Our Privacy Commitments at a Glance
A plain-language summary of how mooncity56 handles your personal data. The full legal text is set out in the sections below.
Your Data Is Encrypted
All personal data transmitted to and from mooncity56 is protected by 256-bit SSL/TLS encryption. Your information is never sent or stored in plain text form.
We Never Sell Your Data
mooncity56 does not sell, rent, or trade your personal information to third-party marketers or data brokers — ever. Your data exists to operate and improve your platform experience only.
You Control Your Data
You have the right to access, correct, export, or request deletion of your personal data at any time. Submit a request to our support team and we will respond within the timeframes set out in this Policy.
Minimal Retention Periods
We keep your data only as long as necessary for the purposes described in this Policy or as required by applicable regulations. Data no longer needed is securely deleted or anonymised.
Controlled Third-Party Sharing
We share personal data only with carefully selected service providers — including payment processors such as FPX, DuitNow, Touch 'n Go, and Maybank — who are contractually bound to handle your data securely.
Breach Notification
In the unlikely event of a data security breach affecting your personal information, mooncity56 will notify affected users promptly and take immediate remedial action in accordance with applicable regulatory obligations.
01 Introduction
MoonCity56 (hereinafter "mooncity56", "we", "us", or "our") is committed to protecting the privacy and personal data of all individuals who access or use our online casino and sports betting platform at mooncity56.cam, including any associated subdomains, mobile interfaces, and digital services operated under the MoonCity56 brand.
This Privacy Policy (hereinafter "Policy") describes in detail how mooncity56 collects, processes, uses, stores, and discloses personal data relating to registered members, prospective users, and visitors to our platform. It also sets out your rights as a data subject and explains how you may exercise those rights.
This Policy applies to all personal data processing activities conducted by mooncity56 in connection with the provision of our services to users located in Malaysia and wherever our platform may be accessed. It should be read together with our Terms & Conditions and Responsible Gambling Policy.
By registering an account or continuing to use mooncity56 following the publication of this Policy, you acknowledge that you have read and understood its contents. If you do not agree with any part of this Policy, you must discontinue use of the platform immediately.
This Policy was last reviewed on 1 January 2026. We recommend reviewing this page periodically, as mooncity56 may update this Policy from time to time in response to regulatory changes or platform developments.
02 Definitions
For the purposes of this Privacy Policy, the following terms shall carry the meanings assigned below:
- "Personal Data" — Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, device identifiers, and online activity data.
- "Data Controller" — MoonCity56, as the entity that determines the purposes and means by which personal data is processed.
- "Data Processor" — Any third party that processes personal data on behalf of mooncity56 pursuant to a written data processing agreement.
- "Data Subject" — The natural person to whom any given personal data relates; in this context, a registered member or visitor of mooncity56.
- "Processing" — Any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
- "KYC" — Know Your Customer verification, encompassing identity, age, and source-of-funds verification conducted prior to withdrawal processing.
- "Cookies" — Small text files placed on a user's device by mooncity56 or approved third parties for the purposes of session management, analytics, and platform functionality.
- "Consent" — A freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose.
03 Data We Collect
mooncity56 collects personal data through multiple channels in the course of providing our services. The categories of data we collect include the following:
3.1 Registration and Account Data
When you create a mooncity56 account, we collect: your full legal name, date of birth, residential address, email address, mobile phone number, chosen username, and account security credentials (passwords are stored in hashed form only — never in plain text).
3.2 Identity Verification (KYC) Data
To comply with regulatory obligations and to process withdrawal requests, we collect copies of government-issued identity documents (Malaysian MyKad or passport, front and back), proof of residential address where required, and in certain cases, source-of-funds documentation.
3.3 Financial and Transaction Data
We record details of all deposits and withdrawals processed through your mooncity56 account, including: transaction amounts in MYR, payment method used (e.g., Touch 'n Go eWallet, Boost, Maybank, CIMB, DuitNow, FPX, cryptocurrency wallet addresses), transaction timestamps, and processing status.
3.4 Wagering and Gaming Activity
We maintain records of your betting and gaming activity on mooncity56, including: game types played, wager amounts, outcomes, session durations, bonus utilisation, and responsible gambling tool settings you have applied.
3.5 Technical and Device Data
When you access mooncity56, we automatically collect certain technical data, including: IP address, device type and operating system, browser type and version, screen resolution, session identifiers, referring URL, and pages visited within the platform.
3.6 Communications Data
We retain records of communications between you and mooncity56 support staff via live chat or email, including the content of those communications and associated timestamps, for quality assurance, dispute resolution, and regulatory audit purposes.
mooncity56 will never request your account password via email, live chat, or phone. If you receive a message requesting your password purportedly from mooncity56, treat it as fraudulent and report it to our support team immediately.
