mumu89 Privacy Policy

The following definitions apply throughout this Privacy Policy. Where the context requires, singular terms include the plural and vice versa.

• "mumu89" / "we" / "us" / "our" — The online gaming platform operated at mumu89.cam and all associated services, support channels, and digital properties.
• "Personal Data" — Any information that directly or indirectly identifies a natural person, including names, identity document numbers, email addresses, IP addresses, device identifiers, and financial data.
• "Processing" — Any operation performed on Personal Data, including collection, storage, use, transfer, disclosure, deletion, and destruction.
• "User" / "you" / "your" — Any natural person who accesses, browses, or registers on the mumu89 Platform, whether or not they hold an active Account.
• "Account" — A registered player profile on mumu89, created through the platform's registration process and linked to a verified identity.
• "KYC" — Know Your Customer: the identity and address verification process mandated by mumu89's anti-money laundering and responsible gaming obligations.
• "Cookie" — A small data file placed on your device by a website to enable session management, analytics, personalization, and security functions.
• "Third Party" — Any entity other than you or mumu89, including technology vendors, payment processors, game studios, and analytics providers who may have access to certain categories of your data under controlled conditions.

mumu89 collects Personal Data through multiple channels: directly from you during registration and KYC, automatically through your use of the Platform, and — in limited circumstances — from third-party service providers. The following categories of data may be collected:

mumu89 processes your Personal Data on one or more of the following legal bases:

• Contractual Necessity: Processing is required to fulfill our obligations under the Terms & Conditions you accept when registering an Account — including identity verification, transaction processing, and customer support delivery.
• Legal Obligation: Certain processing activities are mandated by applicable anti-money laundering (AML) regulations, financial crime prevention requirements, and responsible gaming obligations, including age verification and transaction monitoring.
• Legitimate Interests: mumu89 processes certain data to pursue its legitimate business interests, including fraud detection, platform security, abuse prevention, and service improvement — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where mumu89 relies on your consent as the basis for processing — such as sending promotional communications or placing non-essential cookies — you may withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawal of consent may be exercised via your Account settings or by contacting support.

mumu89 uses the Personal Data we collect for the following specific purposes. We do not use your data for any purpose that is incompatible with those listed here without first providing you with notice and, where required, obtaining your consent.

• Account Creation & Management: To register your Account, verify your identity through KYC, maintain your account settings, and communicate with you about your account status.
• Transaction Processing: To process IDR deposits and withdrawals via your nominated bank or e-wallet, reconcile transaction records, and investigate disputed or failed payments.
• Regulatory Compliance: To satisfy AML obligations, respond to lawful requests from competent authorities, and maintain records as required by applicable law.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, account takeovers, money laundering, bonus abuse, and other malicious behavior on the Platform.
• Responsible Gaming: To monitor gaming activity patterns that may indicate problem gambling, apply player-requested restrictions, and deliver proactive intervention where warranted under our Responsible Gaming Policy.
• Customer Support: To respond to your queries, resolve disputes, and maintain records of your support history to ensure continuity and quality of service.
• Platform Improvement: To analyze aggregate usage patterns, identify technical issues, and develop new features and products that better serve Indonesian players.
• Marketing Communications: To send you promotional offers, bonus notifications, and updates about seasonal promotions — such as those tied to Idul Fitri, Ramadhan, or Indonesian Independence Day — where you have opted in to receive such communications. You may opt out at any time.
• Legal Claims: To establish, exercise, or defend legal claims in the event of a dispute between you and mumu89.

mumu89 does not share your Personal Data with third parties except in the following limited and controlled circumstances:

• Payment Processors & Banking Partners: Your financial details are shared with your nominated payment service — such as BCA, BRI, BNI, Mandiri, CIMB Niaga, OVO, DANA, GoPay, ShopeePay, or LinkAja — solely to execute deposit and withdrawal transactions. These providers operate under their own privacy policies and are independently regulated.
• KYC & Identity Verification Partners: We may engage third-party identity verification services to assist with document checks and liveness detection during the KYC process. These providers access only the data necessary to perform the verification function and are contractually prohibited from using it for any other purpose.
• Game Content Providers: Licensed game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — may receive your Account identifier and game session data to deliver game content, calculate outcomes, and resolve disputes. They do not receive your full identity or financial data.
• Technology Infrastructure Providers: Hosting, cloud storage, content delivery, and cybersecurity providers may process certain technical and account data as part of delivering the mumu89 Platform. All such providers are bound by data processing agreements that restrict their use of your data.
• Legal & Regulatory Authorities: mumu89 will disclose Personal Data to law enforcement, regulators, or courts where required to do so by a valid legal obligation, court order, or official regulatory request. Where legally permissible, we will notify you of such disclosure.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of assets involving mumu89, your Personal Data may be transferred to the successor entity, subject to equivalent privacy protections. You will be notified of any such transfer that materially affects your rights under this Policy.

mumu89 uses cookies and similar tracking technologies — including local storage objects and session tokens — to operate the Platform, maintain your login session, remember your preferences, detect fraud, and analyze traffic patterns. The following categories of cookies are used:

