mu33 Privacy Policy

1. Introduction

Welcome to mu33. mu33 ("we", "us", "our") operates the online gaming platform accessible at https://mu33.lat and its associated mobile applications (collectively, the "Platform"). This Privacy Policy describes our practices concerning the collection, use, storage, disclosure, and protection of personal data provided by users ("you", "your") when you register for, access, or use the mu33 Platform.

By creating a mu33 account or continuing to use our Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this policy, you must discontinue use of the Platform immediately.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of our broader agreement with you.

2. Data We Collect

mu33 collects personal data in several ways depending on how you interact with our Platform. The categories of personal data we may collect include, but are not limited to:

2.1 Registration and Account Data

• Full name as per your identification document
• Date of birth (to verify you are 21 years of age or older)
• Email address and mobile phone number
• Residential address (including postcode and state within Malaysia)
• National Registration Identity Card (NRIC) number or passport number for identity verification purposes
• Username and securely hashed account password

2.2 Financial and Transaction Data

• Bank account name, account number, and the name of your financial institution (e.g., Maybank, CIMB, Public Bank, RHB)
• E-wallet identifiers for Touch 'n Go eWallet, Boost, GrabPay, or DuitNow — only account references, never full credentials
• Transaction history including deposit amounts, withdrawal amounts, dates and reference codes

2.3 Technical and Usage Data

• IP address, device type, operating system, and browser version
• Pages visited, session duration, features used, and navigation patterns on the Platform
• Geolocation data at a country or region level (not precise GPS coordinates unless specifically permitted)
• Log files, error reports, and diagnostic data

2.4 Communications Data

• Messages exchanged with our customer support team via live chat or email
• Survey responses, feedback submissions, and promotional opt-in records
• Records of any complaints or disputes you have raised with mu33

3. How We Use Your Data

mu33 uses the personal data we collect for the following purposes:

• Account creation and management: To register your mu33 account, verify your identity, and maintain the security of your account at all times.
• Service delivery: To process your bets, deposits, and withdrawals, provide access to our sportsbook, live casino, and slots games, and deliver the full range of mu33 Platform features.
• Identity verification (KYC): To comply with our know-your-customer obligations and confirm that you are of legal age (21+) and are the legitimate account holder.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, unauthorised account access, and other prohibited activities.
• Customer support: To respond to your enquiries, resolve disputes, and improve our service quality based on your feedback.
• Marketing and promotions: Where you have given your consent, to send you information about mu33 promotions, welcome bonuses, and platform updates that may be relevant to you. You may opt out at any time.
• Legal and regulatory compliance: To fulfil our obligations under applicable laws and respond to lawful requests from competent authorities.
• Platform improvement: To analyse usage patterns and technical performance so we can continuously improve the mu33 experience for all Malaysian players.

4. Legal Basis for Processing

mu33 processes your personal data on the following legal grounds:

• Contractual necessity: Processing is necessary to perform our agreement with you — specifically, to provide the gaming services you have registered for and to manage your account.
• Legal obligation: Certain processing activities, such as identity verification and transaction record-keeping, are required to comply with applicable laws and regulatory requirements.
• Legitimate interests: We process some data for purposes that serve our legitimate business interests — such as fraud prevention, platform security, and service improvement — provided those interests do not override your fundamental rights and freedoms.
• Consent: For marketing communications and non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

5. Sharing Your Data

mu33 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share your data with the following categories of recipients only to the extent necessary:

• Payment processors and financial institutions: Banks and e-wallet providers (such as Maybank, CIMB, Touch 'n Go, Boost, GrabPay, and DuitNow) receive only the data required to process your specific deposit or withdrawal transaction.
• Identity verification providers: Third-party KYC service providers that assist mu33 in verifying your identity and age in accordance with our obligations.
• Technology and infrastructure partners: Cloud hosting, content delivery, and cybersecurity providers who process data on our behalf under strict data processing agreements and are not permitted to use your data for their own purposes.
• Regulatory and law enforcement authorities: Where mu33 is required by law, court order, or lawful request from a competent authority to disclose personal data, we will comply to the extent legally mandated.
• Business restructuring: In the event of a merger, acquisition, or sale of all or part of our business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

In all cases where we share data with third parties, we require those parties to maintain appropriate technical and organisational security measures and to process your data only for the specified, lawful purpose.

