Privacy Policy

md888 (hereinafter referred to as "md888", "the Company", "we", "us", or "our") operates the online gaming platform accessible at https://md888.lat (the "Platform"). This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.

md888 is committed to protecting the privacy and security of all registered players and website visitors. This policy is drafted in compliance with internationally recognised data protection principles and, where applicable, with the spirit of Malaysia's Personal Data Protection Act 2010 (PDPA) and equivalent frameworks in other jurisdictions from which our Platform is accessed.

This Privacy Policy applies to all personal data processed in connection with your use of the md888 Platform, including data collected during account registration, financial transactions, customer support interactions, and general browsing of the website. It should be read in conjunction with our Terms & Conditions.

By registering an account on md888 or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, email address, date of birth, payment details, and IP address.
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, erasure, or destruction, whether by automated means or otherwise.
• "Data Controller" — md888, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" — any third party that processes Personal Data on behalf of md888 under a contractual data processing agreement.
• "Data Subject" — the individual to whom the Personal Data relates; in the context of md888, this refers to a registered player or Platform visitor.
• "Cookies" — small text files stored on your device by a web browser that allow the Platform to recognise your device and preferences across sessions.
• "KYC" — Know Your Customer; the identity and age verification process conducted by md888 in compliance with anti-money laundering and licensing obligations.

md888 collects the following categories of personal data in connection with the operation of the Platform:

md888 collects personal data through the following channels:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the Platform, including IP address, device identifiers, browser information, and session activity, via cookies and similar tracking technologies.
• Third-party sources: Identity verification data received from our KYC service providers; fraud risk data from our fraud prevention partners; payment data from payment processors including FPX, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and others.
• Publicly available sources: Where permitted, data from publicly accessible databases may be used to verify identity information or to comply with AML obligations.

md888 processes personal data for the following specified, explicit, and legitimate purposes:

• Account management: Creating, maintaining, and administering your player account, including password resets, account updates, and security alerts.
• Identity and age verification (KYC): Verifying that all players are aged 21 or above and confirming identity prior to processing withdrawal requests, in compliance with our licensing obligations and applicable anti-money laundering regulations.
• Payment processing: Facilitating deposits and withdrawals via Malaysian payment channels including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency networks.
• Customer support: Responding to queries, complaints, and support requests submitted via Live Chat, WhatsApp, or email — available in English, Bahasa Melayu, and Mandarin Chinese.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, multi-accounting, bonus abuse, and unauthorised access to player accounts.
• Responsible gambling compliance: Monitoring gaming patterns to identify potential problem gambling behaviours and applying responsible gambling interventions where appropriate, including self-exclusion, deposit limits, and loss limits.
• Legal and regulatory compliance: Meeting obligations under applicable anti-money laundering laws, counter-terrorism financing requirements, and our international gaming licence conditions.
• Platform improvement: Analysing aggregated usage data to improve the Platform's features, performance, and user experience.
• Marketing communications: Sending promotional offers, bonus notifications, and relevant product updates — only where you have provided explicit consent and only via the channels you have opted into.

md888 relies on the following legal bases for processing your personal data, consistent with internationally recognised data protection frameworks:

• Contractual necessity: Processing required to perform our contractual obligations to you as a registered player, including account management, game provision, and payment processing.
• Legal obligation: Processing necessary to comply with applicable laws, including KYC identity verification requirements, AML reporting obligations, and gaming licence conditions.
• Legitimate interests: Processing carried out in the legitimate interests of md888 or third parties, including fraud prevention, platform security, and responsible gambling monitoring — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for which you have provided specific, informed, and freely given consent — principally for marketing communications. You may withdraw consent at any time by contacting Support or updating your account preferences.

md888 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Personal data may be shared with the following categories of third parties solely for the purposes described in this Policy:

• Payment processors and financial institutions: Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX network participants (Maybank, CIMB, Public Bank, Hong Leong Bank, RHB), and cryptocurrency infrastructure providers — strictly for processing deposits and withdrawals.
• KYC and identity verification providers: Third-party identity verification service providers engaged to verify player identity, age, and address as part of our KYC compliance obligations.
• Fraud prevention and AML compliance services: Service providers that help md888 detect fraudulent activity, comply with anti-money laundering obligations, and maintain gaming integrity.
• Cloud infrastructure and hosting providers: Technology service providers that host the Platform and store data in secure, access-controlled environments under binding data processing agreements.
• Customer support technology providers: Platforms enabling our Live Chat, email, and messaging support channels, bound by data processing agreements that restrict the use of player data.
• Regulatory and law enforcement authorities: Where md888 is legally required to disclose personal data to a regulatory authority, law enforcement body, or court of competent jurisdiction, we will comply with such requests and, where legally permitted, notify you of any such disclosure.

