mmg6 Privacy Policy

1. Scope and Controller Identity

This Privacy Policy applies to all personal data processed by mmg6 in connection with the operation of the mmg6 online gaming platform available at mmg6.app, including all associated gaming products, account services, payment processing integrations, and customer support interactions.

For the purposes of applicable data protection legislation, mmg6 acts as the data controller in respect of personal data collected from Players and site visitors. References to "mmg6", "we", "us", or "our" in this Policy refer to the entity operating the mmg6 Platform and responsible for your personal data.

This Policy does not apply to third-party websites or services that may be linked to or from the mmg6 Platform. mmg6 is not responsible for the privacy practices of any third-party operator.

2. Personal Data We Collect

mmg6 collects the following categories of personal data:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification number (e.g., Malaysian MyKad number or passport number) collected during account registration and KYC verification.
• Contact Data: Mobile phone number and email address used for account registration, communication, and OTP delivery.
• Financial Data: Payment method details sufficient to process deposits and withdrawals (e.g., bank account details, e-wallet account identifiers such as Touch 'n Go or Boost registered mobile number). mmg6 does not store full card numbers or CVV codes.
• Transaction Data: Records of all deposits, withdrawals, wagers placed, and gaming activity conducted through your mmg6 account.
• Technical Data: IP address, device identifiers, browser type and version, operating system, screen resolution, session timestamps, and geolocation data (country/region level) collected automatically when you access the Platform.
• Usage Data: Information about how you navigate and use the mmg6 Platform, including pages visited, games played, bet history, time on site, and interaction patterns.
• Communications Data: Records of your correspondence with mmg6 support via live chat, email, or any other channel, including the content of support conversations.
• Responsible Gaming Data: Records of any responsible gaming tool settings you have applied, including deposit limits, session reminders, and self-exclusion requests.

3. How We Collect Your Data

mmg6 collects personal data through the following means:

• Direct provision: Information you provide when registering an account, completing KYC, making deposits or withdrawals, contacting support, or updating your account settings.
• Automated collection: Technical and usage data collected automatically via cookies, server logs, and similar tracking technologies when you access the mmg6 Platform.
• Third-party sources: Identity and address verification data from licensed KYC service providers; fraud screening signals from payment processors and anti-fraud partners; geolocation data from IP resolution services.

4. Purposes and Legal Basis for Processing

mmg6 processes your personal data for the following purposes and on the following legal bases:

• Account administration and service delivery — to create and manage your mmg6 account, process deposits and withdrawals, and provide access to all gaming products. Legal basis: performance of contract.
• Identity verification and KYC compliance — to verify your identity, confirm minimum age (21+), and satisfy anti-money laundering (AML) and know-your-customer (KYC) obligations. Legal basis: legal obligation.
• Fraud prevention and security — to detect, investigate, and prevent fraudulent transactions, unauthorised account access, and abuse of Platform services. Legal basis: legitimate interests.
• Regulatory compliance — to comply with obligations under applicable gaming licensing conditions, financial crime regulations, and data protection laws. Legal basis: legal obligation.
• Customer support — to respond to your inquiries, resolve disputes, and administer responsible gaming requests. Legal basis: performance of contract / legitimate interests.
• Responsible gaming monitoring — to identify potential problem gambling indicators and apply responsible gaming interventions in accordance with licensing obligations. Legal basis: legal obligation / legitimate interests.
• Platform improvement and analytics — to understand how the Platform is used, diagnose technical issues, and improve the user experience. Legal basis: legitimate interests.
• Marketing communications — to send you promotional offers and updates about mmg6 products where you have consented to receive such communications. Legal basis: consent. You may withdraw consent at any time via your account settings or by contacting support.

5. Disclosure of Personal Data to Third Parties

mmg6 does not sell your personal data to third parties. mmg6 may share personal data with the following categories of recipients where necessary for the purposes described in this Policy:

• Payment processors and e-wallet providers (e.g., Touch 'n Go, Boost, DuitNow, FPX banking partners) to process deposits and withdrawals.
• KYC and identity verification providers engaged to assist with age verification and document validation.
• Fraud prevention and AML screening services to assess transaction risk and detect suspicious activity.
• Gaming software and content providers who supply casino, slots, and other game content accessible via the mmg6 Platform, to the extent required for game session management.
• IT service providers and cloud infrastructure operators who host and support the mmg6 Platform under data processing agreements that restrict their use of your data.
• Regulatory and licensing authorities as required under mmg6's gaming licence conditions and applicable law.
• Law enforcement and governmental authorities where mmg6 is legally compelled to disclose information.

