Mk88 Privacy Policy – Our Commitment to Protecting Your Data

Welcome to the Privacy Policy page mk88. This document sets out the privacy practices of the online sports betting and casino platform mk88 (website and mobile app) in collecting, processing, storing, and protecting the personal data of our Malaysia-based members.

This Privacy Policy has been drafted and updated in accordance with the provisions of Malaysia's Personal Data Protection Act 2010 (PDPA) and constitutes a binding document governing the privacy relationship between you ("Member", "User", "You") and mk88 ("Platform", "We", "mk88").

This policy applies to all registered members mk88, website visitors, mobile application users, and any individual who interacts with the platform mk88 in any capacity. This current version takes effect from 1 January 2026.

mk88 follows a data minimisation principle — we only collect data that is strictly necessary to provide, maintain and improve our services. Below are the categories of data we collect and the purposes for which they are collected:

* mk88 does not directly collect credit/debit card numbers. All payments are processed through third-party payment gateways that comply with PCI-DSS standards.

mk88 uses collected personal data solely for the lawful purposes stated below. We will not use your data for any other purpose without first obtaining your renewed consent.

• Account management: Opening, verifying, maintaining and securing your mk88 account. This includes the KYC (identity verification) process required to comply with anti-money laundering regulations.
• Transaction processing: Processing your deposits and withdrawals securely and accurately through Malaysian local payment methods (DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX).
• Service provision: Allows you to access and use all mk88 platform features, including Malaysia Super League and EPL Sports Betting, slots, Live Casino and lottery.
• Customer support: Resolving enquiries, complaints, and requests for assistance that you submit to the mk88 support team via Live Chat or email.
• Security and fraud prevention: Detecting and preventing fraudulent activity, multi-account usage, money laundering, and any misuse of the platform that violates mk88's Terms & Conditions.
• Experience personalisation: Delivering more relevant content, bonuses, and game recommendations based on your preferences and usage habits on the mk88 platform.
• Responsible gambling: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate support in line with mk88's responsible gaming commitment.
• Legal compliance: Meet the reporting and record-keeping obligations required under applicable Malaysian laws, including PDPA 2010 and anti-money laundering regulations.
• Marketing communications (with consent): Sending information about promotions, bonuses, and new offers from mk88 to members who have consented to receive such communications. You may withdraw this consent at any time.

Under Malaysia's Personal Data Protection Act 2010, mk88 only processes your personal data on valid legal grounds. Depending on the purpose of processing, the applicable legal basis is:

• Contract performance: Processing necessary to fulfil the contractual obligations between you and mk88 — including the processing of deposits, withdrawals, and the provision of sports betting and casino services you have registered for.
• Legitimate interest: Processing for fraud prevention, platform security, account abuse detection and service improvement — where mk88's legitimate interests do not override your privacy rights.
• Legal compliance: Processing required under applicable Malaysian law, including KYC obligations and reporting under anti-money laundering regulations.
• Consent: Processing for marketing communications purposes, which requires your explicit consent. You are free to withdraw this consent at any time without affecting the core mk88 services you use.

mk88 does not sell, rent, or transfer your personal data to any third party for their own marketing purposes. We only share your personal data in the following limited circumstances, and all such sharing is governed by strict data protection agreements:

• Payment gateway providers: Data required to process your deposits and withdrawals is shared with approved payment service providers such as DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and FPX. All these providers comply with PCI-DSS security standards and Malaysia's PDPA.
• IT service providers: Technical information is shared with cloud infrastructure and IT service providers that support mk88 in operating the platform — all under binding data processing agreements with data protection standards equivalent to Malaysia's PDPA.
• Legal authorities: mk88 will disclose personal data to the relevant authorities (police, courts, Department of Personal Data Protection) when required by Malaysian law or a valid court order.
• Game service providers: Required account data is shared with game providers (such as PG Soft and Pragmatic Play) to enable seamless access to their games within the mk88 platform. Such sharing is minimal and strictly limited to what is necessary.
• Business transfers: In the event of a merger, acquisition or asset sale, member personal data may be transferred as part of that transaction. Members will be notified via email and platform notification at least 30 days before any such transfer takes place.

