Privacy Policy — mumu86

1 Definitions

The following definitions apply throughout this Privacy Policy:

Term	Meaning
"Personal Data"	Any information relating to an identified or identifiable natural person, including name, identification number, location data, IP address, or any factor specific to the physical, economic, or social identity of that person.
"Processing"	Any operation performed on Personal Data, whether automated or manual — including collection, recording, storage, retrieval, use, disclosure, transmission, combination, restriction, erasure, or destruction.
"Data Controller"	mumu86, the entity that determines the purposes and means of processing your Personal Data.
"Data Processor"	A third party that processes Personal Data on behalf of mumu86, under a contractual data processing agreement — for example, our KYC verification provider or payment gateway partner.
"Consent"	A freely given, specific, informed, and unambiguous indication by the data subject — through a clear affirmative act — that they agree to the processing of their Personal Data for a stated purpose.
"Member" / "You"	Any registered user of the mumu86 platform, or any visitor to https://mumu86.cam whose activity results in data being collected as described in this policy.

2 Data We Collect

mumu86 collects the following categories of personal data, depending on the nature of your interaction with the platform:

• Identity Data: Full legal name, date of birth, gender, and government-issued identification number (e.g., KTP number for Indonesian residents, or passport number for non-Indonesian nationals).
• Contact Data: Email address, mobile telephone number, and residential address (including city and province — for example, Jakarta, Surabaya, Bandung, Bali, or Medan).
• Financial Data: Bank account details (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OCBC NISP), e-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), and cryptocurrency wallet addresses (USDT, BTC, ETH). We do not store complete card numbers, CVV codes, or full banking credentials.
• KYC Documentation: Photographs or scanned copies of government-issued identity documents, proof-of-address documents, and selfie images submitted for identity verification purposes.
• Transaction Data: Records of all deposits, withdrawals, bets placed, games played, bonuses claimed, and account balance history.
• Technical Data: IP address, device type, operating system, browser type and version, time zone, screen resolution, and device identifiers collected automatically when you access the platform.
• Usage Data: Pages visited, features used, time spent on the platform, click-path data, game session records, and search queries entered on the site.
• Communications Data: Records of support interactions, including live chat transcripts, support ticket history, and email correspondence with the mumu86 support team.

3 How We Collect Your Data

mumu86 collects personal data through the following channels:

• Direct submission: Data you voluntarily provide during account registration, KYC verification, deposit and withdrawal requests, support queries, and promotional opt-ins.
• Automated collection: Technical and usage data collected automatically through cookies, pixel tags, server logs, and similar tracking technologies when you access and navigate the platform.
• Third-party sources: Identity verification data returned by our licensed KYC providers; fraud and sanctions screening data returned by our compliance partners; payment confirmation data returned by our payment processor integrations (BCA Virtual Account, BRI, OVO, GoPay, DANA, ShopeePay, LinkAja, and blockchain confirmation services for USDT/BTC/ETH).

4 Purpose of Processing

mumu86 processes your personal data only for clearly defined, legitimate purposes. The table below summarizes our primary processing activities and their purposes:

Processing Activity	Purpose
Account registration	To create and maintain your Member account and verify eligibility (age 21+, Indonesian residency or permitted access).
KYC verification	To confirm your identity, prevent underage gambling, comply with anti-money-laundering (AML) obligations, and meet internationally recognized responsible gaming standards.
Payment processing	To process deposits and withdrawals via local Indonesian banks, e-wallets, and cryptocurrency networks accurately and securely.
Platform operation	To deliver betting and gaming services — including sports betting on BRI Liga 1 and Champions League, live casino, togel (Indonesia's traditional numbers lottery), slot gacor (high-payout slots), and sabung ayam (cockfighting streaming) — and to record and settle all wagers correctly.
Fraud prevention	To detect and prevent unauthorized access, bonus abuse, multi-accounting, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
Customer support	To respond to queries, resolve complaints, and maintain records of support interactions for quality assurance and dispute resolution purposes.
Marketing communications	To send promotional offers, bonus notifications, and seasonal campaigns (e.g., Idul Fitri, Ramadhan, Indonesian Independence Day) — only where you have given explicit consent.
Legal compliance	To comply with applicable AML regulations, licensing conditions, and lawful orders from competent regulatory or law-enforcement authorities.

