Privacy Policy

Introduction

This Privacy Policy ("Policy") is issued by mmc966 ("we", "us", "the Operator", "mmc966") and governs the collection, use, storage, disclosure, and protection of personal data obtained from individuals ("you", "the Member", "the User") who access or use the mmc966 platform at https://mmc966.cam and all related services ("the Platform").

mmc966 takes the privacy of its Members seriously. We recognise that when you provide us with personal information — whether during registration, during account verification, or in the course of transacting on the Platform — you are placing trust in us to handle that information responsibly. This Policy sets out precisely how we honour that trust.

This Policy applies to all personal data processed by mmc966 in connection with the delivery of its online gaming, sports betting, and casino services to Members located in Malaysia and elsewhere. It covers data collected through the website, our live chat support system, email correspondence, and any other channel through which you interact with mmc966.

Definitions

In this Privacy Policy, the following terms carry the meanings defined below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, IP address, and device identifiers.
• "Processing" — any operation or set of operations performed on personal data, whether automated or manual, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — mmc966, as the entity that determines the purposes and means of processing personal data obtained through the Platform.
• "Data Processor" — any third-party entity that processes personal data on behalf of mmc966 under a binding contractual agreement and in accordance with our instructions.
• "KYC Data" — identity verification documents and supporting materials collected as part of the Know Your Customer process mandated by our licensing obligations, including government-issued identification, proof of address, and payment method verification.
• "Cookies" — small text files stored on a Member's browser or device by the Platform to facilitate session management, preference retention, and usage analytics.
• "Member" — any individual who has successfully registered an account with mmc966 and accepted the Platform's Terms and Conditions.

Data We Collect

mmc966 collects personal data through multiple touchpoints in the course of operating the Platform. The categories of data collected and the circumstances under which they are gathered are set out in the table below:

mmc966 does not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) except where explicitly required by applicable law or regulatory obligation, in which case such collection will be disclosed at the time of collection.

Legal Basis for Processing

mmc966 processes personal data only where a lawful basis exists to do so. The bases on which we rely are as follows:

• Contractual Necessity: Processing required to enter into and perform the contract between mmc966 and the Member, including account registration, transaction processing, and delivery of gaming services.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including anti-money laundering (AML) obligations, KYC verification mandates, age verification requirements, and reporting obligations to our licensing authority.
• Legitimate Interests: Processing carried out to serve the legitimate operational interests of mmc966, provided those interests are not overridden by the Member's rights and interests. This includes fraud detection, platform security monitoring, and service improvement analytics.
• Consent: Processing based on your freely given, specific, and informed consent, such as for the sending of promotional communications. You may withdraw consent at any time by contacting our support team or updating your Account preferences.

How We Use Your Data

mmc966 uses the personal data we collect for the following purposes, each of which is tied to one or more of the lawful bases described in Section 4:

• Account Creation and Management: To register your Member Account, verify your identity and age, and maintain accurate account records throughout your membership.
• Transaction Processing: To process deposits via methods such as DuitNow, FPX, Touch 'n Go eWallet, Boost, Maybank, CIMB Bank, and Public Bank transfers, and to process withdrawal requests to your nominated payment method.
• Gaming Services Delivery: To enable your participation in live casino games, sports betting markets (including Liga Super Malaysia, EPL, UFC, and other events), slots, lottery, and arcade games on the Platform.
• Customer Support: To respond to enquiries, manage disputes, process complaints, and provide assistance via live chat and email.
• Regulatory Compliance: To fulfil our obligations under applicable gaming regulations, anti-money laundering laws, and our KYC requirements, including mandatory reporting to regulatory bodies where required.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, and other security threats to the Platform and its Members.
• Responsible Gambling: To operate and enforce responsible gambling tools, including deposit limits, self-exclusion, and session reminders, in accordance with our obligations and your preferences.
• Platform Improvement: To analyse usage patterns and technical performance data for the purpose of improving the functionality, reliability, and user experience of the mmc966 Platform.
• Marketing Communications: Where you have provided consent, to send promotional offers, bonus notifications, and platform updates by email. You may opt out at any time.

Data Sharing & Disclosure

mmc966 does not sell or rent personal data to third parties. We may, however, share personal data with the following categories of recipients where lawfully permitted or required:

• Payment Service Providers: Banking institutions and e-wallet operators — including DuitNow network participants, FPX, Touch 'n Go eWallet, Boost, Maybank, CIMB, Public Bank, and Hong Leong Bank — to the extent necessary to process deposit and withdrawal transactions.
• Game Software Providers: Third-party game providers who supply live casino, slots, and sports betting technology integrated into the mmc966 Platform. These providers operate under contractual data processing agreements that restrict their use of Member data.
• KYC and AML Verification Services: Third-party identity verification and fraud screening providers engaged to assist with our regulatory compliance obligations. Data shared with these providers is limited to what is strictly necessary for verification purposes.
• Regulatory and Law Enforcement Authorities: We may disclose personal data to regulatory bodies, licensing authorities, financial intelligence units, or law enforcement agencies where we are legally obligated to do so — for example, to report suspicious transactions under applicable AML regulations.
• Professional Advisers: Legal, accounting, and auditing professionals engaged by mmc966 on a confidential basis, to the extent necessary for the provision of their services.
• Business Successors: In the event of a merger, acquisition, or sale of all or a substantial portion of mmc966's assets, Member data may be transferred to the successor entity, subject to equivalent privacy protections.

