mudah365 Privacy Policy

1.Introduction and Scope

This Privacy Policy ("Policy") describes how mudah365 ("we," "us," "our," or "the Company") collects, uses, stores, shares, and protects the personal data of individuals ("you," "your," or "Member") who access or use the mudah365 online casino and sportsbook platform available at mudah365.win (the "Platform").

This Policy applies to all personal data processed by mudah365 in connection with the Platform, including data collected during account registration, platform use, payment transactions, customer support interactions, and marketing communications. This Policy should be read alongside the mudah365 Terms & Conditions.

2.Data Controller

For the purposes of applicable data protection legislation, mudah365 is the data controller in respect of all personal data collected through the Platform. As data controller, mudah365 determines the purposes and means by which your personal data is processed.

If you have any questions regarding how mudah365 processes your personal data or wish to exercise your data subject rights, please contact our Data Protection contact point at: [email protected].

3.Personal Data We Collect

mudah365 collects the following categories of personal data:

4.How We Collect Your Data

mudah365 collects personal data through the following means:

• Direct collection: Data you provide directly during account registration, identity verification (KYC), payment processing, customer support interactions, and completion of any on-Platform forms or surveys.
• Automated collection: Technical data collected automatically when you access or use the Platform, including IP address, device identifiers, browser information, and session activity logs. This data is collected via server logs, cookies, and similar tracking technologies.
• Third-party sources: In limited circumstances, mudah365 may receive identity verification data from third-party KYC service providers, or fraud and risk data from payment processors, where this is necessary to verify your identity and protect the Platform from abuse.

5.Legal Basis for Processing

mudah365 processes your personal data on the following legal bases:

• Contract performance: Processing necessary to register your account, maintain your account, process deposits and withdrawals, and provide the gaming services you have signed up for.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, taxation obligations, and gaming licensing conditions.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming enforcement, and internal analytics — where our legitimate interests do not override your fundamental privacy rights.
• Consent: Processing for direct marketing communications, where you have provided explicit opt-in consent. You may withdraw this consent at any time by contacting [email protected].

6.How We Use Your Personal Data

mudah365 uses your personal data for the following specific purposes:

• To register and maintain your mudah365 member account.
• To verify your identity and age (21+) in compliance with KYC and responsible gaming requirements.
• To process deposits, withdrawals, and all other financial transactions on the Platform in Malaysian Ringgit (MYR).
• To detect and prevent fraud, money laundering, collusion, and other prohibited activities on the Platform.
• To administer bonuses, promotions, and loyalty reward programmes.
• To provide customer support and respond to your enquiries.
• To send service-related communications, such as transaction confirmations, security alerts, and account notifications.
• To send marketing communications where you have opted in to receive them — you may opt out at any time.
• To enforce our Responsible Gaming policy, including self-exclusion management and deposit limit enforcement.
• To improve the Platform through analysis of aggregated, anonymised usage data.
• To comply with all applicable legal, regulatory, and licensing obligations.

7.Sharing Your Personal Data

mudah365 does not sell or rent your personal data to third parties. We share your personal data only in the following limited circumstances:

• Service providers: mudah365 engages trusted third-party service providers to support platform operations, including payment processors (e.g., e-wallet providers such as Touch n Go eWallet and Boost), KYC verification services, fraud detection providers, cloud infrastructure providers, and customer support tools. These providers process your data on our behalf and are contractually bound to maintain confidentiality and comply with applicable data protection standards.
• Gaming software providers: Game round data is transmitted to and processed by our licensed game studio partners (e.g., Evolution Gaming, Pragmatic Play) for the sole purpose of delivering game functionality and maintaining RNG integrity records. These providers are certified and regulated by independent gaming authorities.
• Regulatory and legal authorities: mudah365 will disclose personal data to competent regulatory, law enforcement, or government authorities where required to do so by law, court order, or in connection with our gaming licence obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of mudah365's assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

In all cases, mudah365 shares only the minimum data necessary for the stated purpose and implements appropriate contractual safeguards with all data recipients.

