mu88 Privacy Policy

mu88 ("we", "us", "our", "the Platform") operates the online casino and sportsbook platform accessible at mu88.vu. We are committed to protecting the personal data of all users ("you", "the Player", "the User") who access or use our services from Malaysia and elsewhere.

This Privacy Policy ("Policy") describes the types of personal information we collect, the purposes for which we process it, the parties with whom we may share it, and the rights available to you in respect of your personal data. This Policy is incorporated by reference into, and must be read alongside, the mu88 Terms and Conditions.

By registering for a mu88 account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not use the mu88 Platform.

mu88 collects personal data that is necessary for the operation of the Platform and the provision of services to you. The categories of personal data we collect include:

mu88 does not intentionally collect special categories of sensitive personal data (such as health data, biometric data, or political opinions) except where required by law or expressly provided by you.

mu88 collects personal data through a variety of methods, including:

• Direct Registration: When you create a mu88 account, you provide identity, contact, and account data directly through the registration form.
• KYC Verification: When you submit identity documents for account verification, we collect and process copies of those documents and the data contained within them.
• Transactions: When you make deposits or withdraw funds, financial data is generated and collected through our payment processing integrations with Touch n Go eWallet, Boost, GrabPay, and banking partners.
• Platform Use: Technical and usage data is collected automatically when you access and navigate the Platform, including via cookies and similar tracking technologies.
• Customer Support: When you contact mu88 support via live chat or email, communications data is collected and stored.
• Third-Party Sources: mu88 may receive data from identity verification service providers, fraud detection partners, and payment processors as part of our due diligence and AML compliance processes.

mu88 processes your personal data for the following purposes:

• Account Management: To register your account, authenticate your identity on login, and manage your account settings and preferences.
• Service Delivery: To process your bets, provide access to casino games, handle deposits and withdrawals, and deliver the core features of the mu88 Platform.
• KYC and AML Compliance: To verify your identity, confirm your eligibility (including age verification for the 21+ requirement), and comply with anti-money laundering obligations.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, account abuse, and other prohibited conduct on the Platform.
• Customer Support: To respond to your enquiries, resolve complaints, and provide assistance with account or platform issues.
• Responsible Gaming: To monitor gaming behaviour and identify patterns associated with problem gambling, and to administer self-exclusion and limit requests.
• Platform Improvement: To analyse usage patterns and technical data in order to improve Platform performance, user experience, and game offerings.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications.
• Legal Compliance: To meet our obligations under applicable laws and regulations, respond to lawful requests from authorities, and enforce our Terms and Conditions.

mu88 processes your personal data on one or more of the following legal grounds:

• Contractual Necessity: Processing required to perform the contract between mu88 and you, including account operation, bet settlement, and payment processing.
• Legal Obligation: Processing required to comply with applicable law, including KYC, AML, and data retention requirements.
• Legitimate Interests: Processing necessary for the legitimate business interests of mu88, such as fraud prevention, security monitoring, and platform improvement, provided those interests are not overridden by your rights.
• Consent: Where you have given explicit consent, such as for the receipt of marketing communications. You may withdraw consent at any time by contacting mu88 support.

mu88 does not sell your personal data to third parties. We may share your data with the following categories of recipients only where necessary and under appropriate safeguards:

• Payment Processors: Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, and other payment service providers require certain data to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and AML compliance services that assist mu88 in verifying your identity and detecting financial crime.
• Game Studio Partners: Licensed game studios whose software is hosted on the mu88 Platform may receive session-level gaming data for the purpose of delivering the game experience and resolving disputes.
• IT and Infrastructure Providers: Cloud hosting, data storage, and security service providers who support the technical operation of the Platform under strict data processing agreements.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or regulatory authority, mu88 may disclose personal data to competent authorities.

The mu88 Platform uses cookies and similar tracking technologies (including local storage and session storage) to operate the Platform, maintain your session, and improve your user experience. The categories of cookies used on the Platform include:

• Strictly Necessary Cookies: Essential for the Platform to function. These cannot be disabled without significantly impairing the Platform's operation. They include session authentication and security tokens.
• Functional Cookies: Remember your preferences such as language settings, preferred games, and interface customisations.
• Analytics Cookies: Collect aggregated data about how users interact with the Platform to help mu88 identify technical issues and improve features. No personally identifying data is transmitted through these cookies.
• Performance Cookies: Monitor Platform load times, error rates, and server performance to maintain service quality.

You may control cookie settings through your browser preferences. Disabling strictly necessary cookies may prevent you from accessing certain features of the mu88 Platform, including account login.

mu88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, accounting, and reporting obligations. Specific retention periods include:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of seven (7) years from the date of each transaction.
• KYC Documents: Retained for a minimum of five (5) years following the end of the customer relationship or the date of the relevant transaction, whichever is later.
• Gaming History: Retained for a minimum of three (3) years for dispute resolution and regulatory purposes.
• Support Communications: Retained for two (2) years following resolution of the relevant support interaction.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

mu88 implements industry-standard technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the mu88 servers.
• Password hashing using secure cryptographic algorithms — mu88 never stores passwords in plain text.
• Access controls ensuring that only authorised personnel with a legitimate business need can access personal data.
• Intrusion detection and real-time security monitoring systems.
• Regular security audits and penetration testing by independent security professionals.
• Multi-factor authentication requirements for privileged internal system access.

Notwithstanding the above measures, no method of electronic transmission or storage is 100% secure. mu88 cannot guarantee absolute security of your data and accepts no liability for breaches resulting from circumstances beyond our reasonable control.

Subject to applicable law, you have the following rights in relation to your personal data held by mu88:

• Right of Access: You may request a copy of the personal data mu88 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where mu88 no longer has a legal basis to retain it, subject to our legal retention obligations.
• Right to Restriction: You may request that mu88 restrict the processing of your data in certain circumstances.
• Right to Data Portability: You may request a machine-readable copy of the personal data you have provided to mu88, where technically feasible.
• Right to Object: You may object to processing of your personal data carried out on the basis of legitimate interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact the mu88 Data Protection team at [email protected]. mu88 will respond to valid requests within 30 days. We may require identity verification before processing your request.

The mu88 Platform is strictly intended for persons aged 21 years and above. mu88 does not knowingly collect personal data from any person under the age of 21. If we become aware that personal data has been collected from an underage individual, we will immediately close the account, forfeit any associated balance in accordance with our Terms and Conditions, and delete or anonymise the relevant personal data.

If you believe a minor has registered on the mu88 Platform, please contact us immediately at [email protected] so that we may take appropriate action.

The mu88 Platform operates internationally and your personal data may be transferred to and processed in countries outside Malaysia, including the country in which mu88's servers and service providers are located. Such transfers are carried out subject to appropriate safeguards to ensure that your personal data remains protected to the standard described in this Policy.

Where personal data is transferred to a third-party service provider located outside Malaysia, mu88 ensures that such transfer is conducted under contractual data protection clauses, adequacy determinations, or equivalent safeguards appropriate to the circumstances of the transfer.

mu88 reserves the right to update or amend this Privacy Policy at any time. The date of the most recent revision is displayed at the top of this page. Where changes are material, mu88 will notify registered players via their registered email address or through a notice displayed on the Platform.

Your continued use of the mu88 Platform following the posting of an updated Privacy Policy constitutes your acceptance of those changes. We encourage you to review this Policy periodically to remain informed about how mu88 protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by mu88, please contact us through the following channels:

• Live Chat: Available 24/7 on the mu88 Platform
• Email: [email protected]

mu88 aims to acknowledge privacy-related enquiries within 2 business days and to fully respond within 30 calendar days of receipt of a valid request.