Privacy Policy mumu86 – Data Protection & Privacy for Malaysian Players

Mumu86 takes your privacy seriously. This policy clearly explains what data we collect, why we need it, how it is used and protected, and what rights you have as a user of our platform in Malaysia.

Last updated: 1 January 2026
256-bit SSL
For Malaysian Players
Data Not Sold

Four Categories of Data Managed by mumu86

We only collect data that is strictly necessary to operate our services safely and effectively for Malaysian players.

👤
Personal Data
  • Full name (as per MyKad)
  • National identification number (MyKad)
  • Date of birth
  • Malaysian residential address
  • Mobile number
  • Email address
💳
Financial Data
  • Malaysian bank account number
  • E-wallet account ID (TnG, DuitNow, GrabPay)
  • Deposit and withdrawal records
  • In-platform transaction records
  • Betting and gaming history
📱
Technical Data
  • Device IP address
  • Web browser type and version
  • Device operating system
  • Login time and date
  • Session cookies and preference cookies
  • Platform usage data
💬
Communication Data
  • Live chat support conversation logs
  • Emails sent to us
  • Feedback and complaints
  • Promotional notification preferences
  • User survey responses
Table of Contents
Questions about your privacy?
Contact us at
support@mumu86.best

Important Notice

This Privacy Policy explains how mumu86 collects, processes, and protects your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). By using the mumu86 platform, you agree to the terms of this Privacy Policy. Please read it carefully before registering or using any of our services.

1 Personal Data We Collect

1.1 Data You Provide Directly

When you create a mumu86 account, we collect the personal information you provide voluntarily. This includes your full name as stated on your Malaysian Identity Card (MyKad), MyKad number, date of birth, residential address in Malaysia, mobile phone number and email address.

During the identity verification (KYC) process required prior to the first withdrawal, mumu86 may request a copy of your MyKad and proof of ownership of the Malaysian bank account or e-wallet you registered. These documents are stored securely and used solely for verification purposes.

1.2 Financial Data

To process deposits and withdrawals, mumu86 collects and stores your financial account information — including Malaysian bank account numbers and e-wallet account IDs such as Touch 'n Go eWallet, DuitNow, GrabPay, Boost, and ShopeePay. We do not store full credit or debit card numbers — any card information processed via FPX is handled directly by our certified payment providers.

All transaction records – deposits, withdrawals, and betting activity on the mumu86 platform – are retained as part of your account history for audit, dispute resolution, and legal compliance purposes.

1.3 Automatically Collected Data

When you browse or use the mumu86 platform, our systems automatically collect certain technical data, including your device's IP address, web browser type and version, operating system, screen resolution, the time and date of each login session, and the pages and features you visit. This data is collected via cookies and similar tracking technologies.

Why Do We Need This Data?

Automatically collected technical data helps us identify and prevent fraudulent activity, safeguard your account, improve the performance of the mumu86 platform and tailor your experience based on the device you use. It is not used for third-party advertising purposes.

2 How mumu86 Uses Your Data

2.1 Service Operations

Mumu86 primarily uses your personal data to deliver the services you have requested — namely, providing a Sports Betting, Live Casino, Poker, e-sports and lottery platform that you can access securely. This covers account registration processing, identity verification, deposit and withdrawal processing, and maintaining records of your account activity.

2.2 Security and Fraud Prevention

Mumu86 uses collected data to detect and prevent fraudulent activity, money laundering, duplicate account creation and bonus abuse. This is a legal requirement under Malaysian financial compliance regulations and reflects our responsibility to protect all users on the platform.

Our systems continuously analyse activity patterns to detect suspicious behaviour. If any unusual activity is identified on your account, mumu86's security team may reach out for additional verification via your registered phone number or email address.

2.3 Service Communications

Mumu86 uses your email address and mobile number to send important communications related to your account – including transaction confirmations, security alerts, policy updates, and other essential platform information. These service communications cannot be unsubscribed from, as they form part of the service you signed up for.

