Mm98 Privacy Policy – How We Protect the Personal Data of Malaysian Players

1. Introduction

Platform mm98 (mm98-khelo.com) takes the privacy of all its users seriously. This Privacy Policy explains how we collect, use, store and protect your personal data when you use our services — from account registration and betting on Malaysia Super League or EPL football, to slots and Live Casino games, through to every deposit and withdrawal transaction you make.

This policy applies to all registered players and website visitors mm98. We operate on the principle of minimal data collection — we only collect data that is strictly necessary to provide the services you use, maintain the security of your account, and comply with applicable legal requirements.

As a platform serving Malaysian players, mm98 complies with Malaysia's Personal Data Protection Act 2010 (PDPA). We respect your rights as a data subject and are committed to ensuring your personal data is handled responsibly, transparently and securely at all times.

2. Data Collected by mm98

2.1 Data You Provide Directly

When you register or use the platform mm98, you provide the following data directly:

• Registration information: Full name, Malaysian mobile number, email address and password
• Profile information: Display name, date of birth (for age verification) and language preferences
• Identity verification information: Identity card number (MyKad), copy of identification document if requested for additional account verification
• Financial information: The e-wallet or bank account number registered for withdrawals (not for deposits — see Section 4)
• Customer support communications: Conversation history, complaints, and requests submitted to the team mm98

2.2 Automatically Collected Data

When you use the platform mm98, our systems automatically record the following technical information:

• Device data: Device type, operating system, phone model and screen resolution
• Network data: IP address, internet service provider (ISP) name and connection information
• Platform activity data: Pages visited, session duration, games played and full betting history
• Transaction data: Records of all deposits, withdrawals, wins and losses, including timestamps, payment methods and amounts
• Cookie data: Session cookies and preference cookies — see Section 6 for more information

3. Purposes of Data Collection

mm98 using collected personal data solely for the following purposes:

1. Account management: Creating, verifying and maintaining accounts mm98 yours, including secure login processes and two-factor authentication
2. Transaction processing: Processing all deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay and FPX, as well as withdrawals to registered accounts
3. Service maintenance: Ensuring the platform runs smoothly, and identifying and resolving technical issues that affect the player experience
4. Fraud prevention: To detect and prevent fraudulent activity, money laundering, platform abuse and violations of our terms of use
5. Legal compliance: To fulfil legal obligations under Malaysia's PDPA and any other applicable statutory reporting requirements
6. Product improvements: Analyzing usage patterns in aggregate (not individual data) to improve the interface, add new features and enhance the overall user experience
7. Customer support: Assists in resolving inquiries, complaints and disputes submitted to the team mm98
8. Important communications: Sends important account-related notifications such as changes to terms, security issues and privacy policy updates

4. How mm98 Stores Your Data

4.1 Storage Infrastructure

Player personal data mm98 stored on secure servers with multiple layers of physical and digital protection. All data is encrypted in transit using TLS 1.3 and at rest using AES-256. Database access is strictly restricted to authorised mm98 with a legitimate operational need only.

4.2 Financial Details

What you need to know: mm98 does not store your full bank card number, PIN or complete e-wallet account details. All payment processing via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay and FPX is handled directly by certified payment providers using their own secure systems. mm98 only retains transaction records (amount, time, method) for bookkeeping and dispute resolution purposes.

4.3 Backup and Recovery

Player data mm98 are backed up regularly to separate locations to ensure service continuity in the event of a technical incident. All backups are encrypted to the same level of protection as primary data and are accessible only by the technical team mm98 that is authorised.

5. Data Sharing with Third Parties

mm98 does not sell, rent or share players' personal data with third parties for commercial purposes. However, under certain limited circumstances, mm98 may need to share data with the following parties:

5.1 Technical Service Providers

Third-party service providers that assist in the operation of the platform mm98 — such as cloud infrastructure providers, payment processing services and technical analytics tools — may have limited access to data necessary to perform their functions. All such providers are bound by strict confidentiality agreements and are only permitted to use data for the specified purposes.

5.2 Legal Requirements

mm98 may be required to disclose players' personal data if mandated by applicable Malaysian law, a valid court order or a directive from an authorised law enforcement agency. In such situations, mm98 will endeavour to notify the affected players before any disclosure is made, unless prohibited from doing so by law.

5.3 Platform Protection

In confirmed cases of fraud, money laundering or criminal activity involving an account mm98, the relevant information may be shared with the appropriate authorities for investigation and legal prosecution purposes.

6. Cookies & Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website mm98. It allows the platform to remember your preferences, maintain your login session securely and ensure a smoother user experience as you navigate between different sections of the platform.

6.2 Types of Cookies Used by mm98

• Session Cookies: Used to maintain your login status during an active session. Automatically deleted when you close your web browser
• Preference Cookies: Saves your language settings and display preferences so you do not need to reconfigure them each time you visit the platform mm98
• Security Cookies: Helps identify and prevent unauthorised access and fraudulent activity by detecting suspicious access patterns
• Analytics Cookies: Used to understand how players use the platform in aggregate — this data cannot be traced back to any specific individual

6.3 Managing Cookies

You can manage or delete cookies through your web browser settings. Please note, however, that disabling certain cookies — particularly session cookies — may affect the functionality of the platform mm98 and your overall user experience. mm98 does not use third-party cookies for targeted advertising.

7. Data Security

mm98 implements comprehensive technical and organisational security measures to protect player personal data from unauthorised access, disclosure, alteration or destruction. These measures include:

• Full encryption: 256-bit SSL for all data in transit and at rest
• Layered access controls: Only authorised personnel with a legitimate operational need may access the player database
• 24-hour monitoring: An intrusion detection system operating continuously to identify and respond to security threats
• Periodic penetration testing: Independent security assessments conducted on a regular basis to identify and address system vulnerabilities
• Incident response protocol: Clear procedures for addressing any security incidents swiftly and effectively
• Staff training: All staff mm98 who handle player data undergo regular data security training

8. Your Rights as an mm98 Player

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a player mm98 holds the following rights regarding your personal data:

To exercise any of the above rights, please contact the mm98 via email at support@mm98-khelo.com with the subject line "PDPA Rights Request". We will process your request within 21 working days from the date of receipt.

9. Data Retention

mm98 retains players' personal data for as long as necessary to fulfil the purposes set out in this policy, or as required by applicable Malaysian law. Specific retention guidelines are as follows:

• Active account data: Retained for the duration of the active account and for 7 years after account closure for legal compliance purposes
• Financial transaction records: Retained for 7 years in accordance with Malaysian accounting and anti-money laundering legal requirements
• Security logs: Retained for 2 years for security incident investigation purposes if required
• Customer support records: Retained for 3 years after case closure for reference should a dispute re-emerge
• Aggregated analytics data: Has no expiry date as it cannot be traced back to any individual

Upon expiry of the applicable retention period, personal data will be securely deleted from our systems mm98 using deletion methods that ensure data cannot be recovered.

10. Privacy Policy Amendments

mm98 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements or improvements in how we protect player data. Any amendments will be published on this page along with the new effective date.

For material amendments — that is, changes that significantly affect player rights or how data is used — mm98 will endeavour to provide at least 14 days' notice via email or in-platform notification before any changes take effect. It is your responsibility to review this Privacy Policy periodically to stay informed of our current practices.