mykad88 Privacy Policy

1. Introduction

mykad88 is committed to protecting the privacy and personal data of its members. We understand that when you provide your personal information to mykad88 — whether during account registration, identity verification, payment processing, or general platform use — you are placing trust in us to handle that information responsibly, transparently, and securely.

This Policy applies to all personal data processed by mykad88 in connection with the mykad88 platform, including data collected through the mykad88 website, mobile interface, customer support interactions, and any promotional or loyalty programme participation. It applies to all members, prospective members, and visitors to the mykad88 platform regardless of location.

This Policy should be read alongside the mykad88 Terms & Conditions, which together form the complete agreement governing your relationship with mykad88.

2. Personal Data We Collect

mykad88 collects the following categories of personal data, depending on the nature of your interaction with the platform:

We do not collect sensitive personal data (such as racial or ethnic origin, religious beliefs, or health data) unless strictly necessary for specific regulatory compliance purposes, and only with your explicit consent where required.

3. How We Collect Your Data

mykad88 collects personal data through the following means:

• Direct provision: Information you submit when registering your mykad88 account, completing KYC verification, making deposits or withdrawals, contacting our support team, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access and navigate the mykad88 platform, including through cookies, server logs, and session tracking technologies.
• Third-party sources: Information received from payment service providers (such as Maybank, CIMB, Public Bank, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX) in connection with transaction processing, and from identity verification service providers in connection with KYC compliance.
• Fraud and security partners: Data received from third-party fraud detection, AML screening, and security monitoring services that assist mykad88 in maintaining platform integrity.

4. Purposes of Processing

mykad88 processes your personal data for the following purposes:

• To create, manage, and maintain your mykad88 account, including authentication, account security, and session management.
• To process deposits, withdrawals, and all financial transactions conducted through your mykad88 account in Malaysian Ringgit (MYR).
• To comply with Know Your Customer (KYC), Anti-Money Laundering (AML), and age verification obligations applicable to online gaming operators.
• To provide personalised gaming experiences, including game recommendations, bonus offers, and VIP loyalty programme communications tailored to your activity on the mykad88 platform.
• To respond to your customer support enquiries, complaints, and account queries.
• To detect, investigate, and prevent fraud, money laundering, account compromise, bonus abuse, and other prohibited activity on the platform.
• To monitor and enforce compliance with the mykad88 Terms & Conditions and applicable responsible gaming obligations, including age restrictions and self-exclusion requests.
• To analyse platform performance, user behaviour, and usage patterns for the purposes of product improvement, technical optimisation, and business development.
• To send you service-related communications, including account notifications, security alerts, policy updates, and transaction confirmations.
• To send you marketing communications about mykad88 promotions, offers, and platform updates, subject to your communication preferences and applicable consent requirements.

5. Legal Basis for Processing

mykad88 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and mykad88 — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable regulatory requirements, including KYC, AML, age verification, and responsible gaming obligations.
• Legitimate interests: Processing undertaken for the legitimate interests of mykad88, including fraud prevention, platform security, and product improvement, where these interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — most commonly for direct marketing communications. You may withdraw consent at any time by contacting the mykad88 support team or by using the unsubscribe mechanism provided in marketing emails.

6. Data Sharing & Disclosure

mykad88 does not sell your personal data to third parties. We share personal data only in the following circumstances and only to the extent necessary for the specified purpose:

• Payment processors: Financial data is shared with authorised payment service providers — including Maybank, CIMB, Public Bank, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX — solely to process your deposit and withdrawal transactions.
• Identity verification providers: Identity and documentary data is shared with accredited KYC and AML compliance service providers for the purposes of age verification and regulatory compliance.
• Game studios and software providers: Certain technical and gameplay data may be shared with our licensed game content providers to enable game delivery, resolve technical disputes, and verify RNG integrity.
• Fraud and security services: Technical and behavioural data may be shared with third-party security and fraud detection services to protect the integrity of the mykad88 platform and its members.
• Regulatory and legal authorities: Personal data may be disclosed to regulatory bodies, law enforcement agencies, or courts of competent jurisdiction where mykad88 is legally required or compelled to do so.
• Professional advisors: Data may be shared with our legal, financial, or compliance advisors under obligations of professional confidentiality, where necessary for the conduct of mykad88's business operations.

