mu33 Official Documents

Mu33 Privacy Policy – Data Protection for Malaysian Members

Mu33 takes your privacy seriously. This page clearly explains how we collect, use, store, and protect the personal data of every member using the mu33 platform in Malaysia.

Updated: 1 January 2026 English (en-MY) 256-bit SSL
SSL Protected Data

All personal data and transactions are encrypted with 256-bit SSL encryption — the same standard used by Malaysian banks.

No Data Sales

Mu33 does not sell, rent, or share member data with third parties without your explicit consent.

Right of Access & Rectification

You may request a copy, correction, or deletion of your personal data through mu33's official support channels.

Legal Compliance

This policy complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and all relevant regulatory requirements.

Mu33's Six Data Protection Principles

This is the foundation of mu33's approach to privacy — the values that guide how we handle every piece of your information.

Full Transparency

Mu33 is clear about what data is collected, for what purpose, and who has access to it. There is no hidden data collection or undisclosed purpose. You always know what is happening with your information on the mu33 platform.

Minimum Collection

Mu33 only collects data that is genuinely necessary to provide services, process transactions, and comply with applicable laws. We do not collect information that is excessive or irrelevant to the operation of the mu33 platform in Malaysia.

Multi-Layered Security

Your data is protected with 256-bit SSL encryption, strict internal access controls, and periodic security audits conducted by independent third parties. Only staff who require access to perform their job functions are permitted to view mu33 member data.

Control in Your Hands

Mu33 members have the right to access, amend, transfer, and request the deletion of their personal data. Such requests are processed within 14 business days through mu33's official support channels at no charge.

Malaysia PDPA Compliance

All of mu33's data handling practices comply with Malaysia's Personal Data Protection Act 2010 (PDPA). This means you have clear legal protections in place and may lodge a complaint with the Personal Data Protection Commissioner if the need arises.

Time-Limited Retention

Mu33 does not retain data longer than necessary. Operational data is deleted once it is no longer relevant. Transaction data is retained for the period required under Malaysia's AML legislation, after which it is securely deleted from our systems.

Important Note: By registering for or using the mu33 platform, you consent to the collection and use of your information as described in this Privacy Policy. Please read the full document carefully.

1. Introduction and Scope of This Policy

This Privacy Policy describes how mu33 — the online casino platform accessible at https://mu33.xyz — collects, uses, discloses, and protects the personal information of members who register and use our services in Malaysia. This Policy applies to all your interactions with mu33, including account registration, deposits and withdrawals, gaming activity, use of the mobile app, and communications with our customer support team.

Mu33 acts as the data controller for personal information collected from members. This means mu33 is responsible for how your data is processed and protected across all our internal systems and processes. In certain cases, mu33 acts as a data processor under the direction of licensed third-party service providers — in all such situations, appropriate data protection agreements are in place.

Legal Basis: The mu33 Privacy Policy is governed by Malaysia's Personal Data Protection Act 2010 (PDPA), which regulates how organisations collect and handle users' personal data in Malaysia. Compliance with the PDPA is a legal obligation that we take seriously.

By registering an account with mu33, you confirm that you are aged 21 and above, have read and understood this Privacy Policy, and give your consent to the processing of your personal data as described herein. If you disagree with any part of this Privacy Policy, please do not continue using the mu33 platform.

2. Personal Data We Collect

Mu33 collects several categories of personal data when you register and use our platform. We only collect information that is genuinely necessary for the purposes stated in this Privacy Policy.

Data Category Sample Information Primary Purpose
Personal Identity Full name, date of birth, MyKad/passport number Identity verification (KYC), AML compliance
Contact Information Email address, mobile number Account communications, two-factor authentication, support
Financial Data Bank account number, account holder name, RM transaction history Deposit & withdrawal processing, payment verification
Gaming Data Betting history, win/loss records, games played Account management, VIP programme, responsible gaming
Technical Data IP address, device type, web browser, session data Security, fraud detection, platform optimisation
Communication Data Live chat conversation records, support emails, feedback Service improvement, complaint reference, team training

In addition to data you provide directly, mu33 also collects data automatically through your use of the platform. This includes technical data such as IP address, web browser type and version, device used, session time and duration, pages visited, and actions taken within the platform. This automatically collected data is used primarily for security purposes, detection of suspicious activity, and improvement of mu33 platform functionality.

