Privacy Policy Million 88 – Protecting Your Data is Our Priority

Million 88 is an online entertainment platform serving Malaysian users since 2018. We offer a wide range of services including live casino, Sports Betting (Malaysian Super League and EPL football, badminton, tennis), e-sports, slots, lottery, and a VIP programme. In delivering these services, we need to collect and process certain personal information from our users.

This Privacy Policy applies to all users who access or use the Million 88 platform through our official website, mobile app, or any other medium. It covers all personal data processing carried out by Million 88 as the data controller.

We are committed to full transparency in how we handle your data. If you ever have questions or concerns about your privacy, our team is ready to assist through the channels listed at the end of this document.

Million 88 only collects data that is strictly necessary to deliver our services safely and effectively. The following are the categories of data we collect:

We may also receive information about you from legitimate third-party sources, such as identity verification providers or payment providers (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX), in the context of processing your transactions.

Data collected by Million 88 used solely for legitimate purposes directly related to the provision of our services. We do not use your data for any purpose to which you have not consented.

• Account Management: Creating and managing your account, including identity verification, password resets, and protecting your account from unauthorised access.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, Maybank2u (FPX), and CIMB Clicks (FPX), as well as withdrawals to your account.
• Gaming Services Provision: Enabling you to access all games including Live Casino, slots, Sports Betting, and e-sports on the million 88 platform.
• Legal Compliance & Fraud Prevention: Fulfilling KYC (Know Your Customer), AML (Anti-Money Laundering), and mandatory reporting obligations under Malaysian law.
• Customer Support: Resolving queries, complaints, and technical issues submitted by you through our support channels.
• Important Communications: Sending critical notifications related to your account, changes to our terms, or security information that requires your immediate attention.
• Platform Improvement: Analysing aggregated usage data (without identifying individuals) to improve user experience, platform performance, and game offerings.
• Marketing (with consent): Sending promotional information, bonus offers, and the latest news about Million 88 — only to users who have given explicit consent to receive marketing communications.

Million 88 does not sell, rent, or trade your personal information to any third party for their own marketing purposes. However, in the course of operating the platform, we may share your data with the following limited categories of third parties:

• Payment Providers: E-wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay) and FPX platforms (Maybank2u, CIMB Clicks) receive the transaction information necessary to process your deposits and withdrawals.
• Game Providers: Companies such as Evolution Gaming, Pragmatic Play Live, and SA Gaming receive the session data necessary to operate Live Casino games and ensure fair play.
• Identity Verification Provider: Authorised third-party services for KYC and age verification purposes during registration or when requested by the platform.
• Technology & Security Consultants: Companies providing IT infrastructure, cybersecurity, and system audit services to Million 88 — bound by strict confidentiality agreements.
• Regulatory Authorities: Malaysian government agencies, law enforcement bodies, or courts where we are required to do so under applicable Malaysian law.

All third parties that receive Million 88 user data are bound by data protection agreements requiring them to maintain the confidentiality of that information and use it solely for the specified purposes.

Your data security is the top priority at Million 88. We continuously invest in the latest security infrastructure to ensure your information is always protected against both external and internal threats.

The technical security measures we have implemented include:

• 256-bit SSL/TLS Encryption: All communications between your device and Million 88's servers are protected with the same bank-grade encryption used by Malaysia's leading financial institutions.
• Two-Factor Authentication (2FA): An additional security layer via SMS OTP to your registered Malaysian mobile number for every login and key transaction.
• 24/7 Monitoring: An automated monitoring system that detects and responds to suspicious activity in real time, around the clock.
• Data-at-Rest Encryption: Sensitive data such as identity information and financial details are stored in encrypted format on secure servers with strict access controls.
• Regular Security Audits: Penetration testing and independent security audits are conducted periodically by accredited third parties to identify and address any vulnerabilities.
• Internal Access Controls: Access to user data by million 88 staff is governed by a "need-to-know" principle — only staff who require access to carry out their duties are permitted to do so.

The million 88 platform uses cookies and similar tracking technologies to enhance user experience and ensure the platform functions correctly. The following are the types of cookies we use:

You can control and manage cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality or your experience on the Million 88 platform.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights in relation to the processing of your personal data by Million 88:

Million 88 retains your personal data only for as long as necessary for the purposes set out in this Privacy Policy, or as required by applicable Malaysian law.

• Active Account Data: Retained for as long as your account is active and for several years after account closure to meet audit and legal compliance requirements.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date, in accordance with Malaysian accounting and financial law requirements.
• KYC & Identity Verification Data: Retained for as long as necessary to comply with applicable anti-money laundering (AML) and KYC obligations.
• Support Communication Logs: Customer support conversation records are retained for 2 years for reference and service quality improvement purposes.
• Analytics Data: Aggregated and anonymised usage data may be retained for a longer period for trend analysis and platform improvement purposes.

Once the specified retention period has elapsed, or upon receipt and processing of a valid deletion request, data will be securely deleted or anonymised from all Million 88 systems.

Platform Million 88 is intended solely for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18.

If we find that we have collected data from an individual under the age of 18 without proper parental or guardian consent verification, we will take immediate steps to:

• Suspending or closing the account in question immediately.
• Deleting all associated personal data from our systems.
• Returning any remaining account balance upon completion of the investigation.

If you believe your underage child has registered an account with million 88, please contact us immediately at support@million88.im with the relevant supporting documents.

Million 88 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our privacy practices, current legal compliance requirements, or service improvements.

When material changes are made to this Privacy Policy, we will notify you via:

• A prominent notice on the Million 88 platform homepage at least 14 days before the new effective date.
• Email notification to your registered address if the changes materially affect your privacy rights.
• A pop-up notification upon your next login requesting confirmation of your acknowledgement.

The "Effective Date" at the top of this page will be updated each time a new version of the Privacy Policy is published. We encourage you to review this page periodically.

If you have any questions, requests, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us:

For privacy rights requests, please include in your email: your full name, account number (if applicable), the type of request, and any relevant supporting information. This helps us process your request more quickly and accurately.