Privacy Policy Mulia189 — Malaysian Player Data Protection

1 Introduction — Mulia189's Privacy Commitment

Mulia189 ("we", "the platform") values the privacy of every member who entrusts us with their personal data. This Privacy Policy clearly and transparently explains how Mulia189 collects, uses, stores, protects and discloses your personal information when you use our online entertainment platform at mulia189.best.

This policy is formulated in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and adheres to the seven data protection principles established under the Act — the General Principle, Notice and Choice Principle, Disclosure Principle, Security Principle, Integrity Principle, Access Principle, and Data Transfer Principle. Mulia189 is committed to ensuring your rights as a data subject are fully respected.

This Privacy Policy should be read together with Terms & Conditions Mulia189 and policies Responsible Gaming us for a complete overview of your rights and responsibilities as a member of our platform.

2 Personal Information We Collect

Mulia189 only collects personal data that is strictly necessary to deliver our services safely and effectively. We do not collect excessive data that is irrelevant to the purposes of our services. The categories of data we collect are as follows:

Data you provide directly during registration:

• Full name as per Malaysian identification document
• Active Malaysian mobile number (for OTP verification)
• A valid email address
• Date of birth (for 18+ age verification)
• MyKad or passport number (collected during the KYC/identity verification process)

Financial data for transaction processing:

• Malaysian bank account numbers (Maybank, CIMB, Public Bank, Hong Leong, AmBank, RHB, and others)
• Name and e-wallet account number (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow)
• Records of all deposit and withdrawal transactions, including amounts, dates, and payment methods

Automatically collected usage data:

• IP address and approximate location information (city/state level, not precise address)
• Device type, operating system, and web browser version in use
• Login records including time, date and approximate location
• Betting activity records including games played, bet amounts and outcomes
• Cookie and similar tracking technology information (further details in Section 6)

3 How We Use Your Personal Data

Mulia189 uses the personal data we collect solely for the following legitimate and stated purposes. We do not use your data for any other purpose without obtaining your fresh consent:

• Account Management and Operations: Creating and managing your Mulia189 account, processing deposits and withdrawals, and providing access to all games and platform services including slots, live casino, football Sports Betting, cricket, badminton, and poker.
• Identity Verification (KYC): Fulfilling the "Know Your Customer" requirements mandated by Malaysian law in relation to anti-money laundering and counter-terrorism financing.
• Platform Security: Detecting and preventing fraud, unauthorised access, bot usage, collusion in poker games and other unlawful activities that could compromise the integrity of the platform and the safety of other members.
• Service Communications: Sending important account-related notices such as deposit confirmations, withdrawal confirmations, security alerts, and updates to terms or policies that require your attention.
• Marketing (With Consent): Sending you information about Mulia189's latest promotions, new bonuses and platform features that may interest you. You can opt out of marketing communications at any time via the unsubscribe link in our emails or by contacting our support team.
• Responsible Gambling: Monitoring gameplay patterns to identify players who may benefit from responsible gambling support, and to comply with the self-exclusion control requirements set by our members.
• Product Improvement: Analysing usage patterns on an aggregated (not individual) basis to understand the most-used features, identify technical issues and make better product development decisions for the Mulia189 community as a whole.
• Legal Compliance: Fulfil reporting obligations to the relevant Malaysian regulatory bodies and authorities in accordance with applicable laws, including retaining financial transaction records for the legally required retention period.

4 Third-Party Data Sharing & Disclosure

Mulia189 does not sell, rent or trade members' personal data to any third party for their own marketing purposes. Disclosure to third parties only occurs in the following limited situations, and all third parties involved are bound by strict confidentiality obligations:

• Payment Service Providers: Payment platforms such as Touch 'n Go, GrabPay, Boost, ShopeePay and the FPX network (Maybank2u, CIMB Clicks and other Malaysian banks) receive the information necessary to process your financial transactions. They operate under their own privacy policies and are not permitted to use your data for any other purpose.
• Identity Verification Provider: Third-party services that assist us in verifying member identities during the KYC process receive a copy of the submitted identification documents. All such providers are bound by strict data protection agreements with Mulia189.
• Game Providers: Third-party game software providers that supply slots, live casino, and other games receive anonymised session identifiers (not full personal data) to enable gameplay to function correctly.
• Legal Authority: Mulia189 will disclose personal data when required by court order, law enforcement summons, or other mandatory reporting obligations under Malaysian law. In each such case, we disclose only the minimum data necessary to fulfil the relevant legal obligation.

5 Our Data Security Measures

Mulia189 invests significantly in security infrastructure to protect our members' personal data. The technical and organisational measures we employ include:

• Encryption in Transit: All data transmitted between your device and Mulia189 servers is protected with TLS 1.3 — the latest and most secure encryption protocol available today.
• Encryption at Rest: Sensitive data such as bank account numbers, MyKad numbers, and financial information is stored in encrypted form using AES-256 in our databases — even Mulia189's internal staff cannot view this data in its original form.
• Internal Access Controls: Only Mulia189 staff who require access to specific data in order to perform their job duties are permitted to access it. All access is recorded in audit logs that are continuously monitored.
• Regular Security Audits: Mulia189 conducts regular penetration testing and vulnerability assessments by independent cybersecurity firms to identify and address potential weaknesses before they can be exploited.
• 24/7 Monitoring: Our cybersecurity team continuously monitors the Mulia189 platform infrastructure to detect any suspicious activity, unauthorised access attempts or other security threats.
• Two-Factor Authentication: Mulia189 offers and actively encourages the use of two-factor authentication (2FA) on all member accounts as an additional layer of security beyond passwords.

