myr88 Privacy Policy

1 Introduction

myr88 ("we", "us", "our") operates the online gaming platform accessible at myr88.asia and associated subdomains. We are committed to protecting the personal data of all individuals who interact with our platform, including registered players, prospective players, and visitors to our website.

This Privacy Policy ("Policy") describes the types of personal data myr88 collects, the purposes for which it is processed, the legal bases on which processing is carried out, the parties with whom data may be shared, and the rights available to individuals whose data we hold. This Policy applies to all personal data processing activities conducted by myr88 in connection with the Platform.

This Policy is to be read in conjunction with the myr88 Terms & Conditions. By registering a myr88 account or using the Platform, you acknowledge that you have read and understood this Policy.

2 Data Controller

myr88, the operator of the Platform, acts as the data controller with respect to personal data collected from players and Platform visitors. As data controller, myr88 determines the purposes and means by which personal data is processed.

For all privacy-related enquiries, correction requests, deletion requests, or complaints, players may contact the myr88 Data Protection team at: [email protected]. All written privacy requests will be acknowledged within 5 business days.

3 Personal Data We Collect

myr88 collects personal data across several categories, depending on the nature of the player's interaction with the Platform:

myr88 does not collect sensitive personal data categories such as health information, biometric data, or racial/ethnic origin data, except where expressly required by applicable law or the terms of myr88's international gaming licence.

4 How We Use Your Personal Data

myr88 uses the personal data collected for the following purposes:

• Account Registration and Management: To create, maintain, and administer your myr88 account, including identity verification and authentication;
• Service Delivery: To provide gaming services, process bets, calculate and pay winnings, and operate the Platform;
• Payment Processing: To facilitate deposits and withdrawals via the accepted Malaysian payment methods, including Touch 'n Go eWallet, DuitNow, Maybank2u, and CIMB Clicks;
• KYC and Anti-Money Laundering Compliance: To verify player identity, comply with myr88's international licensing obligations, and fulfil obligations under applicable anti-money laundering laws;
• Responsible Gaming: To monitor play patterns, apply player-set limits, enforce self-exclusion, and identify players who may be experiencing gambling-related difficulties;
• Fraud Prevention and Security: To detect, investigate, and prevent fraud, money laundering, collusion, and other prohibited activities on the Platform;
• Customer Support: To respond to enquiries, resolve complaints, and provide assistance to players;
• Marketing Communications: To send promotional offers and updates to players who have consented to marketing communications (see Section 13);
• Platform Improvement: To analyse aggregate usage data, identify technical issues, and improve the performance and features of the Platform;
• Legal Compliance: To comply with applicable laws, regulations, court orders, and requests from regulatory authorities.

5 Legal Basis for Processing

myr88 processes personal data on the following legal bases, consistent with applicable data protection legislation:

• Contractual Necessity: Processing is necessary for the performance of the contract between myr88 and the Player (i.e., the Terms & Conditions), including account management, service delivery, and payment processing;
• Legal Obligation: Processing is necessary to comply with legal and regulatory obligations, including KYC verification, anti-money laundering reporting, and responsible gaming requirements under myr88's licensing conditions;
• Legitimate Interests: Processing is necessary for the legitimate interests of myr88, including fraud prevention, platform security, and aggregate analytics, where such interests are not overridden by the Player's rights and freedoms;
• Consent: Where processing is based on consent — including marketing communications — the Player may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Third-Party Disclosure

myr88 does not sell, rent, or trade personal data to third-party marketers. Personal data may be disclosed to the following categories of third parties only where strictly necessary:

• Payment Processors: Malaysian payment service providers (including but not limited to FPX operators, Touch 'n Go, Boost, and GrabPay) to process deposits and withdrawals;
• KYC and Verification Providers: Third-party identity verification and AML screening services engaged by myr88 to fulfil licensing obligations;
• Game Software Providers: Certified gaming software suppliers who operate game servers, random number generators, and live dealer studios under contract with myr88. Game providers receive only the minimum player data necessary to deliver the game service;
• IT Infrastructure and Cloud Providers: Hosting, data storage, and security service providers engaged by myr88 under data processing agreements that require equivalent data protection standards;
• Legal and Regulatory Authorities: Competent courts, regulators, licensing authorities, or law enforcement agencies, where myr88 is legally required or permitted to disclose data;
• Professional Advisers: Legal, accounting, and audit firms engaged by myr88, subject to professional confidentiality obligations.

7 International Data Transfers

The myr88 Platform is operated under international gaming licensing and may involve the transfer of personal data to countries outside Malaysia. Where personal data is transferred internationally, myr88 ensures that appropriate safeguards are in place, which may include:

• Standard contractual clauses or equivalent data transfer mechanisms approved under applicable data protection law;
• Transfers to jurisdictions that provide an adequate level of data protection as recognised under applicable international frameworks;
• Contractual obligations imposed on data recipients requiring them to maintain data protection standards equivalent to those applicable to myr88.

