MD 88 Privacy Policy – How We Protect Your Personal Data in Malaysia

MD 88 ("we", "the platform", "us") values the privacy of every individual who uses our services. This Privacy Policy transparently explains how MD 88 collects, uses, stores, protects, and discloses your personal information when you register for and use our online casino and Sports Betting platform.

This policy applies to all users of the MD 88 platform in Malaysia — including registered members, website visitors, Android and iOS mobile app users, and any individual who interacts with us through customer support channels.

By registering an account or continuing to use the MD 88 platform, you acknowledge that you have read and understood this Privacy Policy. We encourage you to read the full document to fully understand your rights and responsibilities regarding your personal data.

MD 88 collects various types of information depending on how you interact with the platform. Below are the main categories of data we collect:

A. Information You Provide Directly:

• Full name as per official Malaysian identification document (MyKad / MyPR).
• Date of birth to verify the minimum age requirement of 21 years.
• An active email address and Malaysian mobile number.
• The username and password you chose during registration.
• Payment information including the eWallet or bank account holder's name (not the full account number — see Section 9).
• Any information you share through MD 88's customer support forms or live chat.

B. Information Collected Automatically:

• IP address and geographic location at the state/city level.
• Device type, operating system, and web browser version in use.
• Session data: login time, session duration, pages visited, and actions taken within the platform.
• Game activity logs: games played, bet amounts, and outcomes (for fairness auditing).
• Cookie and similar tracking technology data (see Section 5).

Every piece of information we collect has a clear and legitimate purpose. MD 88 does not use your data for purposes unrelated to the platform's operation without your consent. The following are the primary uses of the data we collect:

• Identity and age verification: To ensure all MD 88 members meet the minimum age requirement of 21 years and are residents of Malaysia.
• Account management: Allows you to log in, manage preferences, view your game history, and manage your responsible gambling limits.
• Financial transaction processing: Processing deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX, as well as withdrawals to your Malaysian bank account.
• Security and fraud prevention: Detecting suspicious activity, money laundering, multiple account usage, and other security threats.
• Customer support: Responding to enquiries, resolving complaints, and providing technical assistance to MD 88 members.
• Platform improvements: Analysing usage patterns to improve the design, performance, and features of the MD 88 platform.
• Marketing communications (with consent): Sending information about promotions, festive bonuses (Hari Raya, Chinese New Year, Deepavali) and exclusive offers to members who have opted in to marketing communications.

MD 88 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. However, there are limited situations in which we may share your information with trusted third parties:

• Game software providers: Evolution Gaming, Pragmatic Play, Playtech, and other providers may receive the minimum session data required to operate live casino, slots, and table games securely.
• Payment processors: eWallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay) and banks (Maybank, CIMB, etc.) receive the transaction details needed to process your deposits and withdrawals.
• IT service providers: Companies that manage our server infrastructure, cybersecurity, and fraud detection, all of whom are bound by strict confidentiality agreements.
• Authorities and regulatory bodies: Where required by Malaysian law, court order, or a request from a legitimate enforcement agency.

All third parties working with MD 88 are required to adhere to data protection standards at least equivalent to this Privacy Policy and are not permitted to use your data for any other purpose.

The MD 88 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. Cookies are small text files stored on your device when you visit our platform.

Types of cookies used by MD 88:

• Essential Cookies (Required): Required for core platform functions such as login authentication, session management, and security. Cannot be disabled.
• Performance Cookies: Collects anonymous information about how you use the platform to help us identify and resolve technical issues.
• Functional Cookies: Remembering your preferences such as interface language, display settings, and your favourite games on MD 88.
• Marketing Cookies (Optional): Used with your consent to display relevant MD 88 promotions based on your gaming interests — whether slots, live casino, or sports betting.

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the MD 88 platform.

MD 88 continuously invests in security infrastructure to ensure your personal data is always protected against unauthorized access, loss, misuse, or accidental disclosure.

Our technical security measures include:

• 256-bit SSL/TLS encryption for all communications between your device and MD 88 servers.
• Passwords are stored using strong hashing algorithms — MD 88 does not store your password in plain text.
• Optional two-factor authentication (2FA) that we encourage all members to enable.
• 24/7 security monitoring with automated threat detection systems.
• Regular security audits conducted by independent cybersecurity experts.
• Strict access controls — only MD 88 staff who require access to specific data are permitted to do so, based on a "need-to-know" principle.

MD 88 retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy, or as required by applicable Malaysian law.

• Active account data: Retained for as long as your account is active and for three (3) years after the account is closed.
• Financial transaction records: Retained for seven (7) years in accordance with Malaysian tax and financial compliance requirements.
• Gaming activity logs: Retained for two (2) years for fairness audit and dispute resolution purposes.
• Customer support data: Retained for two (2) years after the case is resolved.
• Security logs: Retained for one (1) year for fraud detection and security investigation purposes.

Upon expiry of the retention period, data will be securely deleted or anonymised so that it can no longer be linked to any individual.

As a MD 88 member residing in Malaysia, you have certain rights under the Personal Data Protection Act 2010 (PDPA) regarding your personal data. MD 88 is committed to making it easy for you to exercise these rights:

The security of your financial information is MD 88's highest priority. We understand that financial transactions are among the most sensitive data, and we handle them with the strictest level of protection.

How MD 88 handles your financial data:

• MD 88 does not store your debit/credit card number, internet banking password, or eWallet login credentials.
• All payments via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX are processed directly by the respective payment gateway providers — MD 88 only receives confirmation of a successful or failed transaction.
• Transaction records are stored in encrypted format and are accessible only by MD 88's licensed and authorised finance team.
• All withdrawal activity is monitored for any signs of money laundering (AML) in accordance with Malaysian financial compliance requirements.

The MD 88 platform is strictly for individuals aged 21 and above. We do not knowingly collect or process personal data from underage individuals. MD 88's registration process requires age verification, and all accounts are subject to KYC checks to ensure compliance with this age requirement.

If you are a parent or guardian and discover that your underage child has used the MD 88 platform without authorisation, please contact us immediately at support@md88-app.com. We will investigate and take appropriate action, including account termination and any applicable refund of funds.

MD 88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our operations, new Malaysian legal requirements, or current industry practices. The "Updated" date at the top of this document indicates when it was last reviewed.

For amendments considered material — meaning those that substantially change how we use your data — MD 88 will notify you via your registered email or an in-platform notice at least 14 days before the changes take effect. This gives you sufficient time to review the updates and make a fully informed decision.

We encourage you to review this Privacy Policy page from time to time to stay informed about how we protect your information.

If you have any questions, concerns, or complaints about how MD 88 handles your personal data, we welcome you to reach out to us. Our team is committed to addressing all privacy-related enquiries thoroughly and within a reasonable timeframe.

• Privacy Email: privacy@md88-app.com
• General Support Email: support@md88-app.com
• Live Chat: Available 24/7 within the MD 88 platform (for immediate enquiries)
• Email Response Time: Within 3 business days for privacy-related enquiries
• Communication Language: Bahasa Malaysia and English

For complaints involving your personal data rights under PDPA 2010, you are also entitled to lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you are not satisfied that your issue has been adequately resolved by MD 88.