04 Lawful Basis for Processing
mooncity56 processes personal data only where a lawful basis exists for doing so. The applicable lawful bases are as follows:
| Processing Activity | Lawful Basis |
|---|---|
| Account registration and management | Performance of contract |
| KYC identity verification | Legal obligation / Contract performance |
| Processing deposits and withdrawals | Performance of contract |
| Anti-money-laundering (AML) checks | Legal obligation |
| Fraud prevention and platform security | Legitimate interests |
| Responsible gambling monitoring | Legal obligation / Legitimate interests |
| Promotional communications (opt-in) | Consent |
| Platform analytics and improvement | Legitimate interests |
| Regulatory reporting and audit | Legal obligation |
05 How We Use Your Data
mooncity56 uses the personal data it collects for the following specific purposes:
- To create and maintain your mooncity56 account and verify your identity in accordance with KYC requirements.
- To process deposits and withdrawals via Malaysian payment channels including Touch 'n Go eWallet, Boost, DuitNow, FPX, Maybank, CIMB, and Public Bank.
- To administer and settle wagers placed on casino games, live dealer tables, and sports betting markets including EPL, Liga Super Malaysia, and UFC.
- To calculate, credit, and administer bonuses, promotional offers, and loyalty rewards including birthday bonuses and referral credits.
- To fulfil anti-money-laundering (AML) and counter-terrorism financing (CTF) compliance obligations.
- To monitor for and investigate suspected fraud, account abuse, prohibited conduct, and bonus exploitation as defined in our Terms & Conditions.
- To implement and administer responsible gambling tools including deposit limits, self-exclusion, and session reminders, in line with our Responsible Gambling Policy.
- To respond to and resolve support queries, disputes, and account-related requests submitted via live chat or email.
- To send transactional notifications relating to your account, including deposit confirmations, withdrawal processing updates, and security alerts.
- To send promotional communications where you have provided explicit consent to receive them. You may withdraw this consent at any time.
- To analyse aggregate, anonymised platform usage data for the purpose of improving mooncity56's services and user experience.
06 Data Sharing & Disclosure
mooncity56 does not sell, rent, or trade your personal data to third parties for commercial purposes under any circumstances. We share personal data only in the following limited and controlled circumstances:
6.1 Payment Processors and Financial Institutions
We share transaction-related data — including your name, account reference, and payment details — with authorised payment processors and financial institutions as strictly necessary to process your deposits and withdrawals. This includes FPX operators, DuitNow, Touch 'n Go eWallet, Boost, and major Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong Bank). These parties are contractually prohibited from using your data for any purpose other than payment processing.
6.2 Identity Verification Services
To comply with KYC and AML obligations, mooncity56 may engage third-party identity verification providers who process the identity documents you submit. These providers operate under strict data processing agreements and are not permitted to retain or repurpose your documents beyond the scope of the verification task.
6.3 Platform Technology Providers
Certain operational functions of mooncity56 are delivered by technology service providers, including cloud hosting infrastructure, game software providers, live chat platform operators, and analytics services. All such providers are vetted for data security compliance and operate under contractual obligations consistent with the principles of this Policy.
6.4 Regulatory and Legal Authorities
mooncity56 may be required to disclose personal data to regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where required to do so by applicable law. Such disclosures are made only to the extent required and will be made in compliance with applicable data protection obligations.
6.5 Business Transfers
In the event of a merger, acquisition, or sale of all or a substantial part of mooncity56's business assets, personal data held by mooncity56 may be transferred to the successor entity. Affected users will be notified of any such transfer and of any material changes to the processing of their data prior to completion.
mooncity56 does not transfer personal data to recipients in jurisdictions that do not provide an adequate level of data protection without implementing appropriate safeguards such as contractual clauses or equivalent protective mechanisms.
07 Cookies & Tracking Technologies
mooncity56 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device when you visit our site. They serve the following functions:
- Strictly Necessary Cookies: Required for the platform to function, including session authentication, account security, and basic navigation. These cannot be disabled.
- Functional Cookies: Store your preferences such as language settings, responsible gambling limit configurations, and display choices to improve your experience.
- Analytics Cookies: Collect anonymised data about how visitors use mooncity56 — which pages are visited, session duration, error events — to help us improve platform performance. No personally identifiable information is included.
- Security Cookies: Used to detect and prevent fraudulent activity, bot access, and account takeover attempts.
You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may impair your ability to log in to or use mooncity56. Continued use of the platform following acceptance of this Policy constitutes agreement to our use of cookies as described herein.