Mu33 does not collect sensitive data such as medical information, political views, religious beliefs, or biometric data unless specifically required by applicable regulations for identity verification purposes. Where the collection of sensitive data is necessary in particular circumstances, we will seek your explicit consent beforehand.

3. How mu33 Uses Your Data

Mu33 uses the personal data collected for the following purposes, each grounded in a valid legal basis under Malaysia's PDPA:

  • Service provision and management: Processing account registrations, verifying member identities, handling deposits and withdrawals in MYR via local payment methods such as Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX, as well as managing your account balance and gaming history.
  • Security and fraud prevention: Identifying and preventing unauthorised access, money laundering, identity fraud, multiple account usage, and any activity that violates mu33's Terms & Conditions.
  • Legal compliance: To fulfil obligations under anti-money laundering (AML) laws, KYC requirements, and directives from relevant Malaysian regulatory bodies or law enforcement authorities.
  • VIP Rewards Programme: Calculating and managing your VIP points, cashback, and mu33 loyalty programme benefits based on your gameplay activity.
  • Responsible Gaming: Monitoring usage patterns to identify potential gambling-related concerns and to enforce the self-limit tools you have configured in your account settings.
  • Communication and support: Sending important account-related notifications, responding to customer support enquiries, and communicating changes to our policies or terms.
  • Product improvement: Analysing usage patterns in aggregate (without identifying individuals) to improve the interface, functionality, and user experience of the mu33 platform.

Consent Basis: For direct marketing and promotional communications, mu33 relies on the consent provided at registration. You may withdraw this consent at any time via your account settings or by contacting our support team.

4. Data Sharing and Disclosure

Mu33 does not sell, rent, or share members' personal data with third parties for their own commercial purposes. However, in the normal course of operating the platform, mu33 may need to share data with the following categories of third parties:

  • Licensed payment providers: To process deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX — only the minimum data necessary to complete each transaction in MYR is shared.
  • Licensed game providers: Game developers that supply slots, live casino, and table games to mu33 may receive game session data for technical settlement and fairness audit purposes.
  • KYC service provider: A third-party identity verification service used to authenticate identity documents and meet AML requirements.
  • Infrastructure and cybersecurity providers: Server, CDN, and security services that support the technical operations of the mu33 platform — all subject to strict data protection agreements.
  • Regulatory bodies and law enforcement: mu33 is legally required to disclose data upon receipt of a court order, regulatory authority request, or in connection with a valid investigation into unlawful activity.

All third parties receiving mu33 member data are bound by data processing agreements that require them to protect such information to a standard at least equivalent to mu33's Privacy Policy. mu33 conducts regular audits to ensure third parties remain compliant with their data protection obligations.

5. Data Security Measures

Protecting mu33 member data is our highest technical and operational priority. We implement multiple layers of security to ensure your data is safeguarded against unauthorised access, accidental disclosure, or loss:

  • 256-bit SSL encryption: All communications between your device and mu33's servers are encrypted using the latest TLS protocols — no data is transmitted in plain text over the network.
  • Data-at-rest encryption: Sensitive data such as payment information and KYC documents are stored in encrypted databases even when not in use.
  • Role-based access control: Only mu33 staff who require data access to perform their job responsibilities are granted that access, and all access is logged and monitored.
  • Two-factor authentication (2FA): Available to all member accounts as an added layer of security. We encourage all mu33 members to enable 2FA in their account settings.
  • Real-time threat monitoring: mu33's cybersecurity systems monitor the platform around the clock to promptly detect and respond to any threats or suspicious activity.
  • Independent security audit: Security audits conducted by independent firms are carried out on a regular basis to identify vulnerabilities and ensure our systems meet the latest industry standards.

While mu33 takes all reasonable steps to protect your data, no system can be guaranteed 100% secure against every threat. In the event of a security breach affecting your data, mu33 is committed to notifying all affected members within 72 hours of confirming the incident, in accordance with Malaysia's PDPA requirements.