6. Data Retention

mu33 retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law. In practice, this means:

• Active account data is retained for the lifetime of your mu33 account.
• Following account closure, we retain certain records — including identity verification documents and transaction logs — for a minimum of five (5) years to satisfy regulatory and anti-money laundering obligations.
• Customer support communications are retained for up to three (3) years from the date of the last interaction.
• Marketing consent records are retained for the duration of your consent, plus a reasonable period thereafter for compliance documentation purposes.
• Technical logs and cookies data are retained for shorter periods as detailed in our cookie management settings.

When personal data is no longer required, mu33 will securely delete or anonymise it in accordance with our internal data retention schedule.

7. Security Measures

mu33 takes the security of your personal data seriously. We implement a layered set of technical and organisational measures to protect your information against unauthorised access, loss, disclosure, or destruction, including:

• Transport Layer Security (TLS) encryption for all data in transit between your browser or app and our servers
• AES-256 encryption for sensitive data stored at rest
• Multi-factor authentication options for account login
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis
• Continuous monitoring systems to detect and respond to potential security incidents in real time
• Regular independent security audits and penetration testing

While mu33 employs commercially reasonable security measures, no online system can be guaranteed to be 100% secure. We encourage you to use a strong, unique password for your mu33 account and to never share your login credentials with anyone.

8. Cookies Policy

mu33 uses cookies and similar tracking technologies (such as web beacons and local storage) to enhance your experience on our Platform. The categories of cookies we use are as follows:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They enable you to stay logged in, navigate securely, and complete transactions. You cannot opt out of these cookies while using the Platform.
• Functional cookies: These remember your preferences, such as your preferred language or display settings, to provide you with a more personalised experience.
• Analytical cookies: These help us understand how users interact with the Platform — which pages are visited most, where errors occur, and how performance can be improved. The data is aggregated and does not identify you individually.
• Marketing cookies: Where you have consented, these cookies may be used to deliver relevant promotional content about mu33 features. We do not use third-party advertising networks to serve ads on behalf of external brands.

You can manage your cookie preferences at any time through your browser settings or our in-Platform cookie management tool. Please note that disabling certain categories of cookies may affect the functionality of some Platform features.

9. Your Rights

As a mu33 user, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with your request and sufficient information to verify your identity.

• Right of access: You have the right to request a copy of the personal data mu33 holds about you, along with information about how it is being processed.
• Right to rectification: You may request that we correct any inaccurate or incomplete personal data we hold about you. For basic account details, you can update these directly within your account dashboard.
• Right to erasure: In certain circumstances, you may request that mu33 delete your personal data. This right is subject to our legal retention obligations — for example, we may be required to retain certain records even after your account is closed.
• Right to restriction: You may request that we restrict the processing of your personal data in specific circumstances, such as while a dispute regarding its accuracy is resolved.
• Right to data portability: Where processing is based on your consent or a contract, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You may object to processing based on our legitimate interests, or to the use of your data for direct marketing purposes. Marketing opt-outs take effect immediately.
• Right to withdraw consent: Where we rely on your consent as the legal basis for processing, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

mu33 aims to respond to all data subject requests within 30 calendar days. Where a request is particularly complex or we have received a high volume of requests, we may extend this period by a further 60 days, and will inform you accordingly.

10. Minors and Age Restriction

mu33 is strictly an adult platform. You must be at least 21 years of age to register for and use our services in accordance with Malaysian regulations applicable to casino-style gambling activities.

We do not knowingly collect, store, or process personal data from individuals under the age of 21. During registration, mu33 requires you to confirm your date of birth and to complete identity verification that confirms your age. Any account found to belong to a person under 21 will be suspended immediately, all associated funds will be handled in accordance with our Terms & Conditions, and the personal data of that individual will be deleted as soon as reasonably practicable.

If you are a parent or guardian and you believe that your child has registered on the mu33 Platform without your knowledge, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

11. Changes to This Privacy Policy

mu33 may update this Privacy Policy from time to time to reflect changes in our data practices, services, or applicable law. When we make material changes, we will notify you by:

• Posting the updated Privacy Policy on this page with a revised "Last reviewed" date
• Sending a notification to the email address associated with your mu33 account (for significant changes)
• Displaying a prominent notice within your account dashboard where appropriate

Your continued use of the mu33 Platform after any such update constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed of how we protect your data. If you disagree with any changes, you should discontinue use of the Platform and may request account closure by contacting our support team.

12. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by mu33, please reach out to us. We are committed to addressing all privacy-related enquiries promptly and transparently.

For formal data subject requests (access, erasure, portability), please include your full name, registered email address, and a description of your request in your communication so we can process it efficiently.