5 Legal Basis for Processing

mumu86 processes your personal data under the following legal bases, consistent with internationally recognized data protection principles:

• Contractual necessity: Processing required to perform our obligations under the Member Agreement — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable AML regulations, KYC mandates, and lawful orders from regulatory or law-enforcement authorities.
• Legitimate interests: Processing necessary to detect and prevent fraud, maintain platform security, conduct analytics for service improvement, and manage the technical operation of the platform — where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing and promotional communications, and for the use of non-essential cookies. You may withdraw your consent at any time by contacting support or adjusting you r cookie preferences in your browser settings.

6 Data Sharing & Disclosure

mumu86 does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and under binding confidentiality obligations:

• KYC and identity verification providers: Licensed third-party services engaged to verify your identity documents and confirm your eligibility to hold a mumu86 account. These providers process your identity data solely for verification purposes and are contractually prohibited from using it for any other purpose.
• Payment processors and financial institutions: Banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata), e-wallet operators (OVO, DANA, GoPay, ShopeePay, LinkAja), and cryptocurrency network service providers to whom we transmit the minimum financial data required to execute your deposit and withdrawal requests.
• Fraud prevention and compliance partners: Third-party screening services engaged to detect sanctions matches, politically exposed persons (PEPs), and patterns indicative of money laundering or fraudulent activity. Data shared with these providers is limited to identity and transaction records.
• Technology and hosting providers: Cloud infrastructure, content delivery, and platform-hosting providers who process technical and usage data on our behalf under data processing agreements that bind them to our privacy and security standards.
• Regulatory and law-enforcement authorities: Where mumu86 is legally compelled to disclose personal data — for example, in response to a lawful court order, regulatory audit, or AML reporting obligation — we will comply, and will notify you of the disclosure to the extent permitted by law.
• Business successors: In the event of a merger, acquisition, or transfer of substantially all assets of mumu86, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections. You will be notified of any such transfer prior to its completion.

7 International Data Transfers

As an internationally operated platform serving Indonesian members, some of the personal data we collect may be transferred to, stored in, or processed in countries outside of Indonesia. These transfers occur where our licensed KYC providers, fraud screening partners, or cloud infrastructure providers operate data centers in jurisdictions other than Indonesia.

Whenever personal data is transferred internationally, mumu86 ensures that appropriate safeguards are in place to maintain a standard of protection equivalent to that provided under recognized data protection frameworks. These safeguards include:

• Contractual data processing agreements incorporating internationally recognized standard contractual clauses.
• Transfers only to recipients in jurisdictions that have been assessed as providing an adequate level of data protection, or to recipients who have independently certified their compliance with equivalent data protection standards.
• Technical safeguards including end-to-end encryption for data in transit and at-rest encryption for stored personal data.

8 Data Retention

mumu86 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

Data Category	Retention Period
Account and identity data	Duration of account, plus a minimum of 5 years after account closure (AML/KYC obligation).
Transaction records	Minimum 5 years from the date of the transaction, in accordance with standard AML record-keeping requirements.
KYC documentation	Minimum 5 years after account closure or the conclusion of any outstanding investigation.
Support communications	3 years from the date of the last interaction, for quality assurance and dispute resolution purposes.
Technical and usage data	13 months from collection, unless retained for longer as part of an active fraud or compliance investigation.
Marketing consent records	Until consent is withdrawn, plus 12 months thereafter as proof of prior consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification. Where anonymization is used, the resulting data may be retained indefinitely for analytical and statistical purposes.

9 Security Measures

mumu86 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Our security posture includes:

• Encryption in transit: All data exchanged between your browser or app and the mumu86 platform is protected by 256-bit TLS/SSL encryption. No Personal Data is transmitted in plain text over the internet.
• Encryption at rest: Sensitive personal and financial data stored on mumu86 servers is encrypted at rest using AES-256 or equivalent encryption standards.
• Access controls: Access to personal data within mumu86 is strictly role-based. Only personnel who require access to specific data categories to perform their assigned duties are granted access, and all such access is logged and audited.
• Multi-factor authentication (MFA): MFA is enforced for all staff access to production systems containing personal data. We strongly encourage Members to enable two-factor authentication (2FA) on their accounts.
• Penetration testing and vulnerability management: mumu86 conducts regular security assessments, including third-party penetration testing, to identify and remediate vulnerabilities before they can be exploited.
• Data breach response: In the event of a personal data breach that poses a risk to your rights and freedoms, mumu86 will notify affected Members without undue delay and will take all reasonable steps to contain the breach and prevent further harm.