You may manage non-essential cookie preferences through your browser settings at any time. Most modern browsers allow you to block or delete cookies. Note that disabling Strictly Necessary cookies will prevent the Platform from functioning correctly and may terminate your active session. mumu89 does not respond to browser Do-Not-Track signals at this time.

mumu89 retains your Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable legal, regulatory, or dispute-resolution obligations. The following general retention periods apply:

• Active Account Data: Retained for the lifetime of your Account plus a minimum of 5 years following permanent Account closure, to satisfy AML record-keeping requirements.
• KYC & Identity Documents: Retained for a minimum of 5 years from the date of verification, in accordance with financial crime prevention obligations.
• Transaction Records: All deposit, withdrawal, and wagering records are retained for a minimum of 5 years following the date of each transaction.
• Support Communications: Retained for 3 years from the date of the last interaction, unless the communication is relevant to an ongoing dispute or legal claim.
• Technical & Log Data: Retained for up to 24 months for security monitoring and platform performance purposes, after which it is anonymized or deleted.
• Marketing Preferences: Records of your opt-in or opt-out status for marketing communications are retained for the lifetime of your Account plus 3 years.

When Personal Data is no longer required, mumu89 will either securely delete it or anonymize it in a manner that prevents re-identification. Anonymized or aggregated data that can no longer identify you is not subject to this Policy and may be retained indefinitely for analytical purposes.

mumu89 implements a multi-layered security framework to protect your Personal Data against unauthorized access, disclosure, alteration, and destruction. Our technical and organizational security measures include:

• SSL/TLS Encryption: All data transmitted between your device and the mumu89 Platform is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher), protecting your data in transit from interception.
• Data Encryption at Rest: Sensitive Personal Data stored in our systems — including identity document data and financial account details — is encrypted at rest using AES-256 or equivalent standards.
• Access Controls: Access to Personal Data is restricted on a strict need-to-know basis. mumu89 staff are granted the minimum level of data access required for their specific role, and all access is logged and audited.
• Two-Factor Authentication: Players are strongly encouraged to enable 2FA on their Accounts. Internal mumu89 systems that handle Personal Data require 2FA for all staff access.
• Penetration Testing & Audits: mumu89 conducts regular security assessments, including third-party penetration tests, to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data breach that is likely to result in risk to your rights and freedoms, mumu89 will notify affected users within 72 hours of becoming aware of the breach, where technically feasible.

As a User of the mumu89 Platform, you hold the following rights in relation to your Personal Data. To exercise any of these rights, please contact us using the details in §13. We will respond to all valid requests within 30 days, and we will not charge a fee for reasonable, good-faith requests.

The mumu89 Platform is strictly intended for adults aged 21 years and older. mumu89 does not knowingly collect, process, or retain Personal Data from individuals under the age of 21. Age verification is a mandatory step in the registration and KYC process, and we apply ongoing monitoring to detect underage access.

If mumu89 discovers that Personal Data has been collected from an individual under 21 — whether through a false declaration at registration or any other means — we will immediately suspend the Account, delete the associated Personal Data, void any transactions conducted, and return any net real-money deposits to the original depositing channel. If you believe that a minor has registered an Account on mumu89, please notify us immediately at [email protected] so that we may investigate and act promptly.

The mumu89 Platform may contain references to or integrations with third-party services — including payment gateways, game content providers, and analytics tools — each of which operates under its own independent privacy policy. mumu89 is not responsible for the data practices of these third parties and encourages you to review their respective privacy policies before interacting with their services.

Where mumu89 engages third-party processors to handle Personal Data on our behalf, we enter into formal data processing agreements that specify the scope, purpose, and security requirements applicable to that processing. These agreements prohibit third-party processors from using your data for their own independent purposes or disclosing it to additional parties without mumu89's authorization.

mumu89 does not integrate Facebook Pixel, Google Ads remarketing tags, or any other cross-site behavioral advertising trackers on its Platform. Our analytics use is limited to first-party session data and aggregate, non-identifiable traffic metrics.

mumu89 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform services. When material changes are made, we will notify registered Users by email to the address on file and by posting a prominent notice on the Platform for a minimum of 14 days prior to the changes taking effect.

Minor clarifications, typographical corrections, or changes that do not materially affect your rights may be made without prior notice. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. We encourage you to review this Policy periodically to remain informed about how mumu89 protects your data. Your continued use of the Platform following the effective date of any revised Policy constitutes your acknowledgment of and agreement to the updated terms.

For questions about this Privacy Policy, to exercise any of your data rights described in §9, or to report a privacy concern, please contact the mumu89 data team using the details below. All privacy-related requests will be acknowledged within 48 hours and resolved within 30 days, except where the complexity of the request requires an extension — in which case you will be notified of the revised timeframe.

When submitting a data access, rectification, or erasure request, please include your registered Account username and the email address associated with your Account so that we can verify your identity before processing the request. mumu89 will not process data rights requests from unverified sources.