MT88 Privacy Policy

This Privacy Policy ("Policy") is issued by MT88 ("MT88", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at mt88.click and its associated mobile applications and subdomains.

This Policy describes the categories of personal data we collect from members and visitors ("you", "your"), the purposes for which that data is processed, the conditions under which it may be shared with third parties, and the rights you hold in relation to your personal data.

MT88 takes the privacy of its members seriously. We are committed to handling all personal data with the care, transparency, and security it deserves — and to maintaining clear communication with you about how that data is used throughout your membership with us.

This Policy applies to all personal data collected through the MT88 Platform, including data provided during account registration, KYC verification, financial transactions, customer support interactions, and general use of the Platform's features and services.

For the purposes of this Policy, the following terms carry the meanings set out below:

MT88 collects personal data across several categories, each tied to a specific operational purpose. The table below summarises the categories of data we collect and provides representative examples of each:

MT88 collects personal data through the following mechanisms:

The majority of personal data we hold about you is information that you provide directly, including:

• Data entered into the account registration form (name, date of birth, email, mobile number).
• KYC documents uploaded to your account in connection with identity and address verification.
• Information provided during live chat sessions, email correspondence, or support ticket submissions.
• Communication and marketing preferences updated through your account settings.

Certain technical and behavioural data is collected automatically when you access or use the MT88 Platform:

• Log Data: Our servers automatically record IP addresses, browser types, operating systems, pages visited, time and date of access, and session durations.
• Cookies and Similar Technologies: MT88 deploys cookies and local storage tokens for session management, security, and analytics. See Section 9 for full details.
• Device Fingerprinting: MT88 uses device fingerprinting as part of its fraud detection and responsible gambling framework — for example, to identify if multiple accounts are being operated from the same device.

In certain circumstances, MT88 may receive personal data about you from third parties, including:

• Payment Providers: Transaction confirmation data from Maybank2u, CIMB Clicks, DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay where relevant to processing deposits and withdrawals.
• Identity Verification Services: MT88 may use third-party KYC verification platforms to cross-check identity data against authoritative databases, subject to your consent where required.
• Fraud Detection Partners: Aggregated risk signals from fraud detection service providers, used solely to protect the integrity of our platform and the security of member accounts.

MT88 processes personal data for the following specific, documented purposes:

• Account Management: Creating, maintaining, and administering your MT88 member account, including authentication and account security.
• KYC and Identity Verification: Verifying your identity and age (21+) in accordance with our Terms & Conditions and responsible gambling obligations. KYC data is not repurposed for marketing or analytics.
• Transaction Processing: Processing MYR deposits and withdrawals via Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay, and maintaining associated financial records.
• Customer Support: Responding to your enquiries, complaints, and support requests via live chat and email. Support interaction records are retained to provide context for follow-up queries.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gambling: Monitoring behavioural indicators associated with problem gambling, managing self-exclusion requests and deposit limits, and fulfilling our duty of care obligations to members.
• Platform Improvement: Analysing aggregate, anonymised usage data to understand how members use the Platform and to inform product development and feature prioritisation decisions.
• Legal and Regulatory Compliance: Retaining records as required by applicable law, responding to lawful information requests from authorised regulatory or law enforcement bodies, and maintaining audit trails.
• Marketing Communications: Sending promotional emails, SMS, or in-app notifications about MT88 bonuses, new games, and platform updates — but only where you have opted in to receive such communications and only through the channels you have selected.

MT88 processes personal data only where a valid legal basis exists for doing so. The primary legal bases we rely on are as follows:

• Contractual Necessity: Processing that is necessary to perform our obligations under the member agreement — including operating your account, processing transactions, and providing gaming and betting services.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC obligations, financial record-keeping requirements, and responses to lawful regulatory requests.
• Legitimate Interests: Processing conducted in pursuit of MT88's legitimate business interests, where those interests are not overridden by your rights and freedoms. This includes fraud prevention, platform security, responsible gambling monitoring, and aggregate analytics.
• Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent — primarily for marketing communications. You may withdraw consent at any time without detriment to your account status.

Where MT88 relies on legitimate interests as the legal basis for processing, we conduct and document a balancing assessment to confirm that the interests pursued do not disproportionately impact your rights as a data subject.

MT88 does not sell or commercially trade your personal data. Data is shared with third parties only in the following circumstances and subject to strict contractual safeguards:

MT88 engages third-party service providers to support core platform operations. Each provider is bound by a data processing agreement that restricts their use of your data to the specific service they deliver. Categories of service providers include:

• Payment Processors: Financial institutions and payment gateway operators facilitating MYR deposits and withdrawals (e.g., DuitNow network participants, FPX operators, e-wallet platforms).
• KYC and Identity Verification Providers: Third-party platforms used to cross-reference identity documents and biometric data for age and identity verification purposes.
• Cloud Infrastructure Providers: Hosting and database service providers on whose infrastructure MT88's Platform operates. All infrastructure is secured with enterprise-grade encryption.
• Fraud Detection Services: Specialist providers that analyse technical and behavioural signals to detect and prevent fraudulent account activity.
• Customer Support Tools: Platforms supporting our live chat and email support operations. Support agents access only the data necessary to respond to your specific enquiry.

MT88 may disclose personal data to governmental authorities, law enforcement agencies, or regulatory bodies where required by applicable law, court order, or regulatory direction. MT88 will notify affected members of such disclosures to the extent permitted by law.

MT88 does not sell, rent, license, or commercially transfer personal data to third parties for advertising, data brokerage, or any other commercial purpose. This prohibition applies regardless of the form of consideration offered.