mk88 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law. The specific retention period for each data category is as follows:

• Active account data: For as long as your account remains active with mk88 and for a period of 7 years after account closure, in accordance with Malaysia's financial reporting requirements and legal compliance obligations.
• Financial transaction records: Minimum 7 years from the transaction date, in accordance with Malaysia's Companies Act requirements and anti-money laundering regulations.
• Game activity log: 2 years from the date of activity for dispute resolution purposes and mk88 internal security audits.
• Customer support records: 3 years from the date of last interaction, for service improvement and dispute reference purposes.
• Marketing data (with consent): Until you withdraw your consent. Once consent is withdrawn, this data will be deleted within 30 days.
• Technical logs: Access and regular session logs are retained for 90 days. Logs related to security incidents are kept for up to 2 years for investigation purposes.

Once the retention period has expired, mk88 will securely delete or anonymise your personal data using methods that comply with current industry standards.

mk88 continually invests in the latest cybersecurity infrastructure to protect members' personal data from unauthorised access, disclosure, alteration, or accidental destruction. The technical and organisational measures we have in place include:

• Data encryption in transit: All communications between your device and mk88's servers are protected with TLS 1.3 protocol and 256-bit SSL encryption — the same standard used by Maybank2u and CIMB Clicks Malaysia.
• Data encryption at rest: Sensitive personal data (such as banking information) is stored in encrypted format using AES-256 — meaning that even if mk88's servers were compromised, your data cannot be read without the encryption key.
• Two-factor authentication (2FA): mk88 supports 2FA for all member accounts, adding an extra layer of protection beyond a standard password. We strongly recommend all members enable 2FA in their account settings.
• Role-based access control: Only mk88 staff with a legitimate business need are permitted to access members' personal data. All access is logged and periodically audited by the internal security team.
• Regular penetration testing: mk88 conducts regular penetration testing by independent security experts to identify and patch vulnerabilities before they can be exploited.
• Secure backups: Member data is regularly backed up to geographically separate server locations with full encryption, ensuring service continuity even in the event of a major technical failure.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have several rights regarding your personal data held by mk88. We are committed to respecting and facilitating the exercise of these rights:

mk88 uses cookies and similar tracking technologies to enhance the user experience, maintain session security and understand how the platform is used. The types of cookies we use are as follows:

• Essential cookies: Required for core platform functions such as secure login, session verification and bet processing. These cookies cannot be disabled as the platform will not function properly without them.
• Performance cookies: Collecting anonymous information about how you use mk88 — pages visited, time spent, errors encountered. This data is used solely to improve platform performance.
• Functional cookies: Saves your preferences such as language, odds format (decimal/fractional/American) and other display settings so you don't have to reconfigure them each time.
• Marketing cookies (with consent): Used to display relevant mk88 advertisements on other platforms you visit. This is only activated with your explicit consent and can be disabled at any time.

You can manage your cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of some mk88 platform features. For more information on managing cookies, refer to your web browser's help documentation.

mk88 is a platform intended exclusively for adults aged 18 and above. We do not knowingly collect personal data from minors. If we determine that a registered individual is under 18 years of age, the account will be closed immediately and all associated data will be deleted in accordance with PDPA 2010.

Parents or guardians who believe their minor child may have registered an mk88 account are urged to contact our support team immediately at support@mk88-jit.com. We will take the appropriate action within 24 hours of receiving the report.

mk88 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or service improvements. All amendments will be published on this page with an updated "Last Updated" date.

For material amendments (significant changes to your privacy rights), we will notify you via the email address registered with mk88 and display a prominent notice within the platform for at least 14 days before the amendments take effect. This gives you sufficient time to review the changes and decide whether you are still comfortable with the updated terms.

Continued use of the platform mk88 after the effective date of the amendment will be considered acceptance of the revised policy. If you do not agree with any amendment, please contact us to close your account and receive a refund of your remaining balance.

mk88 has appointed a Data Protection Officer responsible for overseeing PDPA compliance and handling privacy-related enquiries from members. You may contact mk88's Data Protection Officer through the following channels: