myr88 Privacy Policy

This Privacy Policy ("Policy") is issued by myr88 ("we", "us","the Platform", or "myr88") and governs the collection, processing, storage, use and disclosure of personal data in connection with your access to and use of the myr88 website located at https://myr88.cam and all associated services.

myr88 is committed to protecting the privacy and personal data of all users of the Platform, including players across Malaysia — from Kuala Lumpur and Petaling Jaya to Penang, Johor Bahru and Shah Alam. We recognise that when you share personal information with us, you are placing trust in our ability to handle that information responsibly, securely and in accordance with applicable data protection standards.

By accessing the myr88 platform, registering an account, making a deposit, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with the terms of this Policy, please discontinue use of the Platform immediately.

This Policy should be read in conjunction with myr88's Terms and Conditions and our Responsible Gambling Policy, both of which are incorporated by reference.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, directly or indirectly. This includes names, identification numbers, contact details, financial data, and online identifiers.
• "Data Subject" means the identified or identifiable natural person to whom Personal Data relates — in the context of this Policy, a registered or prospective User of the myr88 platform.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data. For this Policy, the Data Controller is myr88.
• "Data Processor" means any third-party entity that processes Personal Data on behalf of myr88 under a binding data processing agreement.
• "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, transmission, deletion, or destruction.
• "KYC" means Know Your Customer — the process of verifying the identity of a User, as required for anti-money laundering compliance and responsible gambling obligations.
• "Cookies" means small text files placed on a User's device by the myr88 platform for the purposes described in Section 10 of this Policy.

myr88 collects only the categories of personal data that are necessary to provide our services, meet our legal obligations, and maintain the security and integrity of the Platform. The categories of data we collect are set out in the table below:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data unless specifically required for identity verification purposes under applicable law and with your explicit consent.

myr88 collects personal data through the following means:

• Direct interactions: Data you provide when creating an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically when you access the myr88 platform, including through cookies, web beacons, server logs, and similar tracking technologies. See Section 10 for full details on our cookies policy.
• Payment processors: Transaction data received from our payment processing partners — including those facilitating Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, BTC and USDT transactions — necessary to confirm successful deposits and process withdrawals.
• Identity verification services: Where we engage third-party KYC providers to verify identity documents, we receive confirmation data from those providers. We do not retain raw document images beyond the period required for verification.
• Publicly available sources: In limited circumstances relevant to fraud prevention or AML screening, we may cross-reference data against publicly available sources such as sanctions lists or adverse media databases.

myr88 processes personal data only where a lawful basis exists. The primary legal bases on which we rely are as follows:

• Contractual necessity: Processing required to perform our obligations under the Terms and Conditions you agreed to upon registration — including account management, deposits, withdrawal processing, and game provision.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) requirements, Know Your Customer (KYC) obligations, age verification mandates, and financial record-keeping requirements.
• Legitimate interests: Processing necessary for myr88's legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, service improvement, and internal analytics — provided such interests are not overridden by your privacy rights.
• Consent: Where we rely on your consent — for example, to send marketing communications or to place non-essential cookies — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

myr88 uses the personal data we hold about you for the following purposes:

1. Account management: Creating, maintaining, verifying and, where necessary, closing your myr88 account. This includes age and identity verification to ensure compliance with our strict21+ policy.
2. Transaction processing: Facilitating deposits and withdrawals through your chosen payment method — whether that is a Malaysian e-wallet such as Touch 'n Go eWallet, Boost or GrabPay, an online banking channel such as Maybank2u or CIMB Clicks, a DuitNow transfer, FPX transaction, or a cryptocurrency payment in BTC or USDT.
3. Customer support: Responding to account queries, resolving disputes, processing complaints, and maintaining support records for quality assurance purposes.
4. Fraud prevention and AML compliance: Monitoring account activity for signs of fraudulent conduct, money laundering, or other financial crime; conducting required AML screening; and escalating suspicious activity in accordance with our legal obligations.
5. Responsible gambling: Monitoring gameplay patterns to identify potential problem gambling behaviour; administering deposit limits, session controls, and self-exclusion tools; and, where warranted, proactively contacting players who display at-risk indicators.
6. Service improvement: Analysing aggregated, anonymised usage data to improve the platform's functionality, game library, payment options, and user experience.
7. Marketing communications: Sending promotional notifications about bonuses, new games, and platform updates — only where you have consented to receive such communications. You may withdraw consent at any time via your account settings or by contacting support.
8. Legal compliance: Fulfilling obligations under applicable laws and responding to lawful requests from competent authorities.

myr88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share personal data only in the following limited circumstances:

• Payment service providers: We share necessary transaction data with payment processors to facilitate deposits and withdrawals. These include the providers operating the Malaysian payment methods listed in Section 3. All payment processors are contractually bound to process data solely for the purpose of facilitating your transactions with myr88.
• Identity verification and KYC providers: We engage specialist third-party KYC providers to assist with age verification and identity checks. These providers process personal data strictly in accordance with our instructions and applicable data protection law.
• Game providers: Where technically necessary, certain minimal usage data may be shared with our licensed game studio partners to ensure game functionality and fair play. No personally identifiable information is shared with game providers beyond what is strictly necessary for technical integration.
• Legal and regulatory authorities: We will disclose personal data to competent authorities, law enforcement agencies, or regulators where required to do so by law, court order, or regulatory direction — or where we reasonably believe such disclosure is necessary to prevent or detect crime, protect national security, or safeguard the rights of other individuals.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of assets involving myr88, personal data held by the Platform may be transferred to the acquiring entity, subject to equivalent data protection commitments.

