Official Data Protection Documents

M888 Privacy Policy – Our Commitment to Protecting the Personal Data of Malaysian Players

Your privacy is more than a legal obligation to m888 — it is a moral responsibility we take seriously. This document transparently explains how we collect, use, store, and protect your personal information when you use the m888 platform. Please read it carefully.

Last Updated: 1 January 2026 · Language: Malay (ms-MY) · Version 3.2
m888 Privacy Policy Summary
Your data is protected with 256-bit SSL encryption
We do not sell your data to third parties
You have the right to access, correct & delete your data
Financial information is not stored on m888 servers
Personal Data Protection Act 2010 (PDPA) Compliance
Two-factor authentication (2FA) is available for all accounts

M888's Data Protection Standards

The security standards we uphold to protect Malaysian players' data

Data Encryption 256-bit SSL
Data Access Controls Strictly Enforced
Malaysia PDPA Compliance Full
Data Complaint Response Time < 24 Hours
256
bit SSL
0
Data Sold
24/7
Monitoring
100%
PDPA Compliance

Six Pillars of Privacy Protection at m888

How we keep your personal data secure at all times

🔐
End-to-End Encryption

All data transmitted between your device and m888's servers is protected by 256-bit SSL encryption — the same standard used by leading Malaysian banking institutions such as Maybank and CIMB.

🏦
Financial Data Not Stored

M888 does not store your bank account numbers, card details, or PINs on our servers. All transactions via Touch 'n Go, GrabPay, DuitNow, and FPX are processed directly by the respective payment gateway providers.

👁️
Strict Data Access Controls

Access to player personal data at m888 is restricted to staff who require it to perform their duties. All data access is logged and regularly audited.

📋
Malaysia PDPA Compliance

M888 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and all related regulations. We also align our practices with the latest international data protection standards.

🔔
Prompt Data Breach Notification

In the event of a data breach affecting your information, m888 is committed to notifying you within 72 hours via your registered email and a notice on our platform.

🛡️
Continuous Threat Monitoring

M888's security systems monitor for cyber threats and unauthorised access attempts around the clock, 24/7. Any suspicious activity is automatically detected and blocked.

ℹ️
Section 1

Introduction – Why This Privacy Policy Matters

M888 is an online sports betting and casino platform operating to serve the needs of Malaysian players. In the context of a digital service like m888, the collection and processing of personal data is an unavoidable operational necessity. Even so, we believe that player trust is our most valuable asset — and that trust begins with transparency about how we handle your data.

This Privacy Policy outlines m888's data handling practices, including the types of data we collect, why we need it, who can access it, how long we retain it, and your rights as the data owner. This document forms part of your agreement with m888 and should be read alongside Terms & Conditions us.

M888 is fully compliant with Personal Data Protection Act 2010 (PDPA) Malaysia. This Act requires all organisations that process the personal data of individuals in Malaysia to do so lawfully, fairly, and transparently. We take this responsibility seriously and continually work to improve our privacy practices in line with the latest legal and technological developments.

Important: By registering an m888 account or continuing to use our platform after the effective date of this policy update, you are deemed to have read, understood, and agreed to this Privacy Policy. If you disagree with any part of this policy, please contact us before continuing to use the platform.


📂
Section 2

Personal Data Collected by m888

M888 collects various types of personal data depending on how you interact with our platform. Below are the data categories we collect along with their primary purposes:

Data Category Data Type Collection Method
Personal Identity Full name, identity card number, date of birth, gender Registration forms, KYC process
Contact Information Email address, Malaysian phone number, residential address Account registration, profile updates
Account Data Username, password (stored in hashed form), login history Platform usage
Transaction Data Deposit history, withdrawals, bets, and winnings in MYR Financial activity on the platform
Technical Data IP address, device type, web browser, operating system, approximate location Automated system logs
Behavioural Data Games played, session duration, betting preferences Platform analytics

🔒 Sensitive Financial Data: m888 not store your full bank account number, credit/debit card number, or PIN on any of our servers. All sensitive payment information is processed directly through licensed and regulated third-party payment gateways, including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX.