All third-party data processors engaged by mmc966 are bound by written data processing agreements that prohibit them from processing Member data for any purpose other than those specified by mmc966, and that require them to maintain appropriate technical and organisational security measures.

Cookies & Tracking Technologies

7.1 What Are Cookies. Cookies are small text files placed on your device by the mmc966 Platform when you access the website. They enable the Platform to recognise your device, maintain your login session, and remember your preferences between visits.

7.2 Types of Cookies We Use. mmc966 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function correctly, including session authentication, security tokens, and load balancing. These cannot be disabled without preventing use of the Platform.
• Functional Cookies: Used to remember your preferences, such as language settings, responsible gambling tool configurations, and display preferences, so that you do not need to re-enter them on every visit.
• Analytical Cookies: Used to collect anonymised data about how Members use the Platform — pages visited, session duration, and navigation paths — to help us identify areas for improvement.

7.3 Managing Cookies. You may manage or disable cookies through your browser settings. Please note that disabling cookies may impair the functionality of the mmc966 Platform, including preventing you from staying logged in or accessing certain features. Instructions for managing cookies are available through your browser's help documentation.

mmc966 does not use cookies to build advertising profiles or to track Members across third-party websites.

Data Retention

mmc966 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law or regulation. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of the Member relationship and for a minimum of five (5) years following account closure, in compliance with AML and gaming regulatory obligations.
• Transaction and Financial Data: Retained for a minimum of seven (7) years from the date of the transaction, as required by applicable financial record-keeping regulations.
• Gaming Activity Data: Retained for five (5) years from the date of the activity, subject to ongoing regulatory requirements and responsible gambling monitoring obligations.
• Communication and Support Data: Retained for three (3) years from the date of the last communication, unless the records are required for ongoing dispute resolution.
• Technical and Log Data: Retained for up to twelve (12) months, used for security monitoring, fraud detection, and platform performance analysis.

Where data is no longer required for its primary purpose and no legal retention obligation applies, mmc966 will securely delete or anonymise the data so that it can no longer be associated with any individual.

Data Security

mmc966 implements technical and organisational security measures proportionate to the nature and sensitivity of the personal data we hold. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between the Member's browser and our servers.
• Encryption of sensitive data at rest, including financial records and KYC documentation.
• Access controls restricting internal access to personal data on a strict need-to-know basis, with role-based permissions and multi-factor authentication for privileged access.
• Regular security audits, vulnerability assessments, and penetration testing carried out by qualified third-party security professionals.
• Incident response procedures to detect, contain, and remediate any data security breach in a timely manner, including notification procedures where required by applicable law.
• Staff training on data protection obligations and security hygiene.

Notwithstanding these measures, no online platform can guarantee absolute security. Members should also take steps to protect their own account security — including using a strong, unique password and keeping their login credentials confidential. mmc966 will never ask for your password through any channel.

Your Rights

Subject to applicable law, you hold the following rights in relation to the personal data that mmc966 processes about you. Requests to exercise these rights should be submitted to our support team and will be addressed within thirty (30) calendar days of receipt:

Children's Privacy

mmc966 operates a strict minimum age policy of 21 years for all Members. The Platform is not directed at, and does not knowingly collect personal data from, individuals under the age of 21.

If mmc966 becomes aware that personal data has been collected from a person who does not meet the minimum age requirement, we will take immediate steps to delete that data and close the associated account. Any funds deposited by an underage person will be handled in accordance with our Terms and Conditions and applicable regulatory requirements.

Parents and guardians who believe that a minor may have registered an account with mmc966 are encouraged to contact our support team immediately so that the matter can be investigated and resolved without delay.

International Data Transfers

In the course of delivering its services, mmc966 may transfer personal data to third-party service providers and technology partners located in jurisdictions outside Malaysia. Such transfers may occur where, for example, our game software providers, payment processing partners, or cloud infrastructure providers operate server infrastructure in other countries.

Where personal data is transferred internationally, mmc966 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that which applies in the originating jurisdiction. These safeguards may include contractual data transfer clauses, adequacy decisions, or binding corporate rules, as applicable.

By registering an account with mmc966 and using the Platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Malaysia, subject to the protections described in this Section.

Amendments to This Policy

mmc966 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or the structure of the Platform. The most current version of this Policy will always be available on this page, identified by the "Last Updated" date displayed at the top of the document.

Where changes are material — meaning they significantly affect how your personal data is collected or used — mmc966 will endeavour to notify registered Members via the email address associated with their Account prior to the changes taking effect, allowing a reasonable period to review the updated Policy.

Your continued use of the mmc966 Platform following any update to this Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you should cease using the Platform and contact us to request account closure in accordance with our Terms and Conditions.

Contact Us

If you have any questions, concerns, or formal requests relating to this Privacy Policy or the manner in which mmc966 processes your personal data, please contact our Data Protection team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week through the mmc966 website. Our support team covers players from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across Malaysia.
• Acknowledgement: All privacy-related requests will be acknowledged within five (5) business days of receipt.
• Resolution: Requests to exercise data rights will be addressed within thirty (30) calendar days. Where a request is complex or where a large number of requests have been received simultaneously, this period may be extended by a further two months, with notification provided.

For general account enquiries, gaming-related questions, or responsible gambling support, please visit the relevant sections of the mmc966 website. Links to our Terms & Conditions and Responsible Gambling pages are available in the navigation menu.