myr88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, accounting, and regulatory obligations. The following general retention periods apply:

Following the expiry of the applicable retention period, personal data will be securely deleted or permanently anonymised. Where anonymisation is applied, the resulting data no longer constitutes personal data and may be retained indefinitely for analytical purposes.

myr88 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the myr88 platform. This is the same encryption standard used by major Malaysian banks including Maybank, CIMB and Public Bank for their online banking portals.
• Encrypted storage for sensitive data at rest, including identity documents and financial records.
• Two-factor authentication (2FA) available and strongly recommended for all registered accounts.
• Access controls limiting internal access to personal data on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and undergo data protection training.
• Real-time fraud monitoring systems that detect and flag anomalous account activity indicative of unauthorised access or financial crime.
• Regular security audits and penetration testing of the Platform's infrastructure conducted by independent security specialists.

Notwithstanding the above, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. myr88 will notify affected Users and relevant authorities promptly in the event of a data breach that poses a risk to User rights, in accordance with applicable legal requirements.

Users bear responsibility for maintaining the security of their own account credentials. myr88 strongly advises against reusing passwords across multiple platforms and encourages the use of unique, strong passwords for your myr88 account.

The myr88 platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to enhance User experience, and to support our security and analytics activities. The types of cookies we use are as follows:

• Strictly necessary cookies: Essential for the platform to operate. These include session cookies that maintain your login state and authentication cookies. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Enable enhanced features such as remembering your language preference, display settings, and previously selected game categories. These improve convenience but are not essential.
• Analytics cookies: Used to collect aggregated, anonymised data about how users navigate the Platform — including which pages are visited most frequently, average session durations, and error occurrences. This data helps us improve the Platform. We use only self-hosted or privacy-respecting analytics solutions.
• Security cookies: Help identify and prevent fraudulent account activity, suspicious login patterns, and bot traffic.

myr88 does not use third-party advertising or behavioural targeting cookies. We do not place tracking pixels for social media platforms or external advertising networks on our Platform.

You may manage or disable non-essential cookies through your browser settings at any time. Note that disabling functional or analytics cookies will not affect your ability to use the core Platform, but may reduce certain convenience features. Disabling strictly necessary cookies may prevent you from logging in or using the Platform correctly.

Subject to applicable law, you have the following rights in relation to the personal data myr88 holds about you. You may exercise any of these rights by contacting our support team using the contact details in Section 15.

myr88 will respond to all verifiable data rights requests within thirty (30) calendar days of receipt. In cases of complexity or high volume of requests, this period may be extended by a further sixty (60) days, and you will be notified accordingly.

Please note that certain rights are subject to exceptions. For example, myr88 may be unable to delete data that we are legally required to retain for AML or regulatory purposes, or data that is necessary to resolve an open dispute with you.

The myr88 platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect, process, or retain personal data from any under the age of 21.

Age verification is conducted at account registration and, where applicable, at the withdrawal stage. If myr88 becomes aware that personal data belonging to a person under the age of 21 has been collected — whether through misrepresentation by the individual or otherwise — we will immediately:

• Suspend and close the relevant account;
• Void and return any deposits made to the account;
• Delete all personal data associated with the account to the extent permitted by law; and
• Report the matter to relevant authorities if required by applicable legal obligations.

Parents and guardians who believe their child may have accessed or registered on the myr88 platform should contact us immediately via the channels listed in Section 15. We take such reports seriously and will respond promptly.

The myr88 platform does not contain links to third-party websites, social media platforms, or external resources as general policy. However, in the course of using our payment processing services, you may be redirected to the secure portals of payment providers such as Maybank2u, CIMB Clicks, DuitNow, or e-wallet applications including Touch 'n Go eWallet, Boost, and GrabPay to complete your transaction.

Those payment providers operate under their own privacy policies, which govern the personal data you submit to them directly. myr88 is not responsible for the privacy practices of third-party payment providers and encourages you to review the privacy policies of any external service you use in connection with your myr88 transactions.

Any data shared with payment providers by myr88 is limited to the minimum necessary to process your specific transaction and is governed by binding data processing agreements.

myr88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. The date of the most recent revision is displayed at the top of this page.

In the event of material changes to this Policy — particularly changes that affect how we use personal data or the rights available to you — we will notify registered Users via email to their registered address and/or via a prominent notice on the myr88 platform prior to the changes taking effect.

Your continued use of the myr88 platform following notification of amendments constitutes your acceptance of the revised Policy. We recommend reviewing this Policy periodically, and in any case whenever you are notified of an update.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by myr88, please contact us through the following channels:

• Live Chat Support: Available 24 hours a day, 7 days a week via the live chat facility on the myr88 platform. This is the fastest route for urgent data protection queries.
• Email: Write to us at [email protected]. For data rights requests, please include your registered username, the specific right you wish to exercise, and sufficient information to verify your identity. We aim to acknowledge all data rights requests within 5 business days and resolve them within 30 calendar days.

If you believe that myr88 has not adequately addressed a data protection concern, you have the right to refer the matter to the relevant competent data protection authority in accordance with applicable law.