mm36 Privacy Policy

mm36 values and protects your personal information. This policy explains how we collect, use, and protect your data.

Last updated: 30 October 2026

This Privacy Policy ("Policy") applies to all players and visitors who use the services of mm36 (site: mm36.win). By reading this Policy and continuing to use the mm36 website, you are considered to have agreed to the collection and use of your personal data.

This page fully describes what information we collect, for what purposes, who it may be shared with, and what rights you have. If you have any questions, contact us at [email protected].

Information We Collect

1.1 Information You Provide Directly

When you register an account, make a deposit, or request a service, we may collect the following information —

  • Full name
  • Identity verification information linked to your Myanmar National Registration Card
  • Phone number and contact details
  • Deposit/withdrawal method contact details (KBZPay number, Wave Money number, AYA Pay number, or bank account number)
  • Date of birth (to verify you are 21+)

1.2 Technical Information Collected Automatically

While you browse the site, we automatically record the following technical data —

  • IP address
  • Browser type and version
  • Device type and operating system
  • Pages visited, session duration, and access times
  • Data from cookies and similar tracking technologies

1.3 Financial Transaction Data

Data on deposits, withdrawals, and play history is retained for security checks, dispute resolution, and financial compliance purposes. This data forms part of the financial verification (KYC) process.

How Your Information Is Used

mm36 uses the data collected only for the following purposes —

Account Management

To handle your account creation, verification (KYC), login security, and financial transactions (deposit / withdrawal) smoothly.

Security and Fraud Prevention

To detect, prevent, and resolve unauthorized access, financial fraud, and account breaches.

Customer Support

To handle your questions, complaints, and service needs via 24/7 Live Chat and Email.

Service Improvement

To analyze how the website is used and improve games, payment services, and the overall user experience.

Essential Communications

To send service updates, policy changes, and account alerts. This is not for promotional messaging.

Legal Compliance

To comply with laws, regulations, and legal or financial restrictions applicable to our services.

Cookies and Tracking Technology

What Are Cookies

Cookies are small text data files stored in your browser or device. They help us provide a smoother, more personalized, and secure gaming experience on our website.

Types of Cookies We Use

  • Essential Cookies: Required for session management, security checks, and account login.
  • Functional Cookies: Used to save your language preference and account settings.
  • Analytics Cookies: Used to gather website usage data and improve our services. Data from these cookies is aggregated and anonymized so no individual can be identified.

Managing Cookies

You can block cookies in your browser settings. However, if essential cookies are blocked, some website features may not work properly — particularly account login and deposit / withdrawal functions.

Data Sharing and Third Parties

mm36 has a policy of never selling, renting, or trading your personal information to third parties. Any sharing is limited to the following circumstances —

Service Providers

Data may only be passed to payment service providers (KBZPay, Wave Money, AYA Pay) and technology partners who have signed a data protection agreement. These partners must handle data strictly according to mm36's instructions and are not permitted to use it for their own purposes.

Legal Disclosure

Data may be disclosed to the extent required by law if a court order, legal obligation, or regulatory matter makes disclosure necessary. Such disclosure will only be made under legal requirements and not otherwise.

Event — Company Change

If a company merger, sale, or transfer of assets takes place, data may be transferred to the successor entity. However, the successor must continue to comply with this policy.

Data Retention Period

How long data is kept

mm36 retains data for the following periods —

  • Active account data: Retained for the duration the account remains open.
  • Financial records: Retained for 5 years after account closure to comply with legal requirements.
  • KYC / verification data: Retained for 5 years after account closure.
  • Technical logs: Typically deleted within 1 to 2 years.

Data deletion

Once the legally required retention period has passed, personal data will be securely deleted or anonymised so it can no longer be retrieved.

Data Security Measures

mm36 has put in place technical and organisational safeguards to protect your personal information —

SSL Encryption

TLS / SSL encryption (HTTPS) is used across the entire website, so all data transfers are protected.

Access Control

Data is accessed and handled only by authorised staff, and the "need-to-know" policy is strictly enforced.

Payment Data Security

Payment numbers and banking data are handled through PCI-DSS compliant partners. Card and PIN details are never stored on mm36 servers.

Regular Audits

Vulnerability scans and security checks are carried out regularly, and the server environment is kept under constant supervision.

No technical system can offer a 100% guarantee, but we are committed to applying the best protections possible. Should a data breach occur, affected players will be notified promptly in accordance with legal requirements.

Your Privacy Rights

As a mm36 player, you have the following rights regarding your data —

Right of Access

You can ask to check what personal data mm36 holds about you. Contact us at [email protected].

Right of Rectification

If any data is incorrect or incomplete, you can request that it be corrected. Urgent corrections will be prioritised.

Right of Erasure

You can request deletion of personal data where no legal retention obligation remains. Data that must be kept by law, such as financial records, cannot be deleted.

Right to Restrict Processing

You can request that data processing be temporarily suspended while data accuracy is disputed or a legal basis is being established.

Right to Complain

If you are unhappy with how your data has been handled, you can contact [email protected] to raise a complaint. We will aim to respond within 14 days of receiving it.

Protection of Under-21s

mm36 services are for players aged 21+ only. If we become aware that we have stored data from anyone under 21, we will delete that data immediately and close the player's account. For any questions about data involving minors, contact us at [email protected] without delay.

Policy Changes

mm36 may update this Privacy Policy from time to time — without a fixed schedule — due to technical changes, legal requirements, or service expansions. When the policy changes, the "Last Updated" date on this page will be updated, and registered players may be notified by email.

Continuing to use the site after changes are published on the policy page will be taken as acceptance of the revised policy. We encourage you to review any policy changes carefully before making a final decision.

Data Contact Details

All questions about this policy, requests to access your data, or requests to delete your data can be sent to —

Email:

[email protected]

Live Chat: 24/7 Myanmar-language Live Chat — available on the website

We aim to respond to all enquiries within 14 days of receipt. Data-related and security-related matters will be handled as a priority.

Privacy Protection — FAQ

mm36 protects your data using SSL/TLS encryption (HTTPS), access controls, and regular security audits. Payment data is handled only through PCI-DSS compliant partner services — card or bank PINs are never stored on mm36 servers.

mm36 does not sell, rent, or trade your data. It may only pass through essential service partners — such as payment services (KBZPay, Wave Money, AYA Pay) — under signed data protection agreements. Those partners may only handle your data as directed by mm36.

Active account data is kept for as long as your account remains open. Financial records and KYC data are retained for 5 years after account closure to meet legal requirements, then securely deleted once that period ends.

You can submit a data deletion request by email to [email protected]. Data that must be kept under legal requirements (such as financial records) cannot be deleted, but all other data will be removed once the legal retention period has passed.

You can block cookies in your browser settings. However, if essential cookies are blocked, account login, session management, and deposit/withdrawal functions may not work properly. We recommend keeping essential cookies enabled for the full experience.

Yes. If a data breach occurs and your personal data is involved, you will be notified immediately by email in accordance with legal requirements, and steps will be taken to resolve the incident.

The "Last updated" date on this page will be updated, and registered players may be notified by email. Continuing to use the site after changes are made means you accept the updated policy, so we recommend reviewing this page from time to time.