Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how mustika78 ("the Platform", "we", "us", "our"), operating the online gaming platform accessible at mustika78.cam, collects, processes, stores, and protects the personal data of individuals ("Players", "Users", "you") who access or use the Platform in any capacity.

mustika78 takes its data protection obligations seriously. We are committed to handling your personal information transparently, lawfully, and with appropriate security measures in place. This Policy is designed to give you a clear understanding of your data rights and how we use the information you provide to us.

By registering an account on the Platform, accessing any gaming service, or otherwise providing personal data to mustika78, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any aspect of this Policy, you should not create an account or provide personal data to the Platform.

This Policy should be read alongside our Terms and Conditions, which govern the overall use of the Platform. In the event of any conflict between the two documents on a matter of data privacy, this Privacy Policy shall prevail.

Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, address, email address, phone number, payment details, and government-issued identification numbers.
• "Processing" means any operation performed on personal data, whether or not by automated means, including collection, recording, storage, adaptation, retrieval, use, disclosure, or deletion.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this context, mustika78.
• "Data Processor" means any third party that processes personal data on behalf of the Data Controller under contractual instruction.
• "KYC Data" means identity and age verification documents submitted by a Player, including but not limited to a copy of a MyKad, passport, utility bill, or bank statement.
• "Cookies" means small text files placed on a user's device by the Platform for the purposes of session management, personalisation, analytics, and security.
• "Consent" means freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their personal data for a stated purpose.

Data Controller

mustika78, operating the Platform at mustika78.cam, is the Data Controller in respect of all personal data collected through the Platform. As Data Controller, mustika78 determines the purposes for which personal data is collected and processed, and the means by which such processing is carried out.

mustika78 engages third-party service providers who process personal data solely on our behalf and under our documented instruction. These providers act as Data Processors and are contractually bound by data processing agreements that restrict their use of your data to the specific service they provide to us.

For all data protection enquiries, requests to exercise your rights, or complaints relating to our data practices, please contact us using the details set out in Section 17 of this Policy.

Data We Collect

mustika78 collects the following categories of personal data in the course of operating the Platform and providing gaming services to Players:

How We Collect Your Data

mustika78 collects personal data through the following channels:

• Direct Provision: When you register an account, complete KYC verification, make a deposit or withdrawal (including via DuitNow, FPX, Maybank, CIMB, Public Bank, or Hong Leong), contact our support team, or respond to a promotion, you directly provide personal data to us.
• Automated Technical Collection: When you access the Platform, our servers automatically record technical data including your IP address, device identifiers, session timestamps, and browser characteristics. This data is collected for security and platform integrity purposes.
• Cookies and Similar Technologies: We use cookies, pixel tags, and session storage technologies to maintain session state, detect fraud, and (where consent is given) personalise your experience. Full details are set out in Section 11.
• Third-Party Payment Providers: When you transact using supported payment methods, we receive transaction confirmation data from payment processors including e-wallet providers and banking partners, sufficient to record the transaction in your account.
• Identity Verification Services: For KYC purposes, we may share your submitted identity documents with accredited third-party verification service providers, who return a verification result. These providers operate under strict data processing agreements.

Legal Basis for Processing

mustika78 processes your personal data only where a valid legal basis exists. The primary legal bases on which we rely are as follows:

• Contractual Necessity: Processing is necessary to perform the contract between you and mustika78 — i.e., to operate your Player Account, process deposits and withdrawals, and deliver gaming services. This covers the majority of our core data processing activities.
• Legal Obligation: Processing is required for us to comply with applicable legal obligations, including anti-money laundering (AML) requirements, KYC verification, age verification, and regulatory reporting obligations under our international gaming licence.
• Legitimate Interests: Processing is necessary for purposes of our legitimate business interests — including fraud prevention, platform security, responsible gambling monitoring, and internal analytics — where those interests are not overridden by your privacy rights.
• Consent: Where processing is not covered by the above bases — for example, sending you optional promotional communications or placing non-essential cookies — we will seek and rely on your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

How We Use Your Data

mustika78 uses the personal data we collect for the following specific purposes:

