MMG6 Privacy Policy

1Introduction

MMG6 ("Platform", "we", "us", "our") is the operator of the online gaming platform accessible at mmg6.cam. We are committed to protecting the privacy and personal data of all users who access, register with, or interact with our Platform ("Player", "User", "you").

This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by MMG6. It applies to all data collected through the Platform website, mobile-optimised interface, live chat support, email communications, and any other interaction with MMG6 services.

This Policy should be read together with our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference.

By creating an account or using the Platform, you confirm that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform immediately.

2Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or is capable of identifying a natural person, directly or indirectly, including name, identification number, contact details, financial information, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means MMG6, which determines the purposes and means of processing your personal data.
• "Data Processor" means any third party engaged by MMG6 to process personal data on MMG6's behalf and under MMG6's documented instructions.
• "Sensitive Personal Data" means a subset of personal data warranting enhanced protection, including financial account details, government-issued identification numbers, and health-related data where applicable.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
• "Cookies" means small data files placed on your browser or device by the Platform to enable functionality and analytics.

3Personal Data We Collect

MMG6 collects personal data that you provide directly, data generated through your use of the Platform, and data received from third-party service providers in connection with the operation of our services. The categories of personal data we collect are described below.

3.1 Data You Provide Directly

• Registration Data: Full legal name, date of birth, residential address, email address, and mobile phone number provided during account creation.
• Identity Verification (KYC) Data: Copies of your Malaysian Identity Card (MyKad) or passport, proof of address documents (such as bank statements or utility bills bearing your name and address), and ownership confirmation of payment methods used.
• Payment Data: Bank account numbers, e-wallet identifiers, cryptocurrency wallet addresses, and transaction references associated with your deposit and withdrawal activity. Full payment card numbers are not stored by MMG6 and are processed by our PCI-DSS compliant payment processors.
• Communication Data: Messages, queries, and records of your interactions with our customer support team through live chat, email, or any other communication channel.
• Preference Data: Game preferences, notification preferences, and responsible gambling settings you configure within your Account.

3.2 Data Collected Automatically

• Device and Technical Data: IP address, browser type and version, operating system, device type and identifiers, screen resolution, and time zone settings.
• Usage and Behavioural Data: Pages and game sections visited, time spent on the Platform, click patterns, search queries, game session data (bets placed, games played, session duration), and navigation pathways.
• Transaction Data: A record of all deposits, withdrawals, bonus claims, wagers placed, and game results associated with your Account.
• Log Data: System logs capturing login timestamps, IP addresses used to access your Account, and any security events such as failed login attempts.
• Cookie and Tracking Data: Data collected via cookies, web beacons, and similar tracking technologies as described in Clause 6.

3.3 Data Received from Third Parties

We may receive supplementary data from third-party identity verification providers, payment processors, fraud detection services, and analytics providers where such data is necessary to verify your identity, process payments, prevent fraud, or improve the Platform experience.

4Legal Basis for Processing

MMG6 processes your personal data only where a lawful basis for doing so exists. The applicable legal bases are:

• Performance of a Contract: Processing necessary to register your Account, operate your gaming activity, process deposits and withdrawals, and provide customer support is carried out on the basis of the contractual relationship established by your acceptance of our Terms & Conditions.
• Legal Obligation: We are required to collect and retain certain data — including KYC documentation and transaction records — to comply with applicable anti-money laundering (AML), counter-terrorist financing (CTF), and licensing obligations imposed on internationally licensed gaming operators.
• Legitimate Interests: We process certain data on the basis of our legitimate interests, including fraud detection and prevention, platform security, game integrity monitoring, and internal analytics to improve the player experience. We have assessed that these interests do not override your fundamental privacy rights.
• Consent: Where required by applicable law, and for non-essential processing such as marketing communications, we will seek your explicit consent. You may withdraw any consent given at any time by contacting our support team or updating your Account preferences.

5How We Use Your Personal Data

MMG6 uses collected personal data for the following purposes:

5.1 Account Operations

• Creating, maintaining, and managing your MMG6 Account.
• Verifying your identity and age (21+) as required by our licensing obligations.
• Processing deposits and withdrawals via Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Boost, GrabPay, and cryptocurrency channels.
• Administering bonus credits, loyalty points, and VIP tier progression.

