Privacy Policy mmoo — Your Data, Our Responsibility

This Privacy Policy explains how mmoo ("we", "the platform", or "mmoo") collects, uses, stores, and discloses your personal information when you use our services through the mmoo.ng website and the official mmoo mobile app.

We are committed to protecting your privacy and ensuring that your personal data is handled in a transparent, fair and secure manner. This document forms part of your overall agreement with mmoo — it should be read together with Terms and Conditions us.

By using the mmoo platform, you agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, you have the right to discontinue use of our services.

Mmoo collects personal data from you through several means when you register, use the platform, or contact our customer support. The types of data collected are as follows:

Registration & Account Data:

• Full name as it appears on your official identification document.
• Date of birth to confirm that you meet the minimum age requirement of 18 years.
• Email address — used as a unique identifier and for official communications.
• Mobile phone number for two-factor authentication and account notifications.
• Passwords are stored in hashed form — never saved as plain text.

KYC (Know Your Customer) Data:

• A copy of your identity document such as your MyKad or passport.
• A copy of supporting withdrawal documents such as a bank statement or utility bill.
• Additional information that may be requested during the identity verification process.

Financial Transaction Data:

• Deposit and withdrawal records including amounts, payment methods and timestamps.
• Bank account number or digital wallet details (stored in partially hashed form).
• History of bonuses and promotions applied to your account.

Platform Usage Data:

• Game history including games played, total wagering amounts, and results.
• Account activity logs including logins, logouts and settings changes.
• Device data including device type, operating system, and app version.
• IP address and general location data for security and compliance purposes.

Your personal data is used by mmoo solely for the following purposes. We do not use your data for any other purpose without obtaining your prior consent:

Under Malaysia's Personal Data Protection Act 2010 (PDPA), mmoo processes your personal data on the following legal bases:

• Consent — when you register an account and agree to this Privacy Policy, you give your consent for the collection and use of your data for the stated purposes.
• Contract Performance — data processing necessary to deliver the mmoo services you use, including payment processing and account management.
• Legal Obligation — data processing required by Malaysia law including KYC, AML, and reporting obligations to relevant authorities.
• Legitimate Interests — processing for platform security, fraud prevention, and service improvement purposes, to the extent it does not override your fundamental rights.

Mmoo does not sell or disclose your personal data to third parties for their marketing purposes. However, in the course of operating the platform, we may share your personal data with the following parties under limited circumstances:

• Payment Processing Providers — to facilitate your deposits and withdrawals via DuitNow, FPX, TNG eWallet, Boost, GrabPay, and bank processors.
• KYC Service Providers — third-party identity verification companies that assist our KYC process using approved technology.
• Game Providers — limited information required by game providers to deliver games within the mmoo platform.
• Relevant Authorities — when required by Malaysia law or a valid court order.
• IT Service Providers — server infrastructure and cybersecurity providers that help us operate the platform securely.

All third parties involved are required to comply with privacy and security standards equal to or higher than mmoo's own. Data processing agreements are signed with all third parties that handle mmoo member personal data.

Mmoo implements multiple layers of technical and organisational protection to safeguard your personal data from unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL encryption for all data transmitted between your device and mmoo's servers.
• Sensitive data such as financial information and KYC is stored in encrypted form using the latest encryption algorithms.
• Internal access to personal data is restricted to staff who require it to perform their duties only (principle of least privilege).
• Security audits and penetration testing are conducted periodically by independent cybersecurity firms.
• 24/7 monitoring system to detect suspicious activity or unauthorised access in real time.
• A clear incident response plan to address any security breaches swiftly and effectively.

Mmoo retains your personal data for as long as necessary to fulfil the purpose for which it was collected, subject to any longer legal retention requirements:

• Active Account Data — retained for the duration your account is active plus 5 years after account closure for legal compliance purposes.
• KYC Data — retained for 7 years from the date of the last verification, in line with anti-money laundering legal requirements.
• Transaction Records — retained for 7 years for financial audit and regulatory compliance purposes.
• Platform Activity Logs — retained for 90 days for security and fraud investigation purposes.
• Customer Support Correspondence — retained for 3 years from the date of the last correspondence.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to your identity.

Mmoo uses cookies and similar tracking technologies to enhance your experience on the platform. The cookies used fall into several categories:

• Essential Cookies (Required) — required for the platform to function properly, including login sessions and security preferences. These cookies cannot be disabled.
• Functional Cookies — stores your preferences such as language, theme, and interface settings for a more personalised experience.
• Analytics Cookies — helps us understand how the platform is used so we can make effective improvements. This data is collected in aggregate and does not identify individuals.

You can manage your cookie preferences through your browser settings. However, disabling certain cookies may affect the functionality of some parts of the mmoo platform.

The KYC (Know Your Customer) process is a mandatory legal compliance requirement for financial and entertainment platforms. mmoo conducts KYC with your security and privacy as the top priority:

• Submitted KYC documents are stored in a secure server environment with restricted access.
• KYC documents are accessed only by trained mmoo compliance staff and are subject to strict confidentiality agreements.
• Once verification is complete, original documents are considered verified and are not retained longer than required by law.
• Mmoo's KYC process does not use automated facial recognition — all checks are performed by humans.

To exercise any of your privacy rights as stated in this Privacy Policy, please contact the mmoo privacy team through the following channels:

• Live Chat 24/7 — the fastest channel for simple requests such as data corrections.
• Official Email — for more complex requests such as full data access or account deletion. Please include "Privacy Request" in the email subject line.

Mmoo will process your privacy rights request within 14 business days from the date the request is received. In cases requiring further investigation, we may take up to 30 business days and you will be notified of this additional timeframe.

For security purposes, we may require you to verify your identity before processing certain requests, particularly those involving data access or deletion.

In the course of platform operations, your data may be processed on servers located outside Malaysia, including data centers in Singapore and Hong Kong used by our infrastructure providers.

Mmoo ensures that any international data transfers are carried out with adequate safeguards, including:

• Use of standard data processing agreements that establish clear data protection responsibilities.
• Selection of infrastructure providers that comply with international standards such as ISO 27001 and SOC 2.
• Data encryption in transit and at rest to keep your data secure even when transferred across borders.

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, please contact the mmoo privacy team:

• Live Chat 24/7 — available directly within the mmoo platform and app.
• Privacy Email: [email protected] — for written privacy enquiries and rights requests.

We encourage you to contact us directly with any privacy concerns before filing a formal complaint with the relevant authorities. Our team is ready to resolve any issue quickly and effectively.