Privacy Policy

This Privacy Policy ("Policy") sets out the data practices of mu33 ("mu33", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at mu33.cam. This Policy applies to all personal data collected through your use of the Platform, including when you register an account, make a deposit or withdrawal, place a wager, interact with our customer support team, or browse our website.

mu33 serves players across Malaysia, including those located in Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam, and beyond. We handle personal data responsibly and in accordance with applicable data protection principles, including those reflected in Malaysia's Personal Data Protection Act 2010 (PDPA) where relevant to our operations.

By registering an Account on the mu33 Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection, processing, and use of your personal data as described herein. If you do not agree with the practices described in this Policy, you should discontinue use of the Platform and contact us to close your Account.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and device identifiers.
• "Processing" — any operation or set of operations performed on personal data, whether or not by automated means, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Subject" — the natural person to whom personal data relates; in this context, a registered or prospective Player on the mu33 Platform.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. mu33 acts as the Data Controller in respect of Player data collected through the Platform.
• "Data Processor" — a third party that processes personal data on behalf of mu33, such as payment service providers or KYC verification partners.
• "Cookies" — small text files placed on a user's device by a website to store session information, preferences, and usage data.
• "KYC" — Know Your Customer: the identity and age verification process required to activate full Platform functionality and process withdrawal requests.

mu33 is the Data Controller for all personal data collected through the Platform. As Data Controller, mu33 is responsible for determining the lawful basis for processing your personal data and for ensuring that appropriate technical and organisational safeguards are in place to protect it.

If you have questions or concerns about how mu33 processes your personal data, or if you wish to exercise any of your rights as a Data Subject, please contact us using the details provided in Section 15 of this Policy.

mu33 collects personal data from you directly (when you provide it), automatically (through your use of the Platform), and from third parties (such as payment providers and KYC verification services). The categories of personal data we collect are described in the table below.

mu33 does not intentionally collect special categories of sensitive personal data (such as racial or ethnic origin, health data, or biometric data) except where required to comply with applicable legal or regulatory obligations.

mu33 processes your personal data on one or more of the following lawful bases, depending on the specific processing activity:

• Contractual Necessity: Processing is necessary for the performance of a contract with you — specifically, the Terms & Conditions governing your Account. This includes processing required to register your Account, verify your identity, process deposits and withdrawals, and provide the gaming services you have requested.
• Legal Obligation: Processing is necessary for compliance with a legal obligation to which mu33 is subject. This includes our obligations in relation to KYC verification, anti-money laundering (AML) checks, and responsible gambling requirements.
• Legitimate Interests: Processing is necessary for the purposes of the legitimate interests pursued by mu33, provided those interests are not overridden by your rights and interests. This includes fraud prevention, platform security, and improvement of our services.
• Consent: Where we rely on your consent as the legal basis for processing — for example, for sending promotional communications — you may withdraw that consent at any time by contacting our support team.

mu33 uses your personal data for the following specific purposes:

• Account Management: To create, maintain, and manage your Account, including processing registration information, verifying your identity and age, and ensuring Account security.
• Payment Processing: To facilitate deposits and withdrawals via FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency channels. Your financial data is shared with the relevant payment service provider solely to execute the specific transaction you have authorised.
• KYC & Regulatory Compliance: To verify your identity and age in accordance with our legal and regulatory obligations, and to conduct AML screening where required.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance through our live chat, WhatsApp, and email channels in Bahasa Melayu, 中文, and English.
• Responsible Gambling: To monitor gambling patterns, enforce deposit limits and self-exclusion requests, and to identify players who may be exhibiting signs of problem gambling behaviour.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, unauthorised Account access, and other illegal or prohibited activities on the Platform.
• Platform Improvement: To analyse usage patterns and technical data to improve the performance, functionality, and user experience of the mu33 Platform.
• Promotional Communications: With your consent, to send you information about promotions, bonuses, new games, and other offers relevant to your Account. You may opt out of marketing communications at any time by contacting support or adjusting your Account preferences.

mu33 does not sell your personal data. We share your information only in the limited circumstances described below:

• Payment Service Providers: We share financial data with payment processors necessary to complete your transactions, including FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency network operators. These parties process your data strictly for the purpose of executing your authorised payment.
• KYC & Identity Verification Providers: We may share identity documents and personal details with accredited third-party KYC verification services for the purpose of confirming your identity and age. These providers are contractually bound to handle your data securely and only for the specified verification purpose.
• Game Software Providers: Transaction and gameplay data may be shared with game software licensors for auditing, fairness verification, and technical support purposes.
• Legal & Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by law, court order, or in connection with the investigation of suspected illegal activity.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of our assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any changes to this Policy that may result.

