m888bet Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by m888bet ("we", "us", "our", "the Platform") and applies to all individuals ("User", "you", "your") who access, browse, register on or interact with the m888bet website at https://m888bet.casa or any associated interfaces and services (collectively, the "Services").

m888bet operates as an English-language online gaming information and entertainment brand serving Malaysian users. In the course of providing the Services, m888bet collects, processes, stores and — in limited, defined circumstances — transfers personal data. This Policy sets out the basis on which that data is handled in accordance with applicable international data protection principles.

This Policy should be read alongside the m888bet Terms and Conditions and Responsible Gambling Policy. By creating an Account, depositing funds, placing a bet or submitting any personal information to m888bet, you confirm that you have read and understood this Policy. If you do not accept the terms of this Policy, you must not use the Services.

2. Definitions

For the purposes of this Policy:

• "Personal Data" means any information that identifies or can reasonably identify you as a natural person, including name, identification number, contact details, device identifiers and financial account references.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, disclosure and deletion.
• "Data Controller" means m888bet as the entity that determines the purposes and means of Processing your Personal Data.
• "Data Processor" means any third party engaged by m888bet to Process Personal Data on its behalf, subject to contractual data-processing obligations.
• "KYC Data" means identity and address documents submitted for Know Your Customer verification, including government-issued identification, proof of address and selfie verification.
• "Cookies" means small text files or similar tracking technologies placed on your device when you access the Services.
• "Account" means the individual registered user account on the m888bet platform.

3. Data We Collect

3.1 Registration Data

When you create an m888bet Account, we collect the full name, date of birth, residential address, email address, phone number and username you provide. This information is required to establish your Account and verify your eligibility under the 21+ age requirement.

3.2 Identity Verification (KYC) Data

To comply with age verification, fraud prevention and anti-money laundering obligations, m888bet collects copies of government-issued identification documents (such as a Malaysian MyKad, driving licence or passport), proof of address dated within three months, and where required, a live or static selfie alongside the identity document.

3.3 Financial and Transaction Data

m888bet records deposit and withdrawal transaction amounts, dates, methods, reference numbers and the account name associated with each payment. For Malaysian users, this may include transaction records referencing DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank or Hong Leong, depending on the channel used.

3.4 Activity and Usage Data

We collect records of bets placed, game sessions entered, bonus activations, promotional responses, login timestamps, session durations and account settings changes. This data supports account integrity checks, responsible gambling monitoring and dispute resolution.

3.5 Technical and Device Data

m888bet automatically collects device type, operating system version, browser type and version, IP address, referring URL and general geographic location data when you access the Services. This data helps detect account sharing, geographic access anomalies and potential security threats.

3.6 Communications Data

When you contact m888bet support via live chat, WhatsApp or email, we retain records of those communications including the date, channel, content and resolution outcome. Communication records may be referenced in dispute resolution and quality assurance processes.

4. Data Processing

m888bet processes your Personal Data for the following defined purposes:

• Account creation and management: To establish, maintain and administer your m888bet Account, including login authentication and security monitoring.
• Age and identity verification: To confirm that you meet the 21+ eligibility requirement and that the Account is held in your own name.
• Payment processing: To facilitate MYR deposits and withdrawals through supported Malaysian payment channels and to maintain accurate transaction records.
• Bet settlement and game integrity: To record, settle and audit wagering activity, resolve disputes and investigate anomalies.
• Fraud and security prevention: To detect, investigate and prevent unauthorised access, multiple accounts, payment chargebacks, money laundering and other prohibited conduct.
• Responsible gambling compliance: To monitor account activity for indicators of problematic gambling behaviour and to administer self-exclusion or limit requests.
• Legal and regulatory compliance: To fulfil obligations arising from applicable international licensing requirements, anti-money laundering standards and lawful data requests.
• Service improvement: To analyse aggregated and anonymised usage patterns to improve platform navigation, product offering and user experience.
• Communications: To respond to support enquiries and, where you have opted in, to send promotional updates about m888bet offers.

5. Legal Basis for Processing

m888bet relies on the following legal bases for Processing your Personal Data, consistent with widely recognised international data protection principles:

• Contractual necessity: Processing required to perform the Account agreement and deliver the Services, including transaction processing and bet settlement.
• Legal obligation: Processing necessary to comply with applicable anti-money laundering, age verification, fraud prevention and international licensing obligations.
• Legitimate interests: Processing for fraud detection, network security, service improvement and responsible gambling monitoring, where those interests are not overridden by your fundamental rights.
• Consent: Processing of optional Personal Data — such as marketing communications — where you have provided a freely given, specific and informed consent that may be withdrawn at any time without detriment to your Account status.

6. Payment Data

m888bet does not store full payment card numbers or complete e-wallet credentials. Payment transactions are processed through third-party payment service providers who operate under their own applicable data protection and PCI-DSS security standards. m888bet retains only the transactional reference data necessary for accounting, dispute resolution and regulatory audit purposes.

Malaysian users should be aware that payment providers such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank and Hong Leong operate under their own privacy policies and data processing terms. m888bet is not responsible for how third-party payment processors handle data shared with them during transaction processing. We recommend reviewing the privacy policy of any payment provider before initiating a transaction.

7. Cookies and Tracking Technologies

7.1 What We Use

m888bet uses cookies, web beacons, pixel tags and similar technologies to support platform functionality, maintain session security and collect anonymised usage statistics. Cookies do not contain your full name, identity document data or payment credentials.

