Privacy Policy

Privacy Policy mm38 — We Protect Your Data Like It's Our Own

Your privacy is our priority. This Privacy Policy clearly explains how mm38 collects, uses, stores, and protects your personal information when you use our online betting platform. We are committed to managing your data responsibly and transparently.

Updated: January 2026 Applicable: Malaysia SSL 256-bit
Our Privacy Commitment

Six Promises Data Protection mm38 to You

We don't just write a privacy policy to tick a box. Everything below reflects practices we actively carry out every day to protect your personal data.

256-bit SSL Encryption

All data transmitted between your device and mm38 servers is protected with 256-bit SSL encryption — the same technology used by leading banking institutions in Malaysia. No third party can intercept or read your data in transit.

Secure Data Storage

Your personal data is stored on servers protected by multi-layered firewalls and strict access control systems. Only authorised personnel who require access for legitimate operational purposes are permitted to view user information.

No Data Sales

Mm38 has never and will never sell, rent, or transfer your personal data to third parties for marketing or commercial purposes. Your data belongs to you — we only use it for the purposes stated in this policy.

Responsible KYC

Mm38's identity verification (KYC) process is designed to protect you from fraud and money laundering. Documents you submit are stored securely and used solely for account verification purposes.

Notification Controls

You have full control over marketing notifications and communications from mm38. You can opt out of promotional emails at any time through your account settings, with no hassle.

Transparent & Clear

We wrote this Privacy Policy in plain, easy-to-understand language — not confusing legalese. We want you to truly understand what happens with your data, not just click "Agree" without knowing what you're consenting to.

1 Personal Information We Collect

Mm38 collects your personal information when you interact with our platform. The type of information collected depends on how you use our services. The following are the categories of information we collect:

Data Category Examples of Information Purpose of Collection
Identity Information Full name, date of birth, identification card number Account registration & KYC
Contact Information Email address, phone number Communication & account security
Financial Information Bank account number, bank name, payment method Deposit & withdrawal processing
Technical Data IP address, device type, web browser, operating system Security & fraud prevention
Usage Data Gaming history, wagering habits, login times Service improvement & responsible gaming

We also automatically collect information when you visit the mm38 website or use the mm38 app — including cookie data, server logs, and device information. All such data collection is necessary to ensure the platform operates securely and efficiently.

We do not collect sensitive information such as biometric data, religious beliefs, or medical information unless there is a specific requirement agreed upon separately.

2 How We Use Your Data

Mm38 uses collected personal information solely for legitimate and reasonable purposes. We do not use your data for unrelated purposes without your prior consent. The following are the primary purposes for which data is used:

  • Account management: Creating, verifying, and maintaining your user account securely.
  • Transaction processing: Processing deposits, withdrawals, and all financial activity within your account.
  • Identity verification (KYC): Verifying your identity to meet security requirements and prevent fraud.
  • Customer support: Responding to enquiries, resolving complaints, and providing the technical assistance you need.
  • Platform communications: Sending important notifications related to your account, security, and service updates.
  • Marketing (with consent): Sending promotional information, bonuses, and special offers — only if you have consented to receive them.
  • Fraud prevention: Detecting and preventing fraudulent activity, money laundering, and platform abuse.
  • Responsible gaming: Monitoring wagering habits to identify users who may need support.
  • Service improvement: Analysing usage patterns to improve the overall user experience.

Every use of your data is grounded in a solid legal basis — whether for the performance of a contract with you, compliance with legal obligations, our legitimate interests, or explicit consent you have provided.

3 Sharing Information With Third Parties

Mm38 does not sell your personal data to anyone. However, in certain limited situations, we may need to share some of your information with selected third parties. This includes:

  • Payment providers: Information required to process your deposits and withdrawals via FPX, DuitNow, TNG eWallet, and other supported payment methods.
  • Game software providers: Technical data required to run games correctly and ensure fair play.
  • Support service providers: Information needed to enable our customer support team to assist you effectively.
  • Lawful authorities: When required by law or a valid court order, we will disclose the necessary information to law enforcement agencies.
  • Anti-fraud services: Technical data required for the third-party fraud detection and prevention systems we use.
All third parties we work with are bound by strict data protection agreements and must comply with privacy standards equal to or higher than our own policy.

