MG88 Privacy Policy

Introduction

MG88 ("we", "us", "our", "the Company", "the Platform") is committed to protecting the privacy and personal data of all users ("you", "the Player", "data subject") who access or interact with our online gaming platform at https://mg88.cam. This Privacy Policy ("Policy") issued in accordance with applicable data protection legislation and describes our practices regarding the collection, processing, storage, sharing, and deletion of personal data.

This Policy applies to all personal data collected through your use of the MG88 website, mobile-optimised platform, customer support channels (including live chat, WhatsApp, WeChat, and email), and any other interaction you have with MG88 as a registered or prospective player.

By creating an MG88 account, depositing funds, placing bets, or otherwise using our services, you acknowledge that you have read, understood, and consented to the data processing practices described in this Policy. This Policy should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy.

Definitions

In this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial data, location data, and online identifiers.
• "Processing" — Any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, transfer, or deletion.
• "Data Controller" — The entity that determines the purposes and means of processing personal data. For the purposes of this Policy, MG88 is the Data Controller.
• "Data Processor" — A third party that processes personal data on behalf of the Data Controller, subject to contractual obligations and data protection requirements.
• "Data Subject" — The individual to whom the personal data relates — in this context, you as an MG88 player or prospective player.
• "Consent" — Any freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their personal data.
• "KYC" — Know Your Customer — the identity, age, and source-of-funds verification process required of all players prior to withdrawal processing.
• "Cookies" — Small text files placed on your device by websites to store session data, preferences, and analytical information.

Data Controller

MG88 acts as the Data Controller for all personal data collected from players and website visitors via the MG88 platform. As Data Controller, MG88 is responsible for determining the purposes for which your personal data is processed, ensuring that processing is carried out lawfully, and maintaining appropriate technical and organisational safeguards to protect your data.

MG88 operates a multilingual support infrastructure serving players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and East Malaysia. All data processing conducted in connection with Malaysian players is subject to the standards set out in this Policy.

For all data protection enquiries, subject access requests, or requests to exercise any of the rights described in Section 11 of this Policy, please contact us via the details provided in Section 16.

Personal Data We Collect

MG88 collects personal data from you in the following categories, depending on how you interact with the platform:

MG88 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where health-related information is voluntarily provided in the context of a responsible gambling self-exclusion request, in which case it is processed solely for that specific purpose.

How We Process Your Data

MG88 processes your personal data for the following specific purposes:

1. Account Creation and Management: To register your account, verify your identity and age, maintain your account profile, and administer your player relationship with MG88.
2. Transaction Processing: To process deposits and withdrawals via your selected payment method (DuitNow, FPX, Touch'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, or cryptocurrency), and to maintain accurate financial records.
3. Gaming Service Delivery: To provide access to sports betting markets (including Liga Super Malaysia, EPL, La Liga, and UFC events), live casino games, slots, arcade and lottery products, and to record game outcomes accurately.
4. KYC and AML Compliance: To verify your identity, age (21+ requirement), and source of funds as required under anti-money laundering obligations and responsible gambling regulations.
5. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity multiple account creation, bonus abuse, and other unauthorised or prohibited conduct on the platform.
6. Customer Support: To respond to your enquiries, resolve complaints, and provide assistance in English, Bahasa Melayu, and Mandarin across live chat, WhatsApp, WeChat, and email channels.
7. Responsible Gambling: To implement and manage responsible gambling tools including deposit limits, session timers, cooling-off periods, and self-exclusion at your request, and to identify potential problem gambling behaviour.
8. Platform Improvement: To analyse usage patterns, identify technical issues, and enhance the performance, functionality, and user experience of the MG88 platform.
9. Legal and Regulatory Obligations: To comply with applicable laws, regulations, court orders, and requests from competent regulatory or law enforcement authorities.
10. Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — only where you have provided your prior consent and in accordance with applicable marketing laws.

Legal Basis for Processing

MG88 processes your personal data under one or more of the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and MG88, including account creation, game access, and payment processing.
• Legal Obligation: Processing required to comply with applicable laws, including KYC/AML regulations and responsible gambling obligations.
• Legitimate Interests: Processing conducted for MG88's legitimate business interests, including fraud prevention, platform security, and service improvement — where these interests are not overridden by your data protection rights.
• Consent: Processing based on your explicit and freely given consent, particularly in relation to marketing communications and optional data uses. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing & Disclosure

MG88 does not sell, rent, or trade your personal data with third-party advertisers or data brokers. Your personal data may be disclosed to the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual safeguards:

• Payment Processors and Financial Institutions: Your financial data is shared with relevant payment service providers — including those facilitating DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong transactions — to process deposits and withdrawals.
• Game Content Providers: Aggregated, non-personally identifiable usage data may be shared with our gaming software providers for game performance monitoring and RTP verification.
• Identity Verification Services: KYC documentation is processed by accredited identity and document verification service providers operating under binding data processing agreements.
• Fraud Prevention Platforms: Technical and behavioural data may be shared with anti-fraud and risk management platforms for the purpose of detecting and preventing fraudulent activity.
• Legal and Regulatory Authorities: MG88 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, court order, or regulatory directive.
• Professional Advisers: Our legal counsel, auditors, and compliance consultants may access personal data on a confidential basis where required in the course of their professional duties.

All third-party processors engaged by MG88 are contractually required to process personal data only in accordance with our documented instructions, to implement adequate security measures, and to comply with applicable data protection laws.

