Privacy Policy

This Privacy Policy ("Policy") describes how Mixue88 ("we", "us", "our", or "the Platform"), the operator of the online gaming services available at mixue88.cam, collects, processes, stores, and protects the personal data of its registered members and website visitors ("you", "Player", or "Data Subject").

Mixue88 is committed to protecting the privacy and personal data of every individual who interacts with our platform — whether you are a registered player in Kuala Lumpur, a visitor from Johor Bahru browsing our games, or a player from Penang managing your account. The collection and use of personal data on this platform is governed by Malaysia's Personal Data Protection Act 2010 (PDPA, Act 709), and we process all personal data in accordance with the seven data protection principles established therein.

By registering a Player Account, accessing the Mixue88 platform, or submitting any personal data through our services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with the terms of this Policy, you should not use the platform or provide us with your personal information.

For clarity, the following terms used in this Policy carry the meanings set out below:

• "Personal Data" — Any information in respect of commercial transactions that relates directly or indirectly to a Data Subject, who is identified or identifiable from that information or from that and other information in the possession of a data user. This definition is consistent with the PDPA 2010.
• "Data Subject" — The individual to whom the personal data relates — in this context, the Player or website visitor whose data is collected by Mixue88.
• "Data User" — Mixue88, in its capacity as the entity that processes personal data for the purposes described in this Policy.
• "Processing" — Any operation performed on personal data, including but not limited to collection, recording, storage, retrieval, use, disclosure, transfer, erasure, and destruction.
• "KYC Data" — Identity verification documents and information submitted by a Player to satisfy Mixue88's Know Your Customer requirements, including government-issued identification, proof of address, and proof of payment method ownership.
• "Sensitive Personal Data" — A subset of personal data that requires a heightened level of protection, including data concerning health, financial information, and biometric data, as applicable under the PDPA 2010.
• "Consent" — Any freely given, informed, and unambiguous indication by which a Data Subject agrees to the processing of their personal data for one or more specific purposes.

Mixue88 collects personal data through multiple touchpoints across the player lifecycle — from initial account registration through to ongoing account management and support interactions. The categories of personal data we collect are set out below:

We do not collect data beyond what is necessary to provide our services, fulfil our legal obligations, and operate a safe gaming environment. Where collection of a data category becomes unnecessary, we cease collection and delete existing records in accordance with our retention schedule.

Mixue88 processes personal data only for specific, legitimate purposes. We do not use personal data for any purpose incompatible with the purposes listed below without first obtaining fresh consent or establishing a new lawful basis for processing.

• Account Registration & Identity Verification: To create and maintain your Player Account, verify your identity and age (21+ requirement), and conduct KYC checks as required by our licensing obligations.
• Service Delivery: To process your deposits and withdrawals in MYR, provide access to games and betting markets, apply bonuses and promotional credits to your account, and deliver customer support in English, Bahasa Melayu, and Mandarin Chinese.
• Security & Fraud Prevention: To monitor for suspicious activity, prevent money laundering, detect unauthorised access, enforce our Terms and Conditions, and comply with our anti-fraud and AML obligations.
• Regulatory Compliance: To maintain records required by our international gaming licence, respond to lawful requests from competent regulatory authorities, and fulfil obligations under the PDPA 2010 and other applicable legislation.
• Responsible Gambling: To enforce deposit limits, session time limits, and self-exclusion settings, monitor gaming patterns that may indicate problem gambling behaviours, and contact Players who may benefit from responsible gambling resources.
• Marketing Communications (with consent): To send promotional offers, game launch notifications, and bonus alerts to Players who have opted in to receive such communications. Players may opt out at any time through their account settings or by contacting support.
• Platform Improvement: To analyse aggregated, anonymised gaming activity and platform usage data to improve product offerings, user experience, and technical performance.

