1 · The agreement
These Terms of Service govern your use of mCloud's products and services ("Services") and form a binding agreement between you and mCloud Myanmar Co., Ltd. ("mCloud", "we", "us"). By creating an account or using the Services, you agree to be bound by these Terms.
2 · Account & eligibility
- You must be at least 18 years old and capable of forming a binding contract.
- Production-tier accounts must complete Know-Your-Customer (KYC) verification within 14 days of sign-up. Sandbox accounts may operate without KYC subject to capacity limits.
- You are responsible for all activity that occurs under your account, including the activity of users to whom you delegate access.
3 · Fees, billing & taxes
Fees are denominated in USD and settled in MMK at the central rate published in your billing dashboard on the first business day of each month. Invoices are payable within 14 days of issuance unless an alternative term is agreed in writing.
All listed prices are inclusive of Myanmar's commercial tax. Tax is itemised on each invoice for your accounting records.
4 · Term, cancellation & suspension
- Monthly plans renew monthly until cancelled. You may cancel at any time from the console with immediate effect.
- Annual plans are pro-rated upon cancellation; the remaining months are refunded within 14 business days.
- Reserved capacity has a 30-day notice for early termination; early-termination fees are disclosed at the time of reservation.
- We may suspend or terminate Services for material breach of these Terms or our Acceptable Use Policy.
5 · Your data, your IP
You retain all right, title and interest in your data and content stored on the Services. You grant mCloud the limited rights necessary to operate the Services — store, transmit, replicate as you instruct.
We do not access your data except as necessary to provide support you have requested, to respond to a lawful Myanmar legal order, or to prevent imminent harm. All access is logged.
6 · Confidentiality
Each party will protect the other's confidential information with the same degree of care it uses to protect its own, but not less than reasonable care. This obligation survives termination.
7 · Warranties & liability
We provide the Services on an "as-is" and "as-available" basis, subject only to our SLA. Our aggregate liability for any claim is limited to the fees paid by you to mCloud in the 12 months preceding the claim.
8 · Governing law & disputes
These Terms are governed by the laws of the Republic of the Union of Myanmar. Disputes shall be submitted to the courts of Yangon, save that we may seek injunctive relief in any competent jurisdiction to protect our intellectual property.
Plain-English summary. Pay USD-quoted invoices in MMK every month. Your data stays yours; we won't poke at it. We're liable up to 12 months of your fees. Myanmar law applies.
9 · Changes to these terms
We may amend these Terms with at least 30 days' notice by email and a banner in the console. Continued use after the effective date constitutes acceptance. Prior versions are archived here.
1 · Who is the data controller
For data you give us about your organisation, mCloud Myanmar Co., Ltd. is the data controller. For data your users put into the Services (workload data), you are the controller and mCloud acts as processor on your instructions.
2 · What we collect
- Account data: name, work email, company, phone (for OTP), billing details.
- Usage data: resource consumption, API call counts, console session logs — for billing, security and product-quality purposes.
- Workload data: data you upload to or generate on the Services. We do not inspect it.
- Support data: messages and attachments you send to support; retained 24 months by default.
3 · Where we keep it
All personal data and workload data is stored exclusively at our facilities in Yangon (YGN-01) and Mandalay (MDY-01). We do not replicate or back up your data to any region outside Myanmar, regardless of plan.
4 · Why we process it
- To provide and bill for the Services you've purchased (contract performance).
- To maintain the security and integrity of the platform (legitimate interest).
- To respond to lawful Myanmar legal orders (legal obligation).
- To send service-critical operational emails (legitimate interest); marketing only with your explicit consent.
5 · Sub-processors
We use a short list of sub-processors for services where building in-house would be impractical (payment processing, KBZ/AYA bank settlement, anti-spam reputation scoring). The current sub-processor list is published and updated 30 days before any addition.
6 · Your rights
You have the right to access, correct, port and delete your personal data at any time. Requests are handled within 30 days. Email privacy@mcloud.com.mm or use the data-rights workflow in the console.
7 · Security
Data at rest is encrypted with AES-256 (XTS for block storage, GCM for object storage). Data in transit uses TLS 1.3, with MTA-STS enforced on inbound mail. We are ISO 27001 and SOC 2 Type II certified — audits are repeated annually and reports are available under NDA.
8 · Retention
Account data is retained for the life of your account and for 7 years afterward for tax-record compliance. Workload data is retained per your configuration — when you delete, deletion is propagated within 24 hours and verified by zero-fill on reclaim.
9 · Contact
For privacy questions: privacy@mcloud.com.mm. Our Data Protection Officer is Yi Yi Thaw, General Counsel, reachable at the same address.
This Acceptable Use Policy ("AUP") applies to your use of all mCloud Services. By using the Services, you agree not to engage in any of the activities below.
1 · Prohibited content & activities
You may not use the Services to host, transmit, distribute or facilitate:
- Material that infringes the intellectual-property rights of others, including pirated software, music or video.
- Child sexual abuse material — zero tolerance. We cooperate with the Myanmar Police Force in any such case.
- Material that incites violence, racial hatred or religious discrimination in violation of Myanmar law.
