Privacy Policy mykad88 – Our Commitment to Protecting Your Data

Mykad88 is an online casino platform operating under the domain mykad88.best, offering Live Casino games, online slots, Sports Betting, and a variety of other games to players in Malaysia. In the course of running these services, mykad88 needs to collect and process certain personal information from our users.

This Privacy Policy was drafted to comply with the Personal Data Protection Act Malaysia 2010 (PDPA 2010) and international best practices in data protection. We believe Malaysian players have the right to clearly understand what happens to their information, and this Policy is our written commitment to you on that matter.

This Privacy Policy covers all platforms and services operated by mykad88, including the main website, any mobile applications that may be launched in the future, and all electronic communications between mykad88 and its users. If you use any third-party platforms that integrate with mykad88 (such as payment providers Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, or FPX), the privacy policies of those platforms also apply to data shared with them.

Mykad88 only collects data that is strictly necessary to deliver our services safely and effectively. Below are the categories of data we collect and the reasons they are required:

Account Registration Data:

• Full name as per Malaysian identity card
• An active Malaysian mobile phone number
• Email address (if provided)
• Date of birth for age verification (must be 21 years of age or older)
• Passwords stored in an irreversible hash format

Identity Verification (KYC) Data:

• Copy of Malaysian Identity Card (MyKad) – front and back
• Selfie or facial photo to verify the identity of the document holder
• Proof of current address (bank statement, utility bill) if requested

Financial & Transaction Data:

• E-wallet details (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) or FPX bank account used for deposits and withdrawals
• Deposit and withdrawal history including amounts, dates, times, and methods
• Current account balance and fund movement records

Platform Usage Data:

• Gaming records – games played, bets placed, outcomes, session duration
• IP address of the device used to access mykad88
• Device type, operating system, and web browser
• Cookie and session tracking data to enhance the user experience
• Interaction logs with the mykad88 customer support team

Mykad88 collects and processes your personal data for the following purposes only. We will not use your data for any purpose beyond what is stated below without first obtaining your additional consent.

• Account Management: Creating, verifying, and managing your mykad88 account so you can log in and access all available services
• Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as handling withdrawals of your winnings to your Malaysian bank account or e-wallet
• Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, unauthorised access, and multiple-account usage that violates mykad88's terms
• Legal Compliance: Fulfilling legal obligations under PDPA 2010, anti-money laundering (AML) requirements, and complying with any court orders or directives from lawful authorities
• Customer Support: Resolving enquiries, complaints, and technical issues that you report to the mykad88 support team
• Responsible Gambling: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate control tools in line with mykad88's responsible gaming policy
• Platform Improvements: Analysing usage data in aggregate (non-individually identifiable) to improve the performance, design, and features of the mykad88 platform
• Communications: Sending important notifications about your account, terms updates, or relevant security information via the phone number or email address you registered with

For marketing and promotions, mykad88 will only send you promotional communications if you have opted in during registration or through your account settings. You may withdraw this consent at any time via the notification settings in your mykad88 account.

Mykad88 does not sell, rent, or distribute your personal data to third parties for marketing or commercial purposes. This is our absolute commitment. However, there are limited circumstances where mykad88 needs to share certain information with carefully selected third parties:

• Payment Providers: Transaction information required for processing is shared with licensed payment providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and banks supporting FPX, solely for the purpose of processing your deposits and withdrawals. These providers are subject to their own privacy policies and strict security standards.
• Game Providers: Game session details are shared with providers such as Evolution Gaming, Pragmatic Play, PG Soft, and others to operate the live casino, slots, and table games you choose to play. Only the minimum data required to run the games is shared.
• Identity Verification Services: Your KYC documents may be processed through a licensed and audited third-party identity verification platform to meet legal compliance requirements. This platform is bound by a strict confidentiality agreement with mykad88.
• Legal Authority: mykad88 is required to disclose information requested by lawful Malaysian authorities through court orders, warrants, or proper legal procedures. We do not disclose data beyond what is legally required.

Every third party that receives data from mykad88 is bound by a legally enforceable data processing agreement, ensuring your data is handled to the same standards of security and confidentiality that we apply ourselves.

Mykad88 continuously invests in the latest security infrastructure to ensure your personal and financial data remains protected at all times. Key security measures we have in place include:

• 256-bit SSL Encryption: All communications between your browser and mykad88 servers are encrypted using 256-bit TLS/SSL protocol — the same standard used by leading banking institutions in Malaysia
• Secure Password Storage: Your password is never stored in plain text. We use an advanced one-way hashing algorithm, meaning even mykad88's own internal team cannot read your password.
• Internal Access Controls: Only authorised mykad88 staff with a legitimate business need are permitted to access user data. All access is automatically logged and monitored
• Continuous Threat Monitoring: mykad88's systems are monitored 24/7 to detect any suspicious activity, intrusion attempts, or data access anomalies
• Regular Security Audits: mykad88 undergoes periodic independent third-party security audits to identify and address any vulnerabilities before they can be exploited
• Data Segregation: Sensitive data such as KYC information and financial records are stored in separate systems with stricter access controls compared to standard operational data.

