Mm98 Privacy Policy – Personal Data Protection Commitment to Malaysian Members

This Privacy Policy is published by mm98 ("we," "the mm98 platform," or "mm98-jit.com") and applies to all users and members who access or use the mm98-jit.com website and related mobile applications. This document sets out in detail the personal data collection, use, storage, and protection practices we follow as part of our commitment to every member's privacy.

Mm98 understands that trust is the foundation of our relationship with every member. When you deposit MYR 50 via Touch 'n Go eWallet to play Live Casino or place a bet on an EPL football match on our platform, you are entrusting mm98 with your financial and personal information. We take that trust seriously, and this Privacy Policy is our written commitment to that responsibility.

By accessing or using the mm98 platform, you confirm that you have read and understood this Privacy Policy and agree to how we handle your personal data as described herein. If you disagree with any aspect of this Privacy Policy, please discontinue use of the mm98 platform and contact our support team for assistance.

Mm98 collects your personal data through several means — information you provide directly during registration or platform use, information collected automatically while you use the platform, and in certain circumstances, information from permitted third-party sources. Below is a detailed breakdown of the types of data we collect:

For financial transactions, mm98 does not directly store your full e-wallet account numbers or internet banking details in our systems. All sensitive financial information is handled by licensed third-party payment processing providers that comply with recognised industry security standards. mm98 retains only transaction references and the information necessary for accounting records and verification purposes.

Mm98 uses collected personal data solely for legitimate purposes directly relevant to the provision of our platform services. We will not use your data for any unrelated purpose without first obtaining your explicit consent. The primary purposes for which data is used are as follows:

• Account Management: Creating and maintaining your mm98 account, processing registration, verifying identity, and enabling you to log in and access all platform features.
• Transaction Processing: Processes deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u (FPX), and CIMB Clicks (FPX), and handles withdrawals to your account.
• Gaming Services Provision: Enables you to access and enjoy all mm98 products, including Live Casino, Sports Betting (EPL football, Malaysia Super League, cricket, badminton, e-sports), slots, poker, and blackjack.
• Bonus & Promotion Management: Calculating and crediting welcome bonuses and other promotions, tracking rollover progress, and ensuring compliance with promotional terms.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, duplicate accounts, money laundering, and any activity that violates mm98's Terms & Conditions.
• Customer Support: This enables the mm98 support team to provide accurate and relevant assistance when you contact us via live chat, email, or WhatsApp.
• Responsible Gaming: Monitoring gameplay patterns to identify members who may need responsible gaming support and to enforce self-imposed control limits set by the member.
• Platform Improvements: Analyzes aggregated (not individual) usage patterns to improve mm98's platform interface, performance, and features.
• Legal Compliance: Fulfilling applicable legal and regulatory obligations, including the PDPA 2010, anti-money laundering regulations, and directives from relevant authorities.

Mm98 does not use your personal data to make automated decisions that materially affect you without appropriate human involvement — except where this is necessary for platform security and fraud prevention, and even then, a review mechanism by mm98 staff is always available.

Mm98 takes a highly cautious and limited approach to sharing members' personal data. We do not sell, rent, or trade your personal data to third parties for their own marketing purposes under any circumstances. Data sharing only occurs in the following limited situations:

• Operational Service Providers: Payment processing providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX), cloud computing service providers, fraud detection systems, and customer support service providers working under contract on behalf of mm98. All these parties are bound by strict data confidentiality agreements and may only process your data in accordance with mm98's instructions.
• Legal Compliance: To Malaysian government authorities, regulatory bodies, or courts where mm98 is legally required to do so. mm98 will endeavour to notify you of any such request where permitted by law.
• Business Transfers: In the event of a merger, acquisition, or sale of mm98's assets, members' personal data may be transferred as part of the business assets. Members will be notified in advance and your rights under the PDPA will be upheld.
• With Your Consent: In any other circumstances not described above, mm98 will only share your data with your explicit prior consent.