5.2 Security, Fraud Prevention, and Compliance

• Detecting, investigating, and preventing fraudulent activity, money laundering, and other prohibited conduct.
• Monitoring for suspicious account behaviour or anomalous transaction patterns.
• Complying with applicable anti-money laundering and counter-terrorist financing requirements.
• Responding to lawful requests from competent regulatory or law enforcement authorities.

5.3 Customer Support and Communications

• Responding to your queries, complaints, and support requests.
• Sending transactional communications such as deposit confirmations, withdrawal notifications, and Account security alerts.
• Notifying you of material changes to these policies or the Platform's Terms & Conditions.

5.4 Platform Improvement and Analytics

• Analysing usage patterns to identify areas for Platform improvement.
• Monitoring game performance, load times, and technical stability.
• Conducting internal research into player behaviour to develop new features and game offerings.

5.5 Responsible Gambling Monitoring

MMG6 uses usage and transaction data to monitor for indicators of problematic gambling behaviour. Where our systems identify patterns consistent with gambling harm, we may proactively contact the relevant player, apply self-limit tools, or require a cooling-off period in accordance with our responsible gambling obligations.

6Cookies & Tracking Technologies

MMG6 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small data files stored by your browser when you visit mmg6.cam. They enable essential Platform functionality, remember your preferences, and provide us with analytics about how the Platform is used.

6.1 Types of Cookies We Use

• Strictly Necessary Cookies: These are essential for the Platform to function correctly. They enable secure login sessions, maintain your game state, process transactions, and prevent fraud. These cookies cannot be disabled without significantly impairing the Platform experience.
• Functional Cookies: These cookies remember your preferences — such as language settings, game layout preferences, and responsible gambling limit configurations — so they persist between sessions.
• Analytics Cookies: We use internal analytics tools to understand how players interact with the Platform. This data is aggregated and anonymised where possible and is used solely for internal improvement purposes.
• Security Cookies: Used to detect and prevent fraudulent or malicious activity, including bot detection and session authentication.

6.2 Managing Cookies

You may adjust your browser settings to refuse or delete non-essential cookies. Please note that disabling strictly necessary cookies will prevent you from accessing certain features of the Platform, including secure login and game sessions. Instructions for managing cookies in popular browsers are available through the help section of your browser software.

7Data Sharing & Disclosure

MMG6 does not sell, rent, or trade your personal data to third parties. We share personal data only in the following limited and controlled circumstances:

• Payment Processors: We share financial data (transaction amounts, account references) with our payment partners — including DuitNow operators, FPX gateway providers, e-wallet platforms (Touch 'n Go, Boost, GrabPay), and participating banks (Maybank, CIMB, Public Bank, Hong Leong) — solely for the purpose of processing your deposits and withdrawals.
• Identity Verification Providers: KYC documentation and identity data is shared with our licensed third-party verification partners to fulfil our age verification and AML compliance obligations.
• Fraud Prevention Services: Technical and behavioural data may be shared with fraud detection and security providers to identify and prevent fraudulent activity across the Platform.
• Game Content Providers: Pseudonymised session and game result data is shared with our game content suppliers for the purposes of game performance monitoring, RNG certification compliance, and jackpot administration.
• Legal and Regulatory Authorities: MMG6 will disclose personal data to competent regulatory, law enforcement, or judicial authorities where required to do so by applicable law, court order, or regulatory requirement. We will notify affected players of such disclosures unless prohibited from doing so by law.
• Corporate Transactions: In the event of a merger, acquisition, or asset sale involving MMG6, player data may be transferred to the successor entity. Affected players will be notified in advance and given an opportunity to request account deletion prior to transfer.

All third-party Data Processors engaged by MMG6 are required to handle personal data in accordance with documented data processing agreements that impose obligations equivalent to those applicable to MMG6 under this Privacy Policy.

8Data Retention

MMG6 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active Account plus a minimum of five (5) years following account closure, to comply with anti-money laundering record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• KYC Documentation: Retained for a minimum of five (5) years following the completion of the verification process, or five (5) years from account closure, whichever is later.
• Support and Communication Records: Retained for three (3) years from the date of the last interaction, unless a longer period is necessary for ongoing dispute resolution.
• Analytics and Behavioural Data: Aggregated anonymised analytics data may be retained indefinitely. Individual usage data is anonymised or deleted after twenty-four (24) months.
• Marketing Preferences: Records of consent and opt-out decisions are retained for the duration of the consent or until a withdrawal request is received plus three (3) years.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is technically constrained by backup systems, data is quarantined and excluded from active processing until it is permanently overwritten.