While Mulia189 takes every reasonable measure to protect your data, no security system can be guaranteed 100% secure against all threats. You also play an important role in keeping your account safe — by using a strong password, not sharing your login credentials, and promptly reporting any suspicious activity to us.

6 Cookies & Tracking Technologies

Mulia189 uses cookies and similar tracking technologies to enhance the user experience, maintain platform security and understand how our platform is used. The types of cookies we use are as follows:

• Essential Cookies (Cannot Be Disabled): These cookies are required for core platform functions such as staying logged in during a session, account security, and transaction processing. Without them, the Mulia189 platform cannot function properly.
• Performance Cookies: Used to gather information on how members use the platform — which pages are visited most frequently, how long sessions last, and where technical errors occur. This information is used in aggregated form to improve platform performance.
• Functional Cookies: Allows the platform to remember your preferences — such as your chosen language, favourite games and display settings — so you don't have to reconfigure them each time you log in.
• Session Cookies: Temporary cookies that are automatically deleted when you close your browser. Used solely to track activity during the current session for security purposes.

You can manage cookie settings through your web browser. Most modern browsers allow you to view, delete and block cookies. However, disabling essential cookies may affect the functionality of the Mulia189 platform. For detailed instructions on managing cookies in your browser, please refer to your browser's help documentation.

7 Your Rights Under Malaysia's PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights, which Mulia189 is committed to respecting and facilitating:

• Right of Access: You have the right to request a copy of the personal data Mulia189 holds about you. Mulia189 will provide this information within 21 business days from the date a complete request is received.
• Right to Correction: If the personal data we hold about you is inaccurate, incomplete, or out of date, you have the right to request a correction. Some corrections can be made directly through your account panel; others will require document verification.
• Right to Opt Out of Marketing Processing: You may at any time object to the processing of your data for direct marketing purposes. This does not affect your receipt of essential service communications related to your account.
• Right to Object: In certain circumstances, you have the right to object to the processing of your personal data. Please note that this right is subject to legal obligations that may override your objection in specific cases.
• Right to Erasure (Within Certain Limits): You may request the deletion of your personal data. However, this right is not absolute — Mulia189 may need to retain certain data to fulfil legal obligations, such as financial transaction records required under Malaysian law.

To submit any of the above rights requests, please contact us at support@mulia189.best stating the type of request, your full name, and your Mulia189 account number. We may require additional identity verification before processing your request to ensure your data security is not compromised by unauthorised submissions.

8 Protection of Children's Data

Mulia189 does not provide services to individuals under the age of 18 and does not knowingly collect personal data from children. Our platform has a strict age verification process at registration to prevent access by underage individuals.

If Mulia189 discovers that we have inadvertently collected personal data from an individual under the age of 18, we will take immediate steps to delete that data and close the account in question. Parents or guardians who believe their child has registered a Mulia189 account without authorisation are encouraged to contact us immediately at support@mulia189.best for prompt action.

Mulia189 is also committed to cooperating with Malaysian authorities in any investigation related to platform access by underage individuals. Protecting young people is a shared responsibility that we take seriously.

9 Cross-Border Data Transfers

In the course of operating the Mulia189 platform, some of your personal data may be transferred to, stored in, or processed in countries outside Malaysia — for example, on backup servers or technical infrastructure operated by international-grade cloud service providers.

Mulia189 ensures that any cross-border data transfers are carried out in accordance with Section 129 of Malaysia's PDPA, which requires a level of protection equivalent to that afforded by Malaysian law. This is achieved through:

• Data transfer agreements containing standard protection clauses with all overseas service providers
• Use of cloud service providers with internationally recognised security certifications
• Periodic assessments of data protection standards in destination countries to ensure an adequate level of protection

Where possible and practical, Mulia189 prioritises storing and processing Malaysian members' data within Malaysia to minimise the need for cross-border data transfers.

10 Changes to This Privacy Policy

Mulia189 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our privacy practices, technology, relevant legislation, or new business circumstances.

When we make significant changes to this Policy, we will notify you through:

• A clear notice within the Mulia189 platform upon login
• Email to the address registered to your account
• Update the "Effective Date" at the top of this document

We encourage you to review this Privacy Policy periodically to stay informed about how Mulia189 protects your personal data. Your continued use of the Mulia189 platform after any changes take effect will be considered your acceptance of the updated Policy.

11 Contact Us — Privacy & Data Enquiries

If you have any questions, concerns, or complaints regarding how Mulia189 handles your personal data, we strongly encourage you to reach out to us. Our privacy team is fluent in Bahasa Malaysia and is familiar with the Malaysian data protection context.

You can reach us via:

• Privacy Email: support@mulia189.best — include "Privacy Enquiry" in the subject line of your email
• Live Chat: Available 24/7 within the Mulia189 platform or app — select the "Privacy & Data" category when starting a chat session
• Official Address: Mulia189, mulia189.best — for official correspondence relating to PDPA rights requests

Mulia189 is committed to acknowledging your request within 3 business days and providing a substantive response within 21 business days. If your request is complex or requires a thorough review, we will notify you within the first 21 days and provide a realistic estimated completion date.

If you are not satisfied with Mulia189's response to your privacy concern, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia under the provisions of PDPA 2010.