1. Introduction
1.1 mulia66 ("we", "us", "our") operates the online gaming information and entertainment platform accessible at mulia66.cam and its associated subdomains (the "Platform"). We act as the data controller for personal data processed through the Platform.
1.2 This Privacy Policy sets out the categories of personal data we collect from users ("you", "your") in Malaysia and elsewhere, the purposes for which we process that data, the basis on which we rely to do so, how long we retain it, and the rights available to you in relation to your personal information.
1.3 mulia66 is committed to protecting the personal data of Malaysian users in a manner consistent with internationally recognised data-protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, confidentiality and accountability.
1.4 By registering an account, making a deposit, using any feature of the Platform or otherwise providing your personal information to mulia66, you acknowledge that you have read and understood this Privacy Policy and consent to the processing described herein to the extent that consent is the applicable legal basis.
2. Definitions
2.1 For the purposes of this Privacy Policy, the following definitions apply:
- "Personal Data" means any information that identifies, or could reasonably be used to identify, a specific natural person, directly or indirectly. This includes names, identification numbers, contact details, financial data and device identifiers.
- "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, restriction and erasure.
- "Data Controller" means mulia66 as the entity that determines the purposes and means of processing Personal Data.
- "Data Processor" means any third party that processes Personal Data on behalf of mulia66 under a written data-processing agreement.
- "KYC" means the Know Your Customer identity-verification process, which may involve collection of government-issued identification, proof of address and biometric confirmation.
- "Cookies" means small data files placed on a user's device by a website to store session state, preferences and analytical information.
- "Malaysian User" means any individual accessing the Platform from within Malaysia or who identifies as a Malaysian resident during registration.
3. Data We Collect
3.1 mulia66 collects only the Personal Data necessary to provide, secure and improve the Platform. The categories of data we collect are set out in the table below.
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality | Account registration, KYC verification, age check |
| Contact Data | Email address, Malaysian mobile number, city (e.g., Kuala Lumpur, Penang) | Account management, support, security alerts |
| Document Data | MyKad, driver's licence, passport image; proof-of-address document dated within 3 months | KYC compliance, fraud prevention, AML obligations |
| Financial Data | MYR deposit and withdrawal records; e-wallet references (Touch 'n Go, Boost, GrabPay, DuitNow, FPX); bank account details (Maybank, CIMB, Public Bank, RHB, Hong Leong) | Payment processing, transaction history, fraud detection |
| Technical Data | IP address, browser type, operating system, device ID, session timestamps | Security monitoring, geolocation checks, fraud prevention |
| Usage Data | Pages visited, features used, session duration, game history | Platform improvement, responsible-gambling monitoring, personalisation |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions | Customer service, dispute resolution, quality assurance |
3.2 mulia66 does not intentionally collect Special Category Data (such as health information, racial or ethnic origin, political opinions or biometric data beyond identity-document photographs required for KYC) unless explicitly required by applicable law or regulatory obligation.
4. Collection Methods
4.1 mulia66 collects Personal Data through the following channels:
- Direct submission: When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team or respond to a survey, you provide Personal Data directly to mulia66.
- Automated collection: Technical and Usage Data is collected automatically as you interact with the Platform, through server logs, cookies and similar tracking technologies.
- Payment processors: Financial Data relating to transactions may be received from Malaysian payment partners including DuitNow, FPX operators, Touch 'n Go eWallet, Boost, GrabPay and participating banks such as Maybank, CIMB, Public Bank, RHB and Hong Leong.
- Third-party verification services: Identity verification and fraud-detection providers may share data with mulia66 as part of the KYC process.
- Publicly available sources: mulia66 may supplement account data with information obtained from publicly accessible registers or databases where this is necessary for compliance or fraud-prevention purposes.
5. Data Processing
5.1 mulia66 processes your Personal Data for the following purposes:
Account and Service Delivery
We use Identity, Contact and Financial Data to create and maintain your account, process deposits and withdrawals in MYR, deliver promotions you have elected to receive, and provide customer support in English, Bahasa Melayu and Chinese as described in our support-hub.
KYC and Regulatory Compliance
Document Data is processed to verify your identity, confirm you are aged 21 or above, satisfy anti-money-laundering obligations and comply with applicable international gaming regulatory requirements. KYC data is held for the period required by applicable law, which may extend beyond account closure.
Fraud Prevention and Security
Technical and Usage Data is analysed to detect and prevent unauthorised access, fraudulent transactions, duplicate account registration, collusive behaviour and other security threats. This is a legitimate interest of mulia66 that also protects you as a user.