Data Retention

MG88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law. The following general retention principles apply:

• Account Data and KYC Documentation: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in accordance with AML regulatory requirements.
• Transaction and Financial Records: Retained for a minimum of seven (7) years to meet financial recordkeeping obligations and to resolve any retrospective financial disputes.
• Gaming History: Retained for five (5) years following account closure to support dispute resolution and regulatory compliance.
• Customer Support Communications: Retained for three (3) years from the date of the last interaction.
• Technical and Log Data: Typically retained for twelve (12) months unless longer retention is required for security investigation purposes.
• Marketing Consent Records: Retained for as long as marketing communications are sent and for a period of three (3) years thereafter.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data lifecycle management procedures.

Cookies & Tracking Technologies

MG88 uses cookies and similar tracking technologies on the platform to enhance your user experience, maintain session security, and collect analytical data that helps us improve our services. By continuing to use the MG88 platform after being presented with our cookie notice, you consent to the use of cookies in accordance with this section.

The following categories of cookies are used on the MG88 platform:

• Strictly Necessary Cookies: Essential for the platform to function correctly. These include session authentication tokens, security cookies, and load-balancing cookies. These cookies cannot be disabled without rendering core platform features inaccessible.
• Functional Cookies: Store your preferences such as language selection, notification settings, and responsible gambling tool configurations to personalise your experience across sessions.
• Analytical Cookies: Collect aggregated, anonymised data about how users interact with the platform — pages visited, features used, session duration — to help us identifyability improvements and technical issues.
• Security Cookies: Used to detect and mitigate fraudulent account activity, suspicious login patterns, and potential account takeover attempts.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookie categories may affect the functionality and security of your MG88 account. MG88 does not use third-party advertising or tracking cookies for the purpose of serving personalised advertisements on external websites.

Data Security

MG88 implements robust technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security infrastructure includes, but is not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the MG88 platform is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA to add an additional layer of protection to their accounts beyond their password.
• Secure Data Storage: Personal data and financial records are stored on secured servers with access restricted to authorised personnel only, on a strict need-to-know basis.
• Access Controls: Internal systems operate on role-based access controls, audit logging, and session monitoring to detect and prevent internal data misuse.
• Regular Security Audits: The MG88 platform undergoes regular technical security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident Response Procedures: MG88 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected players and relevant authorities as required by applicable law.

While MG88 takes all reasonable precautions to protect your data, no digital system is entirely immune from risk. You are responsible for maintaining the confidentiality of your account credentials and for notifying MG88 immediately if you suspect any unauthorised access to your account.

Your Rights as a Data Subject

As a data subject, you have the following rights in relation to the personal data MG88 holds about you. To exercise any of these rights, please contact us using the details in Section 16. MG88 will respond to all verified data subject requests within thirty (30) calendar days.

Children & Minors

The MG88 platform is strictly for individuals aged21 years and above. MG88 does not knowingly collect personal data from any person under the age of 21. Age verification is conducted as a mandatory step during the KYC process, and accounts that are found to belong to individuals under the age of 21 will be suspended immediately, with all associated personal data deleted or anonymised subject to any applicable legal retention obligations.

If you have reason to believe that a minor has registered an account on the MG88 platform or that their personal data has been inadvertently collected, please contact us immediately via the contact details in Section 16. We take underage gambling and data protection of minors extremely seriously.

International Data Transfers

In the course of providing services to players across Malaysia and operating a global technology infrastructure, it may be necessary for MG88 to transfer your personal data to entities located outside of Malaysia. Such transfers may occur in connection with cloud hosting services, payment processing infrastructure, or internationally-headquartered KYC and fraud prevention service providers.

Where personal data is transferred internationally, MG88 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections afforded under applicable data protection law. These safeguards may include standard contractual clauses, binding corporate rules, or transfers to jurisdictions that have been determined to offer an adequate level of data protection.

Third-Party Services

The MG88 platform may incorporate third-party service components, including payment gateways for DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong; live game streaming software from gaming content providers; and identity verification tools. These third-party services operate under their own privacy policies and data processing terms.

While MG88 conducts due diligence on all third-party service providers and requires appropriate data processing agreements, the Company is not responsible for the privacy practices of independent third-party entities. Players who interact with third-party payment systems should review the relevant privacy notices provided by those services.

Changes to This Policy

MG88 reserves the right to update or amend this Privacy Policy at any time. Material changes — those that significantly affect the manner in which we process your personal data or that alter your rights as a data subject — will be communicated to registered players via on-platform notification or email, with a minimum of fourteen (14) days' notice prior to the updated Policy taking effect.

The "Last Updated" date at the top of this page reflects when the most recent revision was made. The current version of this Policy supersedes all previous versions. Your continued use of the MG88 platform following the effective date of any updated Policy constitutes your acceptance of the revised terms.

If you disagree with any material change to this Policy, you may request account closure in accordance with Clause 13 of the MG88 Terms & Conditions prior to the effective date of the change.

Contact & Data Requests

For all data protection enquiries, subject access requests, or requests to exercise any of the rights described in Section 11 of this Policy, please contact the MG88 Data Protection team through the following channels:

• Live Chat: Available24 hours a day, 7 days a week, directly on the MG88 platform. Support available in English, Bahasa Melayu, and Mandarin. Average response time: 3–5 minutes.
• WhatsApp / WeChat: Available 24/7 for data protection and privacy enquiries in all three supported languages.
• Email: [email protected] — Please mark your email subject line with "Privacy / Data Request" for priority routing. Responses are provided within 24 hours for general enquiries and within 30 calendar days for formal Subject Access Requests.

When submitting a data subject request, you will be required to verify your identity before MG88 can process your request. This verification step is necessary to protect your personal data from being disclosed to or acted upon by unauthorised parties.