Mm98 continuously invests in security technology and procedures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. The key security measures we have in place are as follows:

• Data Encryption in Transit: All communications between your device and mm98's servers are secured using TLS 1.3 protocol with 256-bit encryption — data in transit cannot be read by any third party.
• Encryption of Data at Rest: Sensitive data stored in mm98's databases — including passwords and authentication information — is stored in encrypted form using strong hashing algorithms and cannot be recovered, even by mm98 staff.
• Internal Access Controls: Access to members' personal data within mm98's internal systems is restricted on a need-to-know basis — only staff who require access to carry out their duties are granted it, and all access is logged and monitored.
• Continuous Security Monitoring: Automated monitoring systems operate around the clock to detect unusual activity, unauthorised access attempts, and emerging security threats against the mm98 platform.
• Regular Security Testing: mm98 conducts regular penetration testing and security audits by independent third parties to identify and address any security vulnerabilities.
• Two-Factor Authentication (2FA): Two-factor authentication is available for all mm98 accounts and is strongly recommended as an added layer of security, particularly for members who carry out high-value transactions.

While mm98 takes comprehensive security measures, it is important to note that no online security system can guarantee absolute 100% protection. You also play a vital role in keeping your account secure — use a strong and unique password, never share your login credentials, and enable 2FA where available.

The mm98 platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how members use our platform. Below is an explanation of how we use these technologies:

• Essential Cookies (Required): These cookies are required for the mm98 platform to function properly. They include session authentication cookies that keep you logged in while using the platform, and security cookies that help detect fraudulent activity. These cookies cannot be disabled without affecting the platform's core functionality.
• Performance & Analytics Cookies: mm98 uses web analytics services to understand how members interact with the platform — which pages are visited most frequently, time spent in each section, and navigation patterns. This data is collected in aggregate form and used to improve the platform's design and performance.
• Preference Cookies: These cookies store your preferences — such as your selected language, display settings, and other interface preferences — so you do not need to reconfigure them each time you use the mm98 platform.

You can manage your cookie preferences through your web browser settings. Please note that blocking or deleting essential cookies may affect the functionality of the mm98 platform and your gaming experience. For more information on managing cookies in your browser, please refer to the help documentation for the browser you are using.

As a data subject under Malaysia's PDPA 2010, you have legally protected rights regarding your personal data held by mm98. Below are your rights and how to exercise them:

Mm98 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable Malaysian law. Retention periods vary by data type:

• Active Account Data: For as long as your mm98 account remains active, your basic profile data is retained to enable continued use of the platform.
• Financial Transaction Records: Deposit and withdrawal transaction records (including the use of Touch 'n Go eWallet, GrabPay, DuitNow, and FPX) are retained for a minimum of 7 years in line with Malaysian accounting and anti-money laundering legal requirements.
• Game Records: Game logs and betting history are retained for a minimum of 90 days for dispute resolution purposes, and for up to 7 years in archived format for audit compliance.
• Support Communication Data: Customer support interaction records (live chat, email, WhatsApp) are retained for 2 years after the last interaction for quality control and reference purposes.
• Data Following Account Closure: Upon account closure, mm98 archives your personal data in anonymised form or retains the minimum data required by law, and deletes all other data within 30 days of the account closure date.

When data is no longer needed and there is no legal requirement to retain it, mm98 deletes or anonymises that data using secure deletion procedures that ensure it cannot be recovered or exploited.

The mm98 platform is strictly for adults aged 18 and above. mm98 does not knowingly collect or process personal data from children or individuals below the minimum age requirement. All new account applicants are required to confirm that they are 18 years of age or older, and mm98 conducts age verification checks as part of our KYC process.

Should mm98 become aware that personal data has been inadvertently collected from individuals under the age of 18, we will take immediate steps to delete that data and close the account in question. Parents or guardians who believe their child has registered an mm98 account without authorisation are urged to contact our support team immediately at support@mm98-jit.com.

Mm98 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or improvements to how we protect members' data. The latest version of the Privacy Policy will always be available on this page, with the most recent update date clearly displayed.

For changes deemed material — such as changes to how we use or share your data that may significantly affect your privacy rights — mm98 will provide at least 14 days' prior notice via account notification or email to your registered address. You are encouraged to review this Privacy Policy periodically, particularly after receiving any notice of changes from mm98.

Your continued use of the mm98 platform after any changes to the Privacy Policy have been published or come into effect will be considered your acceptance of the updated version. If you do not agree with the changes made, please contact mm98's support team to discuss your options, including account closure if you choose to proceed.

For any inquiries, concerns, or complaints regarding this Privacy Policy or how mm98 handles your personal data, you may reach us through the following channels. mm98's privacy and data protection team is committed to providing a helpful response within the stated timeframe.