mudah365 Privacy Policy

1. Introduction

mudah365 ("We", "Us", "Our", "the Platform") is committed to protecting the privacy and personal data of all users who access or register on the mudah365 website and associated services. This Privacy Policy describes how mudah365 collects, processes, stores, shares, and protects personal data in the course of providing its online casino, slots, sportsbook, and live games services to members in Malaysia and other jurisdictions.

This Privacy Policy forms part of the mudah365 Terms & Conditions and should be read together with that document. By registering an account or using the mudah365 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

mudah365 takes data protection seriously. We apply internationally recognised privacy standards to all data processing activities and we do not sell your personal data to third parties for commercial marketing purposes.

2. Data Controller

For the purposes of this Privacy Policy, mudah365 acts as the Data Controller in respect of personal data collected from users of the mudah365 platform. As Data Controller, mudah365 determines the purposes and means of processing personal data and is responsible for ensuring that such processing is conducted lawfully and in accordance with applicable data protection standards.

Queries or requests relating to this Privacy Policy or the exercise of data subject rights may be directed to the mudah365 Data Protection contact address: [email protected].

3. Personal Data We Collect

mudah365 collects the following categories of personal data from users, depending on their level of interaction with the platform:

mudah365 does not knowingly collect sensitive personal data — including racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data — except where required for identity verification in compliance with anti-money laundering obligations, and only to the minimum extent necessary for that purpose.

4. How We Use Your Personal Data

mudah365 processes personal data for the following purposes:

• Account Management: Creating and maintaining your mudah365 member account, verifying your identity at registration, and managing account security including password resets and two-factor authentication.
• Service Delivery: Enabling access to live casino games, slots, sportsbook, and live games; processing bets and wagers; crediting winnings; and managing the unified MYR wallet.
• Payment Processing: Facilitating deposits and withdrawals via Touch n Go eWallet, Boost, Maybank FPX, CIMB, Public Bank, and card payment networks.
• Regulatory Compliance: Complying with anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, fraud prevention, and applicable international gaming licensing conditions.
• Customer Support: Responding to enquiries, resolving disputes, and providing technical assistance through the 24/7 live chat and email support channels.
• Responsible Gaming: Monitoring account activity to identify patterns consistent with problem gambling; administering deposit limits, session controls, and self-exclusion requests; and fulfilling obligations under the mudah365 Responsible Gaming Policy.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, user experience, and payment processing efficiency.
• Communications: Sending transactional communications (account confirmations, withdrawal notifications, security alerts) and, where you have opted in, promotional communications about mudah365 offers and games.

5. Legal Basis for Processing

mudah365 processes your personal data on the following legal bases under applicable data protection law:

• Contractual Necessity: Processing required to fulfil our obligations under the mudah365 Terms & Conditions, including operating your account and processing transactions.
• Legal Obligation: Processing required to comply with AML, KYC, fraud prevention, and gaming licensing legal obligations.
• Legitimate Interests: Processing conducted in mudah365's legitimate interests in operating a secure and commercially viable platform, including fraud detection, platform analytics, and responsible gaming monitoring — where such interests are not overridden by your rights and interests.
• Consent: Processing for promotional communications, marketing, and certain cookie placements, where you have provided explicit prior consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

mudah365 does not sell your personal data. We may share personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment Service Providers: Banks, e-wallet operators (Touch n Go, Boost), and card networks (Visa, Mastercard) for the purpose of processing deposits and withdrawals.
• Game Providers: Certified third-party game studios and live casino platform providers, to the extent necessary to facilitate gameplay and resolve disputes.
• KYC & Compliance Vendors: Identity verification and AML screening service providers engaged by mudah365 to fulfil regulatory obligations.
• Technology Infrastructure Providers: Cloud hosting, content delivery, and cybersecurity providers who process data on behalf of mudah365 under binding data processing agreements.
• Regulatory Authorities: Where required by law, court order, or legitimate regulatory request, mudah365 may disclose personal data to competent authorities without prior notice to the user.

