Mm3377 Privacy Policy – Data Protection & Information Security

Privacy Policy Introduction & Scope

This Privacy Policy is issued by mm3377 ("we", "the Company") to clearly and transparently explain how we handle personal data collected from users of the mm3377 platform at mm3377.win. This document applies to all registered members, website visitors, and anyone who interacts with our platform via the official website, mobile app, or customer support channels.

We understand that trust is the foundation of the relationship between mm3377 and every member. That is why we do not merely comply with existing laws — we go further by applying industry best practices to every aspect of data handling. This policy is written in plain language because we believe every member deserves to know exactly what happens to their information.

By registering or continuing to use the mm3377 platform, you acknowledge that you have read, understood, and agreed to this Privacy Policy. If you do not agree with any provision herein, you are advised to discontinue use of our platform and contact the support team to close your account.

Personal Data We Collect

Mm3377 collects personal data across various situations depending on how you interact with our platform. Below is a detailed breakdown of the data categories we collect:

A. Data You Provide Directly

• Registration information: Full name (as shown on official identification), date of birth, gender, phone number, email address, and encrypted password.
• Identity verification information (KYC): A copy of your identity card (MyKad), passport, or other valid ID document, a verification selfie, and proof of address if required.
• Banking details: Bank name, bank account number (for withdrawal purposes only), account holder name, and registered e-wallet details.
• Support communications: Records of conversations with our customer support team via live chat, email, or other channels.

B. Data Collected Automatically

• Technical data: IP address, device type, operating system, browser type and version, screen resolution, and language settings.
• Usage data: Pages visited, session duration, in-platform actions, games played, total bets placed, and activity timestamps.
• Location data: Approximate geographic location based on your IP address for compliance and fraud prevention purposes.
• Cookie data: Information collected through cookies, web beacons, and similar tracking technologies (see Section 09 for more details).

How We Use Your Personal Data

The data we collect is used solely for legitimate, stated purposes. mm3377 does not use your data for any purpose unrelated to the provision of our betting platform services.

If we intend to use your data for a new purpose not listed above, we will notify you in advance and obtain your consent where required by law.

Legal Basis for Data Processing

Mm3377 only processes your personal data where a valid legal basis exists under Malaysia's PDPA and related regulations. The bases we rely on are as follows:

• Contract performance: Processing required to provide betting services to you under the membership agreement you entered into with mm3377.
• Legal obligation: Processing required to fulfil applicable legal obligations, including KYC requirements, anti-money laundering (AML) prevention, and tax compliance.
• Legitimate interests: Processing for mm3377's legitimate interests, such as fraud detection, platform security, and service improvement, provided these interests do not override your fundamental rights.
• Consent: For purposes such as direct marketing communications, we will obtain your explicit consent in advance. You may withdraw this consent at any time.

Data Sharing with Third Parties

Mm3377 does not sell or trade your personal data. However, in certain limited situations, we may need to share your data with the following parties:

• Approved service providers: Third-party companies that help us operate the platform, including cloud infrastructure providers, payment processors, and gaming software vendors. All such providers are bound by strict data protection agreements and may only use your data for purposes we specify.
• Regulatory authorities and law enforcement: When required by Malaysian law or a court order, we will disclose the necessary data to the relevant authorities.
• Identity verification partners: Approved third-party KYC services that assist us in verifying member identities for fraud prevention and AML compliance purposes.
• Business transfers: If mm3377 undergoes any corporate restructuring, merger, or acquisition, personal data may be transferred to the successor entity, subject to equivalent privacy protections.

Data Retention Period

Mm3377 retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy, or as required by applicable law.

• Active account data: Retained for the duration of your active membership and for a reasonable period after account closure to resolve any outstanding issues.
• Financial transaction records: Retained for at least seven (7) years in accordance with Malaysia's financial and tax regulatory requirements.
• KYC records: Retained for at least five (5) years after the business relationship ends, in line with AML/CTF requirements.
• Support communication logs: Retained for three (3) years for reference and dispute resolution purposes.
• Cookie and analytics data: Retained according to cookie type and manageable through your browser settings.

Once the retention period expires, your personal data will be securely deleted or anonymised in accordance with our data management procedures.

Data Security Measures

The security of your personal data is a core technical and organizational priority for mm3377. We continuously invest in security infrastructure to ensure your data is protected at every level.

• Data encryption in transit: All communications between your browser and the mm3377 platform are secured with TLS 1.3 protocol and 256-bit SSL encryption.
• Data encryption at rest: Sensitive data stored in our databases is encrypted using industry-standard encryption algorithms.
• Two-factor authentication (2FA): We offer an additional layer of security through two-factor authentication to protect your account from unauthorized access.
• Continuous security monitoring: The mm3377 system is monitored around the clock to detect and respond to any security threats or suspicious activity.
• Regular security audits: We conduct regular security assessments and penetration testing to identify and address vulnerabilities before they can be exploited.
• Staff training: All staff who handle member personal data undergo regular privacy and data security training.

Your Rights Regarding Personal Data

Under Malaysia's PDPA and mm3377's internal policies, you have the following rights regarding your personal data. We are committed to helping you exercise these rights without unnecessary barriers.

To exercise any of the above rights, contact the mm3377 support team via live chat or send an email to [email protected]. We will respond to your request within 30 calendar days.

Cookies & Tracking Technologies

Mm3377 uses cookies and similar tracking technologies to enhance your experience on our platform, analyse usage patterns, and ensure the platform functions correctly.

Types of Cookies We Use

• Essential cookies: Required for core platform functions such as login authentication and session management. These cookies cannot be disabled.
• Performance/analytics cookies: Helping us understand how members interact with the platform so we can make continuous improvements.
• Functional cookies: Remembering your preferences and settings, such as language and display options, to provide a more personalized experience.
• Marketing cookies: Used to display relevant offers and promotions to you. You may opt out of these cookies.

You can manage your cookie preferences through your browser settings. However, disabling essential cookies may affect platform functionality. For more information on managing cookies, refer to your browser's help documentation.

Changes to This Privacy Policy

Mm3377 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or service improvements. When significant changes are made, we will:

• Updating the "Last updated" date at the top of this page.
• Sending notifications to registered members via email or in-platform notices for material changes.
• Displaying a clear notice on the platform's home page for a reasonable period following any material changes.

Your continued use of the mm3377 platform after any amendments take effect constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your information.

Contact Us About Privacy

If you have any questions, concerns, or complaints regarding the mm3377 Privacy Policy or how we handle your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the mm3377 platform — the fastest way to get an immediate response.
• Privacy Email: [email protected]
• Support Languages: Malay, English, and Mandarin.
• Response Time: We are committed to responding to all privacy-related inquiries within 3 business days and resolve official data rights requests within 30 calendar days.

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in Malaysia.