Privacy Policy — MMC996

MMC996 ("we", "us", "our", "the Platform") operates the online casino and sports betting service available at https://mmc996.cam. We are committed to protecting the privacy and personal data of every individual who accesses or uses our Platform ("you", "the User", "the Player").

This Privacy Policy ("Policy") describes the categories of personal data we collect, the purposes for which that data is processed, the legal bases on which we rely, how we safeguard your information, how long we retain it, and the rights you hold in relation to your personal data.

This Policy applies to all personal data collected through the MMC996 website, mobile-optimised interface, customer support communications, and any other channel through which you interact with us. It should be read alongside our Terms & Conditions and Responsible Gambling Policy, which together govern your use of the Platform.

The following terms carry the meanings set out below throughout this Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial data, and online identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, transfer, or deletion.
• "Data Controller" means MMC996, which determines the purposes and means of processing your personal data.
• "Data Processor" means any third-party entity that processes personal data on behalf of MMC996 under a data processing agreement.
• "KYC Data" means identity verification documentation submitted by a Player, including government-issued identification, proof of address, and payment method verification documents.
• "Cookies" means small data files placed on your device by the Platform for the purpose of session management, analytics, and personalisation.
• "Sensitive Personal Data" means a special category of personal data requiring heightened protection, such as health-related data collected in connection with our Responsible Gambling obligations.

MMC996 collects personal data across several categories depending on how you interact with the Platform:

We do not intentionally collect personal data from individuals under the age of 21. If we become aware that such data has been collected, we will take immediate steps to delete it. Refer to Section 12 for our Children's Privacy policy.

MMC996 collects personal data through the following channels and mechanisms:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or responding to a survey.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including via cookies, web beacons, log files, and session tracking technologies. See Section 8 for full details on cookies.
• Third-party sources: Identity verification agencies and fraud screening services may provide supplementary data points to assist us in verifying your identity and assessing risk. Payment processors such as those facilitating DuitNow, FPX, Maybank, CIMB, or Public Bank transfers may share transactional confirmation data with us.
• Affiliate channels: Where you arrive at MMC996 via a referral or affiliate link, we may receive basic attribution data (e.g., referral source) to credit the referring party and monitor marketing channel performance.

MMC996 processes your personal data only where a lawful basis for doing so exists. The primary purposes for which we process personal data, and the legal bases we rely upon, are set out below:

• Contract performance: Processing your account registration, deposits, withdrawals, and game transactions is necessary for the performance of our contract with you as a registered Player.
• Legal obligation: KYC verification, AML screening, responsible gambling interventions, and data retention in accordance with applicable law are processing activities required by our legal obligations.
• Legitimate interests: Fraud detection, platform security monitoring, abuse prevention, internal analytics, and improvement of the Platform are conducted on the basis of our legitimate business interests, provided those interests are not overridden by your rights and interests.
• Consent: Where we send you direct marketing communications (e.g., promotional email notifications about bonuses on EPL fixtures or Liga Super Malaysia match events), we do so on the basis of your explicit consent. You may withdraw this consent at any time.
• Vital interests: In limited circumstances involving responsible gambling concerns and player welfare, we may process data to protect your vital interests or those of another person.

Your personal data is processed across a range of operational activities that are integral to the delivery of the MMC996 service. These include, but are not limited to:

• Creating, managing, and maintaining your Player account, including account authentication and security controls.
• Processing deposits and withdrawals via Malaysian payment networks including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and major Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong, RHB).
• Conducting Know Your Customer (KYC) checks and ongoing customer due diligence in accordance with anti-money laundering requirements.
• Monitoring gameplay patterns and account activity to detect fraud, collusion, bonus abuse, and other prohibited conduct as defined in our Terms and Conditions.
• Delivering responsible gambling tools and interventions, including applying and enforcing deposit limits, cooling-off periods, and self-exclusion requests.
• Providing customer support through live chat and email, including maintaining records of support interactions for quality assurance and dispute resolution.
• Sending transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts.
• Conducting internal analytics to understand how Players use the Platform and to improve our products and services.
• Complying with data requests from competent regulatory authorities, law enforcement agencies, or courts of competent jurisdiction.

MMC996 does not sell, lease, or trade your personal data to unaffiliated third parties for their own commercial purposes. We share personal data only in the following limited and controlled circumstances:

• Payment processors and financial institutions: We share transactional data with payment service providers — including those operating Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX infrastructure, as well as Maybank, CIMB, Public Bank, Hong Leong, and RHB — strictly for the purpose of processing your deposits and withdrawals.
• Identity verification providers: KYC and AML service providers process your identity documents and screening data under strict contractual data processing agreements. They are not permitted to use your data for any purpose other than the verification service they provide to us.
• Game content providers: Third-party game studios and live casino operators may receive pseudonymised usage data (e.g., Player ID, bet amounts, game outcomes) necessary for game delivery and player account management within their systems.
• IT and hosting infrastructure providers: Data centre, cloud hosting, and cybersecurity service providers process personal data on our behalf under binding data processor agreements that meet applicable data protection standards.
• Regulatory and legal disclosures: We will disclose personal data to relevant regulatory authorities, law enforcement agencies, or courts where required to do so by law, court order, or regulatory obligation.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of MMC996's business, personal data held by us may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections.