Players may request further information about the safeguards governing specific international data transfers by contacting [email protected].

8 Cookies & Tracking Technologies

myr88 uses cookies and similar tracking technologies on the Platform. Cookies are small data files stored on your device that help the Platform function correctly and allow us to understand how players interact with it.

myr88 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled without affecting Platform functionality;
• Performance and Analytics Cookies: Collect anonymised data about how players use the Platform, including page load times, navigation paths, and error logs. Used to identify and fix technical issues and improve Platform performance;
• Functional Cookies: Remember player preferences such as language settings, saved login state (if "Remember Me" is selected), and display preferences;
• Marketing Cookies: Used only where the player has consented, to identify players who have visited the Platform and deliver relevant promotional content.

9 Data Retention

myr88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in accordance with anti-money laundering and gaming licensing requirements;
• Transaction and Financial Records: Retained for a minimum of five (5) years from the date of the transaction, consistent with financial record-keeping obligations;
• Support and Correspondence Records: Retained for three (3) years from the date of the interaction, or longer where the interaction relates to an unresolved dispute or legal matter;
• Marketing Consent Records: Retained for the duration of the consent and for a period thereafter sufficient to demonstrate compliance;
• Technical and Usage Data: Retained in aggregate or anonymised form for Platform analytics; identifiable technical data is retained for up to 12 months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with myr88's data disposal procedures.

10 Your Rights

Subject to applicable law and certain limitations, players have the following rights with respect to personal data held by myr88:

• Right of Access: The right to request a copy of the personal data myr88 holds about you and information about how it is processed;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to myr88's legal retention obligations;
• Right to Restrict Processing: The right to request that myr88 limits the processing of your personal data in certain circumstances;
• Right to Data Portability: The right to receive personal data you have provided to myr88 in a structured, machine-readable format, where processing is based on consent or contract and carried out by automated means;
• Right to Object: The right to object to processing carried out on the basis of legitimate interests, including profiling for marketing purposes;
• Right to Withdraw Consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of the above rights, please contact myr88 at [email protected] with a clear description of your request. myr88 will respond within 30 days of receipt. We may require identity verification before processing a rights request.

11 Security Measures

myr88 implements technical and organisational security measures appropriate to the risk of processing personal data, including:

• SSL 256-bit encryption for all data in transit between players and the Platform;
• Encrypted storage of sensitive personal data at rest, including financial and identity data;
• Access controls limiting personal data access to authorised personnel on a need-to-know basis;
• Regular security assessments and penetration testing of the Platform infrastructure;
• Incident response procedures for detecting, reporting, and managing personal data breaches.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, myr88 will notify affected individuals without undue delay and in accordance with applicable data protection law.

12 Children's Privacy

The myr88 Platform is strictly intended for adults aged 21 years and above. myr88 does not knowingly collect or process personal data from individuals under the age of 21. If myr88 discovers that personal data has been collected from a minor, the associated account will be closed immediately and all personal data will be deleted without delay.

If you have reason to believe that a minor has registered on the myr88 Platform, please contact [email protected] immediately so that the matter can be investigated and resolved.

13 Marketing Communications

With your consent, myr88 may send you promotional communications about bonuses, new games, platform features, and special offers. Marketing communications may be delivered by email or, where you have provided consent, by other electronic means.

You may opt out of marketing communications at any time by contacting myr88 at [email protected] with the subject line "Marketing Opt-Out". Opting out of marketing communications does not affect the sending of transactional or service communications relating to your account, such as withdrawal confirmations, security alerts, or policy update notices.

myr88 does not share personal data with third-party marketers for their own marketing purposes.

14 Changes to this Privacy Policy

myr88 reserves the right to amend this Privacy Policy at any time. Material changes will be communicated to players via a notice on the Platform or by email prior to taking effect, where reasonably practicable. The date of the most recent revision is shown at the top of this document.

Continued use of the myr88 Platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy. Players who do not agree to an amended Policy should cease using the Platform and may request account closure by contacting support.

15 Contact & Complaints

For all privacy-related enquiries, rights requests, or complaints regarding myr88's handling of personal data, please contact:

Email: [email protected]
Subject Line: Privacy Enquiry / Data Rights Request

myr88 will acknowledge all privacy-related communications within 5 business days and aims to provide a full response within 30 days. Where a complaint cannot be resolved to the player's satisfaction, the player retains the right to raise the matter with the relevant data protection supervisory authority or the applicable gaming licensing authority.