with specific parties — all of which have legitimate justification.

Parties That May Receive Your Data

• Payment gateway providers — providers such as Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay and FPX providers receive only the minimum data required to process your transactions securely. They are bound by strict confidentiality agreements with mm98
• Gaming platform provider — third-party slot and Live Casino game providers within the mm98 ecosystem receive only the session data needed to deliver gameplay — no full identity information is shared
• Relevant authorities — mm98 will only disclose personal data to law enforcement agencies or regulatory bodies when required by a valid court order or binding legal obligation
• Technical service providers — companies that provide services such as server hosting, cybersecurity and operational analytics are bound by data protection agreements that prohibit them from using mm98 data for any other purpose

Data security is not just a matter of technology — it is a culture and practice embedded at every level of mm98's operations. From the platform development stage through to staff training, we invest seriously in ensuring player data is protected against all threats.

Technical Security Mechanisms

• 256-bit SSL/TLS Encryption — all communications between your device and mm98's servers are fully encrypted. No data is transmitted in plain text that could be intercepted
• Password storage with bcrypt hashing — your password is never stored in a readable form. Even mm98 staff cannot view your password
• Two-factor authentication (2FA) — key activities such as logging in from a new device, large withdrawals, and account information changes require OTP verification to your registered phone number
• Segmented and protected servers — player data is stored on servers isolated from public web servers, protected by multi-layered firewalls and intrusion detection systems
• 24/7 security monitoring — mm98's security team monitors platform activity in real time to identify and respond to any suspicious anomalies
• Regular security audits — the mm98 platform undergoes periodic independent security audits to identify and patch vulnerabilities before they can be exploited

Data Retention Period

Mm98 retains your personal data for as long as your account remains active, and for a specified period after account closure in accordance with legal requirements. Financial and transaction records are kept for seven years as required under Malaysia's anti-money laundering laws. Your marketing data and communication preferences are deleted within 30 days of consent withdrawal. If you wish to request earlier data deletion, please contact the mm98 privacy team.

As an mm98 player and the owner of your personal data, you have certain rights that mm98 is fully committed to upholding. These rights can be exercised at any time by contacting the mm98 support or privacy team directly.

How to Exercise Your Rights

To exercise any of the rights above, contact the mm98 privacy team by email at support@mm98-bangla.com with the subject line "Data Privacy Request", or via 24/7 live chat. Please include your account number and the nature of your request. mm98 will acknowledge your request within 48 hours and resolve it within 30 calendar days, except in cases that require further investigation.

The mm98 platform uses cookies and similar local storage technologies to ensure a smooth and secure user experience. Cookies are small files stored on your device when you visit the mm98 platform — they allow the platform to remember your preferences and maintain your login session securely.

Types of Cookies Used by mm98

• Session Cookies (Required) — stores your login session information while you are using the platform. Without this cookie, you would need to log in again every time you navigate to a new page. This cookie is automatically deleted when you close your browser
• Security Cookies (Required) — used to prevent CSRF (Cross-Site Request Forgery) attacks and ensure all requests to mm98 servers originate from legitimate sources. This is a critical security cookie that cannot be disabled
• Optional Cookies (Non-Essential) — saves your preferences such as interface language and display settings, so you never have to reconfigure them each time you log in
• Analytics Cookies (Optional) — helps the mm98 team understand how players use the platform so that improvements can be made. Data collected is aggregated and does not personally identify you

Managing Cookies

You can manage and delete cookies through your web browser settings. However, disabling essential cookies will affect core mm98 platform functions such as staying logged in or completing financial transactions. mm98 recommends keeping essential cookies active for a seamless and secure platform experience.

If you have any questions about mm98's Privacy Policy, how we handle your data, or wish to exercise any of your privacy rights, our team is here to help. We are committed to providing meaningful responses — not just automated replies — to every privacy-related enquiry.

How to Contact the mm98 Privacy Team

• Email: Send your request to support@mm98-bangla.com with the subject line "Privacy Request" to ensure it is routed promptly to the right team
• 24/7 Live Chat: The fastest option for urgent queries — Bahasa Melayu-fluent mm98 support agents are ready to assist in under two minutes, any time of day
• Via the account dashboard: Log in to your mm98 account and go to the Privacy Settings section to manage your consent preferences and view the data we hold about you

Privacy Policy Updates

Mm98 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements or improvements to how we deliver our services. For material changes, we will notify you via your registered email and in-platform notifications at least seven days before the changes take effect. The latest version of this Privacy Policy is always available on this page, with a clearly displayed update date at the top of the document. Continued use of the mm98 platform after the stated update date constitutes your acceptance of the changes made.