Privacy Policy – mmg6 Malaysia Online Casino

1Who We Are

mmg6 is an online casino and sports betting platform operated at mmg6.org and serving Players primarily in Malaysia and other Asian markets. For the purposes of applicable data protection legislation, mmg6 is the data controller in respect of personal data collected through the mmg6 platform.

mmg6 operates under international gaming authority licensing standards. As a licensed operator, mmg6 is subject to regulatory data governance requirements including record-keeping obligations, anti-money laundering (AML) reporting duties, and Know Your Customer (KYC) verification standards that directly inform our data collection and retention practices.

For all privacy-related enquiries, Players may contact mmg6's Data Protection team via the live chat support channel available 24/7 on the mmg6 platform, or by email at [email protected] (plain text — not a clickable link).

2Data We Collect

mmg6 collects personal data through several channels. The categories of data collected and the circumstances in which they are collected are set out below.

2.1 Registration Data

When you register an mmg6 account, we collect: full legal name; date of birth; residential address; email address; and telephone number. This information is necessary to create and maintain your account and to comply with our KYC obligations under our gaming licence.

2.2 Identity Verification (KYC) Data

To comply with licensing requirements and to process withdrawal requests, mmg6 collects copies of government-issued identity documents — typically a Malaysian National Identity Card (MyKad) — and may collect a photographic self-portrait (selfie) for facial verification. These documents are handled with the highest level of security and are retained only for as long as required by our regulatory obligations.

2.3 Financial Data

When you make deposits or withdrawals via the mmg6 platform, we collect transaction records including payment method details (e-wallet account references, bank account numbers for transfers, or cryptocurrency wallet addresses), transaction amounts, timestamps, and processing references. mmg6 does not store full card numbers or CVV codes — card transactions are processed directly by certified payment service providers.

2.4 Usage and Technical Data

We automatically collect technical data when you access the mmg6 platform, including: IP address; device type and operating system; browser type and version; pages visited and time spent; game sessions including bets placed, wins, losses, and session duration; and referring URLs. This data is used for security monitoring, fraud prevention, platform improvement, and responsible gaming analysis.

2.5 Communications Data

When you contact mmg6 customer support via live chat or email, we retain records of those communications including the content of your messages and any attachments. These records are retained for quality assurance, training, and dispute resolution purposes.

3How We Use Your Data

mmg6 uses personal data collected from Players for the following purposes:

• Account administration: Creating, maintaining, and managing your mmg6 account; processing login authentication; and communicating account-related information;
• Service delivery: Processing deposits and withdrawals; providing access to games; resolving technical issues; and administering bonuses and promotions;
• Identity and age verification: Verifying that Players meet the minimum age requirement of 21 years and confirming the identity of account holders;
• Fraud prevention and security: Detecting and preventing unauthorised access, fraudulent transactions, money laundering, and other prohibited conduct;
• Regulatory compliance: Meeting our obligations under applicable gaming licensing requirements, including AML reporting, KYC record-keeping, and responsible gaming obligations;
• Responsible gaming: Monitoring player activity to identify patterns that may indicate problem gambling; applying self-imposed limits and exclusions; and providing intervention where required by our licensing obligations;
• Platform improvement: Analysing usage patterns, game performance, and player feedback to improve the mmg6 platform;
• Marketing communications: Sending promotional offers and platform updates to Players who have consented to receive such communications — Players may withdraw consent at any time via account settings.

4Legal Basis for Processing

mmg6 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you accepted upon registration — including account management, game access, and payment processing;
• Legal obligation: Processing required to comply with our regulatory obligations under applicable gaming licensing standards and anti-money laundering legislation;
• Legitimate interests: Processing conducted for fraud prevention, security monitoring, and platform improvement where these interests do not override your fundamental rights and freedoms;
• Consent: Processing for direct marketing purposes, where consent has been freely given and can be withdrawn at any time.

Where mmg6 relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5Data Sharing & Third Parties

mmg6 does not sell, rent, or trade personal data to any third party for commercial purposes. Personal data may be shared with the following categories of third parties, strictly for the purposes outlined:

5.1 Payment Service Providers

To process deposits and withdrawals, mmg6 shares transaction data with certified payment service providers including e-wallet operators (Touch n Go eWallet, Boost), Malaysian bank transfer processors, and cryptocurrency payment processors. These providers are contractually bound to process data only as instructed by mmg6 and to maintain appropriate security standards.

5.2 Game Content Providers

Where live casino games and slot titles are delivered by third-party studio providers (such as Pragmatic Play, NetEnt, and Play'n GO), limited technical data — including anonymised session identifiers — may be shared with those providers solely for the purpose of delivering the game experience. Game providers do not receive personally identifiable player data.

5.3 Identity Verification Services

To fulfil KYC obligations, mmg6 may use specialist identity verification service providers who process identity documents and biometric data on mmg6's behalf. All such providers are contractually bound to handle data solely for verification purposes and are prohibited from using player data for any other purpose.

