Privacy Policy md888 – Personal Data Protection for Malaysian Players

Md888 collects your personal information only when necessary to provide you with a quality and secure service as a player in Malaysia. We believe in the principle of minimal collection — we only ask for what is strictly required.

Information you provide directly to md888:

• Full name as stated on your Malaysian Identity Card (MyKad)
• Active Malaysian phone number
• A valid email address
• Date of birth (for age verification)
• Current residential address
• Identity verification documents (during the KYC process) — copy of MyKad or passport
• E-wallet or bank account details (account holder name and account number for withdrawals only)

Information automatically collected when you use the md888 platform:

• IP address and device information
• Browser type and version
• Operating system in use
• Login records and session timestamps
• Gaming activity history (for security and responsible gaming purposes)
• Cookie data and similar tracking technologies (see Section 5)

Md888 uses collected personal information solely for lawful and transparent purposes. Below is a complete list of how your data is used on the md888 platform:

Md888 does not use your data for automated decision-making (profiling) that could negatively affect your rights as a member, except in cases of fraud detection where immediate action is required to protect platform security.

Md888 maintains a strict confidentiality policy. Your personal data will never be sold, rented, or shared to third parties for their own marketing purposes. However, there are limited situations where md888 may need to share your information:

• Licensed Payment Gateways: Information required to process deposits and withdrawals is shared with payment service providers such as Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and Malaysian banking institutions (FPX, Maybank, CIMB). These providers are subject to their own privacy policies and Bank Negara Malaysia regulatory compliance requirements.
• Game Software Providers: Minimal technical information is shared with gaming platform providers integrated with md888 for operational purposes only.
• Legal Authorities: md888 is required to disclose certain information to authorities if ordered by a court, law enforcement agency, or legitimate regulatory body in Malaysia.
• Identity Verification Services: During the KYC process, a copy of your identity document may be shared with identity verification service providers who are bound by strict confidentiality agreements with md888.

Md888 continuously invests in security infrastructure to ensure your personal data remains protected at all times. md888's security approach is layered and comprehensive.

• Encryption of Data at Rest and in Transit: All data stored in md888's databases is encrypted using AES-256. Data in transit is secured with TLS 1.3.
• Strict Access Controls: Only md888 staff with a legitimate operational need are permitted to access member personal data. All access is logged and monitored.
• Two-Factor Authentication (2FA): All internal access to md888 systems containing personal data requires 2FA. Members are also encouraged to enable 2FA on their accounts.
• Regular Penetration Testing: md888 conducts regular penetration testing by independent security experts to identify and address vulnerabilities before they can be exploited.
• 24/7 Monitoring: md888's systems are continuously monitored by our cybersecurity team to detect any suspicious activity.
• Incident Response Plan: md888 has a responsible procedure in place to respond to any data breach — including notifying affected members within a reasonable timeframe.

While md888 takes all reasonable steps to protect your data, no system can be guaranteed 100% secure. You also play an important role in keeping your account safe — use a strong, unique password for your md888 account and never share your login credentials with anyone.

Md888 uses cookies and similar tracking technologies to enhance your experience on the platform. Understanding how we use cookies helps you make more informed decisions about your privacy.

Types of cookies used by md888:

• Essential Cookies: Required for core md888 platform functions such as login, game sessions, and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Used to analyse how players interact with the md888 platform, enabling us to identify areas for improvement. Data is collected in aggregate form without identifying individual users.
• Functional Cookies: Stores your preferences such as language, display settings, and game preferences so you do not need to reconfigure them each time you log in to md888.
• Marketing Cookies (Optional): Used to display relevant md888 offers to you. You may withdraw consent for these cookies at any time through the platform's cookie settings.

As an md888 player in Malaysia, you have important rights over your personal data. md888 is committed to respecting and facilitating the exercise of these rights.

To exercise any of the rights above, please contact the md888 privacy team by email at support@md888.biz stating your request clearly. We will verify your identity before processing any request relating to your personal data.

Md888 does not retain your personal data longer than necessary for the original purpose of collection, or longer than required under Malaysian law. When data is no longer needed, it will be securely deleted or anonymised.

• Active Account: Your personal data is retained for as long as your md888 account remains active.
• Inactive Accounts: Accounts inactive for more than 3 years will be deleted following notification to the registered email address, unless there is a legal obligation to retain them.
• Financial Records: Retained for 7 years following the transaction date, in accordance with Malaysian tax and anti-money laundering legal requirements.
• KYC Records: Retained for 5 years after the business relationship ends.
• Security Logs: Retained for 2 years for investigation purposes if required.
• Customer Service Data: Communication records are retained for 2 years after the last interaction.

Upon expiry of the retention period, md888 will delete your data using secure deletion methods that ensure the data cannot be recovered by any party.

In the course of operating the md888 platform, your personal data may be processed or stored outside Malaysia — for example, when using cloud services or international technology providers.

In all such cases, md888 ensures that:

• Data transfers only take place to countries or entities that maintain data protection standards equivalent to or higher than Malaysia's.
• Data transfer agreements compliant with applicable laws have been signed with all data recipients.
• Appropriate technical and organisational measures are in place to ensure data security during transfer.

The md888 platform is restricted to individuals who are 18 years of age and above only. md888 does not knowingly collect or process personal data from individuals under the age of 18.

If md888 discovers that personal data of a minor has been collected without parental or guardian consent, we will immediately take the following action:

• Immediate closure of the associated account
• Delete all personal data belonging to that individual from md888's systems
• Returning any existing deposits (where applicable) in accordance with the appropriate procedures

If you are aware of or suspect that a minor has registered for or is using the md888 platform, please notify us immediately via support@md888.biz.

If you have any questions, concerns, or complaints regarding md888's Privacy Policy or how we handle your personal data, the md888 privacy team is here to help.

This Privacy Policy was last updated on 1 January 2026. md888 reserves the right to update this policy from time to time. Material changes will be communicated via email to all registered members.