Privacy Policy MK888 — Your Personal Data Protection

Welcome to the MK888 Privacy Policy page. We, MK888, care deeply about your privacy and are committed to ensuring that all personal information you share with us is handled with full responsibility, transparency, and the highest level of security.

This Privacy Policy clearly explains how MK888 collects, uses, stores, discloses, and protects your personal data when you use our gaming platform, browse mk888.pw, register as a new member, make any financial transactions, or contact our support team.

By registering as an MK888 member or continuing to use our platform after this policy is updated, you consent to the collection and processing of your personal data as described in this document. If you do not agree with any aspect of this policy, please stop using our platform and contact our support team to close your account.

MK888 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA), the primary legislation governing personal data protection in our country. We also follow industry best practices from both local and international gaming sectors to ensure our data protection standards remain current and relevant.

MK888 only collects personal data that is strictly necessary to provide a safe, efficient service that complies with legal requirements. The types of data we collect are as follows:

Technical data is automatically collected when you browse the MK888 platform. This information helps us detect suspicious login attempts, prevent unauthorised multi-location access, and ensure your gaming experience remains smooth and secure. All such data processing is lawful under PDPA 2010.

Every piece of personal data we collect is used solely for legitimate, clearly stated purposes. MK888 never uses your data for any other purpose without first obtaining your consent.

• Process new account registrations and verify member identity through a safe and efficient KYC process
• Process all financial transactions including deposits, withdrawals and bonus activations accurately and promptly
• Send important account-related notices such as login confirmations, security alerts and terms updates
• Provide responsive and personalised customer support via Live Chat, email and other official channels
• Analyse usage patterns to improve game quality, platform performance and the overall member experience
• Detect and prevent fraud, money laundering, bonus abuse and any activity that violates the Terms and Conditions
• Send relevant and personalised promotional offers — provided you have given consent to receive marketing communications
• Comply with legal requirements, regulations and directives from relevant authorities in Malaysia

For responsible gaming purposes, MK888 uses your usage data to identify gameplay patterns that may indicate addiction risk. This is done in the interest of our members' own well-being. More information about our commitment to responsible gaming can be found on the Responsible Gaming page.

MK888 does not sell, lease or trade our members' personal data to third parties for any commercial purpose. However, in certain limited and lawful situations, we may need to share some of your information with the following parties:

• Payment Service Providers: Transaction information is shared with banks, FPX providers, DuitNow, TNG eWallet and other authorised payment gateways solely to process your deposits and withdrawals
• Game Providers: Minimum member ID information and game data is shared with licensed game providers solely to enable access to games on the MK888 platform
• Fraud Prevention Services: Certain technical data may be shared with specialised third-party security systems for real-time fraud detection and prevention.
• Legal Authority: MK888 will fully comply with any lawful request from authorities, courts or law enforcement agencies with relevant jurisdiction in Malaysia
• Independent Audit: In the context of security and compliance audits conducted by officially appointed third parties, required information may be shared within a strictly limited scope.

MK888 does not share members' personal data across borders without ensuring the recipient country has an adequate level of data protection or that appropriate data protection agreements are in place. All cross-border data transfers, where they occur, are conducted in accordance with PDPA 2010 guidelines.

MK888 continuously invests in the latest security infrastructure to ensure members' personal data is always protected against cyber threats, unauthorised access and any form of data breach.

• 256-bit SSL encryption across all communication channels between the platform and users' devices
• Encrypted databases with separately managed keys that are rotated on a regular basis
• Two-factor authentication (2FA) is available for all member accounts as an additional recommended security layer
• Strict internal access controls — only authorised and need-to-know personnel may access member personal data.
• Continuously operating intrusion detection (IDS) and intrusion prevention (IPS) systems
• Regular security audits and penetration testing conducted by independent cybersecurity experts
• Comprehensive data incident response procedures — in the event of a data breach, affected members will be notified within 72 hours

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding the personal data that MK888 holds about you:

To exercise any of the above rights, please contact the MK888 Data Protection team via email [email protected] stating the type of your request. We will verify your identity first before processing any request to safeguard your data security.

MK888 uses cookies and related tracking technologies to enhance the user experience, analyse website traffic and ensure the security of your account. The types of cookies we use are as follows:

• Essential Cookies: Required for core platform functions such as login, session management, and account security — cannot be disabled without affecting platform functionality.
• Performance Cookies: Collect information on how you use the MK888 platform to help us improve speed, usability and overall performance
• Functional Cookies: Remember your preferences such as language, display settings and saved login information to streamline your experience
• Analytics Cookies: Help us understand how members interact with different sections of the platform so we can make meaningful improvements

MK888 does not retain your personal data longer than necessary for the stated purposes or as required by law. Our data retention policy is as follows:

• Active account data is retained for the lifetime of your account and updated regularly to ensure accuracy.
• Financial transaction records are kept for a minimum of 7 years from the transaction date in accordance with Malaysia's financial regulatory requirements
• Security logs and access records are retained for 2 years for security incident investigation purposes when required
• KYC documents are retained for 5 years after account closure in accordance with anti-money laundering (AML) legal requirements.
• Marketing and communications data is retained for 3 years or until you withdraw consent, whichever comes first.
• Customer support records are retained for 3 years for reference and dispute resolution purposes

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to your identity. This deletion process follows strict security procedures to ensure no data is recoverable after completion.

MK888 reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements or technological developments that affect how we manage members' personal data.

When significant changes are made to this Privacy Policy, MK888 will notify members through the following channels:

• A clear pop-up notice upon first login to your MK888 account after the amendment takes effect
• An official notification email is sent to the address registered on your account, summarising the key changes made.
• An announcement on the mk888.pw homepage and at the top of this Privacy Policy page at least 14 days before the amendment takes effect

The date of the latest update will always be displayed at the top of this document. Continued use of the MK888 platform after any amendment takes effect constitutes full acceptance of the updated policy. If you disagree with any amendment, you have the right to close your account and withdraw your balance before the amendment comes into effect.

If you have any questions, concerns, or wish to exercise your rights under PDPA 2010, the MK888 Data Protection team is available to assist you at any time.

For more information about your rights under Malaysia's data protection laws, you may also refer to the official website of the Department of Personal Data Protection Malaysia. You may also refer to our FAQ page for quick answers to frequently asked questions about privacy and account security.