M888 Casino Privacy Policy – Our Commitment to Protecting Malaysian Players' Personal Data

M888 casino respects the privacy of every individual who registers and plays on our platform. This Privacy Policy is an official document that outlines our practices for collecting, using, storing, and protecting your personal information as an m888 casino member.

We operate according to core data protection principles that encompass: minimal and proportionate data collection, use strictly limited to stated purposes, secure storage with defined retention periods, and full transparency to members regarding how their data is managed.

This Privacy Policy applies to all information collected through the m888 casino website, mobile applications, and all communication channels between you and m888 casino, including customer support live chat, email communications, and in-play interactions. This policy is written in accordance with the requirements of the Malaysia Personal Data Protection Act 2010 (PDPA) which governs the processing of personal data of individuals in a commercial context in Malaysia.

M888 casino collects several categories of personal information when you use our platform. This is done directly through registration forms and your interactions with the platform, as well as automatically through technologies such as cookies and server logs.

M888 casino does not collect sensitive data such as health information, religious beliefs, or political affiliations. We only collect data that is strictly necessary to provide you with a safe and high-quality online casino experience.

M888 casino uses your personal data only for the legitimate, stated purposes listed below. We do not use your data for any purpose beyond what is listed here without obtaining your additional consent.

• Account management: To create, verify, and manage your m888 casino account — including the login process, OTP verification, and password recovery.
• Transaction processing: To process deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX (Maybank2u, CIMB Clicks), Boost, and ShopeePay, and to process your withdrawal requests in MYR.
• Gaming service delivery: To provide access to all games on m888 casino — slots, live casino (baccarat, blackjack, roulette, dragon tiger), and Sports Betting (Malaysia Super League, EPL, badminton, e-sports, and more).
• Identity verification (KYC): To fulfil our legal obligation to verify member identity before processing a first withdrawal or when required by anti-money laundering regulations.
• Service communications: To send technical notices, platform updates, security alerts, and responses to your customer support enquiries at m888 casino.
• Marketing communications: To send promotional offers, new bonuses, and the latest gaming updates — only if you have opted in to receive such communications during registration or in your account settings.
• Fraud detection and security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, or any violation of the m888 casino Terms & Conditions.
• Platform improvements: To analyse aggregated (not individual) usage patterns for the purpose of improving the user experience, platform performance, and the range of games offered at m888 casino.
• Legal compliance: To comply with any applicable Malaysian legal requirements, including lawful requests from the relevant authorities.

Any use of your data beyond the list above requires your separate consent, unless required by law or for a legitimate public interest purpose.

M888 casino does not sell, rent, or disclose member personal data to third parties for marketing or commercial purposes. This is an absolute commitment on our part. However, there are limited situations where we need to share your information with specific parties to keep the platform running properly.

Permitted data sharing is as follows:

• Payment service providers: The payment gateway that processes your TNG eWallet, GrabPay, DuitNow, FPX, Boost, and ShopeePay transactions requires the necessary transaction details to handle deposits and withdrawals in MYR. All of these providers comply with PCI-DSS standards.
• Licensed game providers: Providers such as Evolution Gaming, Playtech, Pragmatic Play, and PG Soft receive only the minimum session data required to deliver games to you. These providers are bound by strict data protection agreements with m888 casino.
• Identity verification services: During the KYC process, your identity documents may be verified through a licensed third-party verification service that adheres to established security standards.
• Legal authorities: m888 casino will disclose the required information to the relevant Malaysian authorities when mandated by law or a valid court order. This includes cooperation with investigations related to money laundering or criminal activity.
• Business transfer: In the event that m888 casino is involved in a merger, acquisition, or asset sale, member data may be transferred as part of that transaction. Members will be notified in advance and the same privacy policy will continue to apply.

Protecting member personal data is a core technical and operational priority at m888 casino. We continuously invest in security infrastructure to ensure your data is safeguarded against unauthorised access, breaches, loss, or misuse.