08 Data Retention
mooncity56 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable regulatory, legal, or contractual obligations. Our general retention framework is as follows:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account + 5 years post-closure |
| KYC / identity documents | Duration of account + 5 years post-closure |
| Transaction and financial records | 7 years (regulatory requirement) |
| Wagering and gaming history | Duration of account + 3 years post-closure |
| Support communications | 3 years from date of communication |
| Marketing consent records | Until consent is withdrawn + 1 year |
| Technical / device logs | Up to 12 months on a rolling basis |
Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised. Where data is anonymised, it may be retained indefinitely in aggregate form for statistical and analytical purposes without restriction.
09 Data Security
mooncity56 applies technical and organisational security measures proportionate to the sensitivity of the personal data it processes. Our security framework includes the following controls:
- 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
- Encryption of sensitive data fields at rest, including identity document content and financial account references.
- Password hashing using industry-standard one-way algorithms — no plain-text password storage.
- Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis.
- Continuous security monitoring, intrusion detection systems, and regular penetration testing of platform infrastructure.
- Segregation of player funds from operational accounts to protect member balances.
- Documented incident response procedures to handle potential data breaches promptly and in accordance with applicable notification obligations.
While mooncity56 takes all reasonable precautions to protect your data, no online system can be guaranteed entirely free from security risk. You are responsible for maintaining the confidentiality of your account credentials and should notify mooncity56 immediately if you suspect any unauthorised access to your account.
10 Your Rights as a Data Subject
As a data subject whose personal data is processed by mooncity56, you are entitled to exercise the following rights. Requests should be submitted to our support team as described in Section 14 of this Policy.
Right of Access
You may request a copy of the personal data mooncity56 holds about you, along with information about how it is being used.
Right to Rectification
You may request correction of inaccurate or incomplete personal data that mooncity56 holds about you.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for its original purpose, subject to overriding legal retention obligations.
Right to Restriction
You may request that mooncity56 restrict the processing of your personal data in certain circumstances, such as while a data accuracy dispute is being resolved.
Right to Portability
Where processing is carried out by automated means on the basis of consent or contract, you may request your personal data in a structured, machine-readable format.
Right to Object
You may object to processing based on legitimate interests, including profiling, where your particular circumstances provide grounds to do so.
mooncity56 will respond to valid data subject requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, with written notification provided. We may require identity verification before fulfilling certain requests to prevent unauthorised data access.
11 Minors & Age Policy
mooncity56 strictly prohibits access by persons under the age of 21. Our platform, services, and marketing communications are directed exclusively at adults aged 21 and above. We do not knowingly collect or process personal data of any individual under this age.
If mooncity56 becomes aware that personal data has been collected from a person under 21 years of age without parental consent, we will take immediate steps to delete that data from our systems and close the associated account. Any balances in such accounts may be forfeited in accordance with our Terms & Conditions.
Parents and guardians who believe that a minor has provided personal data to mooncity56 are encouraged to contact our support team immediately at [email protected] so that appropriate action can be taken without delay.
12 International Data Transfers
mooncity56 primarily processes and stores personal data on infrastructure located within or accessible from jurisdictions applicable to our operations. In some cases, data may be processed by technology service providers whose systems are hosted in other countries.
Where personal data is transferred outside Malaysia to a jurisdiction that does not offer an equivalent level of data protection, mooncity56 will ensure that appropriate safeguards are in place prior to the transfer. Such safeguards may include standard contractual clauses, binding corporate rules, or other mechanisms recognised under applicable data protection frameworks.
By using mooncity56, you acknowledge and agree to the international transfer of your personal data where such transfers are necessary for the performance of our services, provided that appropriate protections are in place as described in this Policy.
13 Policy Amendments
mooncity56 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. Material changes will be communicated to registered members via email notification or a prominent platform notice prior to the changes taking effect.
The effective date of the current version of this Policy is displayed at the top of this page. We recommend that users review this Policy periodically to remain informed of how mooncity56 handles personal data. Continued use of the platform following the posting of an updated Policy constitutes acceptance of the revised terms.
14 Contact & Data Requests
If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data mooncity56 holds about you, please contact our team using the following channels:
Email: [email protected] — Subject line: "Privacy Request" or "Data Subject Request"
Live Chat: Available 24 hours a day, 7 days a week via the mooncity56 platform
Response Timeframe: Within 30 calendar days for formal data subject requests · Within 2 business hours for general privacy enquiries via live chat or email
When submitting a data subject request, please provide your registered email address and a brief description of your request. mooncity56 may request additional identity verification before processing requests to ensure data is not disclosed to unauthorised parties.
For questions about responsible gambling tools or account self-exclusion, please visit our Responsible Gambling page. Talian Kasih helpline: 15999 (available 24/7, toll-free within Malaysia).