1. Account Registration and Management: Creating, verifying, and administering your Player Account, including processing your registration details and maintaining your account profile.
2. Identity and Age Verification: Conducting mandatory KYC verification to confirm your identity and ensure you meet the 21+ age requirement before processing any withdrawal.
3. Payment Processing: Processing deposits and withdrawals via supported Malaysian payment methods including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency channels.
4. Anti-Money Laundering Compliance: Monitoring transaction patterns and reporting to relevant authorities as required under applicable AML regulations. This is a legal obligation, not a discretionary activity.
5. Customer Support: Responding to support enquiries, resolving disputes, and maintaining records of communications for quality assurance and dispute resolution purposes.
6. Responsible Gambling: Monitoring gaming behaviour to identify signs of problem gambling, enforcing deposit limits and self-exclusion orders, and delivering responsible gambling communications.
7. Platform Security and Fraud Prevention: Detecting and preventing unauthorised account access, bonus abuse, collusion, and other fraudulent or prohibited conduct.
8. VIP Programme Administration: Tracking wagering activity to manage tier upgrades, birthday bonuses, and referral reward eligibility within the mustika78 loyalty programme.
9. Marketing Communications: Where you have given explicit consent, sending you promotional offers, bonus notifications, and platform updates. You may unsubscribe at any time.
10. Platform Improvement and Analytics: Using aggregated and anonymised usage data to understand how Players interact with the Platform and improve the user experience over time.

Data Sharing & Disclosure

mustika78 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We share personal data only in the following circumstances:

• Payment Service Providers: To process deposits and withdrawals, we share necessary transaction data with our banking and e-wallet integration partners (including DuitNow, FPX, and supported e-wallet platforms). These parties process your data solely to facilitate your transaction and are bound by their own regulatory obligations.
• KYC and Identity Verification Providers: We work with accredited third-party verification services to conduct identity checks. These providers receive only the data necessary for the specific verification task and are contractually prohibited from using it for any other purpose.
• Game Content Providers: Game providers whose titles are accessible on the Platform may receive anonymised gameplay data for quality assurance and RTP auditing purposes. No personally identifiable data is shared with game providers without explicit necessity.
• Regulatory and Legal Authorities: We are legally required to disclose personal data to competent regulatory or law enforcement authorities where required by applicable law, court order, or our obligations under our international gaming licence. We will notify you of such disclosure where legally permitted to do so.
• Professional Advisors: Our legal, financial, and security advisors may have access to personal data on a need-to-know basis, subject to professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of our assets, personal data held by mustika78 may be transferred to the successor entity. Affected Players will be notified in advance of any such transfer.

International Data Transfers

As an internationally operated online gaming platform, mustika78 may process and store your personal data in jurisdictions outside Malaysia. Where personal data is transferred internationally, we take steps to ensure that an adequate level of protection is maintained, including through:

• Contractual clauses and data processing agreements with recipients that impose data protection obligations materially equivalent to applicable international standards;
• Transfers only to jurisdictions or entities for which an adequate level of data protection has been recognised by relevant authorities;
• Technical and organisational security measures applied uniformly regardless of where data is processed or stored.

If you require specific information about the safeguards applicable to any international transfer of your personal data, you may contact us using the details in Section 17.

Data Retention

mustika78 retains personal data for no longer than is necessary for the purposes for which it was collected, taking into account our legal and regulatory obligations. The following general retention periods apply:

• Active Player Accounts: Personal data is retained throughout the period your account remains active. Where an account has been inactive for an extended period, we may contact you prior to considering data archival.
• Closed Accounts: Following account closure — whether voluntary, due to self-exclusion, or for any other reason — we retain your personal data for a minimum of five (5) years to satisfy our AML reporting obligations, regulatory record-keeping requirements, and potential dispute resolution needs.
• KYC Documents: Identity and age verification documents are retained for the duration of the account and for five years thereafter, in line with standard AML compliance requirements.
• Transaction Records: Financial transaction records are retained for a minimum of five years following the transaction date.
• Support Communications: Live chat and email support records are retained for up to two years for quality assurance and dispute resolution purposes.
• Marketing Data: Where you withdraw consent for marketing communications, your opt-out preference is retained indefinitely to prevent future unsolicited contact.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

Cookies & Tracking Technologies

mustika78 uses cookies and similar tracking technologies to provide a functional, secure, and personalised platform experience. Cookies are small text files stored on your device when you access the Platform. The following categories of cookies are used:

• Essential Cookies: Required for the Platform to function. These cookies maintain your session state, handle login authentication, and preserve your security settings. They cannot be disabled without affecting Platform functionality.
• Security Cookies: Used to detect and prevent fraudulent activity, bot access, and account takeover attempts. These are essential to Platform integrity and cannot be disabled.
• Analytics Cookies: Used to collect aggregated information about how Players navigate the Platform — including which pages are visited most frequently and where users encounter difficulty. This data is used solely to improve the Platform. Analytics cookies require your consent where non-essential.
• Preference Cookies: Store your language, display, and communication preferences to personalise your experience across sessions. These require consent where they are not essential to the service you have requested.