5.4 Regulatory and Law Enforcement Authorities

mmg6 may be required by law or by its gaming licence conditions to disclose player data to regulatory bodies, law enforcement agencies, or anti-money laundering authorities. Such disclosures are made only to the extent required by applicable law and are not subject to player consent.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of mmg6's business or assets, player personal data may be transferred to the acquirer. mmg6 will notify affected Players of any such transfer and the identity of the new data controller prior to the transfer taking effect.

6Cookies & Tracking Technologies

The mmg6 platform uses cookies and similar tracking technologies to enhance user experience, maintain session security, and collect analytics data. The categories of cookies used are as follows:

• Strictly necessary cookies: Required for the mmg6 platform to function, including authentication session cookies, security tokens, and load-balancing cookies. These cannot be disabled.
• Performance cookies: Used to collect anonymised data about how Players use the mmg6 platform — including pages visited, session duration, and error events — to improve platform performance.
• Functional cookies: Used to remember your preferences such as language settings, preferred lobby view, and "remember me" login state.
• Analytics cookies: Used to understand aggregate usage patterns and player behaviour for platform improvement purposes. Analytics data is processed in aggregated, anonymised form.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent the mmg6 platform from functioning correctly.

7Data Retention

mmg6 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods driven by regulatory requirements:

• Account data and transaction records: Retained for a minimum of 5 years from the date of the last transaction, in accordance with anti-money laundering record-keeping requirements;
• KYC identity documents: Retained for a minimum of 5 years from account closure or the date of the last relevant transaction;
• Customer support communications: Retained for 3 years from the date of the relevant interaction;
• Technical and usage data: Retained for 24 months in identifiable form; anonymised aggregate data may be retained indefinitely;
• Marketing consent records: Retained for the duration of the marketing relationship plus 2 years.

Upon expiry of applicable retention periods, mmg6 will securely delete or anonymise personal data in accordance with its data disposal procedures.

8Data Security

mmg6 implements a comprehensive set of technical and organisational security measures to protect player personal data against unauthorised access, disclosure, alteration, and destruction. Key measures include:

• 256-bit SSL/TLS encryption for all data transmitted between players' browsers and the mmg6 platform;
• AES-256 encryption for personal data stored in mmg6 databases;
• Bcrypt password hashing with appropriate work factors — mmg6 cannot access player passwords in plain text;
• Multi-factor authentication for administrative access to systems holding player data;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular independent security audits and penetration testing of the mmg6 platform;
• Automated monitoring for anomalous login patterns and suspicious transaction activity.

Notwithstanding these measures, no data transmission over the internet or electronic storage system can be guaranteed as absolutely secure. Players are advised to maintain the security of their own mmg6 account credentials and to contact mmg6 immediately if they suspect unauthorised access to their account.

9Your Rights

Subject to applicable law and regulatory restrictions, Players have the following rights in respect of their personal data held by mmg6:

• Right of access: The right to request a copy of the personal data mmg6 holds about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of personal data where it is no longer necessary for the purpose for which it was collected, subject to regulatory retention obligations;
• Right to restriction: The right to request that mmg6 restrict processing of your data in certain circumstances;
• Right to data portability: The right to receive personal data you have provided to mmg6 in a structured, machine-readable format;
• Right to object: The right to object to processing based on legitimate interests or for direct marketing purposes;
• Right to withdraw consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact mmg6 via live chat or email at [email protected]. mmg6 will respond to data rights requests within 30 days of receipt. Some requests may be subject to identity verification before they can be actioned.

10Children's Privacy

mmg6 employs automated age-verification checks at registration and conducts random manual age reviews. If you are a parent or guardian and believe your child has registered an mmg6 account, please contact mmg6 support immediately via live chat so the account can be closed and data deleted without delay.

11International Data Transfers

The mmg6 platform and its service providers operate data infrastructure that may be located in jurisdictions outside of Malaysia. Where personal data is transferred internationally, mmg6 ensures that appropriate safeguards are in place to maintain a level of data protection equivalent to that applicable in Malaysia, including:

• Transfers to countries recognised as providing adequate data protection under applicable standards;
• Contractual data protection clauses with international service providers requiring them to maintain appropriate security and processing standards;
• Regular review of third-party data processors to ensure ongoing compliance with mmg6's data protection standards.

Players may request further information about international data transfers and the safeguards applicable to specific transfers by contacting mmg6 support.

12Policy Updates & Contact

mmg6 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data practices. Material changes will be communicated to registered Players via email and/or in-platform notification at least 14 days before taking effect. The "Last Updated" date at the top of this Policy reflects the most recent revision.

Continued use of the mmg6 platform following the effective date of a revised Privacy Policy constitutes acceptance of the revised terms. Players who do not accept the revised Policy may close their account before the effective date.

For all privacy-related enquiries, data rights requests, or complaints, contact mmg6's Data Protection team via:

• Live Chat: Available 24/7 on the mmg6 platform;
• Email: [email protected] (plain text — not a clickable link).

mmg6 aims to respond to all privacy enquiries within 5 business days and to resolve data rights requests within 30 calendar days of receipt.