Privacy Policy

myr888 ("we", "us", "our", "the Platform") operates the online casino and sports betting platform accessible at myr888.cam. We take the privacy of our users seriously. This Privacy Policy describes how myr888 collects, processes, stores, and protects personal data provided to us or generated through your use of our services.

This Policy applies to all individuals who register an account, access the Platform, or otherwise interact with myr888's services — including players based in Malaysia and other eligible jurisdictions. It is to be read alongside our Terms & Conditions and Responsible Gambling Policy, which together form the full agreement governing your relationship with myr888.

We are committed to handling personal data in a responsible, transparent, and lawful manner consistent with applicable data protection principles. We collect only the data that is necessary, hold it for only as long as required, and maintain appropriate safeguards throughout.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial account information, and online identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, transmission, deletion, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, myr888.
• "Data Processor" means a third party that processes personal data on behalf of myr888 under a contractual obligation and in accordance with our instructions.
• "User" / "Player" means any natural person who has created or uses a registered account on the myr888 Platform.
• "KYC Data" means identity and address verification documents and information collected as part of the Know Your Customer compliance process.
• "Cookies" means small text files stored on your device by the Platform to facilitate functionality, analytics, and user experience improvements.

myr888 acts as the Data Controller for all personal data collected through the Platform. As Data Controller, myr888 is responsible for ensuring that your personal data is processed lawfully, fairly, and transparently.

Any enquiries relating to the processing of your personal data — including requests to exercise your rights as described in Section 11 of this Policy — should be directed to our dedicated data privacy contact. Details are provided in Section 15 (Contact Us).

myr888 collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the Platform, and from third-party verification and payment service providers.

4.1 Data Provided Directly by You

4.2 Data Collected Automatically

When you access or use the myr888 Platform, we automatically collect certain technical and behavioural data, including:

• IP address and approximate geographic location (city/region level)
• Device type, operating system, and browser type and version
• Session timestamps and duration
• Pages viewed, features accessed, and navigation patterns within the Platform
• Game activity logs including bets placed, game titles, and wagering history
• Cookie identifiers and similar tracking technologies (see Section 10)

4.3 Data from Third Parties

We may receive personal data about you from third-party providers engaged to support Platform operations, including: identity verification services that cross-check submitted KYC documents; payment processors that confirm transaction status for deposits and withdrawals via Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, or cryptocurrency networks; and fraud detection and anti-money laundering (AML) screening services.

myr888 processes your personal data for the following defined and documented purposes:

• Account Management: Creating, maintaining, and securing your myr888 account; enabling login and account authentication.
• Service Delivery: Processing deposits and withdrawals through local Malaysian payment channels and cryptocurrency networks; awarding bonuses; providing access to games and betting markets.
• Regulatory Compliance: Conducting KYC and identity verification as required by applicable AML and gaming regulations; maintaining transaction records for audit and compliance purposes.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, account takeover, money laundering, and underage gambling; ensuring platform integrity.
• Customer Support: Responding to enquiries, resolving disputes, and providing assistance via live chat and email.
• Responsible Gambling: Administering self-exclusion requests, deposit limits, and other responsible gambling controls at your request or as required by our policies.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve game offerings, payment flows, and overall user experience.
• Marketing Communications: Sending promotional offers, bonus notifications, and relevant platform updates to Players who have opted in to receive marketing communications. You may opt out at any time.
• Legal Obligations: Complying with applicable law, court orders, or lawful requests from regulatory authorities.

myr888 processes personal data on one or more of the following legal bases:

myr888 does not sell, rent, or trade your personal data to any third party for their independent marketing or commercial purposes. We disclose personal data only in the following circumstances:

• Service Providers & Data Processors: We share data with carefully selected third-party service providers who process data on our behalf under binding contracts — including payment processors (handling MYR bank transfers, e-wallet transactions, and cryptocurrency payments), KYC verification partners, customer support platform providers, and cloud hosting infrastructure providers. These processors are contractually prohibited from using your data for any purpose beyond delivering their specific service to myr888.
• Regulatory & Legal Authorities: We may disclose personal data to government authorities, law enforcement, regulatory bodies, or courts where required to do so by applicable law, court order, or regulatory directive. myr888 will notify affected users of such disclosures where legally permitted to do so.
• Fraud & AML Prevention Networks: We participate in industry-standard fraud prevention and anti-money laundering information-sharing frameworks. Personal data may be shared with such networks for the purpose of detecting fraudulent accounts or financial crime.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of myr888's assets, personal data held by myr888 may be transferred to the acquiring entity. Affected users will be notified in advance where practicable, and this Privacy Policy will continue to govern their data.