You may manage non-essential cookie preferences through your browser settings or, where available, through the Platform's cookie preference centre. Disabling essential cookies will impair your ability to use the Platform.

Your Rights as a Data Subject

You have the following rights in respect of your personal data held by mustika78. To exercise any of these rights, please contact us using the details in Section 17. We will respond to all valid requests within 30 days.

Please note that certain rights are subject to limitations where our processing is necessary for legal compliance, anti-money laundering obligations, or to establish, exercise, or defend legal claims. We will always explain clearly if and why a limitation applies to your specific request.

Children's Privacy

mustika78 is strictly prohibited from accepting registrations from individuals under the age of 21. We do not knowingly collect personal data from any person under the age of 21, and we do not target our services at minors.

Our mandatory KYC verification process is specifically designed to identify and prevent underage access. If mustika78 becomes aware that personal data has been collected from an individual under 21 — whether through a false declaration at registration or any other means — we will immediately suspend the account, delete all associated personal data to the extent permitted by our legal obligations, and return any deposited funds.

If you believe that a minor has created an account on mustika78, please notify us immediately at [email protected] so that we can investigate and take appropriate action.

Security Measures

mustika78 implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data we hold. These measures include, but are not limited to:

• Encryption in Transit: All data exchanged between your device and the Platform is encrypted using TLS 1.2 or higher, preventing interception by third parties during transmission.
• Encryption at Rest: Sensitive personal data — including KYC documents, payment details, and identity information — is stored in encrypted form using industry-standard encryption protocols.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Staff access is role-based, logged, and subject to regular review. All staff with access to personal data undergo data protection training.
• Network Security: Our infrastructure is protected by firewalls, intrusion detection systems, and regular vulnerability assessments carried out by qualified security professionals.
• Incident Response: We maintain a documented incident response procedure. In the event of a data breach, the procedure includes immediate containment, impact assessment, regulatory notification where required, and player notification without undue delay.
• Physical Security: Data processing infrastructure is housed in physically secure, access-controlled data centre facilities with 24-hour monitoring.

While we take every reasonable precaution to protect your personal data, no security system is completely impenetrable. Players are responsible for maintaining the security of their own account credentials, and mustika78 strongly recommends using a strong, unique password and keeping login details confidential at all times.

Third-Party Links

The mustika78 Platform does not intentionally include links to third-party websites. However, where references to third-party services or payment providers appear in our content (such as DuitNow, Touch 'n Go eWallet, Maybank, or GrabPay), these are references only, and mustika78 bears no responsibility for the privacy practices or data handling of those third-party services.

If you access any third-party service independently — for example, your banking app or e-wallet platform — in the process of making a deposit or withdrawal, the data you provide to that third-party service is governed by that third party's own privacy policy, not this Policy.

Updates to This Privacy Policy

mustika78 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, we will notify registered Players via their registered email address and/or a prominent notice on the Platform, at least 14 days before the changes take effect.

The Effective Date at the top of this page reflects the date of the most recent revision. Continued use of the Platform after the notified date of an amendment constitutes your acceptance of the updated Policy. If you do not accept the changes, you should close your account before the revised Policy takes effect.

The most current version of this Privacy Policy is always available at mustika78.cam/privacy-policy. We recommend that Players review this page periodically to stay informed of any updates.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy, or if you wish to exercise any of your data subject rights as described in Section 12, please contact mustika78 through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly on the Platform. For data rights requests, please use the subject line "Privacy Request" when initiating your chat.
• Email: [email protected] — please include "Privacy Request" in the subject line. We aim to acknowledge all data-related requests within 5 business days and respond substantively within 30 days.

We take all privacy complaints seriously and will work with you to resolve any concerns promptly. If you are not satisfied with our response, you may escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.