mmc996 Privacy Policy

1. About This Policy

This Privacy Policy ("Policy") describes how mmc996 ("we", "us", "our", or "the Platform") collects, processes, stores, and protects personal data relating to users ("you", "User") of the mmc996 online gaming platform accessible at mmc996.co and its associated mobile applications.

mmc996 is committed to handling personal data responsibly and in compliance with applicable data protection principles. This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated herein by reference.

By registering an account or continuing to use the mmc996 Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

2. Data Controller

For the purposes of this Policy, mmc996 acts as the data controller in respect of all personal data collected through the Platform. As data controller, mmc996 determines the purposes and means of processing personal data submitted by Users.

Queries regarding data controllership, data processing agreements, or this Policy generally may be directed to our support team at the contact details set out in Section 14 of this document.

3. Data We Collect

mmc996 collects the following categories of personal data in the course of providing the Platform and associated services:

mmc996 does not intentionally collect sensitive personal data (such as health data or biometric data beyond facial ID used for optional biometric login features, which are processed only on-device and not transmitted to mmc996 servers).

4. How We Use Your Data

mmc996 uses personal data for the following purposes:

• To create and manage your mmc996 account and verify your identity and eligibility to use the Platform.
• To process deposits and withdrawals in MYR and maintain accurate financial records in respect of your account balance.
• To provide customer support and respond to your enquiries via live chat or email.
• To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• To comply with legal and regulatory obligations, including anti-money laundering (AML) requirements and requirements imposed by international gaming authorities under whose licensing conditions the Platform operates.
• To send transactional communications (account activity notifications, withdrawal confirmations, security alerts).
• To send promotional communications where you have opted in to marketing at registration or subsequently via your account preferences.
• To analyse Platform usage patterns and improve the quality, security, and performance of mmc996 services.
• To enforce responsible gaming measures including the application of deposit limits, session restrictions, and self-exclusion as described in our Responsible Gaming Policy.

5. Legal Basis for Processing

mmc996 processes personal data on the following legal bases:

• Contract performance: Processing is necessary to fulfil our contractual obligations to you under the Terms & Conditions, including account management, transaction processing, and support.
• Legal obligation: Processing is required to comply with applicable legal and regulatory requirements, including AML obligations and licensing conditions imposed by gaming authorities.
• Legitimate interests: Processing is necessary for the legitimate interests of mmc996, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your data protection rights.
• Consent: Where processing is not otherwise justified on the above bases — for example, in respect of marketing communications — mmc996 relies on your freely given, specific, and informed consent, which you may withdraw at any time.

6. Sharing Your Data

mmc996 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Data is shared with third parties only in the following circumstances:

• Payment processors: Financial data is shared with payment service providers (including Touch 'n Go, Boost, and Malaysian banking institutions) solely to facilitate deposits and withdrawals.
• Game providers: Certain usage data (such as session tokens) is shared with licensed game providers for the purpose of delivering their games within the mmc996 Platform.
• KYC / identity verification providers: Identity and document data is shared with specialist third-party verification services for age and identity verification purposes.
• Regulatory and law enforcement authorities: mmc996 will disclose personal data to regulators, law enforcement, or gaming authorities where required by law, a court order, or a valid regulatory notice.
• Fraud prevention services: Technical and identity data may be shared with fraud detection and anti-money laundering service providers for the purposes of platform integrity.

All third-party processors engaged by mmc996 are required to handle personal data in accordance with applicable data protection standards and are bound by appropriate data processing agreements.

7. International Data Transfers

The mmc996 platform and some of its service providers operate across multiple jurisdictions. As a result, your personal data may be transferred to and processed in countries outside Malaysia. Where such transfers occur, mmc996 takes appropriate measures to ensure that the data receives a level of protection equivalent to that provided under applicable data protection law, including through the use of data processing agreements containing recognised transfer mechanisms.

8. Data Retention

mmc996 retains personal data only for as long as necessary for the purposes set out in this Policy, subject to any longer retention periods required by applicable law or regulatory obligation. In practice:

• Account data is retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in accordance with AML and gaming regulatory requirements.
• Financial transaction records are retained for a minimum of five (5) years from the date of the transaction.
• Support communications are retained for a minimum of two (2) years from the date of the interaction.
• Technical and usage logs are retained for up to twelve (12) months, unless a longer period is required for an ongoing investigation or legal proceeding.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

9. Security Measures

mmc996 implements technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the mmc996 Platform.
• Encryption of sensitive data fields at rest within mmc996 databases.
• Role-based access controls limiting internal access to personal data to authorised personnel only.
• Regular internal security reviews and periodic third-party penetration testing.
• Automated anomaly detection systems monitoring for suspicious access patterns or data exfiltration attempts.

While mmc996 takes all reasonable precautions, no online system can be guaranteed to be completely secure. You are encouraged to use a strong, unique password for your mmc996 account and to enable two-factor authentication where available.

10. Cookies & Similar Technologies

mmc996 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help the Platform function correctly and improve your experience.

• Strictly necessary cookies: Required for core Platform functions including login session management, security, and MYR wallet operations. These cannot be disabled without impairing Platform functionality.
• Analytics cookies: Used to collect aggregated, anonymised data on how users interact with the Platform, helping mmc996 identify and fix performance issues. These are optional.
• Preference cookies: Used to remember your account preferences such as language settings and game lobby configuration.

You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to use the Platform.

11. Your Data Rights

Subject to applicable law and the legal bases on which mmc996 processes your data, you have the following rights in respect of your personal data:

• Right of access: You may request a copy of the personal data mmc996 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to restrict processing: You may request that mmc996 restrict the processing of your data in certain circumstances.
• Right to data portability: Where processing is based on consent or contract, you may request a copy of your data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact the mmc996 support team using the details in Section 14. mmc996 will respond to verified requests within thirty (30) days. Identity verification may be required before processing a request.

12. Children & Minors

The mmc996 Platform is strictly an adult service. No person under the age of 21 is permitted to register an account or use the Platform in any capacity. mmc996 does not knowingly collect personal data from individuals under 21. Where mmc996 identifies or has reasonable grounds to believe that a User is under 21, the account will be immediately suspended, all funds will be returned to the funding source pending verification, and all associated personal data will be securely deleted.

If you believe that an underage individual has registered on the Platform, please contact us immediately via live chat or at [email protected].

13. Changes to This Policy

mmc996 reserves the right to update or amend this Privacy Policy at any time. Where a material change is made, mmc996 will use reasonable efforts to notify registered Users via the email address registered to their account or via an in-Platform notification prior to the change taking effect.

The date of the most recent revision is displayed at the top of this page. Continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by mmc996, please contact us using the following details:

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week, via the mmc996 Platform.

mmc996 aims to acknowledge all data-related enquiries within two (2) business days and to resolve them within thirty (30) days of receipt.