Privacy Policy my888 –
User Personal Data Protection

My888 is an online betting platform operating in my888.vu and is intended exclusively for adult users in Malaysia. We understand that your trust is our most valuable asset, and we take our responsibility to protect your personal data with the utmost seriousness.

This Privacy Policy applies to all information collected through the my888 website, our mobile app, and any services or communication channels associated with my888. This includes data you provide directly, data collected automatically while you use the platform, and data we receive from trusted third-party sources.

This Policy also covers how we respond to requests from legitimate authorities, how we manage data security incidents, and the rights you hold as our user. my888 is committed to being fully transparent and accountable in every aspect of your personal data management.

My888 only collects data necessary to provide you with a safe, responsible, and high-quality service. Below is a comprehensive overview of the categories of data we collect:

All sensitive financial data such as credit card numbers is processed directly through certified payment gateways that do not store such information on my888 servers. This means your most sensitive financial details are never held directly in my888's custody.

My888 uses your personal data responsibly and only for legitimate purposes. Every use of data has a clear legal basis — whether grounded in contract, legal obligation, legitimate interest, or your explicit consent.

• Account Management: Creating and maintaining your account, processing registration, verifying identity through KYC, and ensuring the security of your login.
• Transaction Processing: Handling your deposits, withdrawals, and all financial transactions securely and efficiently through approved payment channels.
• Legal Compliance: Fulfilling legal obligations including anti-money laundering (AML) requirements, reporting to regulatory bodies, and verifying user age.
• Platform Security: Detecting and preventing fraudulent activity, account misuse, unauthorized access, and other cybersecurity threats that could affect users.
• Customer Support: Providing technical assistance and responsive customer service, resolving complaints fairly, and continuously improving our service quality.
• Experience Personalization: Tailoring game recommendations, relevant promotions, and platform content based on your preferences and play habits — in a way that respects your privacy.
• Responsible Gambling: Monitoring play patterns to identify users who may need support, and enforcing limits set by users themselves.
• Marketing Communications: Sending promotional information, bonuses, and platform updates — only to users who have given explicit consent to receive such communications.

My888 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, there are limited circumstances where data sharing is necessary and permitted by law:

• Trusted Service Providers: Third-party companies that assist us in delivering our services — such as payment processors, KYC verification service providers, cloud infrastructure, and customer support platforms. All such vendors are bound by strict data confidentiality agreements and may only use your data for the specific purposes defined.
• Legal & Regulatory Compliance: Where required by law, court order, or direction from a legitimate regulatory authority — my888 will disclose only the minimum necessary data as stipulated.
• my888 Rights Protection: In cases of suspected fraud, platform abuse, or legal disputes, my888 reserves the right to disclose relevant data to legal counsel or the relevant authorities.
• Your Explicit Consent: In other situations requiring data sharing, we will obtain your explicit consent before any disclosure is made.

All third parties working with my888 are required to meet data protection standards equivalent to or higher than those we uphold ourselves. We monitor their compliance on a regular basis and take prompt action in the event of any breach.

My888 continually invests in the latest security technologies and procedures to protect your personal data from unauthorised access, accidental disclosure, alteration, or destruction. Our security infrastructure comprises multiple complementary layers of protection:

• In-transit data encryption using TLS 1.3 protocol with 256-bit SSL certificates.
• At-rest data encryption using AES-256 standards for all sensitive data.
• Two-factor authentication (2FA) is available and strongly encouraged for all user accounts.
• Intrusion detection systems (IDS) and intrusion prevention systems (IPS) operating 24/7.
• Security audits and penetration testing by independent third parties at least twice a year.
• Real-time access log monitoring with automated alerts for suspicious patterns.
• A clear and tested incident response protocol to ensure rapid response in the event of a data breach.

In the event of a data breach affecting your personal information, my888 is committed to notifying affected users within 72 hours of identifying the incident, in line with industry best practices and applicable legal requirements.

My888 does not retain your personal data longer than necessary. Retention periods are determined based on the original purpose of data collection, applicable legal obligations, and legitimate operational requirements. The following are our general data retention guidelines:

• Active Account Data: Retained for the duration your account remains active and in use.
• Closed Account Data: Retained for 7 years after account closure to meet audit requirements and anti-money laundering legislation.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's financial reporting legal requirements.
• Communication & Support Logs: Retained for 3 years for reference and dispute resolution purposes.
• Session & Technical Log Data: Retained for 90 days for security and technical debugging purposes.
• Marketing Data (if consented): Retained until you withdraw consent or close your account.

Once the designated retention period expires, data will be securely deleted or anonymised using approved procedures. You may request details on the specific retention period for your data by contacting our privacy team.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and my888's internal policies, you have the following rights regarding your personal data:

My888 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They help us remember your preferences, maintain your login session, and understand how our platform is used.

Categories of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled as they are critical to platform operations.
• Functional Cookies: Remembering your preferences such as language, display settings, and game preferences to deliver a more personalized experience.
• Analytics Cookies: Collecting statistical information about how users interact with our platform to help us improve its design and content. Data collected is in aggregated form and does not identify individuals.
• Marketing Cookies: Used to display more relevant promotions to you based on your interests and activity on the platform. These cookies are only activated with your consent.

You can manage cookie settings through your internet browser. Most browsers allow you to view, manage, or delete stored cookies. Please note that disabling certain cookies may affect the functionality of some sections of the my888 platform.

My888 is a platform intended exclusively for adults aged 18 and above. We do not knowingly collect or process personal data from any individual under the age of 18.

All new account registrations are subject to a rigorous age verification process as part of our KYC procedures. Should we find that personal data of a minor has been collected inadvertently, we will take immediate action to delete that data and close the account without prior notice.

My888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. Each new version will carry an updated "Last Updated" date at the top of this document.

For changes that are material and significant — meaning changes that substantially affect how we use your personal data — my888 will provide advance notice via:

• Email notification to all registered users at least 14 days before the changes take effect.
• A clear and prominent notice on the my888 platform homepage.
• In-app notification during your next login session.

Continued use of the my888 platform after any amendment's effective date is considered acceptance of the updated Privacy Policy. If you disagree with any changes, you have the right to close your account and request deletion of your personal data in accordance with the rights stated in Section 7.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, do not hesitate to contact our privacy team. We are here to assist you 24 hours a day, 7 days a week.