8.Cookies and Tracking Technologies

mudah365 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help us recognise you, maintain your session, and improve your experience. The categories of cookies we use include:

• Strictly necessary cookies: Essential for the Platform to function correctly — including session authentication, security tokens, and payment flow management. These cannot be disabled.
• Functional cookies: Used to remember your preferences, such as language settings and game display options, to personalise your experience.
• Analytics cookies: Used to collect anonymised, aggregated data about how Members use the Platform — which pages are visited, how long sessions last, and which features are used most. This data is used solely to improve the Platform.
• Marketing cookies: Used only where you have consented to receive marketing communications. These help us measure the effectiveness of promotional campaigns.

You may control non-essential cookies through your browser settings. Note that disabling certain cookies may impact the functionality of the mudah365 Platform.

9.Data Security

mudah365 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the Platform.
• AES-256 encryption for sensitive personal data stored in our databases.
• Salted cryptographic hashing of all account passwords — passwords are never stored in a recoverable format.
• Role-based access controls ensuring only authorised mudah365 personnel can access personal data, and only to the extent necessary for their job function.
• Regular independent security audits and penetration testing of Platform infrastructure.
• Two-factor authentication (2FA) availability for all member accounts.
• Continuous 24/7 monitoring of Platform systems for anomalous access patterns and potential security incidents.

In the event of a personal data breach that poses a risk to your rights and freedoms, mudah365 will notify affected Members in accordance with applicable data breach notification requirements.

10.Data Retention

mudah365 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, unless a longer retention period is required or permitted by law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account, plus a minimum of 5 years following account closure — in compliance with AML and gaming licence record-keeping requirements.
• Financial transaction data: Retained for a minimum of 7 years from the date of the transaction, in compliance with applicable financial record-keeping regulations.
• Gaming activity data: Retained for a minimum of 5 years from the date of the activity.
• Technical and log data: Retained for up to 12 months, unless required longer for security investigation or legal purposes.
• Customer support communications: Retained for 3 years from the date of the last interaction.
• Marketing preferences and consent records: Retained for 3 years from the date of the last consent action.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with mudah365's data destruction procedures.

11.Your Rights

Subject to applicable law, you have the following rights in respect of the personal data mudah365 holds about you:

• Right of access: You may request a copy of the personal data mudah365 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. Note that certain data may be required to be retained by law.
• Right to restriction of processing: You may request that mudah365 restrict the processing of your personal data in certain circumstances.
• Right to data portability: Where processing is based on consent or contract performance, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object: You may object to processing based on legitimate interests, including direct marketing.

To exercise any of these rights, please submit a written request to [email protected]. mudah365 will respond to verified requests within 30 days. In complex cases, this period may be extended by a further 60 days, with notice provided to you.

12.Children and Minors

The mudah365 Platform is strictly for adults aged 21 years and above. mudah365 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted at the point of account registration and at first withdrawal.

13.International Data Transfers

mudah365's primary data storage infrastructure is located within the region where our gaming licence is issued. In certain circumstances, personal data may be transferred to and processed by service providers located in other jurisdictions — for example, where our gaming software providers or cloud infrastructure providers operate data centres outside of Malaysia.

Where personal data is transferred internationally, mudah365 ensures that appropriate safeguards are in place to protect the data, including contractual data protection obligations with data recipients. mudah365 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate additional safeguards.

14.Changes to This Policy

mudah365 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When we make material changes to this Policy, we will notify registered Members via the Platform and, where appropriate, via email to the address registered to your account.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the mudah365 Platform following the publication of a revised Policy constitutes your acceptance of the changes.

15.Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which mudah365 processes your personal data, please contact us:

• Email: [email protected]
• Live Chat: Available 24/7 after mudah365 Login — accessible to all registered Members at any time
• Response Time: mudah365 aims to respond to all privacy-related enquiries within 5 business days

For further information about your rights and responsible gaming tools, please visit our Responsible Gaming page.