Privacy Policy md88 casino –
Malaysian Player Data Protection

Introduction & Scope of Privacy Policy

Md88 casino ("we", "platform") is the data controller for personal information collected from users and players who register or access our online betting platform at md88casino.biz. This Privacy Policy explains in detail our data protection practices, the types of data collected, the purposes for which it is used, and your rights as a Malaysian player under the Personal Data Protection Act 2010 (PDPA).

This Privacy Policy applies to all registered players, website visitors, and any individual who interacts with the md88 casino platform — whether via the desktop site, mobile browser, or any other digital interface we operate. This covers all platform activity, including account registration, deposits and withdrawals in Malaysian Ringgit (RM), participation in live casino games, badminton and football Sports Betting, and any interaction with our customer support team.

We are committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection laws in Malaysia. This Policy is reviewed and updated periodically to reflect changes in our practices or new legal requirements.

Types of Personal Data Collected

2.1 Identity & Contact Data

During registration and throughout your use of the md88 casino platform, we collect the following identity and contact information:

• Full name as stated on your Malaysian identity card (MyKad) or passport
• Date of birth and gender
• Active email address
• Malaysia mobile number
• Residential address in Malaysia
• Identity card number (MyKad) or passport number (for KYC verification purposes)

2.2 Financial & Transaction Data

To process deposits and withdrawals in MYR and ensure compliance with financial regulations, we record:

• Deposit and withdrawal transaction history (amounts in RM, dates, times, and methods)
• Payment method details used — including your Touch 'n Go e-wallet number, GrabPay, DuitNow, Boost, ShopeePay, or FPX bank name (Maybank2u, CIMB Clicks, and others)
• Current account balance and fund movement history
• Details of bonuses and promotions claimed

2.3 Gaming Activity Data

For platform management, security, and compliance purposes, we record gaming activity including:

• Gaming history (roulette, blackjack, live casino, badminton betting, Malaysia Super League football, EPL, and more)
• Total bets placed, winnings, and losses
• Gaming session times and duration
• Responsible gaming limits set by the player

2.4 Technical & Device Data

Automatically when you visit our platform:

• IP address and approximate geographical location
• Device type, operating system, and web browser version
• Cookie data and session identifiers
• Access logs, visit timestamps, and pages visited

How We Collect Your Personal Data

3.1 Directly from You

The majority of your personal data is collected directly through your interactions with the md88 casino platform, including:

• New account registration form
• The KYC identity verification process (submission of MyKad, passport, or proof of address documents)
• Deposit and withdrawal forms in RM
• Conversations with the md88 casino customer support team via live chat or email
• Participation in satisfaction surveys or player feedback programmes
• Account settings and responsible gaming preferences you have configured yourself

3.2 Automatically

Some data is collected automatically when you use our platform through technologies such as cookies, tracking pixels, and server logs. This data includes technical information about your device and internet connection, usage patterns, and your navigation history within the platform.

3.3 From Third Parties

In certain cases, we may receive your personal data from trusted third parties for the purposes of identity verification, fraud prevention, or financial regulatory compliance. This includes Malaysian payment service providers that process your deposit and withdrawal transactions.

Purposes for Using Personal Data

Md88 casino uses your personal data for the following purposes, each grounded in a valid legal basis under Malaysia's PDPA:

4.1 Platform Service Provision

• Creating and managing your player account
• Processing deposits and withdrawals in MYR via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX, and other Malaysian payment methods
• Providing access to all games — roulette, blackjack, live casino, badminton Sports Betting, football, and more
• Managing bonus programmes, promotions, and VIP loyalty programmes

4.2 Legal Compliance & Security

• Conducting KYC (Know Your Customer) identity verification checks as required by law
• Detecting and preventing fraud, money laundering, and platform abuse
• Fulfilling reporting obligations to relevant regulatory authorities
• Enforcing md88 casino's Terms and Conditions

4.3 Responsible Gaming

• Monitoring gaming patterns to identify signs of problem gambling
• Managing deposit limits, loss limits, and session time limits set by the player
• Processing self-exclusion or temporary break requests from the platform

4.4 Platform Improvement & Communications

• Analysing usage patterns to improve platform performance and user experience
• Sending important notifications relating to your account, transactions, or changes to terms
• Sending promotional information and special offers (with your consent)
• Providing effective customer support in Bahasa Malaysia

Data Sharing with Third Parties

5.1 Core Principle: No Data Selling

Md88 casino strictly never sells, rents, or transfers players' personal data to any third party for marketing or commercial purposes. Your personal data is not, and will never be, a product we trade.

