Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how mixue888 ("Company", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("Users", "Players", "you") who access or use the mixue888 platform at mixue888.cam (the "Platform"), including the sportsbook, live casino, account management tools, customer support channels, and all associated services.

mixue888 respects the privacy of all Platform users and is committed to handling personal data responsibly, transparently, and in accordance with applicable data protection principles. We take the security of your personal information seriously — from the moment you land on our homepage to the moment a withdrawal is credited to your Touch 'n Go eWallet or Maybank account.

By accessing the mixue888 Platform, creating an account, or providing us with personal information, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not consent, please cease using the Platform and contact our support team to discuss account closure.

2 Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person — including, but not limited to, name, email address, phone number, identification document number, IP address, device identifier, and payment account details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data. For the purposes of this Policy, mixue888 is the Data Controller.
• "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller under a contractual arrangement.
• "Cookies" means small text files placed on a User's device by the Platform for the purpose of session management, analytics, and personalisation.
• "KYC" means Know Your Customer — the identity verification process required to confirm account holder identity, age, and payment method ownership prior to withdrawal processing.
• "Third Party" means any entity other than the User and mixue888, including payment service providers, game content providers, analytics vendors, and fraud prevention partners.

3 Data Controller

mixue888 is the Data Controller responsible for Personal Data collected through the Platform. As Data Controller, mixue888 determines the purposes for which Personal Data is processed and the means by which such processing is carried out.

For all data protection enquiries, requests to exercise User rights, or privacy-related complaints, please contact us using the details set out in Section 16 of this Policy. We aim to respond to all data-related requests within thirty (30) calendar days of receipt.

4 Personal Data We Collect

mixue888 collects the categories of Personal Data described in the table below. We collect only data that is necessary for the stated purpose and do not retain data beyond the periods set out in Section 10.

5 How We Collect Your Data

mixue888 collects Personal Data through the following means:

• Direct Submission: Information you provide directly when registering an account, completing KYC verification, making a deposit or withdrawal, submitting a support request, or participating in a promotion.
• Automated Collection: Technical and usage data collected automatically as you interact with the Platform, including via cookies, server logs, and analytics tools (see Section 9 for cookie details).
• Payment Processors: Transaction confirmation data and masked payment identifiers received from our payment partners, including providers of DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, and Hong Leong Connect integrations.
• Identity Verification Partners: Confirmation data returned from KYC verification service providers where applicable.
• Fraud and Risk Tools: Device fingerprint data and risk scores generated by our fraud prevention infrastructure.

6 Legal Basis for Processing

mixue888 processes Personal Data only where a valid legal basis exists. The legal bases on which we rely are as follows:

• Contractual Necessity: Processing required to perform the contract between mixue888 and the User — including account registration, payment processing, and bet settlement.
• Legal Obligation: Processing required to comply with applicable legal or regulatory obligations, including anti-money laundering (AML) requirements, responsible gambling obligations, and age verification requirements.
• Legitimate Interests: Processing carried out in pursuit of mixue888's legitimate business interests, including fraud prevention, platform security, service improvement, and marketing to existing customers — where such interests are not overridden by the User's rights and interests.
• Consent: Processing based on freely given, specific, informed, and unambiguous consent from the User — particularly for non-essential cookies and direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing prior to withdrawal.

7 How We Use Your Personal Data

mixue888 uses the Personal Data we collect for the following purposes:

• Account Management: Creating, verifying, maintaining, and closing Player accounts; processing login authentication and two-factor authentication events.
• Payment Processing: Facilitating deposits and withdrawals through Malaysian payment methods including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and direct bank integrations; reconciling transactions; processing cryptocurrency conversions.
• KYC & Compliance: Verifying identity and age (21+) in compliance with applicable regulations; conducting AML and counter-terrorism financing screening; maintaining regulatory records.
• Platform Operation: Delivering sportsbook odds, settling bets on EPL, Liga Super Malaysia, UFC, and other markets; operating live casino games; managing bonus and promotional programmes.
• Customer Support: Responding to support queries submitted via live chat, email, or WhatsApp; managing complaints and escalations; maintaining support records for quality assurance.
• Responsible Gambling: Monitoring account activity for signs of problem gambling behaviour; applying deposit limits, loss limits, and self-exclusion restrictions as requested by or on behalf of the User.
• Fraud Prevention & Security: Detecting and preventing unauthorised account access, multi-accounting, bonus abuse, and financial fraud; conducting risk assessments on transactions.
• Platform Improvement: Analysing aggregated usage data to identify performance issues, improve the user interface, and develop new features.
• Marketing: Sending promotional communications about mixue888 offers, bonuses, and features to Users who have not opted out — subject to the right to withdraw consent at any time.

8 Data Sharing & Disclosure

mixue888 does not sell, rent, or trade Personal Data to third-party marketers. We share Personal Data only in the following circumstances:

• Payment Service Providers: Personal and financial data is shared with payment processors — including those operating DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB, Public Bank, and Hong Leong integrations — solely for the purpose of processing deposits and withdrawals. These providers are contractually bound to process data only for the stated purpose.
• KYC & Identity Verification Partners: Identity documents and verification data are shared with accredited KYC service providers for the purpose of confirming account holder identity and age.
• Game Content Providers: Pseudonymised player session data (e.g., session ID, game round result) may be shared with game providers for the purpose of dispute resolution and game auditing. No directly identifiable personal information is shared for this purpose.
• Fraud Detection & Risk Services: Technical data (IP address, device fingerprint, transaction metadata) may be shared with fraud prevention partners for the purpose of identifying and preventing fraudulent activity.
• Legal and Regulatory Authorities: Personal Data will be disclosed to law enforcement agencies, regulatory bodies, or courts where required by applicable law, valid legal process, or regulatory direction — including AML disclosures where applicable.
• Professional Advisers: Data may be shared with legal advisers, auditors, or insurers on a confidential basis where necessary for the operation of our business.

