mykad88 Privacy Policy

1. Who We Are

mykad88 is the operator of the online gaming platform accessible at mykad88.co (the "Platform"). For the purposes of this Privacy Policy, mykad88 acts as the data controller in respect of the personal data it collects from members and visitors. When this Policy refers to "mykad88", "we", "us", or "our", it refers to the operator of the Platform. If you have questions about how your data is handled, contact us at [email protected].

2. Data We Collect

mykad88 collects personal data in two broad categories: data you provide directly, and data we collect automatically when you use the Platform.

Data you provide directly:

• Full legal name and date of birth (for identity verification and age compliance)
• Email address and/or Malaysian mobile phone number (used as your primary account identifier)
• Mailing address (required for certain verification processes)
• Payment information, including bank account or eWallet details registered for withdrawals (we do not store full card numbers)
• Copies of identity documents where you submit them for Know Your Customer (KYC) verification
• Communications you send to our support team via live chat or email

Data collected automatically:

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session data including login timestamps, pages visited, and session duration
• Gameplay data, including wager amounts, game selections, win/loss records, and betting history
• Cookie and tracking technology data as described in Section 6

3. How We Collect Data

mykad88 collects personal data through the following means:

• Account Registration: When you create a mykad88 account, you provide core identification and contact data.
• KYC & Verification: When we ask you to verify your identity, you may submit supporting documents (MyKad, passport, proof of address).
• Deposits & Withdrawals: Payment processing through FPX, Touch n Go eWallet, Boost, Maybank, CIMB, or Public Bank generates transaction records that we retain.
• Platform Usage: Our servers automatically log technical and behavioural data each time you interact with the Platform.
• Customer Support: When you contact mykad88 support, we retain records of that communication for quality and compliance purposes.

4. Purpose & Legal Basis for Processing

The table below sets out the primary purposes for which mykad88 processes your personal data and the legal basis for each:

Where our legal basis is consent, you may withdraw that consent at any time by contacting support or adjusting your account communication preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

5. Sharing Your Data

mykad88 does not sell your personal data to any third party. We share your data only in the following limited circumstances:

• Payment Processors: Transaction data is shared with FPX, Touch n Go, Boost, and banking partners to facilitate deposits and withdrawals. Each processor is bound by its own data protection obligations.
• Game Providers: When you play a game hosted by a third-party studio (e.g., Pragmatic Play, PG Soft, Evolution), your gameplay session data may pass through their servers. These providers are contractually required to process data only for the purpose of game delivery.
• KYC & Identity Verification Services: Where automated document verification is used, your identity documents may be processed by a certified third-party KYC provider.
• Regulatory Authorities: mykad88 will disclose personal data to regulators, law enforcement, or gaming authorities where required by applicable law or licensing conditions.
• Corporate Transactions: In the event of a merger, acquisition, or sale of the mykad88 business, member data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third-party service providers engaged by mykad88 are assessed for data protection compliance and are contractually prohibited from using member data for purposes beyond those specified.

6. Cookies & Tracking Technologies

mykad88 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help us recognise you across sessions and improve your experience.

We use the following categories of cookies:

• Essential Cookies: Required for the Platform to function correctly, including session authentication and security. These cannot be disabled without affecting your ability to use the Platform.
• Analytics Cookies: Collect anonymised data about how members navigate the Platform, which pages are most visited, and where technical errors occur. This data is aggregated and not linked to individual identities.
• Preference Cookies: Store your language preference, display settings, and other customisation choices.
• Marketing Cookies: Used only where you have consented. These track your activity to allow us to show you relevant promotional content within the mykad88 Platform.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from accessing core Platform features, though some personalisation functionality may be reduced.

7. Data Retention

mykad88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, and in compliance with applicable legal and regulatory retention requirements. In practice:

• Active account data is retained for the duration of your membership with mykad88.
• Following account closure, transaction records, KYC documents, and gameplay data are retained for a minimum of five (5) years to satisfy anti-money laundering, regulatory, and audit obligations.
• Support communication records are retained for three (3) years from the date of the interaction.
• Data collected solely on the basis of your consent (e.g., marketing preferences) is deleted promptly upon withdrawal of that consent, subject to any overriding legal retention obligation.

Where retention periods expire, data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

8. Security Measures

mykad88 employs industry-standard technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the mykad88 Platform
• Encryption of sensitive data fields (including payment references and identity document data) at rest
• Role-based access controls limiting employee access to personal data on a need-to-know basis
• Regular security assessments and penetration testing of the Platform infrastructure
• Multi-factor authentication options for member accounts, strongly recommended for all Malaysian members

No method of transmission over the internet or electronic storage is 100% secure. While mykad88 takes all reasonable precautions, we cannot guarantee the absolute security of data. Members are responsible for maintaining the confidentiality of their login credentials and should report any suspected unauthorised access to [email protected] immediately.

9. Your Privacy Rights

As a mykad88 member, you hold the following rights in respect of your personal data, subject to applicable law and any overriding regulatory obligations:

• Right of Access: You may request a copy of the personal data mykad88 holds about you.
• Right of Rectification: You may request correction of inaccurate or incomplete personal data. Basic profile updates (email, phone) can be made by contacting support.
• Right of Erasure: You may request deletion of your personal data where mykad88 no longer has a lawful basis for retaining it. Note that regulatory retention obligations (Section 7) may limit the scope of erasure requests.
• Right to Restrict Processing: You may request that mykad88 restrict processing of your data in specific circumstances, such as where you contest its accuracy or object to processing based on legitimate interests.
• Right to Data Portability: Where processing is based on consent or contract and is carried out by automated means, you may request your data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact mykad88 at [email protected] with your registered account details. We will respond within 30 days. Complex requests may take up to 90 days; we will notify you if an extension is required.

10. Children and Minors

The mykad88 Platform is strictly intended for individuals aged 21 years and over. mykad88 does not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from an individual below the minimum age, that data will be deleted and the associated account closed immediately. If you believe a minor has created a mykad88 account, please notify us immediately at [email protected].

11. Third-Party Links

The mykad88 Platform may contain references to game providers or payment services that operate under their own privacy policies. mykad88 is not responsible for the privacy practices of third-party operators. Where your data is passed to a third party for purposes described in Section 5, that party's processing is governed by their own policy and by contractual data processing agreements with mykad88. We encourage you to review the privacy practices of any third-party service you interact with.

12. Changes to This Policy

mykad88 reserves the right to update this Privacy Policy at any time. Where changes are material — for example, a change in the categories of data collected or a new purpose for processing — mykad88 will provide advance notice via the Platform or by email to your registered contact. The date of the most recent revision is shown at the top of this page. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy.

13. Contact Us

For all privacy-related queries, data subject requests, or complaints, please contact the mykad88 Privacy team:

mykad88 Privacy & Data Protection
Email: [email protected]
Subject line: "Privacy Request – [Your Registered Email]"
Response time: Within 30 days of receipt

If you are unsatisfied with mykad88's handling of a privacy concern, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. mykad88 will cooperate fully with any such investigation.