2.4 Marketing Communications (Optional)

With your consent, mumu86 may send you notifications about promotions, bonuses, and special offers via email or SMS. You may opt out of these marketing communications at any time via the unsubscribe link in our emails or by contacting our support team. Opting out of marketing communications does not affect essential service communications.

2.5 Responsible Gambling

As part of mumu86's commitment to responsible gambling, we use your betting activity data to monitor gameplay patterns and identify players who may need support. If our system detects any concerning patterns, our team may proactively reach out to offer assistance or information about the self-limitation tools available.

3 Data Sharing With Third Parties

3.1 No Data Selling Policy

Mumu86 does not sell, lend, or trade your personal data to any third party for marketing or commercial purposes. This is an unwavering commitment and one of the core principles that sets mumu86 apart from other platforms.

3.2 Trusted Service Providers

Mumu86 works with selected third-party service providers to carry out certain aspects of our platform's operations. These include:

  • Payment providers: To process deposits and withdrawals via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay and FPX. Financial data shared is limited to the minimum necessary to process each transaction.
  • Cloud service provider: To store and process data securely using infrastructure that meets international security standards.
  • Identity verification service provider: To carry out KYC checks as required by financial compliance regulations.
  • Game software provider: Live Casino and slots game providers that require limited access to game session data for technical purposes.

All third-party providers are bound by strict data protection agreements and may only use your data for the specified purposes.

3.3 Legal Requirements

Mumu86 may disclose your personal data to the relevant authorities when required by Malaysian law, court order, or to fulfil regulatory compliance obligations. This includes cooperating with authorities in investigations involving financial crime, money laundering or other illegal activities.

mumu86 Privacy Guarantee

Every third-party provider working with mumu86 goes through a rigorous security assessment process. We ensure that the same data protection standards we uphold internally are observed by all our partners as well. Your data is never used for any purpose beyond the scope of the services you have requested.

4 Security & Data Protection

4.1 Industry-Standard Encryption

All personal and financial data stored and transmitted through the mumu86 platform is protected by 256-bit SSL (Secure Sockets Layer) encryption — the same standard used by Malaysia's major banks, including Maybank and CIMB. This means every piece of information exchanged between your device and mumu86's servers is fully encrypted and unreadable to unauthorised parties.

4.2 Internal Access Controls

Access to user data within the mumu86 system is restricted to staff with a legitimate business need only. All internal access is logged and monitored, and personnel who handle sensitive data are bound by strict confidentiality agreements. mumu86 conducts regular internal security audits to ensure full compliance with its access control policies.

4.3 Two-Factor Authentication (2FA)

Mumu86 offers and encourages the use of two-factor authentication (2FA) for all user accounts. With 2FA enabled, logging into your mumu86 account requires not only your password but also a verification code sent to your mobile number. This adds an extra layer of protection even if your password is compromised.

4.4 Security Incident Response

Mumu86 has a comprehensive security incident response procedure in place. In the event of a data security breach affecting your personal information, we will notify you via your registered email within a reasonable timeframe and take the necessary steps to limit the impact of the incident.

5 Cookies & Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files stored on your device when you browse the mumu86 platform. They help our platform remember your preferences, keep you logged in and deliver a smoother experience. Without cookies, you would need to log in again each time you load a new page.

5.2 Types of Cookies Used

Mumu86 uses several types of cookies for different purposes. All cookies used are for platform operations and improving the user experience – not for third-party advertising:

6 Your Privacy Rights

6.1 Right to Access Data

You have the right to request a copy of the personal data mumu86 holds about you. Data access requests can be submitted by emailing support@mumu86.best with the subject line specifying the type of data you are requesting. mumu86 will fulfil such requests within 14 business days.

6.2 Right to Rectification

If you find that any information mumu86 holds about you is inaccurate or out of date, you have the right to request a correction. For basic details such as your mobile number and email address, you can update these directly via your mumu86 account settings. For changes to primary identity information, please contact our customer support team and provide the appropriate verification documents.

