mulia88 Privacy Policy

1 Data Controller

The data controller responsible for your personal data in connection with the mulia88 Platform is the mulia88 operating entity ("mulia88", "we", "us", "our") operating the website mulia88.win. mulia88 operates under international gaming authority guidelines and processes personal data in accordance with applicable data protection legislation.

If you have any questions about how mulia88 handles your personal data, you may contact the Data Protection team at [email protected]. This email address is for data-related enquiries; it is not a clickable link and should be typed directly into your email client.

2 Data We Collect

mulia88 collects the following categories of personal data from players:

mulia88 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data beyond what may be incidentally disclosed in responsible gaming communications initiated by the Player.

3 How We Collect Your Data

mulia88 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC, making deposits or withdrawal requests, contacting support, or completing any form or submission on the Platform.
• Automated collection: Technical and usage data collected automatically when you access and interact with the mulia88 Platform through cookies, log files, and analytics tools.
• Third-party sources: Identity verification data from KYC service providers; fraud screening data from anti-fraud partners; payment transaction data from e-wallet and banking partners including Touch n Go, Boost, GrabPay, and FPX-connected Malaysian banks.

4 Legal Basis for Processing

mulia88 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between mulia88 and the Player — including account creation, processing bets, executing deposits and withdrawals, and providing customer support.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC identity verification obligations, anti-money laundering (AML) obligations, and record-keeping requirements imposed by gaming regulatory frameworks.
• Legitimate interests: Processing carried out in mulia88's legitimate business interests, including fraud prevention, platform security, improving the Platform based on usage data, and responsible gaming monitoring — where those interests are not overridden by the Player's fundamental rights.
• Consent: Processing for marketing communications (email, SMS, in-platform notifications) where mulia88 relies on your consent, which you may withdraw at any time.

5 How We Use Your Data

mulia88 uses the personal data we collect for the following purposes:

• To create, verify, and manage your mulia88 Account;
• To process deposits, bets, and withdrawals, including verification of payment method ownership;
• To complete KYC identity verification as required by our operating framework;
• To detect and prevent fraud, money laundering, and other unlawful activity;
• To enforce the mulia88 Terms & Conditions, including the one-account-per-player rule and the 21+ age requirement;
• To provide customer support via live chat, WhatsApp, and email;
• To monitor responsible gaming indicators and contact players who may be at risk;
• To personalise the Platform experience based on your usage history and game preferences;
• To send promotional communications where you have provided consent or where permitted under applicable law;
• To maintain Platform security, detect technical issues, and improve Platform performance;
• To comply with applicable regulatory and legal obligations.

mulia88 does not use your personal data to make automated decisions that produce significant legal effects without human review. Responsible gaming alerts and fraud flags are reviewed by human staff before account-level action is taken.

6 Data Sharing & Disclosure

mulia88 does not sell your personal data. mulia88 may share your personal data with the following categories of recipients:

• KYC and identity verification providers: Third-party services used to verify identity documents submitted during the KYC process. These providers process data under strict confidentiality obligations.
• Payment processors: e-Wallet operators (Touch n Go, Boost, GrabPay), FPX banking network, and cryptocurrency processors required to execute deposits and withdrawals. These entities receive only the data necessary to process the transaction.
• Fraud and security partners: Anti-fraud and cybersecurity service providers that assist mulia88 in detecting and preventing unauthorised account access, duplicate accounts, and financial fraud.
• Gaming platform providers: Game studios and live casino stream providers whose products are integrated into the mulia88 Platform may receive session and game interaction data necessary to operate their games correctly.
• Regulatory and law enforcement authorities: mulia88 will disclose personal data to gaming regulators, financial intelligence units, and law enforcement agencies where required by applicable law or regulatory obligation.
• Professional advisors: Legal, audit, and compliance advisors who are bound by professional confidentiality obligations.

All third-party processors engaged by mulia88 are required to process personal data solely for the purposes specified by mulia88 and in accordance with applicable data protection requirements.

7 Cookies & Tracking Technologies

mulia88 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function — including session management, login state maintenance, and security tokens. These cannot be disabled without preventing use of the Platform.
• Analytics cookies: Used to understand how players navigate and use the Platform — which game sections are most accessed, where players exit, and how long sessions last. Data is aggregated and does not identify individual players.
• Functional cookies: Remember your preferences such as display language, last-viewed game section, and notification settings.
• Marketing cookies: Track whether you arrived at the Platform through a referral or promotional link. Used to attribute bonus eligibility and measure campaign effectiveness. Consent is sought before these cookies are placed.

