mmc888 Privacy Policy

1About This Policy

This Privacy Policy ("Policy") describes how mmc888 ("mmc888", "we", "us", "our") collects, uses, discloses, and safeguards personal information relating to individuals ("Users", "you") who access or use the mmc888 website at https://mmc888.win and all associated services, games, and features (the "Platform").

This Policy applies to all personal data processed by mmc888 in connection with the Platform, regardless of whether that data is provided directly by you or collected automatically through your interaction with the Platform. This Policy should be read alongside the Terms & Conditions and the Responsible Gaming Policy.

By registering an account or continuing to use the mmc888 Platform, you acknowledge that you have read and understood this Policy. If you do not agree with our data practices as described herein, you should not use the Platform.

2Data Controller

mmc888 acts as the data controller in respect of personal data collected through the Platform. As data controller, mmc888 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection laws, including the Malaysian Personal Data Protection Act 2010 (PDPA) and any other applicable privacy legislation in the jurisdictions from which the Platform is accessed.

For all data protection enquiries, Users may contact the mmc888 Data Protection team via the contact details specified in Section 14 of this Policy.

3Data We Collect

mmc888 collects the following categories of personal data, to the extent relevant to your interaction with the Platform:

mmc888 does not collect special categories of sensitive personal data (such as health data, biometric data, or political opinions) except where strictly required for responsible gaming assessments and only with your explicit consent.

4How We Collect Data

mmc888 collects personal data through the following means:

• Direct provision: Data you enter during registration, KYC verification, deposit/withdrawal requests, support interactions, or promotional opt-ins.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including via cookies, web beacons, and server logs. Please see Section 10 for cookie-specific information.
• Third parties: Identity verification data from KYC/AML service providers; fraud signals from payment processors; device risk scores from third-party security services.

5Purposes & Legal Basis for Processing

mmc888 processes your personal data for the following purposes, relying on the indicated legal bases:

• Account registration and management — performance of contract; necessary to provide you with the Platform services.
• Payment processing and financial reconciliation — performance of contract; legal obligation (anti-money laundering compliance).
• Identity and age verification (KYC/AML) — legal obligation under gaming licence conditions and applicable financial crime prevention law. mmc888 enforces a strict 21+ minimum age requirement. 21+
• Fraud detection and prevention — legitimate interests of mmc888 and its users in maintaining Platform integrity and financial security.
• Responsible gaming monitoring — legal obligation; legitimate interests in player welfare.
• Customer support — performance of contract; legitimate interests in resolving user issues efficiently.
• Platform analytics and improvement — legitimate interests in understanding how the Platform is used and improving its performance and user experience.
• Marketing communications — your consent, where provided at opt-in. You may withdraw consent at any time via Account Settings or by contacting support.
• Legal compliance and regulatory reporting — legal obligation under applicable law and gaming licence conditions.

6Disclosure of Personal Data

mmc888 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may disclose your personal data to the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection obligations:

• Payment service providers — Touch 'n Go eWallet, Boost, DuitNow, FPX, and other payment processors require transaction data to process deposits and withdrawals.
• KYC and identity verification partners — third-party services used to verify your identity and comply with AML/CFT obligations.
• Game content providers — game studios that power casino titles on the mmc888 Platform may receive anonymised gaming session data for licensing compliance and fairness auditing purposes.
• IT and hosting service providers — cloud infrastructure and platform operations vendors who process data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities — where required by applicable law, court order, or legitimate request from a competent authority, including gaming regulators and financial intelligence units.
• Professional advisers — legal, accounting, and auditing firms, under professional confidentiality obligations.

7International Transfers of Personal Data

In the course of providing Platform services, your personal data may be transferred to and processed in countries outside of Malaysia. Where such transfers occur, mmc888 takes appropriate steps to ensure that the recipient provides an adequate level of protection for your personal data, including by entering into standard contractual clauses approved by the relevant data protection authority, or relying on other lawful transfer mechanisms as permitted by applicable law.

By using the mmc888 Platform, you acknowledge that your data may be transferred internationally as described in this Policy.