6. Data Retention Periods

Mu33 does not retain personal data for longer than is necessary for the purpose for which it was collected. Retention periods vary depending on the type of data and the relevant legal obligations:

Data Type Retention Period Reason
Active account data For the duration of the active account Ongoing operational requirements
Financial transaction records 7 years after transaction Malaysia AML legal requirements
KYC Documents 5 years after account closure PDPA & AML Compliance
Support communication logs 3 years Complaints reference & quality audits
Technical log data 90 days Fraud detection & system debugging
Marketing data (where consent has been given) Until consent is withdrawn Based on member consent

Once the designated retention period has lapsed, data will be securely deleted using methods that ensure it cannot be recovered. For data stored in backup formats, deletion may take slightly longer in line with standard backup cycle schedules.

7. Cookies and Tracking Technologies

Mu33 uses cookies and similar technologies to enhance the user experience, ensure security features work correctly, and analyse platform usage patterns. Below are the types of cookies used by mu33:

You can manage your cookie preferences through your web browser settings or via the mu33 cookie management panel, accessible from the platform footer. Please note that disabling essential cookies may affect the functionality of the mu33 platform.

8. Your Rights as a mu33 Member

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data mu33 holds about you:

01
Right of Access

Request a copy of the personal data mu33 holds about you, including account information, transaction history, and gameplay data.

02
Right of Rectification

Requesting the correction of any inaccurate or incomplete data — for example, a misspelled name or a phone number that needs updating.

03
Right to Erasure

Requesting the deletion of your personal data in certain circumstances, subject to applicable legal retention obligations under AML and PDPA.

04
Right to Restriction

Requesting that mu33 restrict the processing of your data under certain circumstances — for example, while you are disputing the accuracy of that data.

05
Right to Data Portability

Receive your personal data in a structured, machine-readable format for transfer to another platform, where this is technically feasible.

06
Right to Object

Objecting to the processing of your data for direct marketing purposes — you may do so at any time without giving a reason, and we are obligated to comply.

To exercise any of these rights, please contact the mu33 support team by email at support@mu33.xyz, specifying the right you wish to exercise along with sufficient information for us to verify your identity. Requests will be processed within 14 business days. If mu33 is unable to fulfil your request for legal reasons, we will provide a clear explanation.

9. Marketing and Promotional Communications

Mu33 sends marketing communications to members who have given their consent during registration. This includes information on new promotions, deposit bonuses, VIP offers, and mu33 platform updates that may be of interest based on your gaming preferences.

You may opt out of mu33 marketing communications at any time through the following methods:

  • Using the "Unsubscribe" link found at the bottom of every mu33 promotional email.
  • Adjusting your notification settings under the "Account Settings" section of the mu33 platform.
  • Contact the mu33 support team via live chat or email at support@mu33.xyz to request that all marketing communications be stopped.

Even if you opt out of marketing, mu33 will still send you essential account-related communications — such as security notifications, policy change notices, transaction confirmations, and withdrawal-related updates. These essential communications cannot be unsubscribed from, as they form part of the service we provide to you.

Mu33 also sends communications related to the VIP Rewards programme — such as tier upgrade notifications, birthday bonuses, and exclusive offers — which are considered part of the account service rather than general marketing. If you wish to stop all such communications, please contact mu33 customer support.

10. Cross-Border Data Transfers

In certain cases, mu33 members' personal data may need to be transferred to or processed by systems located outside Malaysia — for example, international server infrastructure supporting platform operations, or licensed game providers operating across multiple jurisdictions.

Mu33 ensures that all cross-border data transfers are protected through appropriate mechanisms, including:

  • Standard data transfer agreements that bind recipients to protection standards equivalent to those of Malaysia's PDPA.
  • Security assessments are conducted on all international data recipients before any transfer is authorised.
  • Limited to only the minimum data required for each transfer.

Verification: mu33 does not transfer Malaysian members' personal data to countries that do not provide an adequate level of data protection, unless appropriate safeguards are in place. A list of countries deemed to provide adequate protection is available upon request via the mu33 support email.

11. Children and Minors

The mu33 platform is strictly for individuals aged 21 and above. mu33 does not knowingly collect, store, or process personal data from individuals under the age of 21. Should mu33 discover that data has been collected from a minor, we will take immediate steps to delete that data and close the associated account.

If you believe a minor has registered for or is using the mu33 platform, please notify us immediately by email at support@mu33.xyz so we can take the appropriate action.