6.3 Right to Withdraw Marketing Consent

You may withdraw your consent to receive marketing communications from mumu86 at any time, with no impact on your account access. Simply click the "unsubscribe" link in any marketing email we send, or contact our support team to update your communication preferences.

6.4 Rights Related to Account Closure

When you close your mumu86 account, we will remove your personal data from our active systems within a reasonable period. However, certain records may need to be retained for periods specified by Malaysian law — for example, financial transaction records must be kept for a minimum of 7 years under the Companies Act and applicable financial regulations.

How to Exercise Your Privacy Rights

To exercise any of the privacy rights listed above, contact the mumu86 privacy team by email at support@mumu86.best with the subject line "Privacy Request" and specify the right you wish to exercise. We will respond within 5 business days and resolve the request within 14 business days.

7 Data Retention & Deletion

7.1 Data Retention Period

Mumu86 retains your personal data for as long as your account remains active and for any additional period required after account closure. Retention periods vary by data type:

  • Financial transaction records: Minimum 7 years from the transaction date, in line with Malaysian financial legal requirements.
  • Betting activity records: Minimum 5 years for dispute resolution and audit purposes.
  • Customer support communication logs: 3 years from the date of last interaction.
  • Technical data and access logs: 12 months for security and analytics purposes.
  • Identity verification documents (KYC): For the duration of active membership and 5 years following account closure.

7.2 Data Deletion After Account Closure

When your mumu86 account is closed at your request and all financial obligations have been settled, we will delete or anonymise personal data that is no longer required for legal compliance. This deletion process is completed within 90 days of confirmed account closure.

7.3 Data Storage Location

Mumu86 user data is stored on servers located in data centres that comply with the ISO 27001 international security standard. mumu86 ensures that any cross-border data transfers are carried out with appropriate safeguards in line with the requirements of Malaysia's Personal Data Protection Act 2010.

8 Contact Us About Privacy

8.1 mumu86 Privacy Officer

Mumu86 has appointed an internal privacy officer responsible for ensuring compliance with this Privacy Policy and Malaysia's Personal Data Protection Act 2010. For any queries, concerns or requests relating to your data privacy, you may reach our privacy team via:

  • Email: support@mumu86.best (subject: "Privacy Enquiry")
  • Live chat: Via the mumu86 platform, 24 hours a day, 7 days a week
  • Mailing address: mumu86, Kuala Lumpur, Malaysia

8.2 Privacy Policy Amendments

Mumu86 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. When significant changes are made, we will notify you via your registered email or through an in-platform notification on mumu86. The "Last updated" date at the top of this page will always reflect the most current version of our Privacy Policy.

Continued use of the platform mumu86 following the publication of any amendments to the Privacy Policy will be considered acceptance of the updated terms. We encourage you to review this page periodically.

Complaints to the Regulatory Authority

If you believe mumu86 has not handled your personal data in accordance with Malaysia's Personal Data Protection Act 2010, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP). However, we encourage you to contact us first so we can try to resolve your concerns directly.

Six Privacy Rights You Have as a mumu86 User

Under Malaysia's Personal Data Protection Act 2010, you are entitled to these rights, and mumu86 is committed to making it easy for you to exercise them.

Right of Access

You may request a copy of all personal data mumu86 holds about you at any time. We will provide a full report within 14 working days of receiving your request.

Right to Rectification

If any data we hold about you is inaccurate, outdated, or incomplete, you have the right to request a correction. Basic information can be updated directly in your mumu86 account settings.

Right to Withdraw Consent

You may withdraw your consent to marketing communications at any time. This does not affect essential service communications related to your mumu86 account.

Right to Object

You have the right to object to the processing of your personal data for specific purposes, including direct marketing. Objections can be submitted by contacting our privacy team at support@mumu86.best.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format upon request. This makes it easy for you to transfer your data to another platform should you choose to do so.