All third parties with whom we share personal data are contractually required to implement appropriate technical and organisational security measures and to process the data solely for the specified, lawful purpose.

MMC996 uses cookies and similar tracking technologies to operate and improve the Platform. When you first visit the site, you will be presented with a cookie consent notice. By accepting cookies, you consent to the use of non-essential cookies as described below.

You may withdraw or modify your cookie consent at any time by adjusting your browser settings to block or delete cookies. Note that disabling strictly necessary cookies will impair the core functionality of the Platform, including login and gameplay. Disabling other cookie categories will not affect your ability to play or transact.

MMC996 implements a layered, defence-in-depth approach to the security of your personal data. Our technical and organisational measures include:

• SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption at rest for sensitive data categories, including KYC documents and financial records.
• Role-based access controls ensuring that staff members access personal data only to the extent required for their specific job function.
• Regular penetration testing and vulnerability assessments conducted by qualified security specialists.
• 24/7 security monitoring and intrusion detection systems on all production infrastructure.
• Incident response procedures that enable us to detect, contain, and notify affected parties of personal data breaches within required timeframes.

While we take all reasonable and practicable steps to protect your personal data, no internet-based system can be guaranteed completely secure. You are responsible for maintaining the confidentiality of your account credentials. If you suspect your account has been compromised, please contact our support team immediately via live chat.

MMC996 retains personal data only for as long as is necessary to fulfil the purpose for which it was originally collected, or for such longer period as may be required or permitted by applicable law or regulation. Our standard data retention periods are as follows:

• Account data and KYC records: Retained for a minimum of five (5) years following account closure to meet AML and regulatory record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications: Retained for three (3) years from the date of the relevant interaction.
• Usage and analytics data: Retained in identifiable form for up to two (2) years; thereafter anonymised and retained indefinitely for statistical purposes.
• Responsible gambling data: Self-exclusion records and responsible gambling interventions are retained for a minimum of five (5) years following the expiry of any exclusion period to prevent re-registration during an active exclusion.
• Marketing preferences: Retained until you withdraw consent or request deletion, subject to overriding legal retention requirements.

Upon expiry of the applicable retention period, personal data will be securely deleted, destroyed, or irreversibly anonymised in accordance with our data disposal procedures.

Subject to applicable data protection law, you hold the following rights in relation to the personal data that MMC996 processes about you:

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may also update certain account details directly from within your Account settings.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances, you may request that we delete your personal data. Note that this right is subject to our legal obligations to retain certain data (e.g., AML and transaction records) and cannot override those obligations.
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in specified circumstances, for example where you contest the accuracy of the data or have objected to processing.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where it is based on legitimate interests, including for direct marketing purposes. Where you object to direct marketing, we will cease such processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

To exercise any of the above rights, please contact our Data Support team via live chat or email at [email protected] (plain text — not a link). We will respond to verifiable requests within thirty (30) calendar days. We may request proof of identity before processing your request to prevent unauthorised access to your data.

The MMC996 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from any individual under the age of 21. Our registration process includes age verification steps designed to prevent minors from creating accounts.

If we become aware — through our own review, a parental report, or any other means — that we have inadvertently collected personal data from a person under the age of 21, we will:

• Immediately suspend the relevant account pending investigation.
• Permanently close the account and delete all associated personal data as soon as reasonably practicable.
• Forfeit any balance in the account and report the matter to relevant authorities where required by law.

If you are a parent or guardian and believe that your child has registered on or used the MMC996 Platform, please contact our support team immediately via live chat so that we can investigate and take appropriate action.

MMC996 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered Players by publishing a prominent notice on the Platform and updating the "Last Updated" date at the top of this document. For significant changes that affect the manner in which we process your data, we may seek your renewed consent.

We recommend that you review this Policy periodically to stay informed of how your personal data is being handled. Your continued use of the Platform following publication of any amended Policy constitutes your acceptance of those changes.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way MMC996 processes your personal data, please get in touch with our support and data team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly on the Platform. For data-related inquiries, please mention "Privacy Request" at the start of your chat session to be routed to the appropriate team member.
• Email (plain text — not a link): [email protected] — include "Privacy Policy Request" in your subject line for prompt handling. Responses are typically provided within 2–4 business hours.

For formal data subject rights requests, please provide your registered Account username, a clear description of your request, and a copy of a valid proof of identity document. This allows us to verify your identity before processing your request, in line with our security obligations.

This Privacy Policy was last reviewed and updated on 1 January 2026. © 2026 MMC996. All rights reserved.