10 Cookies & Tracking Technologies

mumu86 uses cookies and similar tracking technologies to operate the platform, analyze usage patterns, and (where you have consented) deliver relevant promotional content. The following categories of cookies are used:

• Strictly necessary cookies: Essential to the functioning of the platform — for example, session authentication cookies that keep you logged in during a browsing session. These cannot be disabled without severely impairing platform functionality.
• Performance and analytics cookies: Used to collect aggregate, anonymized data about how Members use the platform — which pages are visited most frequently, where users encounter errors, and how navigation paths flow. This data helps us improve the platform experience.
• Functional cookies: Allow the platform to remember your preferences — such as your preferred currency display (IDR / Rp vs. USDT), language, and time zone (WIB, UTC+7 default for Jakarta and Java-based users).
• Marketing and retargeting cookies: Used only where you have given explicit consent, to track your browsing activity and present relevant promotions. You may withdraw consent for marketing cookies at any time.

You can manage or delete cookies at any time through your browser settings. Disabling strictly necessary cookies may impair your ability to use the mumu86 platform. Disabling performance or marketing cookies will not affect your access to core betting and gaming functionality.

11 Your Data Rights

As a Member of mumu86, you hold the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected]. We will respond within 14 business days of receiving a valid, verified request.

• Right of access: You have the right to request a copy of all personal data mumu86 holds about you, along with information about how it is being processed, the purposes for which it is held, and the categories of recipients to whom it has been disclosed.
• Right of rectification: You have the right to request correction of any inaccurate or incomplete personal data held by mumu86. Where feasible, you may update certain data directly via your account settings.
• Right of erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and no other legal basis for processing applies. This right is subject to our legal obligation to retain certain records as described in Section 8.
• Right to restrict processing: You have the right to request that mumu86 temporarily cease processing your personal data — for example, while a dispute regarding the accuracy of the data is being resolved — without requesting full deletion.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to mumu86 in a structured, commonly used, machine-readable format, and to request that we transmit that data directly to another service provider where technically feasible.
• Right to object: You have the right to object at any time to processing of your personal data for direct marketing purposes. Upon receipt of a valid objection, mumu86 will cease processing your data for marketing purposes immediately and without question.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

12 Protection of Minors

mumu86 is an adult-only platform. You must be at least 21 years of age to register an account and access any betting or gaming product on the platform. We do not knowingly collect personal data from individuals under the age of 21.

As part of our KYC verification process, all Members are required to submit proof of age before withdrawals are permitted and before deposit limits are raised above the default threshold. Where mumu86 discovers that a Member has misrepresented their age during registration, the account will be immediately suspended, all bonus funds will be voided, and any net winnings derived from bonus activity will be forfeited pending investigation.

13 Marketing Preferences

mumu86 sends promotional communications — including welcome bonus notifications, reload offers, seasonal campaign messages (e.g., campaigns tied to Idul Fitri, Ramadhan, Indonesian Independence Day 17 August, and Nyepi), and sports-betting promotions for BRI Liga 1, EPL, and Champions League fixtures — only to Members who have explicitly opted in to receive such communications.

You may withdraw your marketing consent and opt out of all promotional communications at any time by:

• Clicking the "Unsubscribe" link included in every marketing email we send.
• Contacting our support team at [email protected] and requesting removal from all marketing lists.

Opting out of marketing communications does not affect the delivery of transactional service communications — such as deposit confirmations, withdrawal notifications, and account security alerts — which are essential to the operation of your account and cannot be disabled while your account remains active.

14 Amendments to This Policy

mumu86 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services we offer. When a material change is made, we will notify active Members via their registered email address and display a prominent notice on the platform no fewer than 7 calendar days before the updated policy takes effect.

The "Last Updated" date at the top of this page will always reflect the date on which the most recent revision was published. Your continued use of the mumu86 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you may request voluntary account closure by contacting our support team.

15 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a complaint regarding the way mumu86 handles your personal data, please contact our support team in writing:

If you are not satisfied with our response to a complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction. mumu86 will cooperate fully with any such authority in the resolution of your complaint.

For issues related to responsible gaming, account self-exclusion, or deposit limits, please visit our dedicated Responsible Gaming page. For questions about our general terms of service, please refer to our Terms & Conditions.