Privacy Policy mudah365 — Personal Data Protection for Malaysian Members

This Privacy Policy sets out in detail how mudah365 ("we", "the mudah365 platform") collects, uses, stores, discloses, and protects your personal data when you use the mudah365.bet website and all related services.

Mudah365 understands that trust is the foundation of the relationship between a platform and its members. Over 250,000 Malaysian players have entrusted their personal data to us — and we take that trust seriously. We never treat any information you provide lightly, whether it is your name, phone number, or payment method details such as your Touch 'n Go eWallet or DuitNow.

This Policy applies to all mudah365 users, including website visitors, registered members, active players, and former members. By continuing to use the mudah365 platform after reading this policy, you are deemed to have consented to how we manage your personal data.

Mudah365 only collects data necessary to provide quality, secure services that meet legal requirements. The following are the main categories of data we collect:

Mudah365 does not collect data unrelated to the provision of our services. We also do not store credit or debit card information directly — all payments are processed through licensed third-party secure payment gateways.

Mudah365 collects personal data through several clear and transparent channels:

• Account Registration: When you open a mudah365 account, you provide us directly with basic information such as your name, email address, and phone number.
• KYC Process (Identity Verification): For withdrawals or where required, you may be asked to upload a copy of your identity card or other supporting documents to verify your identity.
• Financial Transactions: When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX (Maybank2u, CIMB Clicks), our system records the transaction details required for processing.
• Platform Usage: Automatically when you browse and use the mudah365 platform, including cookie data, IP address, and your interaction history with the site.
• Customer Service Interactions: When you contact the mudah365 support team via live chat, email, or any other available channel.
• Authorised Third Parties: In certain situations such as payment verification, mudah365 may receive information from payment providers or authorised partners.

Personal data collected by mudah365 is used solely for the following purposes — we do not use your data for any purpose not listed here without first obtaining your consent:

• Account Management: Creating, maintaining, and managing your mudah365 account, including processing registrations, logins, and profile updates.
• Payment Processing: Ensuring your deposits and withdrawals via Malaysian eWallet or FPX are processed accurately, promptly, and securely.
• Platform Security: To detect and prevent fraud, money laundering, multiple account ownership, and any other unlawful activity that could compromise the security of the mudah365 platform and its members.
• Legal Compliance: To fulfil our obligations under applicable Malaysian law, including anti-money laundering (AML) requirements and the PDPA 2010.
• Responsible Gaming: Monitoring gaming patterns to identify signs of problem gambling and taking proactive steps to protect players who may need assistance.
• Service Improvement: Analysing aggregated (non-individual) usage data to understand how players use the mudah365 platform and make meaningful improvements.
• Service Communications: Sending important account notifications such as deposit confirmations, security alerts, and policy updates.

Mudah365 does not sell, rent, or share your personal data with third parties for their own marketing or commercial purposes. However, there are limited situations where we may need to share your data:

• Trusted Service Providers: Technology providers, payment platforms, game suppliers, and other service partners required to operate the mudah365 platform. All parties are bound by confidentiality agreements and may only use your data for purposes we have specified.
• Legal Compliance: Where required by a court order, law enforcement body, or relevant Malaysian government authority, mudah365 will disclose the necessary data in accordance with the lawful order received.
• mudah365 Rights Protection: In cases of suspected fraud, litigation, or to protect the rights and safety of mudah365 and its other members.
• Business Transfer: In the event of a merger, acquisition, or sale of mudah365 assets, user data may be transferred as part of that transaction. You will be notified before your data becomes subject to a different privacy policy.

In all of the above situations, mudah365 shares only what is strictly necessary (the "data minimisation" principle) and ensures that recipients maintain data protection standards equivalent to our own.

The mudah365 platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. The following are the types of cookies we use:

• Strictly Necessary Cookies: These cookies are required for the core functionality of the mudah365 platform, including login authentication and session security. They cannot be disabled.
• Performance & Analytics Cookies: Helping us understand how players use our platform — the most frequently visited pages, time spent, and any technical errors encountered. This data is collected in aggregate and anonymised form.
• Functional Cookies: Saves your preferences such as language, region, and display settings to provide a more personalised experience on your next visit to mudah365.
• Marketing Cookies: Used to display promotions and offers relevant to your interests. You may opt out of these cookies through your browser settings.

You can manage or disable cookies through your internet browser settings. Please note that disabling certain cookies may affect the functionality of the mudah365 platform and your overall experience.

Mudah365 continually invests in security infrastructure to ensure your data is protected at all times. Key security measures we have implemented include:

• End-to-End Encryption: All communications between your browser and mudah365 servers are encrypted using TLS 1.3 and SSL 256-bit — the highest standards currently available.
• Two-Factor Authentication (2FA): mudah365 members can enable two-factor authentication for added protection when logging in.
• Continuous Monitoring: Our systems are monitored around the clock by a dedicated security team to detect any suspicious activity or intrusion attempts.
• Strict Access Controls: Only authorised mudah365 staff with a legitimate business need are permitted to access members' personal data, and all access is logged and audited.
• Secure Backup: Data is regularly backed up to a separate secure location to ensure swift recovery in the event of any technical incident.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and mudah365's own policies, you have the following rights regarding your personal data. These rights are explained in detail in the sections below. To exercise any of these rights, you may contact mudah365 Customer Service via live chat available 24/7 or by email at support@mudah365.bet.

Mudah365 will process requests relating to your data rights within 30 business days from the date the request is received. For more complex requests, we may require up to 60 business days, and you will be notified accordingly.

Mudah365 does not retain your personal data for longer than is necessary for the purposes stated in this Privacy Policy or as required by law. As a general guideline:

• Active Account Data: Retained for the duration your mudah365 account is active and for a reasonable period following account closure.
• Financial & Transaction Data: Retained for a minimum of 7 years after the last transaction, in compliance with Malaysia's accounting and tax legal requirements.
• KYC Data (Identity Verification): Retained for 5 years after the business relationship is terminated, in compliance with anti-money laundering (AML) requirements.
• Log & Technical Data: Typically retained for 90 days for security purposes and technical troubleshooting.
• Customer Service Communications: Retained for 2 years to support service improvements and the resolution of any disputes that may arise.

Once the retention period expires, data will be securely deleted or anonymised so that it can no longer be linked to you personally.

If you have any questions, concerns, or complaints regarding how mudah365 handles your personal data, or wish to exercise any of the rights set out in this Privacy Policy, please contact us through the following channels. Our Data Protection team is ready to assist you.