My88 Privacy Policy – Our Commitment to Protecting the Personal Data of Every Malaysian Member

My88 collects your personal information through various channels as you interact with our platform. We only collect data that is genuinely necessary to operate the platform safely, fairly, and efficiently.

1.1 Information You Provide Directly

When you register an account with my88, you will be asked to provide the following information:

• Full name as per Malaysian identity card;
• National identification card number (MyKad) or passport number;
• Date of birth (for age verification, 18+ requirement);
• Active email address;
• Malaysian mobile phone number;
• The password you create (stored as an encrypted hash).

As part of the identity verification (KYC) process for certain withdrawals, you may be asked to submit a copy of your ID document and proof of address. These documents are handled with the highest level of security and deleted once verification is complete, unless retention is required for compliance record-keeping purposes.

1.2 Automatically Collected Information

While you use the my88 platform, our systems automatically record the following technical data:

• IP address and network information;
• Device type, phone model, operating system (iOS, Android);
• Web browser type and version;
• Date, time, and duration of each login session;
• Platform pages visited and games accessed;
• A complete record of all betting activity and financial transactions.

1.3 Information from Third Parties

In certain situations, my88 may receive information about you from third-party payment service providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or banks participating in FPX (Maybank2u, CIMB Clicks) — primarily for transaction verification and fraud prevention purposes. Information received from these sources is governed by the respective provider's privacy policy and is used solely for legitimate purposes.

My88 uses the personal data collected for the following purposes, all of which are directly related to providing and improving the platform's services to you:

2.1 Account Management & Services

• Creating and managing your my88 member account;
• Processing deposits via TNG eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, as well as processing withdrawal requests;
• Managing the VIP Rewards programme and calculating daily rolling rebates;
• Providing responsive customer support services;
• Sending important notifications relating to your account, transactions, and promotions you have opted in to receive.

2.2 Security & Fraud Prevention

• Detecting and preventing unauthorised access to your account;
• Identifying and investigating fraudulent activity, money laundering, or violations of the Terms & Conditions;
• Verifying identity for withdrawal processing on amounts that require KYC;
• Ensures one account per individual as stipulated in the Terms & Conditions.

2.3 Responsible Gaming

My88 uses game activity data to monitor playing patterns and identify members who may need support relating to responsible gambling. This includes monitoring adherence to deposit and loss limits set by members themselves, as well as detecting early signs of gambling-related issues for appropriate intervention.

2.4 Platform Improvements

Anonymised usage data is used to analyse platform usage patterns, identify areas for improvement, and develop better new features for all members. This analysis does not involve the identification of individuals — data is aggregated before it is analysed.

My88 takes a highly cautious and limited approach to sharing members' personal data. Our core principle is simple: we do not sell your data. Full stop. Sharing only occurs in the following strictly limited situations:

3.1 Operations Service Providers

My88 shares necessary data with third-party service providers who support platform operations — including payment processors, gaming platform providers (such as Live Casino suppliers), and technology infrastructure providers. All such providers are bound by strict confidentiality agreements and are only permitted to use data for the specified purposes.

3.2 Legal Requirements

My88 may disclose personal information where required by law, court order, or direction from an authority with valid jurisdiction. In such circumstances, my88 will disclose only the minimum data necessary and will endeavour to notify affected members where permitted by law.

3.3 Protection of Vital Interests

In exceptional circumstances where disclosure is necessary to protect the safety or vital interests of an individual — including the member themselves — my88 may share relevant information with the appropriate parties.

Protecting members' personal and financial data is my88's absolute priority. We continually invest in the latest cybersecurity infrastructure to ensure your data remains secure at all times.

4.1 Technical Security

• 256-bit SSL Encryption: All communications between your browser and my88's servers are encrypted using the latest TLS protocols;
• Data-at-rest encryption: Sensitive data stored in my88's databases is encrypted using AES-256 encryption;
• Hashed password: Your password is never stored in plain text — only an irreversible hash value is retained;
• Firewall and intrusion detection systems: Security monitoring systems operate 24/7 to detect and block threats;
• Regular penetration testing: The my88 platform undergoes regular security testing by independent cybersecurity experts.

4.2 Internal Access Controls

My88 staff access to members' personal data is strictly governed by the principle of least privilege — each staff member can only access the data required for their specific role. All access to member records is logged and regularly audited. Violations of internal access policy are treated as a serious disciplinary matter within the company.

4.3 Security Incident Response

In the event of any data security incident that may affect members' personal information, my88 has detailed incident response procedures in place. Affected members will be notified within a reasonable timeframe with information on what occurred, what data may have been compromised, and the steps being taken to address the situation.

My88 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device when you visit our website.

5.1 Types of Cookies Used

• Session Cookies (Required): Required for core platform functionality — allowing you to remain logged in during a session, saving your betting cart contents, and ensuring secure transactions. These cookies cannot be disabled without affecting platform functionality;
• Preference Cookies: Saving your preferences such as language and platform display settings so you do not need to reconfigure them each time you log in;
• Analytics Cookies: Helping us understand how members use the platform so we can improve the user experience. This data is aggregated and does not identify any individual specifically;
• Security Cookies: Used to detect suspicious login activity and protect your account from unauthorised access.

5.2 Cookie Controls

You can manage your cookie preferences through your web browser settings. Most modern browsers allow you to view, delete, and block cookies from specific websites. Please note that disabling certain cookies may affect the functionality of the my88 platform and your overall experience.

My88 respects the privacy rights of every member and provides a straightforward process for exercising those rights. Here is how to submit a privacy-related request:

6.1 How to Submit a Request

To exercise any of your privacy rights, contact the my88 privacy team by email at support@my88-play.com with the subject line "Personal Data Privacy Request". Please include in your email:

• Your full name and my88 account number;
• The type of request you wish to make (access, correction, deletion, etc.);
• Specific information relevant to your request.

To protect your privacy, we may need to verify your identity before processing a request. This ensures that only you can access or request changes to your data.

6.2 Processing Timeframe

My88 will acknowledge receipt of your request within one business day and provide a substantive response within 14 business days. For more complex cases, this period may be extended to up to 30 days — you will be notified in advance if this applies.

My88 does not retain your personal data for longer than necessary. Retention periods are determined based on the original purpose of collection and applicable legal compliance requirements.

7.1 Data Retention Period

• Active account data: Retained for as long as your account remains active and for the required period following account closure;
• Financial transaction records: Retained for the minimum period required by applicable financial legislation, typically seven years;
• Support communication records: Retained for three years following the last interaction;
• Security logs: Retained for twelve months for audit and security purposes;
• Aggregated analytics data: May be retained indefinitely as it contains no personally identifiable information.

7.2 Data Deletion Upon Request

When you close your my88 account or request data deletion, my88 will delete or anonymise your personal data within 30 days, except for data that must be retained for legal compliance or ongoing dispute resolution purposes. You will be informed of what data has been deleted and what must be retained, along with the reasons why.

The world of technology and data privacy legislation is constantly evolving, and my88's Privacy Policy may need to be updated from time to time to reflect changes in our practices, new legal requirements, or shifts in how we operate.

When we make significant changes to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this document;
• Notifying all active members by email at least 14 days before changes take effect;
• Displaying a prominent notice on the my88 platform's main page for a specified period;
• In cases of highly material changes, we may seek fresh consent from members before the changes take effect.

Continued use of the my88 platform after an amendment's effective date constitutes acceptance of the updated Privacy Policy. We recommend reviewing this page periodically.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way my88 handles your personal data, we encourage you to reach out to us directly. We take privacy seriously and will respond to every enquiry promptly and thoroughly.