8Data Retention

mmc888 retains personal data for the period necessary to fulfil the purposes described in this Policy, subject to the following minimum retention requirements:

• Account and identity data: For the duration of your account relationship plus a minimum of five (5) years following account closure, in compliance with AML/CFT regulatory requirements.
• Financial transaction records: Minimum of seven (7) years from the date of the transaction, as required under applicable financial and gaming regulatory frameworks.
• Gaming and betting history: Five (5) years from the date of the relevant gaming session or bet.
• Support communications: Three (3) years from the date of the last interaction, unless the matter is subject to ongoing legal proceedings.
• Technical and usage data: Up to twenty-four (24) months from collection, unless required for longer periods for security investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with mmc888's data disposal procedures.

9Security of Personal Data

mmc888 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the mmc888 Platform.
• Encryption of sensitive data fields (including financial identifiers) at rest in our databases.
• Role-based access controls limiting employee access to personal data to those with a legitimate operational need.
• Regular penetration testing and vulnerability assessments of the Platform infrastructure.
• Multi-factor authentication requirements for administrative system access.
• Incident response procedures for detecting, reporting, and responding to personal data breaches within legally required timeframes.

No data transmission over the internet can be guaranteed to be 100% secure. While mmc888 takes all reasonable precautions, the security of data transmitted to the Platform is also dependent on the security practices you maintain on your own devices and network connections.

10Cookies & Tracking Technologies

The mmc888 Platform uses cookies and similar tracking technologies (including web beacons and pixel tags) to operate core Platform functionality, analyse usage patterns, and — where you have consented — deliver relevant promotional content.

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled.
• Analytical Cookies: Used to understand how the Platform is used (pages visited, session duration, error rates). Data is aggregated and anonymised where possible.
• Functional Cookies: Remember your preferences such as language, display settings, and responsible gaming limit configurations.
• Marketing Cookies: Used only with your explicit consent to serve relevant promotional content. You may withdraw consent at any time via your browser settings or the cookie preference centre on the Platform.

You can control non-essential cookies through your browser settings. Disabling certain cookies may affect the functionality of the mmc888 Platform.

11Your Rights as a Data Subject

Subject to applicable law and certain exemptions, you have the following rights in respect of your personal data held by mmc888:

• Right of Access: Request a copy of the personal data mmc888 holds about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data in certain circumstances (e.g., where the data is no longer necessary for the purpose for which it was collected), subject to legal retention obligations.
• Right to Restrict Processing: Request that processing of your data be restricted in certain circumstances.
• Right to Data Portability: Receive your personal data in a structured, commonly used, and machine-readable format, and request that it be transmitted to another controller where technically feasible.
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes. Where you object to direct marketing processing, your data will be suppressed from marketing communications immediately.
• Right to Withdraw Consent: Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact the mmc888 Data Protection team as specified in Section 14. mmc888 will respond to verified requests within thirty (30) days, or within any shorter period required by applicable law.

12Children and Minors

The mmc888 Platform is strictly intended for use by individuals aged 21 years and older. mmc888 does not knowingly collect personal data from individuals under the age of 21. If mmc888 becomes aware that personal data has been collected from a person under 21, that data will be deleted promptly and the account will be closed. 21+

If you believe that a minor has registered an account with mmc888, please notify us immediately via live chat or email so that appropriate action can be taken.

13Changes to This Privacy Policy

mmc888 reserves the right to update or amend this Privacy Policy at any time. Where changes are material, mmc888 will provide advance notice via a prominent banner on the Platform and, where practicable, by email to your registered address. The "Last Updated" date at the top of this Policy reflects when the most recent revisions were made.

Your continued use of the mmc888 Platform following notification of any changes constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically.

14Contact Us

For all privacy-related enquiries, data subject rights requests, or to report a potential data breach, please contact the mmc888 Data Protection team through the following channels:

• Live Chat: Available 24/7 via the chat widget on any page of the Platform. Reference "Privacy / Data Request" when initiating the chat.
• Email: [email protected] — please include "Privacy Policy Enquiry" in the subject line to ensure prompt routing to the Data Protection team.

mmc888 aims to acknowledge all data protection enquiries within 48 hours and resolve them within the timelines prescribed by applicable law. For complex requests, we will keep you informed of progress.