Privacy Policy my88 – Member Personal Data Protection

My88 is an online gaming platform operating under an officially recognized license. We deeply value the trust placed in us by every member, and one of the ways we honor that trust is by managing your personal data responsibly, transparently, and securely.

This Privacy Policy explains in detail:

• The types of personal data we collect when you use the my88 platform.
• The purpose and legal basis for processing such data.
• Parties who may receive your data and under what circumstances.
• Data retention period and deletion procedures.
• Your rights regarding personal data and how to exercise them.

This policy is written in Malay for the convenience of our Malaysian members. In the event of any discrepancy between the Malay version and any other language version, the Malay version shall prevail.

My88 collects various types of data depending on how you interact with our platform. Below is a summary of the data we collect:

Data We Do Not Collect

My88 does not collect sensitive information such as biometric data, medical records, religious beliefs, or political views. We also do not store full credit card numbers – all payment information is processed directly by PCI-DSS certified payment providers.

The personal data we collect is used solely for legitimate and necessary purposes in operating the my88 platform. The following are the primary purposes for which data is used:

• Account Management: Creating, verifying and maintaining your member account, including the identity verification (KYC) process.
• Transaction Processing: Processing deposits, withdrawals and all financial transactions securely and accurately.
• Security Verification: Detecting and preventing fraud, money laundering, unauthorized access and other suspicious activity.
• Legal Compliance: Meeting applicable legal and regulatory obligations, including anti-money laundering (AML) reporting requirements.
• Service Improvement: Analyzing usage patterns to improve the user experience, platform performance and game selection.
• Customer Support: Enabling our support team to resolve your queries and complaints efficiently.
• Marketing Communications: Sending promotional information, exclusive offers and platform updates – only where you have given your consent.
• Responsible Gaming: Monitoring wagering patterns to identify signs of problem gambling and offering appropriate support.

My88 does not sell, rent, or trade members' personal data to any third party for their own marketing purposes. However, there are certain situations where we may need to share your data:

Trusted Service Providers

We share necessary data with third-party service providers who assist us in operating the platform. This includes payment processing providers, identity verification (KYC) providers, cloud service providers, and analytics providers. All such providers are bound by strict confidentiality agreements and may only use your data for purposes directed by my88.

Legal Requirements

My88 will disclose your personal data to the relevant authorities when required to do so by law, court order, or regulatory directive. This includes disclosures required in financial crime or money laundering investigations.

Legitimate Interest Protection

In situations where it is necessary to protect the security of the platform, the rights of my88, or the rights of other members, we may share relevant data with legal advisors, auditors, or law enforcement agencies.

Protecting your personal data is a top priority at my88. We continuously invest in the latest security infrastructure to keep your data safe at all times.

Technical security measures we implement:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and my88 servers is encrypted using industry-standard 256-bit SSL/TLS protocol.
• Data-at-Rest Encryption: Sensitive data stored in our databases is encrypted using the AES-256 algorithm.
• Two-Factor Authentication (2FA): We provide 2FA for all member accounts as an added layer of security.
• 24/7 Monitoring: Automated monitoring systems detect suspicious activity and unauthorized access attempts in real time.
• Internal Access Controls: Only my88 staff with a legitimate business need are permitted to access member personal data, and every access is logged and audited.
• Regular Security Audits: We conduct regular security audits and penetration testing by independent third parties.

My88 uses cookies and similar tracking technologies to enhance the user experience, analyze platform performance, and maintain the security of your login session.

Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Performance Cookies: Collecting information on how you use the platform (e.g. most frequently visited pages) to help us improve our services.
• Functional Cookies: Remembering your preferences such as language, display settings and game choices to deliver a more personalized experience.
• Analytics Cookies: Used by our internal analytics tools to understand usage patterns and member behaviour in an aggregated, anonymised manner.

You can manage your cookie preferences through your web browser settings. However, disabling certain cookies may affect the functionality and user experience of the my88 platform.

As a data owner, you have certain rights regarding your personal data held by my88. We respect and facilitate the exercise of these rights:

My88 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by applicable law.

• Active Account Data: Retained for as long as your account is active and for a reasonable period following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's accounting and anti-money laundering legal requirements.
• Security Logs: Retained for 12 months for security investigation and digital forensics purposes.
• Communication Records: Support chat records and emails are retained for 3 years.
• Marketing Data: Retained until you withdraw your consent to receive marketing communications.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to you personally.

As my88 operates as a global digital platform, your personal data may be processed or stored on servers located outside Malaysia. In all such cases, we ensure that adequate and equivalent protection is provided for your data.

Steps we take to ensure safe international data transfers:

• Ensuring recipient countries have adequate data protection laws.
• Implementing Standard Contractual Clauses with all international service providers.
• Conducting Transfer Impact Assessments for transfers to high-risk countries.
• Ensuring all transferred data remains encrypted in transit and at rest.

My88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal developments, or other operational reasons. Any significant amendments will be communicated to members via email or a prominent notice on the platform.

The "Updated" date at the top of this document will always reflect the date of the latest revision. We encourage you to review this Privacy Policy periodically.

If you have any questions, concerns, or wish to exercise any of your privacy rights, please contact the my88 Data Protection Officer (DPO) through our customer support platform, available 24 hours a day, 7 days a week.