7.2 Types of Cookies

• Essential cookies: Required for login session management, security token validation and core platform operation. These cannot be disabled without impairing the Services.
• Functional cookies: Store user preferences such as language, display settings and notification choices.
• Analytics cookies: Collect aggregated and anonymised data about page visits, navigation paths and session durations to support service improvements.
• Marketing cookies: Used only where you have provided consent, to personalise content and measure promotional campaign effectiveness.

7.3 Cookie Management

You may manage non-essential cookies through your browser settings. Disabling cookies may impair certain platform functions. Clear instructions for cookie management are available in the help documentation of commonly used browsers.

8. Third-Party Data Sharing

m888bet does not sell, rent or trade your Personal Data to unaffiliated third parties for their own marketing purposes. We share data only in the following defined circumstances:

• Service providers: Payment processors, KYC verification technology providers, fraud detection services and customer communication platforms engaged by m888bet under contractual data-processing obligations requiring equivalent privacy protections.
• Game content partners: m888bet works with international game studios and sports data providers. Aggregated, non-identifiable session data may be shared for RNG audit and game performance review purposes. Individual identity data is not shared with content partners.
• Legal and regulatory disclosure: m888bet may disclose Personal Data to competent authorities, regulators or courts where required by applicable international licensing obligations, anti-money laundering regulations or lawful legal process, without prior notice to the Account holder where legally required.
• Business transfers: In the event of a merger, acquisition or substantial asset transfer, Personal Data held by m888bet may be transferred to a successor entity subject to at least equivalent privacy protections, with notice provided to affected users where reasonably practicable.

9. Data Retention

m888bet retains Personal Data for as long as it is necessary to fulfil the purposes for which it was collected, comply with applicable legal and regulatory obligations, resolve disputes and enforce agreements.

• Active Account data: Retained for the duration of your Account relationship with m888bet.
• KYC documents: Retained for a minimum of five (5) years following Account closure, in line with standard anti-money laundering record-keeping expectations under applicable international frameworks.
• Transaction records: Retained for a minimum of five (5) years following each transaction date.
• Support communications: Retained for up to three (3) years following the date of the final communication in a resolved case.
• Marketing consent records: Retained until consent is withdrawn and for a reasonable period thereafter as evidence of the consent history.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with m888bet's internal data lifecycle management procedures.

10. Security Measures

m888bet implements technical and organisational measures designed to protect your Personal Data against unauthorised access, disclosure, alteration, loss or destruction. These measures include:

• SSL/TLS encryption for all data transfers between your browser and the m888bet platform.
• Encrypted storage of sensitive account and KYC data at rest.
• Role-based access controls restricting Personal Data access to authorised m888bet personnel with a legitimate operational requirement.
• Secure document upload portals for KYC submissions, segregated from general platform traffic.
• Automated anomaly detection for login activity, payment patterns and account behaviour.
• Regular security reviews of third-party service providers with data access obligations.

11. User Rights

Subject to applicable data protection law, you may hold the following rights in relation to your Personal Data processed by m888bet. Requests should be submitted in writing to [email protected] with your Account username, registered email address and a description of the right you wish to exercise.

• Right of Access: You may request confirmation of whether m888bet holds Personal Data about you and receive a copy of that data in a structured format.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data held on your Account.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal and regulatory retention obligations.
• Right to Restrict Processing: You may request that m888bet limit the Processing of your Personal Data in defined circumstances, such as where accuracy is contested or an objection is pending review.
• Right to Data Portability: Where Processing is based on consent or contractual necessity and carried out by automated means, you may request a machine-readable copy of the Personal Data you provided.
• Right to Object: You may object to Processing carried out on the basis of legitimate interests. m888bet will cease that Processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where Processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of Processing carried out before withdrawal.

m888bet aims to respond to verified data rights requests within thirty (30) calendar days. Complex requests may require up to an additional sixty (60) days, with advance notice provided.

12. Minors and Age Protection

The m888bet Services are strictly intended for adults aged 21 years and older. m888bet does not knowingly collect or process Personal Data from individuals below the age of 21. If m888bet has reason to believe that an Account is held by or on behalf of a person under 21, the Account will be suspended, KYC verification will be requested immediately, any winnings generated during the affected period will be subject to forfeiture review, and deposits may be returned subject to applicable processing constraints.

Parents and guardians who believe a minor may have accessed m888bet Services should contact [email protected] immediately with available Account details. m888bet will investigate and take appropriate action without undue delay.

13. Changes to This Policy

m888bet reserves the right to update or replace this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or platform functionality. Material changes will be communicated to registered Users by email to the address on file and by a prominent notice on the platform, not less than seven (7) days before the revised Policy takes effect, except where immediate amendment is required for security or regulatory compliance.

Continued use of the m888bet Services after the effective date of a revised Policy constitutes acceptance of the updated terms. If you do not accept the revised Policy, you must stop using the Services and request Account closure before the effective date.

14. Contact Us

For questions about this Privacy Policy, to exercise a data right, or to raise a concern about how your Personal Data has been handled, please contact the m888bet data queries team through the following channels:

• Website Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the platform interface
• Response Target: Email queries within one (1) business day; data rights requests within thirty (30) calendar days

Please include your registered Account username, the email address associated with your Account and a clear description of your request or concern. m888bet may ask for additional information to verify your identity before processing a data rights request.