Under the Personal Data Protection Act 2010 (PDPA), Mixue88 relies on the following lawful bases for processing personal data:

• Consent: Where you have provided clear and informed consent — for example, opting into marketing communications or agreeing to this Privacy Policy upon account registration. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Contractual Necessity: Where processing is necessary to perform the contract with you — specifically, to operate your Player Account, process financial transactions, and provide gaming services as described in our Terms and Conditions.
• Legal Obligation: Where processing is required to comply with a legal obligation to which Mixue88 is subject, including KYC/AML requirements, gaming licence conditions, and responses to lawful orders from regulatory authorities.
• Legitimate Interests: Where processing is necessary for Mixue88's legitimate operational interests — including fraud prevention, security monitoring, platform integrity, and responsible gambling enforcement — provided that such interests are not overridden by the Data Subject's fundamental rights and freedoms.

Mixue88 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share personal data with the following categories of recipients only to the extent necessary and for the purposes described in this Policy:

• Payment Processing Partners: Including providers of Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX, and cryptocurrency processing services, solely for the purpose of processing your financial transactions.
• Game Content Providers: Third-party game studios and live dealer providers who supply games available on the Mixue88 platform. Data shared is limited to session identifiers and game outcome records necessary to operate the games and verify results.
• Identity Verification Services: Accredited KYC service providers who assist Mixue88 in verifying player identity documents and conducting age verification checks.
• Regulatory Authorities: Gaming licensing bodies, anti-money laundering authorities, and law enforcement agencies where Mixue88 is required by law or licence condition to disclose information. Such disclosures are made only upon receipt of a valid legal order or regulatory request.
• Professional Advisers: Legal counsel, auditors, and compliance consultants engaged by Mixue88 in their professional capacity, subject to binding confidentiality obligations.

All third parties with whom personal data is shared are contractually required to process such data only for the specified purpose, to maintain appropriate security standards, and not to further share or disclose the data without Mixue88's authorisation. Mixue88 remains responsible for ensuring that such third-party arrangements are compliant with the PDPA 2010.

Mixue88 uses cookies and similar tracking technologies to provide core platform functionality, maintain session security, and analyse usage patterns to improve the platform experience for Malaysian players. A cookie is a small text file placed on your device by your browser when you visit our website.

• Essential Cookies: Required for the platform to function correctly. These include session authentication cookies, security tokens, and account preference settings. Essential cookies cannot be disabled without impairing platform functionality.
• Analytics Cookies: Used to collect anonymised data about how players navigate the platform — including pages visited, session duration, and game categories accessed. This data is used in aggregate form to identify areas for improvement.
• Functional Cookies: Store your preferences such as language settings, last-visited game categories, and display preferences to personalise your platform experience across sessions.
• Security Cookies: Used to detect and prevent fraudulent activity, including bot detection, suspicious login patterns, and account takeover attempts.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Mixue88 platform, including game loading and account authentication. We do not use third-party advertising cookies or share cookie data with external advertisers.

Mixue88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of the active Player Account relationship and for a minimum of five (5) years after account closure, as required by AML legislation and gaming licence conditions.
• Transaction Records: Financial transaction records including deposits, withdrawals, and betting history are retained for a minimum of seven (7) years to satisfy financial record-keeping requirements under applicable regulations.
• KYC Documents: Identity verification documents are retained for the duration of the account and for five years post-closure. Documents are securely destroyed following the retention period.
• Customer Support Records: Live chat transcripts and email correspondence are retained for two (2) years from the date of the interaction, or longer where the interaction relates to an unresolved dispute.
• Marketing Preference Data: Where you have opted in to marketing communications, your preference data is retained until you opt out. Upon opt-out, your data is removed from active marketing lists within 10 business days.
• Technical Log Data: Server logs and IP address records are retained for up to twelve (12) months for security monitoring purposes, after which they are anonymised or deleted.

Upon expiry of the relevant retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Anonymised or aggregated data may be retained indefinitely for statistical and research purposes.