9Data Security

MMG6 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• Encryption in Transit: All data transmitted between your browser or device and the MMG6 Platform is encrypted using TLS 1.2 or higher with 256-bit SSL certificates.
• Encryption at Rest: Sensitive data stored on MMG6 servers — including KYC documents and financial data — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorised MMG6 personnel on a strict need-to-know basis. Multi-factor authentication is required for all administrative access to production data systems.
• Intrusion Detection: Our infrastructure is monitored continuously by automated intrusion detection and anomaly identification systems.
• Penetration Testing: MMG6 commissions regular independent security penetration tests of the Platform and its underlying infrastructure.
• Incident Response: We maintain a documented data breach incident response procedure. In the event of a breach affecting your personal data, we will notify you and relevant authorities as required by applicable law, without undue delay.

10International Data Transfers

MMG6 operates as an internationally licensed platform, and your personal data may be stored on and processed by servers located outside of Malaysia. Where personal data is transferred to jurisdictions that may not provide equivalent data protection standards to those applicable in Malaysia, MMG6 implements appropriate safeguards to ensure that such transfers occur lawfully and securely.

Such safeguards include contractual clauses binding Data Processors to data protection obligations equivalent to those described in this Privacy Policy, and the use of service providers operating in jurisdictions subject to internationally recognised data protection frameworks.

11Your Data Rights

Subject to applicable law and certain limitations related to our legal and regulatory obligations, you hold the following rights with respect to your personal data held by MMG6:

11.1 Exercising Your Rights

To exercise any of the rights listed above, please contact MMG6's support team through the 24/7 live chat available on the Platform, or by email at [email protected]. Please include your Account username and a clear description of the right you wish to exercise.

We will acknowledge your request within 48 hours and provide a substantive response within 30 days of receipt. Where a request is complex or voluminous, we may extend this period by up to a further 30 days, notifying you of the extension and the reasons for it.

12Minors & Age Policy

MMG6 operates a strict 21 years and above policy. The Platform is not intended for and should not be used by individuals under the age of 21. MMG6 does not knowingly collect personal data from any person under the age of 21.

All Account registrations are subject to mandatory age verification during the KYC process. Where MMG6 discovers or reasonably suspects that a player is under the age of 21, the Account will be immediately suspended, all pending transactions reversed or voided, any accrued winnings forfeited, and the Account permanently closed in accordance with our Terms & Conditions.

For more information on our age verification procedures and parental controls, please refer to our Responsible Gambling policy.

13Third-Party Services & Links

The MMG6 Platform integrates services from third-party providers necessary for the operation of payment processing, identity verification, game content delivery, and platform analytics. These providers operate under their own privacy policies, and MMG6 is not responsible for the data practices of any third party beyond our contractual obligations as Data Controller.

MMG6's privacy practices do not extend to any external website or service that may be linked from the Platform in informational contexts. You access any third-party services at your own risk and are encouraged to review the applicable privacy documentation before providing personal data to any external provider.

Our key third-party integrations relevant to data processing include payment gateway operators (DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and bank API partners including Maybank, CIMB, Public Bank, and Hong Leong), KYC and identity verification providers, game content suppliers, and cybersecurity and fraud detection services.

14Amendments to This Privacy Policy

MMG6 reserves the right to amend this Privacy Policy at any time. Material changes — such as changes to the categories of data collected, new purposes for processing, or the introduction of new third-party data processors — will be communicated to registered players via in-platform notification or email to the registered address at least 7 days prior to the effective date, where practicable.

Minor updates, such as corrections of typographical errors or clarifications that do not materially affect your rights, may be made without specific prior notification. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision.

Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the amended Policy, you should close your Account and cease using the Platform.

15Contact Us

If you have any questions, concerns, or formal requests regarding this Privacy Policy or the processing of your personal data, please contact MMG6 through the following channels:

• 24/7 Live Chat: Available directly on the Platform. This is the fastest channel for privacy enquiries and data subject access requests.
• Email: [email protected] — Please include "Privacy Enquiry" in the subject line and provide your Account username. Responses to email queries are typically provided within 24–48 hours.

For formal data subject requests under Clause 11, please use either of the above channels and state clearly which right you are seeking to exercise, together with sufficient information to verify your identity and Account.

This Privacy Policy was last reviewed and updated on 1 January 2026. This version supersedes all prior versions of the MMG6 Privacy Policy.