Important Notice
This Privacy Policy forms part of the agreement between you ("Member") and md888 ("Platform"). By registering for or using any md888 service, you confirm that you have read and agreed to all terms stated herein. This Policy should be read together with Terms & Conditions and Responsible Gaming Policy us.

1. Information We Collect

Md888 collects the personal information necessary to provide a safe, lawful, and quality service to every member. We only collect information that is strictly required and nothing more. Generally, the information we collect falls into three main categories.

1.1 Information You Provide Directly

When you register an account or interact with the md888 platform, we collect the following information:

  • Identity information: Full name as per ID card, date of birth, gender, and ID card number (for KYC verification purposes)
  • Contact information: Email address, mobile number, and residential address
  • Account information: Username, password (stored in encrypted hash form), and security questions
  • Financial information: Bank account details, e-wallet numbers, and deposit and withdrawal transaction records
  • Verification documents: A copy of MyKad, passport, utility bill, or other documents required for KYC verification

1.2 Information Collected Automatically

When you browse or use the md888 platform, our systems automatically record the following technical information for security and service improvement purposes:

  • Your IP address and ISP information
  • Device type, operating system, and browser version
  • Pages visited, time spent, and navigation patterns within the platform
  • Game transaction logs including date, time, game type, and wagering amount
  • Approximate geolocation data based on IP address (not GPS)

1.3 Information From Trusted Third Parties

In certain cases, md888 may receive information from trusted partners, including third-party identity verification providers, licensed payment processors, and fraud prevention agencies. All such information is used solely to verify your identity and protect your account from unauthorised access.

2. How We Use Your Information

Md888 uses collected data solely for legitimate and transparent purposes. We do not use your data for any purpose not stated in this policy. The following are the primary purposes for which your personal data is used:

Purpose of Use Legal Basis Retention Period
Registration & account verification Contractual agreement Throughout the active account period
Payment processing Contractual agreement 7 years (tax compliance)
KYC & AML verification Legal obligation 5 years after account closure
Customer Support Legitimate interest 3 years
Product & platform improvements Legitimate interest 2 years (anonymised data)
Marketing communications (with consent) Your consent Until you unsubscribe
Fraud detection & security Legitimate interest 5 years
Regarding Marketing Communications
You may withdraw consent to receive marketing communications at any time via your account settings or by contacting md888 customer support. Withdrawing consent does not affect the validity of any processing carried out prior to withdrawal.

3. Data Sharing & Disclosure

Md888 understands the importance of keeping your information confidential. We do not sell or rent your personal data to any third party. However, there are limited situations where we may need to share certain information with other parties for operational and security purposes.

3.1 Third-Party Service Providers

Md888 works with selected service providers who assist us in our day-to-day operations. These providers are granted access only to the data necessary to perform their duties and are bound by strict confidentiality agreements:

  • Payment processors: To facilitate safe deposit and withdrawal transactions
  • KYC providers: To verify member identity in compliance with legal requirements
  • Game providers: Gaming software companies that supply content to the md888 platform
  • Cloud computing services: For secure data storage and processing
  • Fraud prevention agencies: To identify and prevent fraudulent activity

3.2 Disclosure Under Legal Requirements

Md888 may be required by law or court order to disclose certain information to the relevant authorities. This includes criminal investigations, anti-money laundering (AML) regulatory compliance, and directives from legitimate regulatory bodies. In such situations, md888 will disclose only the minimum information necessary.

Our Guarantee
md888 has never disclosed members' personal data to third parties for advertising, third-party marketing, or any commercial purpose without first obtaining your explicit consent. This is an absolute commitment we have never compromised.

4. Data Security & Technical Protection

Member data security is md888's highest priority. We continuously invest in the latest security infrastructure to ensure your data is always protected against unauthorised access, loss, or damage.

4.1 Technical Security Measures

  • Data encryption in transit: All communications between your device and md888 servers are protected with TLS 1.3 — the highest encryption standard available
  • Data encryption at rest: Sensitive data such as financial details and KYC documents are encrypted using AES-256 at rest
  • Two-factor authentication (2FA): md888 offers additional protection through two-factor authentication for account login
  • Continuous monitoring: Our SIEM system monitors platform activity in real time to detect any security threats
  • Periodic penetration testing: md888 conducts regular security testing through registered independent cybersecurity firms
  • Role-based access control: Employee access to member data is restricted on a need-to-know basis only

4.2 What You Can Do

Your account security also depends on your own security practices. md888 recommends that members take the following steps to protect their accounts:

  • Use a strong, unique password — at least 12 characters combining uppercase letters, lowercase letters, numbers, and symbols
  • Enable two-factor authentication (2FA) on your account
  • Never share your login credentials with anyone, including those claiming to be md888 staff
  • Log out of your account when using public or shared devices
  • Immediately report any suspicious activity in your account to md888 customer support

5. Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection standards, you have the following rights regarding the personal data md888 holds about you. All data rights requests may be submitted via md888 customer support.

5.1 Your Data Rights List

  • Right of access: You have the right to obtain a copy of the personal data md888 holds about you at any time
  • Right to rectification: You have the right to correct any inaccurate or incomplete personal data
  • Right to erasure: Under certain circumstances, you have the right to request that md888 delete your personal data
  • Right to restriction of processing: You have the right to request that md888 restrict how we process your data in certain circumstances
  • Right to data portability: You have the right to receive your data in a structured, machine-readable format
  • Right to object: You have the right to object to the processing of your data for direct marketing purposes
  • Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time
Limitations on the Right to Erasure
Please note that the right to deletion is not absolute. md888 may need to retain certain data to comply with legal obligations such as AML requirements, tax records, or to defend against legal claims. In such cases, md888 will inform you of the reason the data cannot be fully deleted.

6. Cookies & Tracking Technologies

Md888 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the md888 platform.

6.1 Types of Cookies We Use

  • Necessary cookies: Essential for basic platform operations — including login session verification, security, and language preferences. These cookies cannot be disabled
  • Performance cookies: Collects anonymous data on how the platform is used to help us improve performance and user experience
  • Functional cookies: Stores your preferences such as preferred language and display settings to personalise your experience
  • Analytics cookies: Used by md888's internal analytics tools to understand platform usage patterns in an aggregated and anonymised manner

You can manage cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the md888 platform. md888 does not use third-party cookies for advertising purposes.

7. Cross-Border Data Transfers

In the course of its operations, md888 may transfer your personal data to servers or service providers operating outside Malaysia. Any such transfer will only be carried out in compliance with data protection requirements equivalent to or higher than Malaysian standards. md888 ensures that all cross-border data transfers are safeguarded by appropriate data transfer agreements and adequate contractual protection measures.

8. Children's Privacy

Md888 services are intended for individuals aged 18 years and above only. md888 does not knowingly collect or store personal data from minors. Should we discover that a minor's data has been inadvertently collected, we will take immediate steps to delete that data and close the relevant account. If you are aware of a minor using the md888 platform, please contact our support team immediately.

9. Privacy Policy Updates

Md888 reserves the right to update this Privacy Policy from time to time to reflect changes in privacy practices, legal requirements, or platform operations. Any material changes will be communicated to members via in-platform notifications or email at least 14 days before taking effect. It is the member's responsibility to review this page periodically. The date of the last update will always be displayed at the top of this document.

Contact Our Privacy Officer
If you have any questions, concerns, or wish to submit a data rights request regarding this Privacy Policy, please contact the md888 customer support team via 24/7 Live Chat or email at [email protected]. We will respond to your request within 72 working hours.