myr888 retains personal data for only as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Retention periods are determined with reference to the nature of the data, the purpose of processing, and applicable statutory requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised and aggregated data may be retained indefinitely for statistical and analytical purposes.

myr888 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption in Transit: All communications between your device and myr888 servers are encrypted using TLS (Transport Layer Security) protocol. Verify the padlock icon and HTTPS prefix in your browser address bar when using the Platform.
• Encryption at Rest: Sensitive personal data stored on our servers is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within myr888 is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and audited.
• Two-Factor Authentication (2FA): myr888 supports 2FA for player accounts and mandates 2FA for all internal staff access to systems holding personal data.
• Penetration Testing & Security Audits: Regular security assessments and vulnerability testing are conducted by qualified third-party specialists.
• Incident Response: myr888 maintains a documented data breach response procedure. In the event of a confirmed breach affecting your personal data, we will notify affected individuals and relevant authorities in accordance with our legal obligations.

myr888 uses cookies and similar tracking technologies to operate the Platform, enhance your experience, and collect analytics data. The following categories of cookies are in use:

Strictly necessary cookies are deployed automatically as they are essential to the functioning of the Platform. Optional and consent-based cookies are only activated following your explicit agreement through our cookie preference interface. You may withdraw consent or adjust cookie settings at any time through your account preferences.

Please note that disabling functional or analytics cookies may affect certain features of the Platform, such as personalisation settings and session continuity.

Subject to applicable law, you hold the following rights in respect of your personal data processed by myr888. These rights may be exercised by contacting our support team as described in Section 15.

Requests to exercise any of the above rights will be acknowledged within 5 business days and resolved within 30 calendar days of receipt. Where a request is complex or voluminous, we may extend this period by a further 30 days with prior notification. myr888 will not charge a fee for processing data rights requests unless they are manifestly unfounded or excessive.

myr888 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes age declaration and our KYC process includes age verification against submitted identity documents.

If myr888 discovers that personal data has been collected from an individual under the age of 21, that account will be immediately suspended and all associated data will be deleted in accordance with our data retention policy. Any funds deposited by an underage user will be held pending investigation and returned to the originating payment method where feasible.

myr888 may process and store personal data on servers and infrastructure located outside of Malaysia. Where personal data is transferred internationally, we ensure that adequate safeguards are in place to protect the data in a manner consistent with the standards set out in this Privacy Policy.

Such safeguards include contractual clauses (equivalent to standard contractual clauses used in international data protection frameworks) with all third-party processors operating outside the primary jurisdiction, and ensuring that data recipients maintain security standards at least equivalent to those applied by myr888.

Where third-party processors are located in jurisdictions with data protection frameworks recognised as providing adequate protection, transfers are made in reliance on that adequacy determination. Where no such recognition exists, myr888 relies on appropriate contractual mechanisms.

myr888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. The "Last updated" date at the top of this page indicates when the most recent revision was made.

Material changes — those that significantly alter the scope of data collection, the purposes of processing, or your rights — will be communicated to registered Players via email to the address on file and/or through a prominent notice on the Platform at least 14 days prior to the change taking effect.

Non-material changes (such as typographical corrections or minor clarifications that do not alter substantive rights or obligations) may be published without advance notification. Your continued use of the Platform following the publication of any update constitutes your acceptance of the revised Privacy Policy. If you do not accept the changes, you must stop using the Platform and request account closure.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by myr888, please contact our team through the following channels. All privacy-related enquiries are handled by our designated data privacy contact.

If you are not satisfied with how myr888 has handled your privacy enquiry or data rights request, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction. In Malaysia, the personal data protection regulatory framework is administered under the Personal Data Protection Act 2010 (PDPA).