5.2 Permitted Sharing

In the following limited circumstances, md88 casino may share your personal data with trusted third parties:

• Payment Processors: Malaysian payment service providers (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, FPX and Malaysian banks) that process your MYR deposits and withdrawals — only the information necessary to complete those transactions is shared.
• Game Software Providers: World-class game software partners who operate live casino games and Sports Betting within our platform — subject to strict data protection agreements.
• Identity Verification Services: Third-party KYC service providers who assist us in verifying player identities in accordance with legal requirements.
• Legal Authority: Law enforcement agencies, regulatory bodies, or courts when we are legally required to do so.
• Business Transfer: In the event of a merger, acquisition, or sale of md88 casino assets, personal data may be transferred as part of that transaction — with appropriate notice given to players.

Data Security Measures

6.1 Encryption & Technical Protection

Md88 casino employs multiple layers of technical protection to safeguard your personal data:

• 256-bit SSL/TLS encryption for all communications between your browser and our servers
• Encryption of sensitive data at rest within our databases
• Firewall and intrusion detection systems (IDS) monitored 24/7
• Two-factor authentication (2FA) available for enhanced account security
• Regular vulnerability scanning and penetration testing conducted by independent third parties

6.2 Internal Access Controls

Access to players' personal data within md88 casino is strictly limited on a need-to-know basis. Only staff with a legitimate business need are permitted to access player personal data, and all such access is logged and audited regularly. All personnel who handle personal data undergo data protection training and are bound by strict confidentiality obligations.

6.3 Security Incident Response

Md88 casino maintains a comprehensive security incident response procedure. In the event of a data breach that may affect the rights and freedoms of players, we are committed to notifying affected players and the relevant authorities within the timeframe stipulated by Malaysia's PDPA, along with details of the incident and the mitigation steps taken.

Cookie & Tracking Technology Policy

The md88 casino platform uses cookies and similar tracking technologies to enhance the user experience and analyse platform usage. The following are the types of cookies we use:

Your Rights as a Malaysian Player

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by md88 casino:

To exercise any of the above rights, submit a written request to support@md88casino.biz with the email subject line "Privacy Rights Request — [Request Type]". Please include your full name, md88 casino account number, and details of your request. We will verify your identity before processing the request to protect the security of your data.

Data Retention Period

Md88 casino retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following are our data retention guidelines:

• KYC identity and verification data: 7 years after account closure — this is a legal requirement under Malaysia's anti-money laundering (AML) regulations.
• Financial records (MYR deposit & withdrawal transactions): 7 years from the transaction date, in accordance with the Companies Act and Malaysian financial regulations.
• Gaming activity history: 5 years after account closure for dispute resolution and compliance purposes.
• Customer support communication data: 3 years from the date of last interaction.
• Technical log data and cookies: Between 30 days and 2 years, depending on data type.
• Marketing data (with consent): Until you withdraw your consent or close your account.

Once the retention period has expired, your personal data will be securely deleted or anonymised in accordance with established procedures. Anonymised data may continue to be used for statistical analysis purposes without being able to identify you as an individual.

Cross-Border Data Transfers

In operating an international-standard online betting platform, md88 casino may need to transfer your personal data to servers or service providers located outside Malaysia. This may occur when engaging international live casino game software providers or technical infrastructure services.

Where such data transfers occur, md88 casino ensures appropriate safeguards are in place through:

• Data transfer agreements requiring recipients to maintain protection standards equivalent to Malaysia's PDPA
• Transfers only to countries or organisations recognised as providing an adequate level of data protection
• Use of internationally recognised standard contractual clauses to protect transferred data

You may contact us at support@md88casino.biz for further information on the safeguard mechanisms applied to any international data transfers relating to your account.

Minors & Age Protection

The md88 casino platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from children under the age of 18. If you believe a child has provided us with personal data without parental or guardian consent, please contact us immediately at support@md88casino.biz and we will take prompt steps to delete that data.

Md88 casino conducts age verification at registration and reserves the right to request proof of age at any time. Accounts found to belong to underage players will be closed and all funds returned after applicable deductions.

Contact Us & Privacy Complaints

If you have any questions, concerns, or complaints regarding how md88 casino handles your personal data, we encourage you to contact us directly for a prompt resolution:

• Email: support@md88casino.biz (please mark "Privacy Enquiry" in the subject line)
• Response time: Within 3 business days for general enquiries, and 14 business days for formal data rights requests
• Language: Bahasa Malaysia or English

If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia (Department of Personal Data Protection) in accordance with the procedures established by that authority.

Md88 casino reserves the right to update this Privacy Policy from time to time. Material changes will be communicated to players via their registered email or in-platform notification at least 14 days before taking effect. Continued use of the platform after such notification constitutes acceptance of the updated terms.