In the event of a data breach affecting your personal information, mykad88 is committed to notifying you via email or in-platform notification within 72 hours of the breach being identified, in line with international data protection best practices.

Mykad88 uses cookies and similar tracking technologies to ensure the platform functions correctly and to deliver a better experience for you. Cookies are small text files stored on your device by your web browser when you visit mykad88.

Types of cookies used by mykad88:

• Essential Cookies: Required for core platform functionality, such as maintaining your login session, remembering your language preference, and ensuring session security. These cookies cannot be disabled without affecting how the platform works.
• Performance Cookies: Collecting aggregated data on how players use the mykad88 platform — most visited pages, time spent, navigation paths — to help us improve the user experience. This data cannot be used to identify any individual.
• Functional Cookies: Saving your personal preferences — such as display settings, your last played game, and other preferences — so you don't have to reconfigure them each time you log in to mykad88.
• Security Cookies: Used to detect suspicious login attempts, identify trusted devices, and prevent unauthorised access to your account.

You can manage or delete cookies through your web browser settings. However, disabling essential cookies may affect your ability to use certain features of the mykad88 platform. For guidance on managing cookies in your browser, refer to your browser's help documentation.

Mykad88 retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy, or as required by applicable law. Below are the retention period guidelines for different categories of data:

• Active Account Data: Retained for as long as your account is active on mykad88 and for a period of 7 years after account closure, to meet anti-money laundering legal compliance requirements
• Financial Transaction Records: Retained for 7 years from the transaction date in accordance with Malaysian financial and tax regulations.
• KYC & Identity Verification Records: Retained for the duration of the active account period plus 7 years after closure, in accordance with AML/CFT compliance requirements
• Customer Support Logs: Retained for 2 years from the date of last interaction for reference and service improvement purposes.
• Session Data & Cookies: Session data is deleted upon log out. Performance cookies are retained for a maximum period of 12 months.

When data is no longer needed and there is no legal obligation to retain it, mykad88 will securely delete or anonymise that data in a manner that prevents it from being recovered or re-identified.

If you close your mykad88 account, we will initiate the deletion of personal data that is no longer required within 30 days, subject to the mandatory retention requirements stated above.

Under the Malaysian Personal Data Protection Act 2010 (PDPA) and mykad88's commitment to player privacy, you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you. mykad88 will provide the data in a readable format within 14 business days of receiving a valid request.
• Right to Rectification: If you find that the personal data we hold about you is inaccurate or out of date, you have the right to request a correction. You can update much of your information directly through your mykad88 account settings, or by contacting our support team.
• Right to Erasure: You may request the deletion of your personal data under certain circumstances, such as when the data is no longer needed for its original purpose. Such requests will be assessed and processed in accordance with applicable legal retention obligations.
• Right to Restrict Processing: In certain circumstances, you may request that mykad88 restrict the processing of your data – for example, if you dispute the accuracy of the data or object to ongoing processing activities.
• Right to Withdraw Consent: For data processing based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the validity of any processing carried out prior to the withdrawal.
• Right to Lodge a Complaint: If you believe mykad88 has processed your personal data unlawfully or in violation of PDPA 2010, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

To exercise any of the rights above, contact the mykad88 Privacy Officer by email at support@mykad88.best, stating the right you wish to exercise along with your account details for verification. We are committed to responding to all valid requests within 14 working days.

Mykad88 enforces a strict minimum age requirement — you must be 21 years of age or older to register and use our services. The mykad88 platform is not designed for, nor intended to attract, individuals under the age of 21.

Mykad88 does not knowingly collect or process personal data from individuals under the age of 21. If we discover that personal data belonging to someone below the stipulated age limit has been collected, we will take immediate steps to delete that data and close the account in question.

Age verification is carried out during registration and through KYC procedures that require a valid identification document. If you are a parent or guardian and discover that your underage child has registered an account on mykad88, please contact us immediately at support@mykad88.best so we can take prompt action to close the account and delete the associated data.

Mykad88 reserves the right to update or amend this Privacy Policy from time to time in line with changes in law, technology, or our business operations. Any material amendments will be communicated to you via an in-platform notification or through the phone number or email address you registered with, at least 14 days before the changes take effect.

The "Updated" date at the top of this document will always reflect the latest version of the Privacy Policy. We encourage you to review this Policy periodically to stay informed about how your data is handled by mykad88.

Continued use of the mykad88 platform after the effective date of any amendment constitutes acceptance of the updated Privacy Policy terms. If you disagree with the changes, you have the right to close your account and request data deletion before the changes take effect.