All third-party data processors engaged by md888 are contractually bound to process personal data only in accordance with our instructions, to implement appropriate technical and organisational security measures, and not to use player data for any purpose beyond what is strictly necessary to fulfil their service obligations.

As md888 operates an international platform, your personal data may be transferred to and stored on servers located outside of Malaysia. Where such transfers occur, md888 ensures that appropriate safeguards are in place to protect your data, including binding contractual clauses and data processing agreements with all recipient entities that impose data protection obligations equivalent to those applied within Malaysia.

md888 will not transfer your personal data to any jurisdiction that does not provide an adequate level of data protection without first implementing appropriate contractual or technical safeguards to compensate for any identified shortfall in protection.

md888 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account's active existence on the Platform.
• Financial transaction records: Retained for a minimum of seven (7) years following the date of the transaction, in compliance with anti-money laundering record-keeping requirements.
• KYC verification documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant business relationship, in accordance with AML obligations.
• Customer support records: Retained for a period of three (3) years following the closure of the relevant support interaction, to support dispute resolution and quality assurance.
• Marketing consent records: Retained for the period of your consent and for a reasonable period thereafter to demonstrate compliance in the event of a complaint.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in manner that prevents reconstruction of identifiable information.

md888 uses cookies and similar tracking technologies to enhance your experience on the Platform, to maintain session continuity, and to collect analytical data about Platform usage. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function correctly, including session management and security cookies. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Allow the Platform to remember your preferences, such as language settings and login status, across sessions.
• Analytical cookies: Used to collect aggregated, anonymised data about how visitors use the Platform, enabling us to improve performance and user experience. No individually identifiable data is shared externally from analytical cookies.
• Fraud prevention cookies: Support our fraud detection systems by identifying unusual patterns of Platform access that may indicate account compromise or multi-accounting.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform, including your ability to log in or access certain game categories.

As a data subject, you have the following rights with respect to the personal data md888 holds about you. To exercise any of these rights, please contact our support team via Live Chat or email at [email protected]. We will respond to all valid requests within 30 days of receipt.

The md888 Platform is strictly intended for individuals aged21 years and above. md888 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21 — whether as a result of false representation during registration or any other means — we will immediately close the relevant account, void any associated transactions, and securely delete all personal data associated with that account.

If you are a parent or guardian and believe that your child has registered an account on md888, please contact our support team immediately via Live Chat or at [email protected] so that we may take appropriate action without delay.

md888 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the md888 Platform;
• Encrypted storage of sensitive personal data and payment information at rest;
• Role-based access controls restricting internal access to personal data on a strict need-to-know basis;
• Regular security audits and penetration testing conducted by qualified third-party security professionals;
• Multi-factor authentication options available to registered players for enhanced account protection;
• Real-time fraud monitoring systems that detect and flag unusual account activity for review.

Notwithstanding these measures, no data transmission over the internet or electronic storage system is entirely secure. md888 cannot guarantee absolute security but commits to maintaining industry-standard protections and to notifying affected players promptly in the event of a data breach that poses a material risk to their rights and interests.

The md888 Platform does not include links to external third-party websites or services beyond those required for payment processing and customer support. However, payment gateways accessed during deposit or withdrawal processes — including but not limited to Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX — are operated by their respective providers and are subject to their own privacy policies and terms of service.

md888 is not responsible for the privacy practices, content, or data handling policies of any third-party payment provider or service. We encourage you to review the privacy policy of any third-party service before providing them with personal information.

md888 reserves the right to update or amend this Privacy Policy at any time. Where amendments are material in nature — such as changes to the categories of data collected, the purposes of processing, or your rights as a data subject — md888 will notify registered players via the email address associated with their account at least seven (7) days prior to the changes taking effect.

Non-material amendments, including clarifications, typographical corrections, or updates required to reflect changes in applicable law, may be made without advance notice and will take effect immediately upon publication on the Platform. The date at the top of this Policy will be updated to reflect the most recent revision.

Your continued use of the md888 Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the amended policy, you should close your account by contacting Support.

If you have any questions, requests, or concerns regarding this Privacy Policy or the way in which md888 processes your personal data, please contact using the following channels:

• Live Chat: Available 24/7 on the md888 Platform — average first-response time 3–5 minutes. Available in English, Bahasa Melayu, and Mandarin Chinese.
• Email: [email protected] — please allow up to 24 hours for email responses.

If you believe that md888 has not handled your personal data in accordance with this Privacy Policy or applicable data protection law, you have the right to escalate your complaint to the relevant supervisory authority or data protection regulator in your jurisdiction.