All third parties engaged by mmg6 to process personal data on our behalf are required to handle that data in accordance with applicable data protection standards and only for the purposes for which it was shared.

6. International Data Transfers

The mmg6 Platform is operated from servers located in jurisdiction(s) outside Malaysia. As a result, your personal data may be transferred to and processed in countries other than Malaysia. Where such transfers occur, mmg6 takes reasonable steps to ensure that appropriate safeguards are in place to protect your personal data in accordance with applicable data protection standards, including the use of contractual protections with data recipients.

By registering an account on the mmg6 Platform, you acknowledge that your personal data may be transferred, stored, and processed outside of Malaysia.

7. Data Retention

mmg6 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, audit, and dispute resolution obligations. Specific retention periods include:

• Active account data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, to satisfy AML record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• KYC and identity documents: Retained for a minimum of five (5) years from account closure or the date of the relevant KYC check, whichever is later.
• Support correspondence: Retained for a minimum of two (2) years from the date of the last interaction in a support thread.
• Marketing consent records: Retained for the period during which consent is active, plus evidence of consent for a minimum of two (2) years after withdrawal.

On expiry of the applicable retention period, personal data is securely deleted or anonymised.

8. Cookies and Tracking Technologies

The mmg6 Platform uses cookies and similar tracking technologies to enable Platform functionality, maintain your login session, remember your preferences, and collect analytics data about Platform usage.

The categories of cookies used include:

• Strictly necessary cookies: Required for the Platform to function. These cannot be disabled without breaking core features such as login session management and wallet access.
• Functional cookies: Remember your preferences such as language settings and responsible gaming limit configurations.
• Analytics cookies: Collect aggregated, anonymised data about how visitors use the Platform to help mmg6 improve performance and user experience. No personally identifiable data is shared with analytics providers in a form that identifies you individually.
• Security cookies: Used to detect and prevent fraudulent activity, including bot detection and login anomaly identification.

You may control non-essential cookie use via your browser settings. Disabling strictly necessary cookies will impair Platform functionality. mmg6 does not use third-party advertising cookies or behavioural targeting cookies.

9. Security of Personal Data

mmg6 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the mmg6 Platform.
• Encrypted storage of sensitive account data, including hashed password storage (passwords are never stored in plain text).
• Access controls ensuring that mmg6 personnel can only access personal data on a need-to-know basis for legitimate operational purposes.
• Regular security assessments and penetration testing of Platform infrastructure.
• Incident response procedures for detecting, reporting, and managing personal data breaches.

While mmg6 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for keeping your mmg6 login credentials confidential and for notifying us promptly of any suspected unauthorised account access.

10. Your Rights as a Data Subject

Subject to applicable data protection laws, you have the following rights in respect of your personal data held by mmg6:

• Right of access: You may request a copy of the personal data mmg6 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to mmg6's legal retention obligations.
• Right to restriction of processing: You may request that mmg6 restrict processing of your data in certain circumstances, for example while a dispute is pending.
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request transfer of your data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including processing for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, contact mmg6 support. mmg6 will respond to data subject requests within a reasonable timeframe, and in any event within 30 days of receipt. mmg6 may require identity verification before processing a data subject request.

11. Children and Minors

The mmg6 Platform is strictly intended for individuals aged 21 years and above. mmg6 does not knowingly collect personal data from individuals under the age of 21. If mmg6 becomes aware that it has collected personal data from a minor, that data will be deleted promptly and the associated account closed. Parents or guardians who have reason to believe that a minor has registered on the mmg6 Platform are encouraged to contact support immediately.

12. Changes to This Privacy Policy

mmg6 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or Platform features. The "Last Updated" date at the top of this Policy will be revised accordingly. Where changes are material, mmg6 will notify registered Players via the contact details on file. Continued use of the Platform following notification of a material change constitutes your acceptance of the revised Policy.

13. Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have a complaint about how mmg6 handles your personal data, please contact the mmg6 support team via the live chat function available on the Platform, or in writing to the contact email displayed on the mmg6 website.

mmg6's support team will acknowledge privacy-related inquiries within 3 business days and aim to resolve them within 30 days. If you are not satisfied with mmg6's response to a privacy complaint, you may have the right to lodge a complaint with the relevant data protection supervisory authority in the jurisdiction in which mmg6 holds its gaming licence.

Contact email (plain text — not a link): [email protected]