Responsible Gambling Monitoring
Usage and Financial Data may be reviewed to identify patterns indicative of problem gambling, in line with our commitment to responsible-play standards. Where risk indicators are detected, mulia66 may contact the user proactively or apply account-level controls as described in our Responsible Gambling page.
Platform Improvement and Analytics
Aggregated and pseudonymised Usage Data helps mulia66 understand how Malaysian users interact with the Platform, which pages and features are most used, and where improvements to content, navigation and payment flows would be most beneficial.
Marketing and Promotions
Where you have given explicit consent, mulia66 may send promotional communications about bonuses, new features or responsible-gambling resources via email or on-site notification. You may withdraw marketing consent at any time through your account settings or by contacting our support team.
6. Legal Basis for Processing
6.1 mulia66 relies on the following legal bases for processing Personal Data:
- Contractual necessity: Processing required to perform our agreement with you, including account management, payment processing and customer support.
- Legal obligation: Processing required to comply with applicable laws, including KYC, anti-money-laundering and international gaming-regulatory requirements.
- Legitimate interests: Processing necessary for fraud prevention, platform security, responsible-gambling monitoring and the improvement of our services, where those interests are not overridden by your data-protection rights.
- Consent: Processing for marketing communications and non-essential cookies, where you have given freely given, specific, informed and unambiguous consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.
7. Data Sharing
7.1 mulia66 may share Personal Data with the following categories of third parties, strictly for the purposes described and subject to appropriate contractual safeguards:
- Payment processors and financial partners: Malaysian payment service providers including DuitNow, FPX operators, Touch 'n Go eWallet, Boost, GrabPay and participating banks (Maybank, CIMB, Public Bank, RHB, Hong Leong), for the purpose of processing deposits and withdrawals.
- KYC and identity-verification providers: Third-party services contracted to assist with identity verification, document authentication and fraud risk scoring.
- IT infrastructure and hosting providers: Cloud and server infrastructure partners that process Technical Data as part of Platform operation. All such providers are contractually obligated to process data only on mulia66's instructions.
- Analytics service providers: Pseudonymised Usage Data may be shared with analytics platforms to support Platform improvement; no directly identifiable data is shared for this purpose.
- Regulatory and law-enforcement authorities: mulia66 will disclose Personal Data to competent authorities where required to do so by applicable law, valid legal process or regulatory direction, and will take reasonable steps to notify affected users where legally permitted to do so.
- Professional advisers: Legal counsel, auditors and compliance consultants, subject to applicable professional confidentiality obligations.
7.2 Where Personal Data is transferred to processors or recipients outside Malaysia, mulia66 takes appropriate steps to ensure an equivalent level of data protection is maintained, including through the use of standard contractual clauses or other recognised transfer safeguards.
8. Data Retention
8.1 mulia66 retains Personal Data only for as long as is necessary for the purpose for which it was collected or as required by applicable law. The following indicative retention periods apply:
- Account and transactional data: Retained for the duration of the active account relationship plus a minimum of five (5) years after account closure, to satisfy anti-money-laundering and audit requirements.
- KYC documentation: Retained for at least five (5) years from the date of verification, or longer where required by applicable regulatory obligation.
- Support and communications data: Retained for up to two (2) years from the date of the last interaction, for dispute resolution and quality-assurance purposes.
- Usage and analytics data: Pseudonymised Usage Data may be retained for up to three (3) years for platform-improvement purposes.
- Marketing consent records: Retained for as long as the consent remains valid and for a period thereafter sufficient to demonstrate compliance.
8.2 Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised unless further retention is required by law or legitimate legal-claim purposes.
9. Security Measures
9.1 mulia66 implements a range of technical and organisational measures designed to protect Personal Data against unauthorised access, accidental loss, destruction or disclosure. These measures include:
- Transport Layer Security (TLS/SSL) encryption for all data in transit between your device and the Platform;
- Encryption at rest for sensitive stored data, including KYC documents and financial records;
- Role-based access controls limiting staff access to Personal Data on a strict need-to-know basis;
- Regular security assessments, penetration testing and vulnerability management processes;
- Incident-response procedures for detecting, reporting and addressing personal-data breaches in a timely manner.
9.2 Despite these measures, no information-security system can guarantee absolute protection. mulia66 does not accept liability for data breaches caused by circumstances beyond our reasonable control, including those resulting from a user's own security failures.