You may manage non-essential cookie preferences through your browser settings. Disabling essential cookies will impair your ability to log in and use the Platform. mulia88 does not use third-party advertising networks that track you across unrelated websites.

8 Data Retention

mulia88 retains personal data for as long as is necessary for the purposes set out in this Policy and as required by applicable legal and regulatory obligations:

• Active Accounts: Personal data is retained for the duration of the active account relationship.
• Closed Accounts: Following account closure, mulia88 retains identity, transaction, and KYC records for a minimum of five (5) years from the date of closure in accordance with anti-money laundering record-keeping requirements applicable to online gaming operators.
• Support Communications: Live chat transcripts and email correspondence are retained for a minimum of two (2) years for quality assurance and dispute resolution purposes.
• Self-Excluded Players: Records of self-exclusion are retained for a minimum of seven (7) years to prevent reactivation requests that conflict with the self-exclusion commitment.

Where data is no longer required for legal or regulatory purposes, mulia88 will securely delete or anonymise it.

9 Data Security

mulia88 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and mulia88 servers;
• Encryption of stored personal data and payment information at rest;
• Restricted access controls — staff access to personal data is limited to those with a legitimate operational need;
• Regular security audits and penetration testing of the Platform infrastructure;
• OTP-based verification for sensitive account actions including new device logins and withdrawal requests;
• Continuous monitoring of Platform traffic for anomalies indicative of unauthorised access attempts.

While mulia88 applies industry-standard security practices, no online system is entirely immune to risk. Players are responsible for safeguarding their own login credentials. If you suspect your account has been compromised, contact mulia88 support immediately via live chat.

10 Your Data Rights

Subject to applicable law and any overriding legal obligation, you have the following rights in relation to your personal data held by mulia88:

• Right of Access: You may request a copy of the personal data mulia88 holds about you. mulia88 will respond to access requests within 30 days.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. Some corrections require re-verification of KYC documents.
• Right to Erasure: You may request deletion of your personal data where there is no overriding legal obligation to retain it. Note that regulatory record-keeping requirements mean that certain categories of data cannot be deleted immediately upon request.
• Right to Restriction: You may request that mulia88 restrict processing of your data while a correction or objection is being considered.
• Right to Data Portability: You may request that mulia88 provide your personal data in a structured, machine-readable format for transfer to another controller, where technically feasible.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including direct marketing. Where you object to marketing, mulia88 will cease that processing immediately.
• Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact mulia88 at [email protected] with the subject line "Data Rights Request" and your registered account details. mulia88 may need to verify your identity before processing the request.

11 Marketing Communications

mulia88 may send promotional communications — including bonus offers, new game alerts, and seasonal promotions (such as Chinese New Year specials popular with our Malaysian player community) — by SMS, email, or in-platform notification. mulia88 will only send marketing communications where you have provided consent or where permitted under applicable direct marketing provisions.

You may opt out of marketing communications at any time by contacting support or adjusting your communication preferences within your mulia88 Account settings. Opting out of marketing communications does not affect transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts.

12 Children's Privacy

The mulia88 Platform is strictly restricted to individuals aged 21 years and above. mulia88 does not knowingly collect personal data from persons under the age of 21. Where mulia88 discovers that personal data has been collected from a person under 21 — including through KYC verification — the relevant Account will be closed immediately, all data will be securely deleted where permissible by law, and any funds will be handled in accordance with applicable regulatory guidance. If you believe a person under 21 has accessed the Platform, please notify mulia88 support immediately.

13 International Data Transfers

mulia88's server infrastructure and some third-party service providers may be located in jurisdictions outside Malaysia. Where personal data is transferred internationally, mulia88 ensures that appropriate safeguards are in place — including standard contractual clauses or equivalent transfer mechanisms — to ensure that your data receives a level of protection consistent with applicable data protection requirements. mulia88 does not transfer personal data to jurisdictions that do not provide adequate data protection without ensuring such safeguards are in place.

14 Changes to This Privacy Policy

mulia88 may update this Privacy Policy from time to time to reflect changes in data processing practices, regulatory requirements, or Platform functionality. Material changes will be notified to registered players via in-platform notice or registered contact details prior to the effective date of the change. The effective date at the top of this Policy reflects the date of the most recent revision. Continued use of the mulia88 Platform following notification of a material change constitutes acknowledgment of the updated Policy.

15 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or mulia88's data processing practices, please contact: