Privacy Policy mudah365 – How We Protect Your Personal Information

Mudah365 collects various types of personal information to enable us to provide a safe, efficient, and enjoyable online gambling experience for all Malaysian members. We only collect information that is strictly necessary for the purposes defined — no excessive data collection.

Mudah365 uses the personal information it collects solely for legitimate and reasonable purposes in connection with providing online gambling services to Malaysian players. The following are the primary purposes for which your data is used:

• Account Management: Creating, verifying, and maintaining your mudah365 account, including the mandatory KYC (Know Your Customer) process.
• Transaction Processing: Processing deposits and withdrawals securely and accurately via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, and CIMB Clicks.
• Customer Support: Providing technical support, resolving complaints, and responding to your enquiries via live chat or email.
• Security & Fraud Prevention: Detect and prevent fraudulent activity, money laundering, or account abuse.
• Legal Compliance: Fulfil legal obligations, including reporting requirements to the relevant authorities.
• Responsible Gambling: Monitoring gameplay patterns to identify players who may need assistance or self-management tools.
• Marketing Communications: Sending you information about mudah365's latest promotions, bonuses, and offers — you may unsubscribe at any time.

Mudah365 does not sell or rent your personal data to any third party for marketing purposes. However, there are certain situations where we need to share specific information with trusted parties in order to deliver our services properly:

• Payment Providers: Providers such as Touch 'n Go eWallet, GrabPay, DuitNow, and FPX will receive the transaction information necessary to process your deposits and withdrawals. All such providers are bound by strict data protection agreements.
• Game Providers: Companies such as Evolution Gaming, Pragmatic Play, Microgaming, and Playtech may receive limited technical information required to deliver games smoothly.
• KYC & Identity Verification Services: Third-party identity verification service providers may be engaged to assist with the KYC process.
• Legal Authorities: When required by a court order, the police, or a legally authorised Malaysian government agency.
• Auditors & Professional Advisors: Independent auditors, lawyers, and financial advisers bound by professional confidentiality obligations.

The security of mudah365 members' personal data is a non-negotiable priority. We continually invest in the latest security infrastructure to ensure your data remains protected against today's increasingly sophisticated cyber threats.

• 256-bit SSL/TLS Encryption: All communications between your device and mudah365's servers are encrypted using 256-bit SSL/TLS protocol — the same standard used by Maybank2u and Malaysia's online banking systems.
• Hashed Passwords: Your account password is never stored in plain text. We use a robust bcrypt algorithm to encrypt all passwords.
• Two-Factor Authentication (2FA): We encourage all members to enable 2FA for an additional layer of security on their mudah365 account.
• 24/7 Monitoring: The mudah365 cybersecurity team continuously monitors all system activity to detect any unusual threats or intrusion attempts.
• Financial Data Segregation: Sensitive financial information such as bank account details and e-wallet data is stored in fully isolated systems with strictly controlled access.
• Independent Security Audit: mudah365 undergoes independent security audits every quarter conducted by internationally accredited cybersecurity firms.

Mudah365 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies we use:

• Essential Cookies (Cannot Be Disabled): Required for core platform functions such as login, game sessions, and security. Without these cookies, the platform cannot operate properly.
• Preference Cookies: Saves your preferences such as interface language and display settings so you don't have to reconfigure them each time you log in.
• Analytics Cookies: Helping us understand how players use the platform for continuous improvement. This data is collected in aggregate form and cannot be used to identify individuals.
• Session Cookies: Temporary cookies that are automatically deleted when you close your browser.

You can manage or disable cookies through your web browser settings. Please note, however, that disabling essential cookies may affect the functionality of the mudah365 platform.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights protected by law. mudah365 respects and facilitates the exercise of all these rights.

Mudah365 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required under applicable Malaysian law. Our data retention policy is as follows:

• Active Account Information: Retained for the entire duration that your mudah365 account remains active.
• Financial Transaction Records: Retained for 7 years in compliance with Malaysian legal requirements for financial records and anti-money laundering.
• Security Logs: Retained for 12 months for security investigation and fraud prevention purposes.
• Support Communication Records: Retained for 3 years for reference and service improvement purposes.
• Inactive Accounts: Account data that has been inactive for 3 consecutive years will undergo a review process and may be submitted for deletion.

When data is no longer needed, mudah365 will securely delete it using methods that ensure it cannot be recovered.

Mudah365 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. Members will be notified of any material changes through:

• Email notification to your registered email address.
• A prominent notice on the mudah365 login page for at least 14 days before the changes take effect.
• Updating the "Updated" date at the top of this Privacy Policy.

Continued use of mudah365 services after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account.