Privacy Policy million88 —
Your Data, Our Responsibility

Million88 ("we", "Platform", "this website") is fully committed to protecting the privacy and data security of all its users. This Privacy Policy details how we collect, process, store, and protect your personal information when you use our online gaming platform at million88.bar.

This document also outlines your rights as a player regarding personal data, and how you can contact us with any questions or concerns. We encourage you to read this document carefully and review it periodically, as we may update it in line with operational changes or legal requirements.

This Privacy Policy applies to all platform users, including visitors without an account, registered players, and winners who have made a withdrawal. This Policy is to be read together with Terms and Conditions and Responsible Gaming Policy us.

We collect several categories of personal information depending on how you interact with our platform. Below is a detailed breakdown of the data collected:

The personal data we collect is used solely for legitimate purposes necessary for the operation of the Million88 platform. We do not use your data for any other purpose without your consent. The purposes of data use are as follows:

• Account Management: Creating, verifying, and maintaining your player account, including the KYC process and identity checks.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions securely and accurately.
• Platform Security: Detecting and preventing fraud, money laundering, unauthorized access, and other suspicious activities.
• Legal Compliance: Fulfilling legal obligations, regulatory requirements, and requests from lawful authorities.
• Service Improvement: Analyzing usage patterns to improve the player experience, game accuracy, and platform performance.
• Customer Support: Responding to inquiries, resolving complaints, and providing technical assistance to players.
• Marketing Communications: Sending promotional information, exclusive offers, and platform updates — only to players who have consented to receive them.
• Responsible Gaming: Monitoring gameplay patterns to identify players who may need responsible gaming support.

All data processing is carried out on a solid legal basis — whether that is your consent, contractual necessity, legal obligation, or the platform's legitimate interests that do not prejudice your rights.

Million88 does not sell, rent, or disclose players' personal data to third parties for their own marketing purposes. However, there are limited situations where we may need to share your information:

• Payment Service Provider: FPX, Touch 'n Go eWallet, GrabPay, Boost, and other payment processing partners to facilitate financial transactions. They are subject to strict confidentiality agreements.
• KYC & Identity Verification Provider: Licensed and registered third-party identity verification service providers to carry out KYC checks.
• Relevant Authorities: Law enforcement agencies, regulatory bodies, or courts when required by Malaysian law or court order.
• Technology Provider: Server vendors, cloud service providers, and cybersecurity companies that help us operate the platform — all bound by confidentiality agreements.
• Merger or Acquisition: In the event of any change in business ownership, player data may be transferred as part of the business assets, subject to notice being given to players.

The security of your personal data is million88's top priority. We implement a range of technical and organizational security measures to protect your information from unauthorized access, loss, or misuse:

• Data encryption in transit using TLS 1.3 and SSL 256-bit protocols.
• Encryption of data stored in databases using AES-256.
• Role-based access control — only authorized personnel may access player data.
• Two-factor authentication (2FA) for all internal admin access.
• Regular security monitoring and penetration testing conducted by independent security experts.
• Intrusion detection systems (IDS) and firewalls updated automatically.
• Tested incident response procedures to address data breaches swiftly.

While we take all reasonable measures, no security system is entirely perfect. Should any significant data breach occur that affects your rights, we are committed to notifying you within the timeframe required by law.

The million88 platform uses cookies and similar tracking technologies to enhance your browsing experience and ensure the platform functions properly. Below are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session security, and basic preference memory. These cookies cannot be disabled.
• Performance Cookies: Collecting information on how you use the platform (pages visited, time spent) to help us improve our services.
• Functional Cookies: Remembering your preferences such as language, display settings, and game preferences for a more personalized experience.
• Analytics Cookies: Used to analyze traffic patterns and platform usage in aggregate, anonymized form for improvement purposes.

You can manage cookie settings through your browser preferences. However, disabling essential cookies may affect platform functionality. For more information on managing cookies in your browser, refer to your browser's documentation.

You have important rights regarding your personal data, which we fully respect. Below is a summary of those rights:

To exercise any of the above rights, please contact our customer support team via live chat, available 24/7. We will respond within 72 hours and complete your request within 30 business days.

We only retain your personal data for as long as it is needed for the stated purposes or as required by law. Below are our data retention guidelines:

• Active Account Data: Stored for the duration your account remains active and in use.
• KYC & Verification Data: Stored for a minimum of 5 years after account closure as required by anti-money laundering regulations.
• Financial Transaction Records: Stored for 7 years for audit and tax compliance purposes.
• Support Communication Logs: Stored for 3 years after the last interaction.
• Technical & Access Log Data: Stored for 12 months for security and investigation purposes.
• Marketing Data: Deleted within 30 days after you withdraw your consent.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be associated with you.

The million88 platform may contain references or information relating to our payment providers and service partners. This Privacy Policy applies solely to the million88 platform.

We are not responsible for the privacy practices or content of any third party. We encourage you to read the privacy policy of any payment provider or third-party service you use alongside our platform to understand how they handle your data.

In operating the platform, your personal data may be transferred to and stored on servers located outside Malaysia. Any such transfer is carried out with adequate safeguards in place, including:

• Data processing agreements compliant with international data protection standards.
• Use of approved standard contractual clauses to ensure equivalent data protection.
• Periodic assessment of recipient countries to ensure adequate levels of protection.
• End-to-end encryption during cross-border data transfer processes.

The million88 platform is for users aged 18 and above only. We do not knowingly collect or process personal data of individuals under the age of 18.

All new players are required to verify their age during the registration and KYC process. Should we find that personal data of underage individuals has been collected inadvertently, we will immediately take steps to delete that data and close the account in question.

Million88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. Whenever we make significant changes, we will:

• Updating the "Last Updated" date at the top of this document.
• Displaying a clear notice on the platform's Home page for a minimum of 14 days.
• Sending notifications to registered players via email or in-account notifications.
• For significant changes, we may request fresh consent from the player.

Continued use of the million88 platform after the effective date of any amendments constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed.

If you have any questions, concerns, or wish to exercise your rights regarding personal data, please contact our Privacy & Data Protection team via the 24/7 live chat available in your account or email us at [email protected].