The mu33 Platform uses cookies and similar tracking technologies to operate the website, remember your preferences, and analyse usage patterns. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Used to remember your preferences, language settings, and display options to provide a personalised experience on your return visits.
• Analytics Cookies: Used to collect aggregated and anonymised data about how visitors use the Platform, including pages visited, session duration, and navigation paths. This data is used to improve Platform performance and user experience.
• Security Cookies: Used to detect and prevent fraudulent account activity, including unusual login patterns and suspicious transaction behaviour.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair the functionality of the Platform, including login and payment processing.

mu33 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements. The following general retention periods apply:

• Account Data: Retained for the duration of your Account's active status, plus a minimum of five (5) years following Account closure to comply with applicable AML and regulatory record-keeping obligations.
• Financial & Transaction Data: Retained for a minimum of seven (7) years from the date of the transaction in accordance with financial record-keeping requirements.
• KYC & Verification Documents: Retained for the duration of the Account relationship plus five (5) years following closure.
• Support Communications: Live chat transcripts and email correspondence are retained for up to two (2) years from the date of the interaction, or longer if the communication relates to an unresolved dispute or legal matter.
• Technical & Usage Data: Aggregated and anonymised analytics data may be retained indefinitely for platform improvement purposes. Individually identifiable technical data is retained for a maximum of twelve (12) months.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

mu33 employs a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security (TLS): All data transmitted between your browser and the Platform is encrypted using 256-bit TLS encryption, the same standard used by major Malaysian banking platforms including Maybank2u and CIMB Clicks.
• Data Encryption at Rest: Sensitive personal and financial data stored on our servers is encrypted using industry-standard encryption protocols.
• Access Controls: Access to personal data within mu33's systems is restricted on a strict need-to-know basis and is protected by multi-factor authentication for administrative accounts.
• Fraud Monitoring: Real-time automated monitoring systems scan for unusual account activity, suspicious login patterns, and abnormal transaction behaviour.
• Regular Security Reviews: Our systems and security procedures are subject to regular internal review and periodic third-party security assessments.

As a Data Subject, you have rights in relation to your personal data held by mu33. These rights are described below. To exercise any of these rights, please contact our support team using the details provided in Section 15. mu33 will respond to all valid rights requests within a reasonable timeframe and in any event within thirty (30) days of receipt.

The mu33 Platform is strictly intended for persons aged 21 years and above. mu33 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the KYC process at registration and at the time of withdrawal requests.

If mu33 becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the associated Account, delete the data collected from the minor as far as legally permissible, and return any deposited funds to the payment source (subject to verification of the payment method).

If you believe that a person under the age of 21 has registered an Account on the mu33 Platform, please contact our support team immediately at [email protected].

The mu33 Platform may contain references to third-party payment services, including FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and various cryptocurrency networks. When you interact with these services, you are subject to the privacy policies of the respective third-party providers. mu33 has no control over, and accepts no responsibility for, the privacy practices of any third-party service provider.

We recommend that you review the privacy policies of any third-party service through which you interact with the mu33 Platform, including the privacy policies of your chosen payment provider, before completing any transaction.

mu33 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we provide. Where amendments are material, we will notify registered Players via the email address associated with their Account and by displaying a notice on the Platform, at least seven (7) days before the amendment takes effect.

The "Last Updated" date at the top of this document indicates when the most recent amendments were made. We encourage you to review this Policy periodically to stay informed about how we protect your personal data. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated Policy.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to report a privacy concern, please contact the mu33 team through any of the following channels:

• Email: [email protected] — for formal written data requests, including access, correction, and deletion requests. Please include "Privacy Request" in the subject line.
• Live Chat: Available 24/7 on the Platform. Our support agents in Bahasa Melayu, 中文, and English can assist with general privacy enquiries and direct formal requests to the appropriate team.
• WhatsApp: For general privacy-related queries, our WhatsApp support team is available in Bahasa Melayu, 中文, and English. Contact details are provided within the Platform's Support section.

For Account-related matters including KYC document requests, deposit or withdrawal queries, and responsible gambling tools, please also refer to our FAQ page or our Terms & Conditions.