⚙️
Section 3

How We Use Your Personal Data

M888 uses your personal data solely for legitimate, stated purposes. We will not process your data for any unrelated purpose without your prior consent.

  • Account Management: To create and manage your m888 account, process logins, and ensure account security.
  • Transaction Processing: To process deposits and withdrawals in MYR via your preferred Malaysian payment method.
  • KYC & AML Compliance: To fulfil the Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements mandated under Malaysian law.
  • Customer Support: To enable the m888 support team to assist you in resolving issues effectively.
  • Platform Improvements: Anonymised behavioural data is used to improve the user experience, platform performance, and game selection.
  • Marketing Communications: With your consent, to send you relevant m888 promotional information, bonuses, and exclusive offers.
  • Fraud Detection: To identify and prevent fraudulent activity, bonus abuse, and other security threats.
  • Legal Compliance: To comply with applicable Malaysian legal requirements, including PDPA 2010 and relevant financial regulations.

🔗
Section 4

Data Sharing – Who Can Access Your Information

M888 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. However, there are limited circumstances in which data sharing may occur:

  • Service Providers: m888 shares data only on a need-to-know basis with trusted service providers that support our platform operations, including payment gateway providers (Touch 'n Go, GrabPay, DuitNow, FPX), game software providers, and cloud infrastructure services. All such providers are bound by strict data protection agreements.
  • Legal Authorities: m888 may disclose your personal data to Malaysian authorities where required by law, court order, or a valid official investigation.
  • Audit & Compliance: Independent auditors conducting RNG or compliance audits may access limited, anonymised data strictly for verification purposes.
  • Business Transfer: In the event of an ownership transfer or business merger involving m888, user data may be transferred as part of the business assets, subject to prior notice being given to users.

Our Commitment: We do not share your data with third-party advertisers, commercial analytics firms, or any entity that would use it for purposes unrelated to the m888 services you use.


🔒
Section 5

M888's Technical & Organisational Security Measures

M888 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

  • 256-bit SSL Encryption: All communications between your device and the m888 platform are encrypted using 256-bit TLS/SSL — the same standard used by Malaysia's leading banks, including Maybank and CIMB.
  • Hashed Passwords: Your m888 account password is never stored in plain text. Instead, it is stored as a one-way hash value using strong cryptographic algorithms.
  • Two-Factor Authentication (2FA): m888 offers 2FA for all accounts and strongly encourages its use as an additional layer of security.
  • Firewall & Intrusion Detection System: m888's infrastructure is protected by multi-layered firewalls and an intrusion detection system (IDS) that continuously monitors network traffic.
  • Regular Security Audits: m888 conducts regular independent penetration testing and comprehensive security audits.
  • Staff Training: All m888 staff who handle personal data receive comprehensive data protection training and are bound by confidentiality agreements.

That said, no digital security system can be guaranteed to be 100% secure. You also play an important role in protecting your account — always use a strong, unique password, enable 2FA, never share your login credentials, and ensure that the device you use to access m888 is secure and up to date.


⏱️
Section 6

Data Retention & Deletion

M888 retains your personal data only for as long as necessary to fulfil the purposes outlined in this policy or to comply with applicable legal obligations. Retention periods vary by data type:

  • Active Account Data: Retained for the lifetime of your account and for 7 years after account closure for AML and tax compliance purposes.
  • Financial Transaction Data: Transaction records in MYR (deposits, withdrawals, bets) are retained for 7 years in accordance with Malaysian banking and financial regulations.
  • Communication Logs: Customer support communication records are retained for 3 years.
  • Technical Data (IP Logs): Technical logs for security purposes are retained for 12 months.
  • Marketing Data: Data held for marketing communications purposes is retained until you withdraw your consent.