10. Cookies and Tracking Technologies
10.1 mulia66 uses cookies and similar tracking technologies to operate core Platform functions, remember user preferences, maintain secure session states and collect analytics data. The principal categories of cookies used are as follows:
- Strictly necessary cookies: Required for the Platform to function, including session authentication, fraud detection and load balancing. These cookies do not require consent as they are essential for the provision of the service.
- Functional cookies: Store your preferences, such as language settings and notification choices, to improve your experience on return visits.
- Analytics cookies: Collect aggregated, anonymised data about how users navigate the Platform, supporting content and feature improvements. These cookies are activated only where you have given consent.
- Marketing cookies: Used to deliver relevant promotional content where you have consented to receive marketing communications from mulia66. These are not used to share data with third-party advertisers.
10.2 You can manage or withdraw cookie consent at any time through your browser settings. Please note that disabling strictly necessary cookies may impair the functionality of the Platform. Detailed cookie controls are available in the cookie-preference panel accessible from the Platform footer.
11. User Rights
11.1 Subject to applicable law, Malaysian users and other data subjects have the following rights in relation to their Personal Data held by mulia66:
Right of Access
You may request a copy of the Personal Data mulia66 holds about you, together with information about how it is processed.
Right to Rectification
You may request correction of inaccurate or incomplete Personal Data. Account holders can update most contact details directly through account settings.
Right to Erasure
In certain circumstances, you may request deletion of your Personal Data. This right does not apply where retention is required by law or legitimate legal-claim purposes.
Right to Restriction
You may request that mulia66 restrict processing of your Personal Data in defined circumstances, such as when accuracy is disputed or an objection is pending.
Right to Data Portability
Where processing is based on consent or contractual necessity and carried out by automated means, you may request your data in a structured, commonly used format.
Right to Object
You may object to processing based on legitimate interests, including profiling. mulia66 will cease such processing unless compelling grounds exist that override your rights.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing. Marketing consent can be withdrawn via account settings.
Right to Lodge a Complaint
If you believe your data-protection rights have been infringed, you may lodge a complaint with the competent supervisory authority in your jurisdiction.
11.2 To exercise any of the above rights, please submit a written request to mulia66 using the contact details set out in Section 15. mulia66 will respond within thirty (30) calendar days, or such shorter period as may be required by applicable law. We may request identity verification before processing rights requests to protect user data from unauthorised access.
12. Minors and Age Control
12.1 The mulia66 Platform is an adults-only service. All users must be at least 21 years of age. Age verification is performed as part of the KYC process, and mulia66 may request documentary proof of age at any stage of the account lifecycle.
12.2 Where mulia66 discovers or has reasonable grounds to believe that Personal Data has been collected from a person below the minimum age, we will promptly delete that data, close the associated account and return any account balance held via a verified adult payment instrument where legally permissible.
13. Third-Party Links and Services
13.1 The mulia66 Platform may reference or link to third-party services, including Malaysian payment providers and responsible-gambling support organisations. This Privacy Policy does not extend to websites or services operated by third parties, and mulia66 is not responsible for the data-protection practices of any external service.
13.2 Users who access third-party services linked from the Platform do so at their own discretion and are advised to review the relevant third-party privacy policies before submitting personal information to those services.
14. Policy Changes
14.1 mulia66 reserves the right to update this Privacy Policy at any time to reflect changes in our data-processing practices, applicable law or regulatory requirements. The updated effective date will be reflected at the top of this page.
14.2 Where changes are material, mulia66 will provide reasonable advance notice to registered users through the email address on record or by means of a prominent on-site notice. Continued use of the Platform following such notice will constitute acceptance of the revised Policy.
14.3 We recommend that users review this Privacy Policy periodically to remain informed about how mulia66 protects their personal information.
15. Contact Us
15.1 If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data by mulia66, please contact our Data Protection team using the details below. The website email is displayed as plain text only and is not a clickable link:
Website email: [email protected]
Please include "Privacy Request" in the subject line of your enquiry and provide sufficient information for us to identify your account. Do not include full identity-document numbers or financial account credentials in your initial email.
15.2 mulia66 aims to acknowledge all privacy enquiries within five (5) business days and to resolve substantive requests within thirty (30) calendar days of receipt of all necessary information.
15.3 For information on our full Terms and Conditions, please visit our Terms & Conditions page. For responsible-gambling support resources and self-exclusion guidance, please visit our Responsible Gambling page.