MT88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention guidelines apply:

• Active Account Data: Identity, contact, financial, and behavioural data is retained for the duration of active membership and for a period following account closure as required for legal and audit purposes.
• KYC Documents: Identity and address verification documents are retained for a minimum period of five (5) years following account closure, in line with standard financial record-keeping obligations applicable to online gaming platforms.
• Transaction Records: Financial transaction records, including deposit and withdrawal history in MYR, are retained for a minimum of five (5) years following the date of each transaction.
• Support Communications: Live chat transcripts and email correspondence are retained for a period of three (3) years following the relevant interaction, to support quality assurance and dispute resolution.
• Marketing Data: Opted-in marketing preferences and communication records are retained until you withdraw consent, at which point they are deleted or anonymised within 30 days.
• Technical Logs: Server access logs and device data are retained for up to 12 months from the date of collection, after which they are automatically purged or anonymised.

Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised such that it can no longer be attributed to any individual.

MT88 uses cookies and similar local storage technologies to ensure the Platform functions correctly, to maintain session security, and to understand aggregate usage patterns. We do not deploy third-party advertising trackers or retargeting pixels.

The cookies used on the MT88 Platform fall into the following categories:

• Essential Session Cookies: Required for the Platform to function. These cookies maintain your login state, preserve session security tokens, and enable core features such as the game lobby, account wallet, and bet slip. These cannot be disabled without breaking Platform functionality.
• Functional Preference Cookies: Store your Platform preferences, such as language selection, display settings, and responsible gambling tool configurations. These persist across sessions to reduce friction on returning visits.
• Analytics Performance Cookies: Collect aggregate, anonymised data about how members navigate and interact with the Platform — page load times, feature engagement rates, error frequencies. This data is used solely for Platform improvement and is not linked to individual identities.
• Security Fraud Detection Tokens: Short-lived tokens used to identify unusual session behaviour patterns consistent with automated account access or credential stuffing attacks. These are part of MT88's security infrastructure.

You may manage cookie preferences through your browser settings. Most modern browsers allow you to view, block, or delete cookies on a per-site basis. Please note that disabling essential cookies will impair or entirely prevent your use of the MT88 Platform. Instructions for managing cookies are available in the help documentation of your browser.

MT88 implements a multi-layered information security programme designed to protect personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• Transport Encryption: All data transmitted between your device and MT88's servers is encrypted using TLS 1.2 or higher with 256-bit key strength, enforced via HTTPS across the entire Platform.
• Storage Encryption: Sensitive personal data, including KYC documents and financial records, is encrypted at rest using AES-256 encryption on secure, access-controlled storage infrastructure.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Internal staff access is governed by role-based permissions, multi-factor authentication, and detailed audit logging.
• Two-Factor Authentication (2FA): MT88 offers 2FA for all member accounts and requires it for staff accessing internal data systems.
• Penetration Testing: MT88's platform and infrastructure undergo regular security assessments and penetration testing by qualified security professionals to identify and remediate vulnerabilities.
• Incident Response: MT88 maintains a documented data breach response plan. In the event of a security incident affecting member personal data, we will notify affected individuals and, where required, relevant authorities within applicable timeframes.

As a data subject, you hold the following rights in relation to the personal data MT88 holds about you. MT88 will respond to verified data subject requests within 30 calendar days of receipt.

To exercise any of the rights listed above, please contact MT88's support team via live chat or email at [email protected] with the subject line "Data Subject Request". Please include your registered account username and a clear description of the right you wish to exercise. MT88 may request additional information to verify your identity before processing the request.

MT88 is strictly an adult platform. Access is permitted only to individuals aged 21 and above. MT88 does not knowingly collect personal data from persons under the age of 21.

Our registration process includes a date-of-birth declaration and is backed by KYC identity verification to enforce the minimum age requirement. Device fingerprinting and behavioural analysis may also be used to identify patterns inconsistent with adult usage where age verification has not yet been completed.

If MT88 becomes aware that personal data has been collected from a person under the age of 21 — whether through a false declaration at registration or by any other means — the following steps will be taken without delay:

• The associated account will be suspended immediately pending investigation.
• All personal data collected from the minor will be securely deleted from our systems, except to the extent that retention is required for legal or regulatory purposes.
• Any deposits made by the underage member will be returned in full net of any withdrawals already processed. No winnings will be paid out.

If you have reason to believe that a person under the age of 21 has registered an MT88 account, please notify us immediately at [email protected] so that we may investigate and take appropriate action.

MT88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in applicable law, regulatory guidance, our operational practices, or the scope of services we offer.

Where amendments are material — meaning they substantively change how we collect, use, or share your personal data, or alter your rights as a data subject — MT88 will provide advance notice via email to your registered account address and by displaying a prominent notice on the Platform. The updated Policy will identify the revised effective date.

For non-material amendments (such as clarifications of existing practices, correction of typographical errors, or restructuring of the document for readability), the updated Policy will take effect upon publication without prior individual notice.

The current version of this Privacy Policy is always accessible at mt88.click/privacy-policy. We encourage you to review this page periodically to stay informed of how MT88 protects your data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way MT88 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly through the MT88 Platform. For privacy-related enquiries, please identify your query as a "Privacy" or "Data" matter at the start of the conversation.
• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Subject Request" so that your message is routed to the appropriate team. Responses are provided within 2 hours during operating hours (8:00 AM – 12:00 AM MYT) and within 1 business day for after-hours correspondence.

MT88's support team handles privacy enquiries in English, Bahasa Melayu, and Mandarin, in line with our commitment to serving the full breadth of Malaysia's membership community.

For formal data subject requests (access, erasure, rectification, portability, objection, or restriction), please refer to the process described in Section 11.1 of this Policy. MT88 will respond to all verified data subject requests within 30 calendar days.