🔒 mun888 Privacy Policy

1. 📘 Introduction & Scope

This Privacy Policy ("Policy") describes how mun888 ("we", "us", "our", "mun888") collects, processes, stores, discloses, and protects personal data relating to users ("you", "User", "Player") of the mun888 online gaming platform, accessible at mun888.app (the "Platform"). It applies to all personal data provided or generated through your use of the mun888 Platform, whether you are a registered account holder, a visitor to the site, or a participant in any mun888 promotion.

mun888 takes its obligations under applicable data protection legislation seriously, including obligations that arise under our international gaming authority licence. By registering an account or continuing to use the mun888 Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

2. 🏢 Data Controller Information

mun888 is the data controller responsible for the personal data collected through the Platform. As data controller, mun888 determines the purposes and means of processing your personal data. Enquiries relating to data protection, this Policy, or the exercise of your data subject rights should be directed to:

• Email: [email protected]
• Live Chat: Available 24/7 via the mun888 Platform
• Subject line: "Data Protection Enquiry" or "Privacy Request"

mun888 has designated an internal Data Protection Officer (DPO) responsible for overseeing compliance with applicable data protection obligations. The DPO can be contacted through the channels listed above by specifying "Attention: Data Protection Officer" in your communication.

3. 📂 Personal Data We Collect

3.1 Registration & Identity Data

When you create a mun888 account, we collect the following categories of personal data:

• Full legal name;
• Date of birth (for age verification — 21+ requirement);
• Residential address, including city and postcode (e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru);
• Email address;
• Malaysian mobile phone number;
• Username selected by you at registration.

3.2 Identity Verification (KYC) Data

In compliance with our Know Your Customer obligations under our gaming licence, we may collect:

• Government-issued photo identification (MyKad, passport, or driving licence);
• Proof of address documentation;
• Source of funds declarations where required by AML obligations;
• Selfie or live verification images where required by our KYC process.

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records;
• Payment method details (e.g., Maybank, CIMB, Public Bank account details; Touch n Go eWallet identifiers; Boost account details; Visa/Mastercard card details; USDT wallet addresses);
• Account balance and transaction history.

3.4 Gaming & Behavioural Data

• Game play history, wager amounts, and outcomes;
• Session duration and frequency of play;
• Preferred games, sections, and features accessed;
• Responsible gaming tool usage and settings.

3.5 Technical & Device Data

• IP address and approximate geolocation derived therefrom;
• Device type, operating system, and browser;
• Session tokens and authentication logs;
• Cookie identifiers and similar tracking data (see Section 10).

3.6 Communications Data

• Content of customer support interactions (live chat transcripts, email correspondence);
• Feedback, survey responses, and complaints submitted to mun888.

4. 🔍 How We Collect Your Data

mun888 collects personal data through the following means:

• Directly from you — during account registration, KYC verification, deposit and withdrawal requests, promotional opt-ins, and customer support interactions;
• Automatically — through your use of the Platform, including via cookies, server logs, and session tracking technologies;
• From third parties — including identity verification service providers, payment processors, fraud prevention agencies, and our gaming licence authority where data sharing is required for compliance purposes.

5. 🎯 How We Use Your Personal Data

mun888 processes your personal data for the following purposes:

• Account management: To create, maintain, and manage your mun888 account, including authentication and session management;
• Service delivery: To provide you with access to games, the sportsbook, live casino, slots, and all Platform features;
• Payment processing: To process deposits and withdrawals via your chosen payment method in MYR;
• Identity & age verification: To verify that you meet the 21+ age requirement and to comply with KYC obligations;
• Regulatory compliance: To meet AML obligations, gaming licence requirements, and applicable laws, including filing required reports with relevant authorities;
• Fraud prevention & security: To detect, investigate, and prevent fraudulent activity, money laundering, and Platform abuse;
• Customer support: To respond to your enquiries, complaints, and support requests;
• Marketing communications: Where you have provided consent or where a legitimate interest exists, to send you information about mun888 promotions, bonuses, and new features (you may opt out at any time);
• Responsible gaming: To monitor gaming patterns and, where necessary, apply responsible gaming interventions in accordance with our licence obligations;
• Platform improvement: To analyse usage data and improve the mun888 user experience, features, and performance.

6. ⚖️ Legal Basis for Processing

mun888 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and mun888, i.e., to operate your account and provide Platform services;
• Legal obligation: Processing required to comply with applicable laws, gaming licence conditions, KYC/AML obligations, and regulatory reporting requirements;
• Legitimate interests: Processing for fraud prevention, Platform security, and improvement of services, where such interests do not override your fundamental rights and freedoms;
• Consent: For marketing communications and the use of non-essential cookies, where your explicit consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

7. 🤝 Data Sharing & Third Parties

mun888 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: Maybank, CIMB, Public Bank, Touch n Go eWallet, Boost, Visa/Mastercard networks, and cryptocurrency payment processors, for the purpose of processing deposits and withdrawals;
• Identity verification providers: Third-party KYC and AML service providers engaged to verify account holder identity and age;
• Gaming content providers: Game studios and live casino operators whose titles are hosted on the mun888 Platform, who may receive session and wager data necessary to operate their games;
• Regulatory authorities: Our gaming licence authority and, where legally required, law enforcement agencies and financial intelligence units;
• Fraud prevention agencies: Third-party services used to detect and prevent fraudulent activity on the Platform;
• IT and infrastructure providers: Cloud hosting, content delivery, and cybersecurity service providers engaged to operate and maintain the mun888 Platform.

