🔒 Data Protection

mm97 Privacy Policy

This policy explains how your personal data is collected, used, and protected, and what rights you have.

Last updated: 29 October 2026
Note: By reading this policy and continuing to use the mm97 platform, you are considered to have agreed to its terms. Last updated: 29 October 2026.

Introduction — mm97's Commitment

mm97 is an online gaming and football betting platform built for players in Myanmar. We are committed to protecting your personal data, which is why we have prepared this privacy policy.

This policy applies to all players who use the mm97 website and services. This page clearly sets out what data is collected, for what purpose it is used, how long it is retained, and what rights you have.

We protect your data using SSL encryption technology, and we treat the protection of player privacy as a responsibility. If you have any questions about this policy, you can contact us at [email protected].

Important: mm97 does not knowingly or intentionally collect data from persons under 18. Players under 21 are not permitted to use the platform.

Types of Data Collected

When you open an account and use services on the mm97 platform, we may collect the following types of data.

1. Data You Provide Directly

  • Name and date of birth (for 21+ age verification)
  • Contact email address
  • Payment details via KBZPay, Wave Money, or AYA Pay
  • The username and password you choose when creating your account (stored as a hash)
  • Deposit and withdrawal records

2. Data Collected Automatically

  • IP address and browser information
  • Gaming records — game type, duration of each session
  • Click patterns and pages visited
  • Device type and operating system
  • Session cookies and login cookies (not diagnostic cookies)

3. Data Received from Third Parties

  • Payment confirmations from KBZPay, Wave Money, and AYA Pay
  • Identity verification results from security check services
Note: We do not store your full payment card number on our servers. Payments are processed through the encrypted channels of KBZPay, Wave Money, and AYA Pay.

How we use the data we collect

We use the data we collect only for the following purposes—

  • Account management: to create accounts, verify logins, and reset passwords
  • Payment processing: to verify and process deposit and withdrawal requests
  • Service improvement: to understand how to make the platform better
  • Security protection: to prevent fraud, unauthorised access, and account theft
  • Legal compliance: age 21+ verification and responsible gambling policy compliance
  • Customer support: to answer enquiries via 24/7 Live Chat and email
  • Promotional communications: to send you offers if you agree (you can opt out at any time)

We do not sell your data to external marketing companies — we make this commitment clearly and firmly. Any data sharing is handled only as described in section 5 of this policy.

Security Protection

Your account is monitored and protected 24/7 with SSL encryption, two-factor authentication, and session monitoring.

No Data Selling

Your personal information is never sold or shared with third-party advertising companies.

Your Rights

You have the right to request access to, correction of, and deletion of your personal data.

Cookie Policy

The mm97 website uses browser cookies. A cookie is a small text file stored in your browser that helps keep our service running smoothly.

Types of Cookies We Use

  • Essential Cookies: to maintain login sessions and temporarily store gameplay data such as a shopping cart
  • Functional Cookies: to remember your settings such as language preference and interface layout
  • Analytics Cookies: to understand how to improve our service — you can still use the platform normally even if these cookies are disabled

You can control and restrict cookies through your browser settings. However, please note that if essential cookies are disabled, login and session functions may break unexpectedly.

Note: We do not use tracking cookies for advertising purposes. No third-party ad network cookies are loaded on the mm97 site.

Data Sharing and Disclosure

We may share your personal information with third parties only in the following circumstances—

Service Providers

Payment providers such as KBZPay, Wave Money, and AYA Pay — we share only the minimum data needed to process payments. These providers are bound to us by agreements covering the protection of personal data.

Legal Requests

We will disclose information when required to do so by a court order, legal submission, or legal provision. When this occurs, we will make every effort to notify you unless prohibited by law.

Changes to Company Structure

If mm97 platform undergoes a merger, acquisition, or ownership transfer, data may be transferred as part of that process. If this occurs, your data will continue to be protected under this policy or at an equivalent level of protection.

Further confirmation: We confirm that we never sell or share your data with marketing companies, advertising networks, or data brokers.

