Mudah365 Privacy Policy – We Take Care of Your Data

Mudah365 ("we", "Platform") values the privacy of every member and user of our platform. This Privacy Policy transparently explains how we collect, use, disclose, and protect your personal information when you use our website, mobile app, and all services offered by mudah365.

This policy applies to all individuals who interact with mudah365, including registered members, website visitors, and anyone who contacts our support team. We are committed to ensuring your personal data is handled responsibly, transparently, and in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

By registering an account or continuing to use the mudah365 platform, you confirm that you have read and understood this Privacy Policy. If you disagree with any part of this policy, please discontinue use of our platform and contact us for further assistance.

Mudah365 collects your personal data from various sources when you use our platform. Below is a summary of the types of data we collect and their purposes:

We only collect data that is strictly necessary for the stated purposes. We do not collect more information than needed, and we do not store sensitive data such as passwords in plain text — all passwords are processed through an irreversible hashing system.

Mudah365 uses your personal data for the following purposes, all of which are legally valid under Malaysia's PDPA:

• Account management: Creating, verifying, and securely managing your member account.
• KYC and AML Compliance: Fulfilling legal obligations related to identity verification and anti-money laundering.
• Transaction processing: Processing deposits, withdrawals, and all financial activities accurately and securely.
• Customer support: Handling your enquiries, complaints, and support requests effectively.
• Platform security: Detecting and preventing fraud, abuse, and suspicious activity.
• Service improvements: Analysing usage patterns to improve product quality and user experience.
• Marketing communications: Sending promotional information, special offers, and platform updates — only with your consent.
• Legal compliance: Meeting reporting and compliance requirements mandated by regulatory bodies and enforcement agencies.

Mudah365 does not sell, rent, or disclose your personal data to third parties for commercial purposes. However, we may share your data in the following limited circumstances:

• Payment service providers: To process deposits and withdrawals, the required transaction data is shared with approved payment gateways. These providers are bound by strict confidentiality agreements.
• Technology service providers: Companies that help us operate our technical infrastructure, such as cloud computing and cybersecurity services, may access data only within the limited scope required.
• Regulatory bodies and law enforcement: When required by law or court order, we will disclose the necessary data to the relevant authorities.
• Identity verification service providers: For KYC purposes, the required identity information is shared with approved and trusted third-party verification providers.

In all data-sharing arrangements, we ensure that recipients are bound by data protection obligations equivalent to or stricter than our own standards. mudah365 remains accountable for how your data is handled by parties with whom we share it.

Mudah365 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Performance Cookies: Helping us understand how visitors use our website through anonymous statistical data.
• Functional Cookies: Saving your preferences such as language, region, and display settings to deliver a more personalised experience.
• Marketing Cookies: Used to display relevant advertisements. You may decline these cookies without affecting the core functions of the platform.

You can manage or disable cookies through your web browser settings. However, disabling essential cookies may affect certain functions of the mudah365 platform. More details about the cookies we use are available through the privacy settings in your account.

Protecting your personal data is mudah365's absolute priority. We implement multiple layers of technical and organisational security to prevent unauthorised access, loss, misuse, or disclosure of data:

• Data encryption in transit: All communications between your device and our servers are secured by TLS 1.3 protocol with 256-bit encryption.
• Data encryption at rest: Sensitive data such as financial information and KYC documents is encrypted at rest within our database.
• Layered access controls: Access to member data is restricted to authorised personnel only, with continuous monitoring and audit logging in place.
• Regular security testing: We conduct regular penetration testing and security audits to identify and address potential vulnerabilities.
• Two-factor authentication: Two-factor authentication (2FA) is available for all member accounts to add an extra layer of protection.

In the event of a data breach affecting your personal information, mudah365 will notify you and the relevant authorities within the timeframe required by law, and take immediate action to contain and resolve the situation.

Mudah365 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable law. Our general data retention principles are as follows:

• Active account data: Retained for as long as your account is active, and for a defined period following account closure for legal compliance purposes.
• Financial transaction records: Retained for a minimum of seven (7) years in accordance with Malaysia's financial and tax legal requirements.
• KYC documents: Retained for a minimum of five (5) years following the termination of the business relationship to meet anti-money laundering requirements.
• Support communication logs: Retained for three (3) years for reference and dispute resolution purposes.
• Anonymous analytics data: May be retained indefinitely as it contains no personally identifiable information.

Once the retention period expires, your data will be securely deleted or anonymised using methods that ensure it cannot be recovered or reused.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold about you:

To exercise any of the rights above, you may contact our Data Protection Officer team via the details provided in Section 11. We will process your request within 21 business days. For more complex cases, we may require up to 30 days and will notify you accordingly.

Please note that these rights are not absolute — certain exceptions apply under the law, particularly where data processing is required for legal compliance or legitimate public interest.

The mudah365 platform may contain links or integrations with certain third-party services, such as payment providers and game providers. When you access these third-party services, their own privacy policies will apply — not the mudah365 Privacy Policy.

Mudah365 is not responsible for the privacy practices or content of any third-party websites or services. We encourage you to read the privacy policy of each third-party service you access through our platform.

Mudah365 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. The latest version of the Privacy Policy is always available on this page.

When we make material changes to this Privacy Policy, we will:

• Displaying a clear notice on the platform's home page for a minimum of 14 days.
• Sending notifications to registered members via email or in-platform messages.
• Updating the "Last Updated" date at the top of this document.

Your continued use of the mudah365 platform after any Privacy Policy changes take effect will be considered your acceptance of the revised version. If you do not agree with the changes, you have the right to close your account and request deletion of your data before the changes come into effect.

If you have any questions, concerns, or wish to exercise your rights under the PDPA in relation to this Privacy Policy, please contact the mudah365 Data Protection Officer (DPO) through the following channels:

• Email: [email protected]
• General support: [email protected]
• Response time: Within 3 business days for general enquiries; 21 days for formal data rights requests.

You may also lodge a data protection complaint with the Personal Data Protection Commissioner of Malaysia if you believe that mudah365 has not processed your data in accordance with applicable law.

Mudah365 is committed to addressing every privacy inquiry and complaint seriously and within a reasonable timeframe. Your trust is the foundation of everything we do.