All third parties engaged by mun888 are contractually required to process personal data only in accordance with mun888's instructions, to implement appropriate security measures, and to comply with applicable data protection obligations.

8. 🌐 International Data Transfers

Some of mun888's service providers and infrastructure partners are located outside Malaysia. Where personal data is transferred to recipients in countries that may not offer an equivalent level of data protection to that applicable in Malaysia, mun888 will ensure that appropriate safeguards are in place, including contractual clauses that require the recipient to protect your personal data to a standard equivalent to that required under applicable law. You may request information about the safeguards in place for specific international transfers by contacting mun888 at the address in Section 15.

9. 🗓️ Data Retention

mun888 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and identity data: Retained for the lifetime of the account and for a minimum of five (5) years following account closure, in accordance with AML and gaming licence regulatory requirements;
• Transaction data: Retained for a minimum of seven (7) years to satisfy financial record-keeping obligations;
• Gaming history: Retained for five (5) years post-closure for regulatory audit and dispute resolution purposes;
• Customer support records: Retained for three (3) years following resolution of the relevant matter;
• Marketing preferences and consent records: Retained for the duration of the relationship and for two (2) years thereafter to demonstrate compliance.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

10. 🍪 Cookies & Tracking Technologies

The mun888 Platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure user experience. We use the following categories of cookies:

• Strictly necessary cookies: Required for Platform operation, including session management and authentication. These cannot be disabled;
• Functional cookies: Remember your preferences such as language, login state, and game lobby settings;
• Analytics cookies: Collect aggregated usage data to help us understand how the Platform is used and identify areas for improvement;
• Marketing cookies: Used, with your consent, to deliver relevant promotional information. You may opt out of marketing cookies through your account settings or browser controls.

11. 🔐 Security of Your Data

mun888 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the mun888 Platform;
• Encrypted storage of passwords using industry-standard hashing algorithms;
• Two-factor authentication (2FA) available to all account holders;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security assessments and penetration testing of Platform infrastructure;
• Incident response procedures to address and notify affected users of any data breach in accordance with applicable legal requirements.

Notwithstanding these measures, no internet-based platform can guarantee absolute security. Users are encouraged to use strong, unique passwords and to enable 2FA on their mun888 account. Report any suspected account compromise immediately via live chat.

12. 👤 Your Rights as a Data Subject

Subject to applicable law and gaming regulatory obligations, you have the following rights in relation to your personal data held by mun888:

• Right of access: The right to request a copy of the personal data mun888 holds about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data, subject to mun888's overriding legal and regulatory retention obligations;
• Right to restrict processing: The right to request that we limit the processing of your personal data in certain circumstances;
• Right to data portability: The right to receive your personal data in a structured, machine-readable format for transfer to another controller, where technically feasible;
• Right to object: The right to object to processing based on legitimate interests, including processing for direct marketing purposes;
• Right to withdraw consent: Where processing is based on consent, the right to withdraw consent at any time without affecting prior lawful processing.

To exercise any of the above rights, please contact mun888 as described in Section 15. We will respond to verified requests within thirty (30) days. Note that some requests may be subject to identity verification before we can action them.

13. 🔞 Children's Privacy

The mun888 Platform is strictly intended for individuals aged 21 years and above. mun888 does not knowingly collect personal data from persons under the age of 21. If mun888 becomes aware that personal data has been collected from a person under 21, the account will be immediately closed and all associated personal data deleted, subject to any mandatory retention obligations. If you believe a person under the age of 21 has created a mun888 account, please contact us immediately via live chat or at [email protected].

14. 📝 Changes to This Policy

mun888 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, mun888 will notify registered Users by email and/or by displaying a prominent notice on the Platform prior to the changes taking effect. The revised Policy will display an updated "Last Updated" date at the top of the document. Your continued use of the mun888 Platform after the effective date of any revised Policy constitutes acceptance of the updated terms. If you do not agree with the changes, you should cease using the Platform and may contact us to request account closure.

15. 📧 Contact & Complaints

For any privacy-related enquiries, data subject rights requests, or complaints regarding mun888's handling of your personal data, please contact us through the following channels:

• Email: [email protected] — subject line: "Privacy Request" or "Data Protection Enquiry"
• Live Chat: Available 24 hours a day, 7 days a week via the mun888 Platform. Please state "Data Protection" at the start of your enquiry.

mun888 will acknowledge privacy requests within 48 hours and provide a substantive response within 30 days. If you are not satisfied with our response to a complaint regarding data handling, you may have the right to lodge a complaint with the applicable data protection supervisory authority in your jurisdiction.