We understand how important your privacy is. This document clearly explains how million88 collects, uses, stores, and protects your personal data — with no confusing fine print.
Welcome to the million88 Privacy Policy page. This document constitutes a binding agreement between you as a registered member (or visitor) and million88 as the operator of an online entertainment platform based in Malaysia. This policy applies to all services we offer through our official website, mobile app, and any of our official communication channels.
By using million88 services, registering an account, or simply browsing our website, you agree to the data collection and processing practices described in this document. If you do not agree with any part of this policy, we encourage you to contact our support team before continuing to use the platform.
Million88 is committed to complying with applicable data protection laws, including Malaysia's Personal Data Protection Act 2010 (PDPA). We appoint an internal Data Protection Officer responsible for ensuring all data processing practices meet the required legal standards.
Million88 only collects data that is strictly necessary to deliver quality, secure, and compliant services. We do not collect excessive or irrelevant data beyond the stated service purposes. The following are the categories of data we may collect:
| Data Category | Example Information | Primary Purpose |
|---|---|---|
| Identity Information | Full name, date of birth, IC/passport number | KYC verification & fraud prevention |
| Contact Information | Email address, phone number, mailing address | Account communications & customer support |
| Financial Data | Bank account number, e-wallet information, transaction records | Deposit & withdrawal processing |
| Technical Data | IP address, device type, web browser, operating system | Account security & fraud detection |
| Behavioural Data | Gaming activity, session duration, game preferences | Service enhancement & responsible gaming compliance |
| Communication Data | Live chat logs, support emails, feedback | Service quality improvement |
Your data is collected through several channels: registration forms, KYC processes, financial transactions, direct platform usage, and cookie technology as described in Section 6. In all cases, data collection is conducted transparently and you will be informed of the purpose at the time of collection.
Every piece of data we collect has a clear and legitimate purpose. million88 does not process your data arbitrarily — every processing action is supported by a solid legal basis, whether based on consent, contractual necessity, legal obligation, or legitimate interests carefully balanced against your privacy rights.
Million88 does not sell, rent, or disclose your personal data to third parties for marketing or commercial purposes. However, in the course of lawfully operating the platform, there are limited situations where data may be shared with certain parties:
All third parties we work with are subject to strict data processing agreements. They are only permitted to use your data for specified purposes and may not process it for their own ends. We conduct regular security audits on all our third-party partners.
Protecting your personal data is our top technical and organisational priority. million88 continuously invests in industry-grade security infrastructure to ensure your data remains protected against evolving threats.
While we take all reasonable steps to protect your data, no system can guarantee absolute security. You also play an important role by keeping your account password confidential and enabling two-factor authentication (2FA) available within your account.
Million88 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how our platform is used. The following are the types of cookies we use:
You can manage your cookie settings through your web browser at any time. Most browsers allow you to view, delete, and block cookies. Please note that disabling certain cookies may affect the functionality and user experience of our platform.
We do not use third-party cookies for advertising or external marketing. All cookies we use are solely to enhance your experience directly within the million88 platform.
As a data subject, you have certain rights regarding the personal data we hold about you. million88 is committed to respecting and facilitating the exercise of these rights within a reasonable timeframe:
You have the right to request a copy of the personal data we hold about you. We will respond within 14 business days.
If your data is inaccurate or outdated, you have the right to request a correction. Profile updates can be made directly within your account.
You may request deletion of your data under certain circumstances, subject to applicable legal retention obligations.
You may object to the processing of your data for direct marketing purposes at any time, and we will honour that request immediately.
You have the right to receive your data in a structured, machine-readable format for transfer to another service provider of your choice.
Under certain circumstances, you may request that we temporarily restrict the processing of your data while a dispute or enquiry is being resolved.
Million88 does not retain your personal data longer than necessary for the stated purposes or as required by law. Retention periods are determined based on service requirements, legal obligations, and justifiable legitimate interests.
| Data Type | Retention Period | Reason |
|---|---|---|
| Active account data | Throughout the active account period | Service operational requirements |
| Financial transaction records | 7 years after transaction | Tax & AML legal obligations |
| KYC Documents | 5 years after account closure | Anti-money laundering compliance requirements |
| Support communication logs | 3 years after last interaction | Complaint management & transaction history reference |
| Cookie & session data | 30 days to 1 year | Depends on cookie type |
| Security logs | 2 years | Security incident investigation |
Once the retention period expires, your data will be securely deleted or anonymised using methods that ensure it cannot be recovered. Anonymised data may be retained in aggregate form for statistical purposes without being attributable to any specific individual.
Million88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or improvements in how we protect your information. Any changes made are to ensure this policy remains accurate, relevant, and reflective of our latest commitments.
When significant changes are made to this policy, we will take the following steps to ensure you are informed:
Your continued use of the million88 platform after any policy changes take effect will be considered your acceptance of the updated policy. We encourage you to review this page periodically, at least once every three months, to stay informed about how we handle your data.
If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, our team is ready to assist. We take every privacy enquiry seriously and are committed to providing accurate and helpful responses.
When contacting us regarding privacy, please clearly state: your account username or registered email, the type of enquiry or right you wish to exercise, and any relevant background information. This will help us process your request more quickly and accurately.
Six core pillars that ensure your personal data is protected at all times
Every piece of information you enter — from passwords to bank account numbers — is encrypted using the same 256-bit SSL applied by major financial institutions. No one can read your data in transit.
Our identity verification process uses integrated KYC technology to ensure your identity is confirmed swiftly and sensitive documents are stored in a fully encrypted environment.
Our commitment is absolute — your personal data has never been and will never be sold, rented, or shared with third-party advertisers or data brokers for any commercial purpose.
Our automated security systems monitor all platform activity around the clock, detecting suspicious patterns and blocking threats before they can impact your account.
You can access, amend, download, or request deletion of your data at any time. We provide easy-to-use tools within your account to manage your privacy preferences without any hassle.
Our operations are designed to fully comply with Malaysia's Personal Data Protection Act 2010. Our internal Data Protection Officer ensures all processes remain within the bounds of the law.