Once the retention period has lapsed, or upon a valid data deletion request, m888 will securely delete or anonymise the data using methods that ensure it cannot be recovered.


⚖️
Section 7

Your Rights Under Malaysia's PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data held by m888. m888 is committed to respecting and facilitating the exercise of these rights:

👁️
Right of Access

You have the right to request a copy of the personal data we hold about you. We will fulfil such requests within 21 days.

✏️
Right to Rectification

If your data is inaccurate or outdated, you may request a correction via your account settings or by contacting m888 support.

🗑️
Right to Erasure

You may request the deletion of your data, subject to legal data retention obligations applicable to financial services.

🚫
Right to Object to Processing

You may object to the processing of your data for direct marketing purposes at any time by contacting us or using the unsubscribe link.

📦
Data Portability

You may request your data in a structured, machine-readable format for transfer to another platform where applicable.

✋
Right to Withdraw Consent

You may withdraw your consent to data processing at any time, without affecting the validity of any processing carried out prior to withdrawal.

How to Submit a Data Rights Request: Submit your request via email to support@m888-vip.com with the subject line "PDPA Data Rights Request". Include your full name, m888 account number, and a description of your request. m888 will acknowledge receipt within 3 business days and fulfil the request within 21 business days.


🍪
Section 8

Cookies, Tracking Pixels & Similar Technologies

The m888 platform uses cookies and similar tracking technologies to enhance your experience, maintain platform security, and understand how players interact with our website. The types of cookies we use are as follows:

You can manage your cookie settings through your web browser preferences. However, disabling certain cookies may affect the functionality and user experience of the m888 platform. Note: m888 does not use third-party cookies for advertising purposes.


👶
Section 9

Children's Privacy – Protection of Underage Players

M888 strictly prohibits anyone under the age of 18 from registering or using our platform. The protection of children and minors is an absolute priority we do not compromise on.

M888 does not knowingly collect or process personal data of individuals under the age of 18. If we discover or suspect that a user is underage, we will immediately block their access, close the account in question, and delete all associated data.

If You Discover a Minor Using m888: Please contact our support team immediately at support@m888-vip.com with the relevant details. We will take prompt and thorough action. Parents and guardians are also advised to enable parental control software on devices accessible to children.


📝
Section 10

Privacy Policy Amendments & Change Notice

M888 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or relevant technological developments. Whenever we make material changes to this policy, we will:

  1. Updating the "Last Updated" date at the top of this document.
  2. Sending notice to your registered email address at least 14 days before the changes take effect.
  3. A clear notice of upcoming changes will be displayed on the m888 platform homepage.
  4. Providing a summary of key changes for your convenience.

Continued use of the m888 platform after a change takes effect will be considered acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account and request deletion of your data before they come into effect.


✉️
Section 11

Contact Us – m888 Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or the processing of your personal data by m888, please do not hesitate to reach out to us. m888's Data Protection Team is here to help:

  • Email (General): support@m888-vip.com
  • Email (Privacy Enquiries): privacy@m888-vip.com
  • Live Chat: Available on the m888 platform, 24/7
  • Response Time: Within 3 business days for acknowledgement; 21 business days for resolution

If you are unsatisfied with our response to your privacy complaint, you have the right to escalate the matter to the Malaysian Communications and Multimedia Commission (MCMC) or the Department of Personal Data Protection under the Ministry of Communications Malaysia as the relevant regulatory body.

Related Documents

For a full overview of how m888 operates, please also read Terms & Conditions and the Responsible Gambling us. Have more questions? Check out the FAQs us or contact our 24/7 support.

Your Data Is Safe with m888 – Register with Confidence

We understand that your trust cannot be bought — it must be earned through action and transparency. Join over 500,000 Malaysian players who have entrusted m888 with their privacy and data security.

256-bit SSL · Full PDPA Compliance · 24/7 Privacy Support

Bahasa Melayu