All third-party data processors engaged by mudah365 are contractually required to process data only as instructed by mudah365 and to maintain appropriate technical and organisational security measures.

7. Cookies & Tracking Technologies

mudah365 uses cookies and similar tracking technologies on the platform for the following purposes:

• Strictly Necessary Cookies: Required for core platform functionality including session management, login authentication, and security features. These cannot be disabled without affecting core functionality.
• Functional Cookies: Used to remember user preferences such as language settings and trusted device recognition to reduce repeated verification prompts.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the platform, enabling us to improve performance and user experience.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the mudah365 platform. mudah365 does not use third-party advertising or behavioural tracking cookies.

8. Data Retention

mudah365 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention principles:

• Account data and transaction records are retained for a minimum of five (5) years from the date of account closure, in accordance with applicable AML and gaming licensing record-keeping requirements.
• Communication records (live chat transcripts, support emails) are retained for two (2) years from the date of the interaction.
• Technical and usage data is retained in anonymised or aggregated form for analytical purposes for up to three (3) years.
• Data collected in connection with a self-exclusion request is retained for the duration of the exclusion period and for a minimum of five (5) years thereafter to prevent re-registration in breach of the exclusion.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with mudah365's data disposal procedures.

9. Data Security

mudah365 implements a layered, defence-in-depth approach to data security. Key technical and organisational measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the mudah365 platform
• Encrypted storage of passwords using industry-standard hashing algorithms — no plaintext passwords are stored
• Role-based access controls limiting internal access to personal data to authorised personnel on a need-to-know basis
• Regular security assessments, penetration testing, and vulnerability management
• Intrusion detection systems and real-time anomaly monitoring
• Incident response procedures with mandatory breach notification protocols

While mudah365 implements robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying mudah365 promptly of any suspected unauthorised access to your account.

10. Your Data Subject Rights

Subject to applicable law and any overriding legal obligations, you have the following rights in respect of your personal data held by mudah365:

• Right of Access: You may request a copy of the personal data mudah365 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data, subject to overriding legal retention obligations.
• Right to Restriction: You may request that mudah365 restrict the processing of your data in certain circumstances.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request a machine-readable copy of your data.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact the mudah365 support team via live chat or at [email protected]. mudah365 will respond to verified requests within thirty (30) calendar days.

11. Children's Privacy

The mudah365 platform is strictly prohibited for persons under the age of 21. mudah365 does not knowingly collect or process personal data from any person under 21. If mudah365 becomes aware that personal data has been collected from a user who is under 21, that account will be immediately closed and all associated data will be deleted, subject to any legal retention obligations arising from the activity.

If you believe that a minor has registered a mudah365 account, please contact our support team immediately at [email protected] so that the matter can be investigated and resolved without delay.

12. International Data Transfers

mudah365 operates internationally and may transfer personal data to service providers and infrastructure partners located outside of Malaysia. Where such transfers occur, mudah365 ensures that appropriate safeguards are in place to protect the transferred data, including contractual clauses that impose equivalent data protection obligations on the recipient and, where applicable, adequacy assessments of the recipient jurisdiction's data protection framework.

13. Changes to This Privacy Policy

mudah365 reserves the right to update or modify this Privacy Policy at any time. Material changes will be communicated to registered members by email to the address on file or through a prominent notice on the platform. The revised Privacy Policy will take effect from the date stated at the top of the document. Your continued use of the mudah365 platform following notification of changes constitutes your acceptance of the revised policy.

We encourage you to review this Privacy Policy periodically to stay informed of how mudah365 handles your personal data.

14. Contact & Data Protection Enquiries

For any questions, concerns, or requests regarding this Privacy Policy or the exercise of your data subject rights, please contact mudah365 through the following channels:

• Live Chat: 24/7 live chat support available directly on the mudah365 platform.
• Email: [email protected]

mudah365 aims to acknowledge all privacy-related enquiries within one (1) business day and to resolve substantive data subject requests within thirty (30) calendar days of receipt of a verified request.