7. International Data Transfers

In the course of providing the mykad88 platform and services, your personal data may be transferred to and processed in jurisdictions outside of Malaysia. Where such transfers occur, mykad88 ensures that appropriate safeguards are in place to protect your personal data to a standard consistent with this Policy and applicable data protection principles.

These safeguards may include contractual data protection clauses with the receiving entity, transfers to jurisdictions that have been assessed as providing adequate levels of data protection, or other recognised data transfer mechanisms appropriate to the circumstances.

8. Data Retention

mykad88 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the duration of your active mykad88 account, and for such additional period as is required or permitted by applicable law.

In practice, this means:

• Account and identity data is retained for a minimum of five years following account closure, in accordance with standard AML and regulatory record-keeping obligations.
• Transaction records are retained for a minimum of seven years for financial compliance and audit purposes.
• Communications data (live chat transcripts, email correspondence) is retained for up to three years for dispute resolution and quality assurance purposes.
• Technical and usage data collected via cookies and analytics tools is typically retained for shorter periods as specified in our cookie settings.

At the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

9. Cookies & Tracking Technologies

The mykad88 platform uses cookies and similar tracking technologies to enhance your user experience, ensure platform security, and collect analytical data. The categories of cookies used by mykad88 are as follows:

• Essential cookies: Required for the mykad88 platform to function correctly, including session authentication, login state management, and security verification. These cannot be disabled without impairing platform functionality.
• Functional cookies: Enable personalisation features such as remembering your language preference, game history, and responsible gaming limit settings across sessions.
• Analytics cookies: Allow mykad88 to measure and analyse how members interact with the platform, which pages are most visited, and where technical issues are encountered. Data is aggregated and anonymised where possible.
• Security and fraud prevention cookies: Used to identify suspicious behavioural patterns, detect bot activity, and protect the integrity of the mykad88 platform and its members' accounts.

You can manage your cookie preferences through your browser settings. Note that disabling certain categories of cookies may affect the functionality of the mykad88 platform.

10. Your Privacy Rights

As a data subject whose personal data is processed by mykad88, you hold the following rights, subject to applicable legal limitations and exemptions:

• Right of access: You may request a copy of the personal data mykad88 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data held in your mykad88 account profile.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to restriction: You may request that processing of your personal data be restricted in certain circumstances, such as while the accuracy of the data is being verified.
• Right to data portability: You may request a copy of personal data you have provided to mykad88 in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing of your personal data based on legitimate interests, including profiling for direct marketing purposes. Such objections will be assessed on a case-by-case basis.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

To exercise any of the above rights, please contact the mykad88 Data Privacy team at the email address provided in Section 14 of this Policy. mykad88 will respond to verified requests within 30 calendar days.

11. Children's Privacy

The mykad88 platform is strictly intended for users who are 21 years of age or older. mykad88 does not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is a mandatory step in the mykad88 account registration and KYC process.

If mykad88 becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe that a minor may have registered an account on the mykad88 platform, please contact our support team immediately.

12. Security Measures

mykad88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the mykad88 platform.
• Password hashing and salting — your mykad88 account password is never stored in plain text.
• Two-factor authentication (2FA) available for all member accounts, providing an additional layer of login security via your registered Malaysian phone number.
• Continuous automated monitoring for anomalous login activity, unauthorised access attempts, and suspicious transaction patterns.
• Role-based access controls limiting internal access to member personal data to only those mykad88 personnel with a legitimate operational need.
• Regular security assessments and penetration testing of the mykad88 platform infrastructure.

While mykad88 takes all reasonable technical precautions, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. You play an important role in account security by maintaining a strong, unique password and enabling 2FA on your mykad88 account.

13. Amendments to This Policy

mykad88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform services. Amended versions will be published on this page with an updated "Last Updated" date.

Where an amendment is material — meaning it substantively affects how your personal data is processed or your rights in relation to it — mykad88 will make reasonable efforts to notify you via your registered email address prior to the amendment taking effect. Your continued use of the mykad88 platform following publication of an amended Policy constitutes your acknowledgement of the updated terms.

14. Contact & Data Privacy Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by mykad88, please contact our Data Privacy team:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: Please include "Privacy Request" or "Data Subject Request" to ensure your message is directed to the appropriate team.
• Response time: Privacy and data subject requests are addressed within 30 calendar days of receipt of a verified request.

mykad88 takes all privacy enquiries seriously and will acknowledge receipt of your request promptly. For escalated privacy concerns, you may also have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.