9 Cookies & Tracking Technologies

The mixue888 Platform uses cookies and similar tracking technologies to provide core functionality, improve platform performance, and support security operations. The categories of cookies we use are described below:

You may manage non-essential cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect Platform functionality. For strictly necessary and security cookies, no opt-out mechanism is available as these are integral to Platform operation.

10 Data Retention

mixue888 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The general retention periods applied are as follows:

• Account Data: Retained for the duration of the active account relationship, plus a minimum of five (5) years following account closure to meet AML and regulatory record-keeping obligations.
• Transaction Records: Financial transaction records (deposits, withdrawals, bet history) are retained for a minimum of five (5) years following the date of the transaction.
• KYC Documentation: Identity verification documents are retained for the duration of the account relationship plus five (5) years following account closure.
• Support & Communication Records: Customer support chat transcripts and email records are retained for three (3) years from the date of the interaction.
• Technical & Log Data: Server access logs and security event records are retained for a period of up to twelve (12) months, unless retention is required for a longer period in connection with an active investigation or legal matter.
• Marketing Consent Records: Records of marketing consent and opt-out are retained for the duration of the account relationship to evidence the lawful basis for any marketing communications sent.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our internal data lifecycle procedures.

11 Data Security

mixue888 implements appropriate technical and organisational security measures designed to protect Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to:

• Transport Layer Security (TLS 1.3) encryption for all data transmitted between your device and the Platform.
• AES-256 encryption for Personal Data stored at rest on our servers.
• Two-factor authentication (2FA) available for all Player accounts.
• Access controls limiting internal staff access to Personal Data on a strict need-to-know basis.
• Regular penetration testing and vulnerability assessments conducted by independent security professionals.
• Continuous automated monitoring for suspicious account activity, unauthorised access attempts, and data exfiltration indicators.

While mixue888 applies industry-standard security measures, no system is entirely immune to security risks. You are responsible for maintaining the confidentiality of your Account login credentials and for notifying us immediately if you suspect unauthorised access to your Account.

12 International Data Transfers

As a platform serving Malaysian players through an international operational infrastructure, certain Personal Data processed by mixue888 may be transferred to, stored, or processed in countries other than Malaysia. This may occur, for example, where our game content providers, fraud detection partners, or cloud infrastructure providers operate servers in other jurisdictions.

Where Personal Data is transferred internationally, mixue888 takes reasonable steps to ensure that an adequate level of data protection is maintained, including through the use of contractual safeguards and the selection of processors that adhere to recognised international data protection standards.

13 Your Data Rights

Subject to applicable law, you have the following rights in respect of your Personal Data held by mixue888. To exercise any of these rights, please contact us using the details in Section 16.

• Right of Access: You may request a copy of the Personal Data we hold about you and information about how it is being processed.
• Right to Rectification: You may request correction of any Personal Data that is inaccurate or incomplete.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations.
• Right to Restriction: You may request that processing of your Personal Data be restricted in certain circumstances — for example, where you contest the accuracy of the data.
• Right to Data Portability: You may request a copy of your Personal Data in a structured, commonly used, and machine-readable format where processing is carried out by automated means on the basis of consent or contractual necessity.
• Right to Object: You may object to processing of your Personal Data for direct marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interests, subject to the balance of competing considerations.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

mixue888 will respond to all rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further two months, with prior notice to the requesting User.

14 Children's Privacy

The mixue888 Platform is strictly intended for individuals aged 21 and above. mixue888 does not knowingly collect Personal Data from any person under the age of 21. Age is verified through the KYC process and, where applicable, through additional document checks.

If mixue888 becomes aware that Personal Data has been collected from a person under the age of 21 without appropriate parental consent, we will take immediate steps to delete such data and close the associated account. If you believe that a minor may have registered an account on the Platform, please contact us immediately using the details in Section 16.

15 Amendments to This Policy

mixue888 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our Platform. Where amendments are material, we will provide reasonable advance notice by publishing the updated Policy on the Platform and updating the "Last Updated" date at the top of this page.

Your continued use of the Platform following the publication of any amended Policy constitutes your acceptance of the changes. We encourage you to review this Policy periodically to remain informed about how we protect your personal information.

16 Contact Us

For all privacy-related enquiries — including requests to exercise your data rights, questions about this Policy, or reports of potential data breaches — please contact the mixue888 data protection team through the following channels:

• Live Chat: Available 24/7 directly on the mixue888 Platform. Reference "Privacy / Data Request" in your opening message. Average response time: 3–5 minutes.
• Email: [email protected] — please include "Privacy Policy Enquiry" in the subject line. We aim to respond within 24 hours.
• Support Languages: English, Bahasa Melayu, and Chinese.

All data rights requests will be acknowledged within 72 hours of receipt and resolved within thirty (30) calendar days unless an extension is required, in which case you will be notified in advance.