Privacy Policy

Section 01

Introduction

This Privacy Policy ("Policy") applies to all users ("you", "Player", "User") who register, access, or interact with the mg888 online gaming and sports betting platform, including the website at https://mg888.cam, its mobile-optimised interface, and any associated software or services operated by mg888.

mg888 serves players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond. By using the mg888 Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy is written in English, which is the governing language. Any translation provided for convenience purposes carries no legal weight. In the event of a conflict between the English version and any translated version, the English version shall prevail.

This Policy should be read alongside mg888's Terms & Conditions and Responsible Gambling Policy, which together form the complete regulatory framework governing your use of the Platform.

Section 02

Definitions

In this Policy, the following terms carry the meanings set out below:

• "Personal Data" — Any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, payment details, and device identifiers.
• "Processing" — Any operation performed on personal data, including collection, storage, use, disclosure, transfer, or deletion.
• "Data Controller" — mg888, as the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" — A third party that processes personal data on behalf of mg888 under a contractual obligation and subject to appropriate data protection safeguards.
• "Consent" — A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for one or more stated purposes.
• "KYC" — Know Your Customer; the identity and age verification process required for account operation and withdrawal processing.
• "Cookie" — A small text file placed on your device by the Platform or a third-party service for the purposes of recognising your device, maintaining session state, or collecting analytics data.
• "Platform" — The mg888 website, mobile interface, and all associated digital services operated by mg888.

Section 03

Data We Collect

mg888 collects the following categories of personal data from users of the Platform:

3.1 Identity & Account Data

• Full legal name as it appears on government-issued identification;
• Date of birth (for age verification — 21+ enforcement);
• Gender (where voluntarily provided);
• Nationality and country of residence;
• National identification number or passport number (for KYC verification);
• Username and encrypted password hash.

3.2 Contact Data

• Email address (primary channel for account communication);
• Mobile telephone number (for account verification and security alerts);
• Physical mailing address (where required for KYC or withdrawal compliance).

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method identifiers;
• Payment method details — for Malaysian players this includes e-wallet account references (Touch 'n Go, Boost, GrabPay), bank account references (Maybank, CIMB, Public Bank, Hong Leong), DuitNow proxy identifiers, FPX transaction tokens, and cryptocurrency wallet addresses (BTC, ETH, USDT);
• Account balance history and bet settlement records;
• Currency: Malaysian Ringgit (MYR/RM) or cryptocurrency denomination as applicable.

3.4 Gaming & Activity Data

• Bet history, game session logs, win/loss records, and wager amounts;
• Sports betting markets accessed, including Liga Super Malaysia, EPL, UFC, and other competitions;
• Bonus offer claims and wagering progress;
• VIP tier status and loyalty point accumulation;
• Responsible gambling tool usage (deposit limits set, self-exclusion periods applied).

3.5 Technical & Device Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser information;
• Session timestamps, login history, and page navigation data;
• Cookie identifiers and analytics event data (see Section 8).

3.6 Communications Data

• Records of customer support interactions via live chat, email, or WhatsApp;
• Complaint records and dispute resolution correspondence;
• Marketing communication preferences and opt-in/opt-out records.

Section 04

How Data Is Collected

mg888 collects personal data through the following mechanisms:

• Direct submission: Data you provide voluntarily during account registration, KYC verification, deposit/withdrawal requests, and customer support interactions;
• Automated collection: Technical data collected automatically when you access the Platform, including IP addresses, device fingerprints, and browser session data;
• Payment processors: Transaction confirmation data received from payment service providers including e-wallet operators, bank FPX gateways, and cryptocurrency processors;
• Analytics services: Aggregated and anonymised usage statistics collected via first-party analytics tools integrated into the Platform;
• Cookies and tracking technologies: Session and persistent cookies used to maintain login state, remember preferences, and support Platform functionality (see Section 8);
• Third-party identity verification: Where required for KYC compliance, identity verification results supplied by authorised third-party verification service providers.

Section 05

Data Processing & Legal Basis

mg888 processes personal data only where a valid legal basis exists. The primary legal bases for our data processing activities are as follows:

Section 06

How We Use Your Data

mg888 uses the personal data it collects for the following purposes:

6.1 Service Delivery

To create and maintain your account, process deposits and withdrawals, deliver gaming services, settle bets, and manage your VIP tier status. Without this data, mg888 cannot provide the core services of the Platform.

