mmr40 Privacy Policy

Last Updated: 30 October 2026

mmr40 is an online gaming platform designed for Myanmar players, and protecting users' personal data is one of our core responsibilities. This policy is written in line with international best practices for Personal Data Protection.

The purpose of this policy is to clearly explain what data we collect when you use the mmr40 platform, how we process that data, under what circumstances we share it, and what rights you have regarding your data.

We protect your data with SSL encryption technology and will not sell it to third parties or use it for purposes unrelated to our services.

When you open an mmr40 account, log in or use the platform, we may collect the following data—

2.1 Data You Provide Directly

• Name and date of birth
• Contact phone number and email address
• Payment method details (reference numbers related to KBZPay, Wave Money, AYA Pay, CB Pay and bank transfer services)
• National Registration Card (NRC) number — for age verification (21+) and KYC (Know Your Customer) purposes only
• The username and password you chose when creating your account (password is encrypted)

2.2 Data Collected Automatically

• IP address and network connection details
• Browser type, mobile device model and operating system
• Gameplay history and payment records on the platform
• Session cookies and technical log files
• Play time, game types and game-related statistics

2.3 Cookies and Tracking Technologies

We use cookies to keep the platform running smoothly and to maintain your session. You can disable cookies in your browser settings, but note that some platform features may not work properly.

We use the data we collect only for the following purposes—

• Account creation and authentication
• Processing deposits, withdrawals and payments
• Verifying that players are 21+ years of age
• Providing customer support (24/7 Live Chat and Email)
• Platform security and anti-money laundering (AML) protection
• Handling bonuses and promotions
• Platform improvement and enhancing user experience
• Providing responsible gambling services

We will not use your data for any purpose beyond those stated above.

mmr40 will never sell, rent or trade your personal information to third parties. However, data sharing may occur in the following situations where it is strictly necessary to provide our services—

4.1 Payment Service Providers

We share only the minimum data required to process transactions via KBZPay, Wave Money, AYA Pay, CB Pay and bank transfer services. This data is handled in line with payment security standards.

4.2 Technology and IT Service Providers

We may share limited data with companies that provide platform hosting, database management and cyber security services. These companies have signed data protection agreements that meet our standards.

4.3 Legal Compliance

If we are required to disclose data due to legal obligations, anti-money laundering (AML) investigations or requests from relevant authorities, we will disclose only the minimum amount required by law.

We protect your data with high-standard technical security measures—

• SSL Encryption: All data transfers are protected with industry-standard SSL/TLS encryption
• Password Hashing: Account passwords are hashed using bcrypt and are not stored in plain text
• Firewall Protection: Advanced firewall systems are in place to block unauthorized access from outside
• Two-Factor Authentication (2FA): We offer 2FA to add an extra layer of account security
• Regular Security Audits: A dedicated team conducts regular security reviews of the platform
• Restricted Data Access: Access to your data is limited to staff who need it to do their jobs

While our security measures are robust, data transmission over the internet cannot be guaranteed 100% secure. We also encourage you to keep your password confidential and not share it with anyone.

We retain your personal information according to the following criteria—

• Account registration data and financial records are kept for at least 5 years from the date of the last transaction, as required by AML regulations
• Gameplay history and activity logs are retained for 3 years for accounting and auditing purposes
• Technical log files (including IP addresses) are kept for 1 year for security review purposes
• After account closure, personal data is deleted unless there is a legal requirement to retain it

Every mmr40 platform user has the following rights regarding their personal information—

Right to access and correct

You can view your personal data stored at mmr40 and request corrections to any inaccurate data.

Right to Erasure

Upon request, we will delete your data except for data we are legally required to retain.

Data Portability

You can request your personal data be provided to you in a readable format.

Right to Object

You have the right to oppose or object if you believe we are using your data in any way beyond the stated purposes.

To exercise these rights, please contact our customer support team—

The mmr40 platform is for users aged 21+ only. We do not knowingly collect personal data from anyone under 21. If we believe a person under 21 has created an account on our platform, we will immediately close that account and delete the data. If you wish to report such a case, please contact us at [email protected].

We reserve the right to review and update this privacy policy from time to time. Any significant changes will be announced in a prominent place on the website and the "last updated date" will be revised. Continued use of the platform after changes are made will be considered acceptance of the updated policy.

We therefore encourage you to revisit and review this policy periodically.

If you have any questions about this privacy policy, you can contact the mmr40 customer support team through the following channels—

Our support team provides service in Myanmar language 24/7, so feel free to ask any questions about your data protection.