The key security measures we have implemented at m888 casino are:

• 256-bit SSL/TLS Encryption: All communications between your browser and the m888 casino platform are encrypted using 256-bit SSL/TLS protocol — the same standard used by major banking institutions in Malaysia.
• Data encryption at rest: Sensitive data stored in the m888 casino database, including payment details and identity information, is encrypted using AES-256 standards.
• Role-based access control: Only m888 casino staff with a specific operational need are granted access to member data. All access is logged and monitored on a regular basis.
• Firewalls and intrusion detection systems: The m888 casino server infrastructure is protected by multi-layered firewalls and an intrusion detection and prevention system (IDS/IPS) that operates 24/7.
• Two-factor authentication (2FA): Staff access to critical m888 casino systems requires two-factor authentication. Members are also encouraged to enable additional security layers on their accounts.
• Regular security audits: m888 casino conducts regular security assessments and penetration testing to identify and address potential vulnerabilities before they can be exploited.
• Incident response plan: m888 casino has a clearly defined incident response procedure. In the event of a data breach, we will take immediate action to contain the issue and notify affected members in accordance with the requirements of PDPA 2010.

While m888 casino takes comprehensive security measures, it is equally important that you play your part in keeping your account secure. Always use a strong, unique password for your m888 casino account, never share your login credentials with anyone, and log out of your account when using a shared or public device.

The m888 casino platform uses cookies and similar tracking technologies to enhance your gaming experience, maintain session security, and analyse platform performance. Cookies are small text files stored on your device when you visit the m888 casino platform.

Types of cookies used by m888 casino:

• Essential cookies (required): These cookies are required for the m888 casino platform to function properly. They manage your login session, maintain your account balance during gameplay, and ensure security features such as CSRF verification work as intended. Without these cookies, you will not be able to play on m888 casino.
• Preference cookies: These cookies remember your preferences and settings on m888 casino — such as your preferred language, display limits, and table configurations — making your experience more consistent from one session to the next.
• Analytics cookies: These cookies help m888 casino understand how members use the platform — which pages are visited most frequently, how long sessions last, and where technical issues may occur. This data is used in aggregate form to improve the platform.
• Security cookies: These cookies help m888 casino detect suspicious activity such as login attempts from unusual locations or abnormal betting patterns that may indicate fraud.

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the m888 casino platform and your ability to play. For instructions on managing cookies in your web browser, please refer to your browser's documentation.

In operating an online casino platform, m888 casino may need to transfer members' personal data outside of Malaysia in certain circumstances — particularly in relation to international gaming software providers such as Evolution Gaming or Pragmatic Play, which operate live casino studios and game servers at locations abroad.

M888 casino takes reasonable steps to ensure that any cross-border data transfers are carried out with adequate safeguards in place:

• Data transfers are only carried out with providers whose data protection standards are equivalent to or stricter than Malaysia's PDPA 2010.
• Legally binding data processing agreements are signed with all international service providers before any m888 casino member data is shared.
• Data transfers are limited to the minimum information required to deliver the service — for example, an anonymised session ID rather than a full name or phone number, for game access purposes.
• M888 casino conducts regular reviews of the data protection practices of overseas service providers we work with to ensure ongoing compliance.

If you would like more details about the specific countries or entities that may receive your data, please contact the m888 casino support team.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as an m888 casino member hold certain rights over your personal data, all of which we fully respect. These rights may be exercised at any time by contacting the m888 casino support team.

M888 casino does not retain your personal data for longer than is necessary for the purposes for which it was collected, except where a longer retention period is required or permitted under Malaysian law.

Our general data retention policy is as follows:

• Active account data: Retained for as long as your account remains active with m888 casino, or for as long as necessary to provide services to you.
• Financial transaction records: Retained for a minimum of 7 years from the transaction date, in accordance with Malaysia's accounting and anti-money laundering legal requirements.
• Identity verification (KYC) data: Retained for a minimum of 5 years following account closure, in accordance with regulatory compliance requirements.
• Support communication records: Retained for 2 years from the date of the last interaction for reference and dispute resolution purposes.
• Technical log data: Retained for 12 months for security purposes and technical troubleshooting.

Once the retention period expires or the data is no longer required, m888 casino will securely delete or anonymise it so that it can no longer be linked back to you. The deletion process follows industry-standard methods to ensure the data cannot be recovered.

If you have any questions, concerns, or complaints about how m888 casino handles your personal data, we encourage you to reach out to us directly. Our team is ready to assist and will respond to every privacy-related enquiry with the seriousness it deserves.

You are also welcome to contact us if:

• You wish to exercise any of your data subject rights (access, correction, deletion, etc.)
• You have concerns about a possible data breach involving your account
• You wish to withdraw your consent to certain data processing activities (such as marketing communications)
• You are dissatisfied with the way m888 casino has handled your personal data
• You have any questions about the contents of this Privacy Policy

M888 casino is committed to resolving all privacy-related complaints fairly and in a timely manner. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia under the Ministry of Communications and Multimedia.