Data Retention Period

We clearly set out how long we retain the data we collect—

Data Type Retention Period Reason
Account Information 1 year after account deletion To reactivate the account or resolve disputes
Payment Records Minimum 5 years Financial and legal requirements
Gaming Records 2 years after account deletion Responsible gaming checks and dispute resolution
Communication Records 1 year after contact Customer service quality maintenance
Analytics / Log Data 90 days Security analysis and service improvement

Data is not retained beyond the set period once the purpose of collection has been fulfilled. Upon expiry, data will be securely deleted or anonymised.

Players' Personal Data Rights

Every mm97 platform user has the following rights regarding their personal information—

Right to Access

Right to ask what data we hold — a copy will be provided free of charge.

Right to Rectification

You can request that incorrect or incomplete data be corrected.

Right to Erasure

You can request deletion of data that is not subject to legal obligations.

Right to Object

You can object and opt out of data processing for marketing purposes.

Right to Data Portability

You can receive a copy of your data in a machine-readable format.

Right to Restrict Processing

You can request that data processing be temporarily paused while a matter is being investigated.

To exercise any of the rights above, email us at [email protected]. We will respond within 30 days of receiving your request.

Data Security Measures

We take the following measures to keep your data secure—

Technical Safeguards

  • SSL/TLS encryption — the mm97 site operates exclusively over HTTPS and all data transmissions are encrypted
  • Password hashing — passwords are not stored in plaintext but are hashed using a one-way method
  • Firewall and intrusion detection — servers are protected by advanced firewalls
  • Regular security audits — the platform's security is reviewed on a regular basis

Organisational Safeguards

  • Data is accessible only to staff who need it (need-to-know restriction)
  • Staff receive training on handling personal data
  • In the event of a data breach, action will be taken within 72 hours

If you believe a data breach has occurred, notify us immediately at [email protected].

Under 21 Protection

The mm97 platform is intended for persons aged 21 and above only. We do not intentionally collect or retain data from anyone under the age of 21.

A date-of-birth check is carried out during account registration. If a user is found to be under 21, the account will be suspended and any data provided during registration will be deleted. If you notice that a minor has opened an account, please notify us immediately at [email protected].

21+ only: mm97 services are for persons aged 21 and above only. For more information on responsible gaming, visit the Responsible Gaming page.

Policy Changes and Contact

mm97 may periodically review and update this privacy policy in line with platform developments and changes in legal requirements. If changes are made, the "Last Updated" date on this page will be updated, and for changes beyond routine updates, you will be notified by email.

Continued use of the platform after any changes will be taken as acceptance of the updated policy. If you object, you may close your account and request that your data be deleted.

Contact Us

For any questions about this Privacy Policy or requests regarding your personal data rights —

Our support team is available 24/7 in Myanmar language and will prioritize answering your questions.

Privacy Protection Quick Answers

Retention periods vary by data type. Account data is kept for 1 year after account deletion. Payment records are kept for a minimum of 5 years as required by law. Analytics log data is not retained beyond 90 days. See the "Data Retention Period" section of this policy for full details.

Yes. Payments made via KBZPay, Wave Money, and AYA Pay are processed through those providers' encrypted channels. Full payment card or account numbers are never stored on mm97 servers — only a tokenised confirmation is received. Payment connections are protected by SSL.

Send an email to [email protected] with the subject "Data Deletion Request". Our team will verify your identity and process the request within 30 days. Note: some data, such as payment records, must be retained until the end of their legally required retention period.

Never. We do not sell or share your personal data with marketing companies, advertising networks, or data brokers. Data is shared only with payment providers on a minimum-necessary basis, and they are bound by data protection agreements.

You can use the platform normally with analytics cookies disabled. However, a session cookie is required to manage your login session. Without it, you will not be able to log in — please allow cookies for mm97.run in your browser settings.

If a data breach occurs, we will take action within 72 hours. That includes containing the affected area, notifying affected players by email, and putting measures in place to prevent a similar incident in the future. If you notice anything that suggests a breach has occurred, contact us immediately at [email protected].

Every marketing email includes an "unsubscribe" link at the bottom — click it to opt out. Alternatively, send an email to [email protected] with the subject "Stop Marketing Emails" and our team will process it within 2 days. Your account will remain active; only marketing emails will stop.