6.2 Identity Verification & Compliance

To verify your identity and age in accordance with our KYC obligations, to conduct anti-money laundering (AML) checks, and to ensure compliance with international gaming licensing requirements. KYC verification is required before any withdrawal is processed.

6.3 Security & Fraud Prevention

To detect, investigate, and prevent fraudulent activity — including multiple account registration, bonus abuse, collusion, and unauthorised access — and to protect the integrity of the Platform for all players.

6.4 Responsible Gambling Monitoring

To monitor gaming activity for indicators of problem gambling behaviour, enforce self-exclusion requests, manage deposit and loss limits, and provide appropriate intervention where a player's gaming behaviour raises safeguarding concerns.

6.5 Customer Support

To respond to your enquiries, resolve complaints, process refund requests, and maintain a record of communications to support dispute resolution. Our support team communicates in English, Bahasa Melayu, and Mandarin.

6.6 Marketing (Consent-Based Only)

To send you promotional offers, bonus notifications, and platform updates — but only where you have explicitly opted in to receiving marketing communications. You may withdraw consent at any time by contacting customer support or updating your account preferences.

6.7 Platform Improvement

To analyse aggregated and anonymised usage data to improve the Platform's performance, user experience, and game content offering. Individual player data is not used to build commercial advertising profiles for third-party purposes.

Section 07

Data Sharing & Disclosure

mg888 does not sell, rent, or trade your personal data to third parties for commercial advertising purposes. We share personal data only in the limited circumstances described below:

7.1 Payment Service Providers

Transaction data is shared with payment processors — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow/PayNet, FPX-connected banking partners (Maybank, CIMB, Public Bank, Hong Leong), and cryptocurrency processing services — solely for the purpose of processing deposits and withdrawals on your behalf. Each provider operates under its own data protection obligations.

7.2 Identity Verification Partners

KYC documentation may be shared with authorised third-party identity verification service providers for the sole purpose of verifying identity and age. These providers are contractually bound to process data only for the stated purpose and to maintain appropriate security standards.

7.3 Gaming Software Providers

Game session data — including player identifiers and wager amounts — may be transmitted to third-party game software studios that supply live casino, slot, and sports betting products to the Platform, where necessary for game delivery and settlement. These providers operate under data processing agreements with mg888.

7.4 Legal & Regulatory Disclosure

mg888 may disclose personal data to law enforcement agencies, regulatory authorities, or licensing bodies where required by law, court order, or regulatory obligation, or where such disclosure is necessary to protect the rights, safety, or property of mg888, its employees, or other Platform users.

7.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of mg888's business assets, personal data may be transferred to the acquiring entity, subject to appropriate notification to affected users and continuation of equivalent data protection standards.

Section 08

Cookies & Tracking Technologies

mg888 uses cookies and similar tracking technologies to operate the Platform effectively, maintain your session, and understand how users interact with our services. The following cookie categories are used:

• Strictly Necessary Cookies: Essential for Platform functionality, including maintaining your login session, remembering your language and display preferences, and processing transactions. These cannot be disabled without breaking core Platform features.
• Performance & Analytics Cookies: Collect anonymised data on how visitors use the Platform, including page views, session duration, and navigation paths, to help us improve the user experience.
• Functional Cookies: Remember user preferences such as display settings and responsible gambling tool configurations to provide a more personalised experience.
• Security Cookies: Support fraud detection and account security measures by recognising trusted devices and detecting anomalous session activity.

You may manage cookie preferences through your browser settings. Disabling certain cookie categories may affect the functionality of the Platform. mg888 does not use cookies to serve third-party advertising or to track your activity on websites outside the mg888 Platform.

Section 09

Data Retention

mg888 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to applicable legal, regulatory, and licensing retention requirements. The following general retention guidelines apply:

• Active account data: Retained throughout the period your account is active and for a minimum of five (5) years following account closure, in compliance with AML and gaming licensing record-keeping obligations;
• KYC verification documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later;
• Transaction records: Retained for a minimum of five (5) years from the transaction date;
• Customer support records: Retained for three (3) years from the date of the interaction;
• Marketing consent records: Retained for the duration of consent and for two (2) years thereafter as evidence of consent history;
• Analytics data: Anonymised or aggregated within 26 months; individual session data retained for no longer than 13 months.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with mg888's data disposal procedures.