We ensure that every third party receiving your data uses it solely for agreed purposes and does not permit them to share that data further without our authorisation.

4 Data Security Measures

Your data security is mm38's highest priority. We continuously invest in security infrastructure to ensure your information remains protected at all times. Key security measures we have implemented:

  • 256-bit SSL encryption: All communications between your browser and mm38 servers are encrypted using the latest TLS protocol.
  • Database-level data encryption: Sensitive data such as financial information and passwords is stored in encrypted form — even in the event of a breach, the data cannot be read.
  • Two-factor authentication (2FA): mm38 supports two-factor authentication for an added layer of security during login.
  • 24/7 security monitoring: Our systems are monitored around the clock to detect any suspicious activity or intrusion attempts.
  • Internal access controls: Internal access to user data is strictly limited on a "need-to-know" basis only.
  • Regular security audits: mm38 conducts regular security audits and penetration testing by independent third parties.

While we take all reasonable steps to protect your data, no system can guarantee absolute security. In the rare event of a data breach, we will notify affected users in a timely manner and take immediate action to limit the impact of the breach.

5 Cookies & Tracking Technologies

Mm38 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

  • Essential cookies: Required for core platform functions such as maintaining login sessions and security settings. These cookies cannot be disabled.
  • Performance cookies: Helping us understand how users interact with the platform — for example, the most frequently visited pages and time spent in each section.
  • Functionality cookies: Saving your preferences such as language, display settings, and other options to make your next visit more convenient.
  • Analytics cookies: Used to analyse platform traffic and usage patterns for continuous improvement purposes.
You can manage or delete cookies through your web browser settings at any time. However, disabling essential cookies may affect platform functionality.

We do not use third-party cookies for targeted advertising without your consent. Any tracking technologies we use are solely to improve mm38's services for you.

6 Your Rights Regarding Personal Data

As an mm38 user, you have the following rights regarding your personal data. We respect and facilitate the exercise of these rights:

Right of Access

You have the right to request a copy of the personal data we hold about you at any time.

Right to Rectification

You may request corrections to any inaccurate or incomplete information in your profile.

Right to Erasure

You may request the deletion of your personal data, subject to applicable legal retention obligations.

Right to Object

You have the right to object to the processing of your data for direct marketing purposes at any time.

Right to Portability

You may request your data in a machine-readable format for transfer to another service.

Right to Restriction

You may request a restriction on the processing of your data in certain situations while a dispute is pending resolution.

To submit any request related to the rights above, please contact the mm38 support team via Live Chat, available 24/7. We will process your request within a reasonable timeframe and notify you of the outcome.

7 Data Retention & Deletion

Mm38 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal obligations. Our data retention guidelines are as follows:

  • Active account data: Retained for the duration your account is active and for a prescribed period after account closure for legal compliance purposes.
  • Financial transaction records: Retained for a minimum of seven years in accordance with Malaysian financial regulatory requirements.
  • KYC Data: Retained for the period required by applicable anti-money laundering regulations.
  • Support communication logs: Retained for three years for reference and dispute resolution purposes.
  • Technical data & server logs: Retained for 90 days for security and fraud detection purposes.

When data is no longer needed and there is no legal obligation to retain it, mm38 will securely delete or anonymise that data using methods that comply with industry security standards.

If you close your mm38 account, your personal data will be processed in accordance with the retention guidelines above and will not be used for marketing purposes after account closure.

8 Privacy Policy Amendments & Contact Us

Mm38 reserves the right to review and update this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or service improvements. Any material changes will be communicated to you via a notice on the platform or your registered email before the changes take effect.

The latest version of this Privacy Policy will always be available on this page with a clear update date. We encourage you to review this page periodically. Continued use of the mm38 platform following any amendments constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, we encourage you to contact us via:

  • Live Chat 24/7: The fastest way to get an immediate response from our team.
  • Email: [email protected] — we aim to respond to all emails within 24 business hours.
  • FAQ page: Visit FAQ page us for answers to common privacy questions.
This Privacy Policy was last updated on January 2026. By continuing to use the mm38 platform, you confirm that you have read and understood this Privacy Policy.

Your Data is Safe. Your Game is Secured.

Join mm38 today and enjoy a safe, trusted, and exciting online wagering experience. Your privacy is our priority from day one.

Bahasa Melayu