Right to Complain

If you believe your privacy rights have been violated, you may file a complaint with us or directly with Malaysia's Personal Data Protection Department (JPDP). We are committed to resolving all complaints promptly and fairly.

How mumu86 Protects Your Privacy Every Day

Privacy is not just a document on this page – it is a daily practice embedded in every aspect of mumu86's operations.

256-bit SSL Encryption

Every bit of data transmitted between your device and mumu86's servers is encrypted with 256-bit SSL — the same standard used by Maybank2u and CIMB Clicks. Your data cannot be intercepted in transit.

Two-Factor Authentication

Mumu86 offers 2FA for all accounts – a simple step that dramatically reduces the risk of unauthorised access. Enable 2FA now via your account security settings.

Data Not Sold

Mumu86 does not sell, lend or trade your personal data to any third party for marketing purposes. This is an absolute policy with no exceptions under any circumstances.

Malaysia PDPA Compliance

All of mumu86's data protection practices are designed to comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We conduct regular compliance audits to ensure these standards are consistently met.

Explicit Data Deletion

You know exactly how long mumu86 retains each type of your data and what happens after account closure. No data is kept longer than required by law or legitimate operational needs.

24/7 Privacy Support

The mumu86 support team is available to assist you with any data privacy enquiries in Bahasa Melayu, 24 hours a day. The average response time for privacy enquiries is under 4 hours.

Frequently Asked Questions About Data Privacy at mumu86

No. mumu86 does not share your personal data with any advertising companies or third-party marketing networks. Your data is only shared with service providers directly involved in the platform's operations — such as payment providers (Touch 'n Go eWallet, DuitNow, GrabPay, FPX) and technical infrastructure providers — and only to the extent necessary. All such providers are bound by strict data protection agreements.

Yes, when you close your mumu86 account, we will delete or anonymise personal data that is no longer required within 90 days. However, certain records such as financial transaction records must be retained for a minimum of 7 years in line with Malaysian financial legal requirements, which cannot be waived. Records retained for legal compliance purposes are not used commercially and may only be accessed if required by the relevant authorities.

If your account is closed by mumu86 due to a terms violation, records related to that violation may be retained for a longer period for compliance and fraud prevention purposes — including to prevent re-registration using different details. Data unrelated to the violation will be deleted in accordance with our standard retention policy. You still have the right to request access to any data we hold about you even after account closure.

mumu86 does not store your full credit or debit card details. All FPX transactions are processed directly through secure payment infrastructure, with no full card data passing through our servers. For e-wallet deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, and ShopeePay, we only store your e-wallet account ID for withdrawal purposes – not your PIN or e-wallet password. All stored financial information is protected by 256-bit SSL encryption.

As part of its risk management and Responsible Gaming commitment, mumu86 may use betting activity patterns to assess appropriate limits for individual accounts. This is standard industry practice and is carried out to protect players from excessive losses. If any betting limits are adjusted on your account, you will be notified. You are welcome to contact mumu86 customer support to discuss your account limits.

You can stop receiving promotional emails from mumu86 in several ways: click the "Unsubscribe" link found at the bottom of any marketing email we send, log in to your mumu86 account and update your communication preferences in your account settings, or contact our support team via live chat or email at support@mumu86.best. Unsubscribe requests will be processed within 5 business days. Please note that you will continue to receive important service emails related to your account even after opting out of marketing communications.

Your Data Is Safe at mumu86 – Register & Start Playing Today

With a transparent Privacy Policy and robust data protection in place, you can enjoy Sports Betting, casino, Poker and e-sports at mumu86 with confidence. Deposit easily via Touch 'n Go eWallet or DuitNow and enjoy a transparent entertainment experience alongside more than 500,000 Malaysian players.

256-bit SSL
Data Not Sold
PDPA Compliance
24/7 BM Support
Bahasa Melayu