Section 10

Data Security

mg888 implements a multi-layered information security programme to protect personal data against unauthorised access, disclosure, alteration, or destruction. Security measures in place include:

• Encryption in transit: All data transmitted between your device and mg888 servers is encrypted using AES-256 SSL/TLS. This applies to all login, account management, deposit, and withdrawal sessions;
• Encryption at rest: Sensitive personal data, including identity documents and payment method references, is encrypted at rest on mg888's servers using industry-standard encryption algorithms;
• Access controls: Access to personal data is restricted to authorised personnel on a need-to-know basis, subject to role-based access control and regular access review;
• Two-factor authentication: Available for all player accounts and mandatory for staff with access to personal data systems;
• Security monitoring: Continuous monitoring for anomalous access patterns, intrusion attempts, and data exfiltration indicators;
• Third-party audits: Regular independent security assessments of infrastructure and data handling processes.

Section 11

Your Rights

Subject to applicable data protection law and where not overridden by mg888's legal obligations (including AML and gaming licensing record-keeping requirements), you have the following rights with respect to your personal data:

To exercise any of the above rights, please contact mg888's customer support team. We will acknowledge your request within 72 hours and respond substantively within 30 days, or within the timeframe required by applicable law where shorter.

Section 12

International Data Transfers

mg888 operates on an international basis and may transfer your personal data to third-party processors or service providers located outside Malaysia, including in countries where mg888's gaming licensing jurisdiction is established, and in countries where gaming software and security service providers are based.

Where personal data is transferred outside the country of origin, mg888 ensures that appropriate safeguards are in place to protect the data, including:

• Data processing agreements with recipient entities incorporating internationally recognised data protection standards;
• Contractual obligations on third-party processors to maintain confidentiality, restrict use of data to stated purposes, and implement appropriate technical and organisational security measures;
• Transfer only to service providers who have demonstrated compliance with applicable data protection standards through certification, contractual commitment, or regulatory adequacy determination.

By using the mg888 Platform, you acknowledge and accept that your personal data may be processed in jurisdictions outside Malaysia as described in this Policy.

Section 13

Minors & Age Policy

The mg888 Platform is strictly intended for persons aged 21 years and above. mg888 does not knowingly collect personal data from individuals under the age of 21, and does not permit persons under 21 to register for or use its gaming services.

As part of our KYC process, all players must provide documentary evidence of age before withdrawals are processed. Where mg888 becomes aware that personal data has been collected from a person under 21, we will take immediate steps to suspend the account, void any associated gaming activity, and delete the personal data to the extent permitted by law.

If you believe that a minor may have accessed the mg888 Platform using falsified identity information, please contact our customer support team immediately. For responsible gambling resources and information on protecting young people from gambling-related harm, visit our Responsible Gambling page.

Section 14

Policy Amendments

mg888 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing practices, or the services we offer. The effective date at the top of this Policy will be updated whenever material changes are made.

Where changes are material, mg888 will notify registered users via email or via an in-Platform notice. Your continued use of the Platform following notification of any amendment constitutes acceptance of the updated Policy.

We encourage you to review this Policy periodically. The current version of the Privacy Policy is always available at https://mg888.cam/privacy-policy.

Section 15

Contact & Complaints

If you have questions about this Privacy Policy, wish to exercise your data rights, or wish to submit a privacy-related complaint, please contact the mg888 customer support team. Our support agents are available 24 hours a day, 7 days a week, in English, Bahasa Melayu, and Mandarin.

mg888 will acknowledge all privacy enquiries within 72 hours of receipt. Substantive responses to data subject requests will be provided within 30 calendar days, or as required by applicable law.

If you are not satisfied with mg888's response to a privacy complaint, you may have the right to escalate the matter to the relevant supervisory authority in your jurisdiction. Players in Malaysia may also wish to seek guidance from the Personal Data Protection Department (JPDP) of Malaysia where applicable laws are engaged.