- Unsolicited bulk email (spam), or operating an open relay / open proxy.
- Distribution of malware, ransomware, cryptominers without consent, or any code designed to compromise other systems.
2 · Prohibited technical activity
- Port-scanning, vulnerability scanning or penetration testing of systems not owned by you. (Authorised testing of your own resources is fine — let support know in advance.)
- Activity that disrupts the Services or any other customer's resources — including DoS attacks, resource exhaustion, or excessive API rate-limit evasion.
- Attempts to access another customer's data, resources or account.
- Operating Tor exit nodes or open recursive DNS resolvers.
3 · Outbound email
Customers on the Business Email and Web Hosting products are subject to per-mailbox daily send limits and reputation monitoring. Sustained transmission to spam-trap addresses results in immediate suspension of outbound mail pending review.
4 · Enforcement
We investigate every credible report. Confirmed violations may result in:
- Warning and removal of offending content.
- Suspension of the affected resource (e.g. a single Cloud Server) pending remediation.
- Suspension or termination of the entire account for repeat or severe violations.
- Referral to the Myanmar Police Force for criminal activity.
For urgent abuse reports (CSAM, active attacks), email abuse@mcloud.com.mm. Reports are read 24/7 and acknowledged within 1 hour.
1 · The commitment
mCloud commits to storing every byte of customer data — production storage, backups, archives, snapshots and operational metadata — exclusively at facilities physically located within the territory of the Republic of the Union of Myanmar.
2 · In-country facilities
Customer data is stored at one or more of:
- YGN-01 — Yangon Tier III facility, Junction City area
- MDY-01 — Mandalay Tier III facility, Aung Pin Lae Industrial Zone
- NPT-EDGE — Naypyidaw edge cache (CDN only; not used for stored data)
- Sovereign Zone — government tenants only; air-gapped from public Internet
3 · No foreign replication, ever
We do not replicate, back up, mirror, archive or transit customer data to any region outside Myanmar — even for disaster recovery, support troubleshooting, performance optimisation, or operational convenience. This commitment supersedes any conflicting language in product documentation.
4 · Real-time attestation
Every resource exposes a X-MC-Region response header and a region-attestation object via the API. You can query the regional placement of any object, snapshot or instance at any time. Attestations are cryptographically signed and verifiable against our public key.
5 · Foreign legal orders
mCloud will not honour any data-disclosure or data-transfer request originating from a non-Myanmar jurisdiction unless and until that request is reviewed and ordered by a competent Myanmar court. We publish a transparency report annually.
6 · Sub-processor data location
Our sub-processors (payment processing, anti-spam scoring) operate in-country wherever possible. Where a sub-processor must operate from outside Myanmar (e.g., a global spam reputation list), they receive only the minimum metadata required (such as a sending IP address) — never customer workload data.
7 · Audit
Compliance with this commitment is independently audited annually. The most recent audit report (Q1 2026, KPMG Myanmar) is available under NDA. Email compliance@mcloud.com.mm for a copy.
1 · Availability commitments
mCloud commits to the following monthly uptime percentages, measured across the calendar month and excluding scheduled-maintenance windows announced at least 7 days in advance:
| Service | Monthly uptime | Measurement |
|---|
| Cloud Server (Production / Business) | 99.99% | Compute control plane availability |
| Cloud Server (Enterprise / Premium) | 99.999% | Compute control plane availability |
| Object Storage | 99.95% | Successful GET / PUT response rate |
| Object Storage · Durability | 99.999999999% | Annual data loss (11 nines) |
| Managed Kubernetes (Production) | 99.99% | Control plane API availability |
| Load Balancer (Application) | 99.99% | Data plane availability |
| CDN (Business) | 99.96% | Successful edge cache responses |
| Business Email — delivery | 99.9% | Inbox delivery to major MM providers |
2 · Service credit schedule
If we fall below the commitment, you receive a credit on your next invoice — calculated as a percentage of the affected service's monthly fee:
| Measured availability | Credit (% of monthly fee) |
|---|
| ≥ 99.99% (no breach) | 0% |
| 99.9% — 99.99% | 10% |
| 99.0% — 99.9% | 25% |
| 95.0% — 99.0% | 50% |
| < 95.0% | 100% |
3 · How credits are issued
Credits are issued automatically on your next monthly invoice. You do not need to file a ticket or request the credit. The credit calculation is published alongside the affected month's status-page report and is verifiable against the raw uptime data.
4 · Exclusions
The SLA does not cover unavailability caused by:
- Scheduled maintenance announced ≥ 7 days in advance.
- Your own configuration errors or capacity exhaustion (rate-limited resources, exhausted quotas).
- Force majeure events as defined in the Terms of Service.
- Issues entirely outside mCloud's control (e.g. third-party DNS providers).
5 · Support response times
For paid plans, our response-time commitments are:
- P1 — Service down: 15 minutes (Business+) · 1 hour (Standard)
- P2 — Degraded: 1 hour · 4 hours
- P3 — Functional issue: 4 hours · 1 business day
- P4 — General question: 1 business day · 2 business days
6 · Burmese-language SLA
All support response-time commitments apply equally to tickets submitted in Burmese and English. We do not gate response times by language.