12. Amendments to This Privacy Policy

Mu33 reserves the right to update this Privacy Policy from time to time to reflect changes in our data handling practices, new legal requirements, or technological developments. Any material changes will be communicated to all active members via in-platform notifications and email to their registered address, at least seven days before the changes take effect.

The "Updated" date at the top of this page reflects when this Privacy Policy was last revised. Continued use of the mu33 platform after an amendment's effective date constitutes your acceptance of the revised policy. If you disagree with any amendment, you have the right to close your account and request a refund of any valid cash balance in accordance with the procedures set out in mu33's Terms & Conditions.

Policy Archive: All previous versions of the mu33 Privacy Policy are archived and available upon request via the support email. This allows members to compare changes between the current version and any earlier version if needed.

13. Contact Us for Privacy Enquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or how mu33 handles your personal data, we encourage you to reach out to us directly. We are committed to responding to all privacy enquiries thoroughly within a reasonable timeframe.

  • Privacy Email: support@mu33.xyz — include "Privacy Enquiry" in the subject line for priority processing.
  • Live Chat: The 24/7 live chat button available on every page of the mu33 platform — target response time under three minutes.
  • WhatsApp: mu33's official number as listed in the Contact Us section of our platform.

If you are not satisfied with our response to your privacy enquiry, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia, who is responsible for enforcing PDPA 2010. The Commissioner's contact details can be found on the official website of the Ministry of Communications and Digital Malaysia.

Mu33 Privacy FAQs

Answers to the questions Malaysian members ask most often about how mu33 handles their personal data.

No. mu33 does not sell, rent, or share member personal data with third-party advertising companies for their own commercial purposes. Your data is never used to build advertising profiles for sale to other parties. Any data sharing that occurs is limited to service providers that assist mu33 in running its operations — such as local Malaysian payment providers, licensed game providers, and technical infrastructure services — all of which are subject to strict data protection agreements.

To request a copy of your personal data, send an email to support@mu33.xyz with the subject line "Data Access Request" and include your registered full name and mu33 account number. Our team will verify your identity and process the request within 14 business days. You will receive your data in a readable format covering basic account information, transaction records in MYR, and gaming activity history. No fee is charged for the first data access request within any 12-month period.

After your mu33 account is closed, your personal data is not immediately deleted, as mu33 has legal obligations to retain certain records. Financial transaction records in MYR are kept for 7 years in accordance with Malaysia's anti-money laundering laws. KYC documents are retained for 5 years. This data is stored securely with strictly limited access and is not used for any marketing purpose. Once the mandatory retention period expires, data is permanently and securely deleted from all mu33 systems.

The right to erasure can be exercised under certain circumstances, but limitations apply. For active accounts, personal data required for account operation cannot be deleted without first closing the account. You may, however, request deletion of data that is no longer needed — such as old marketing communications or preference data. For transaction records and KYC, deletion cannot be carried out while the legally required retention period is still in effect. mu33 will assess each deletion request individually and provide a clear response outlining what can and cannot be deleted, along with the reasons.

mu33 retains deposit transaction records including the method used, amount in MYR, date, and processing status — but never sensitive digital wallet account information such as your password or PIN. Deposits made via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, or FPX are handled through each provider's own secure interface, and mu33 never receives or stores your digital wallet login credentials. Only the minimum information required for transaction verification and financial record-keeping is retained by mu33.

Your Data Is Safe with mu33

With 256-bit SSL protection, Malaysia PDPA compliance, and a firm no data sales commitment, mu33 is a platform you can trust. Register today and enjoy a safe, fair, and responsible online casino experience.

Privacy and Responsible Gaming at mu33

Privacy and responsible gaming are two pillars that go hand in hand in mu33's commitment to its Malaysian members. Your gaming activity data is used, among other things, to keep self-control tools functioning effectively — the deposit limits, loss limits, and time limits you set are data we protect and respect.

Mu33 will never use your gaming data to manipulate you into playing more or spending beyond your means. Data analysis is conducted solely to improve the platform and help you play smarter and more responsibly.

All mu33 members must be aged 21 and above. Gambling is entertainment — not a solution to financial problems. Read the mu33 Responsible Gaming Guide →

Bahasa Melayu