Mixue88 implements comprehensive technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes:

• AES-256 Encryption: All personal data stored in Mixue88's databases is encrypted at rest using AES-256 bit encryption — the same standard used by financial institutions globally.
• TLS 1.3 Transmission Security: All data transmitted between your device and the Mixue88 platform is protected by TLS 1.3 encryption, ensuring that data in transit cannot be intercepted or modified.
• Two-Factor Authentication (2FA): Players are strongly encouraged — and in high-risk scenarios required — to enable 2FA on their accounts. All internal administrative access to production systems requires 2FA as a minimum control.
• Access Controls: Personal data access within Mixue88's operations is governed by the principle of least privilege. Only personnel whose role requires access to specific data categories are granted access, and all access is logged and audited.
• Continuous Fraud Monitoring: Real-time fraud detection systems monitor for unusual account behaviour, including login anomalies, abnormal transaction patterns, and suspected account takeover activity, around the clock.
• Penetration Testing: Mixue88's platform infrastructure undergoes regular penetration testing and security audits by independent security professionals to identify and remediate vulnerabilities proactively.

Notwithstanding these measures, no transmission over the internet and no storage system can be guaranteed to be 100% secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, Mixue88 will notify affected Data Subjects without undue delay and in accordance with our obligations under applicable law.

As a Data Subject under Malaysia's Personal Data Protection Act 2010, you hold the following rights in relation to your personal data held by Mixue88. These rights are exercisable by contacting us at the details provided in Section 14 of this Policy.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with the subject line "PDPA Data Rights Request". We will verify your identity before processing any rights request and respond within the timeframe prescribed by the PDPA 2010.

The Mixue88 platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration and KYC process, and accounts found to belong to individuals under 21 will be closed immediately.

If a parent or guardian becomes aware that their child under 21 has registered an account or submitted personal data to Mixue88, they should contact us immediately at [email protected]. Upon verified notification, we will close the account, delete the associated personal data, and return any deposited funds to the originating payment method without delay.

The Mixue88 platform integrates with various third-party services to deliver the full range of gaming and financial services available to Malaysian players. These include game content providers, live dealer studio operators, payment processors for Malaysian e-wallets and bank transfers, KYC verification services, and customer support infrastructure.

Each third-party service provider operates under their own privacy policy and data protection framework. Mixue88 is not responsible for the privacy practices of third-party providers, and we encourage Players to review the privacy policies of any third-party services they interact with — including payment providers such as Touch 'n Go eWallet, Maybank, and CIMB — independently.

Mixue88 does not embed third-party advertising networks, social media tracking pixels, or external analytics tools that would result in your browsing behaviour on our platform being shared with unrelated commercial third parties without your explicit consent.

Mixue88 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made to this Policy, we will notify registered Players by email to the address associated with their Player Account, or by displaying a prominent notice on the platform, no fewer than seven (7) days before the revised Policy takes effect.

The "Last Reviewed" date at the top of this page will be updated with each revision. We encourage all Players to review this Policy periodically. Your continued use of the Mixue88 platform following the effective date of a revised Privacy Policy constitutes your acceptance of the changes. If you do not accept the revised Policy, you should close your account and cease using the platform.

Archived copies of previous versions of this Privacy Policy are available upon written request to our support team. Such requests will be fulfilled within 14 working days.

For any questions, concerns, or formal requests relating to this Privacy Policy or your personal data rights under the PDPA 2010, please contact Mixue88's Data Protection team through the following channels:

If you believe that Mixue88 has not handled your personal data in accordance with the PDPA 2010 and you are not satisfied with our response to your complaint, you have the right to escalate the matter to the Department of Personal Data Protection Malaysia (Jabatan Perlindungan Data Peribadi, JPDP) through their official complaint channels.

For responsible gambling-related data requests — such as requesting a record of your self-exclusion history or deposit limit settings — please refer to our Responsible Gambling page for the relevant process.