Privacy Policy

menang888 ("we", "us", "our", "the Platform") operates the online casino and sports betting platform accessible at menang888.cam, serving players across Malaysia including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond. This Privacy Policy ("Policy") explains the types of personal data we collect from players and visitors ("you", "Player", "User"), the purposes for which that data is processed, the legal bases we rely upon, your rights in relation to your data, and how contact us with any privacy-related concern.

By registering an account on menang888, making a deposit, or otherwise using our platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the platform.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling policy, all of which form part of your agreement with menang888.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

menang888 collects personal data that is necessary for the delivery of our platform services, compliance with applicable legal and regulatory obligations, and the protection of both our players and our platform against fraud and financial crime. The categories of personal data we collect include:

Account & Identity Data

Financial & Payment Data

Platform Usage Data

Communication Data

menang888 collects personal data through the following channels and mechanisms:

• Account Registration: When you create a menang888 account, you provide your name, email address, mobile number, date of birth, and preferred username. This information is submitted directly through the registration interface.
• KYC Verification: When you submit identity documents for the first time or upon request by the compliance team, those documents are uploaded directly via the platform's secure KYC submission portal.
• Deposits & Withdrawals: Financial data is captured when you initiate a payment through Touch'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, or any other supported payment channel.
• Platform Interaction: Usage data — including game history, bet records, session duration, and navigation paths — is collected automatically as you use the platform.
• Customer Support: When you contact our support team via live chat or email, the content of that communication, including your account details and query information, is recorded and stored.
• Cookies & Tracking Technologies: Certain data points, such as IP address, device type, browser type, and session behaviour, are collected automatically through cookies and similar technologies when you access the platform. Please refer to Section 8 for full details.

The table below sets out the specific purposes for which menang888 processes your personal data, together with the legal basis relied upon for each processing activity:

menang888 does not sell your personal data to third parties for commercial marketing purposes. We may share your data with carefully selected third-party service providers who process data on our behalf, strictly for the purposes described in this Policy. Such parties are bound by contractual data processing obligations consistent with applicable data protection law.

Categories of third parties with whom we may share your data include:

• Payment Service Providers: Entities facilitating your deposits and withdrawals, including operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow/FPX, and banking partners (Maybank, CIMB, Public Bank, Hong Leong Bank). These providers receive only the data necessary to process your specific transaction.
• KYC & Identity Verification Partners: Licensed third-party verification services engaged to authenticate identity documents and confirm age eligibility (21+).
• Game Content Providers: Licensed studio partners providing slots, live dealer tables, sports betting feeds, and other game content. These providers may receive pseudonymised session and gameplay data for fairness auditing purposes.
• Fraud Prevention & AML Services: Specialised data analytics providers used to detect suspicious transactions, account takeover attempts, and money laundering patterns across the platform.
• Regulatory Authorities: menang888 may be required to disclose personal data to competent regulatory or law enforcement authorities in response to lawful requests, court orders, or to fulfil mandatory reporting obligations under applicable law.
• IT & Infrastructure Providers: Cloud hosting, database management, and cybersecurity service providers operating under strict confidentiality and data processing agreements.

menang888 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations. The following general retention periods apply:

• Account & Identity Data: Retained for the duration of the active account relationship and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification submission or account closure, whichever is later.
• Transaction Records: All deposit and withdrawal records are retained for a minimum of seven (7) years for financial reporting and AML compliance purposes.
• Customer Support Records: Communication logs are retained for three (3) years from the date of last interaction unless a longer period is required in connection with an unresolved dispute.
• Marketing Preferences: Retained until consent is withdrawn or the account is closed, whichever occurs first.
• Usage & Analytics Data: Aggregated or pseudonymised analytics data may be retained indefinitely for platform improvement purposes; individual identifiers are removed from analytics datasets after 24 months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data lifecycle management procedures.

The menang888 platform uses cookies and similar tracking technologies to deliver core functionality, maintain session continuity, and analyse usage patterns. The following categories of cookies are deployed:

• Strictly Necessary Cookies: Essential for platform operation, including login session management, security token handling, and navigation state. These cannot be disabled without disrupting core platform functionality.
• Performance & Analytics Cookies: Used to collect aggregated information about how players interact with the platform, including pages visited, session duration, and error events. Data collected is pseudonymised.
• Functional Cookies: Enable personalised features such as remembered language preferences, game category filters, and deposit method defaults.
• Security Cookies: Facilitate fraud detection and session integrity checks, including device fingerprinting for anti-bot and account takeover prevention.

You may manage non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality and performance of the menang888 platform. Strictly necessary and security cookies cannot be opted out of without ceasing use of the platform entirely.

menang888 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and the menang888 platform is encrypted using industry-standard TLS protocols.
• Encryption at Rest: Sensitive data, including KYC documents and financial records, is encrypted at rest using AES-256 encryption within our secure data infrastructure.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their accounts. Internal administrative access to production systems requires2FA as a mandatory control.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All internal access is logged, monitored, and subject to regular audit.
• Regular Security Audits: menang888 engages independent cybersecurity professionals to conduct periodic penetration testing and vulnerability assessments of the platform.
• Incident Response: A documented data breach response procedure is in place. In the event of a confirmed breach affecting player data, menang888 will notify affected individuals and relevant authorities in accordance with applicable law.

Subject to applicable data protection law, you have the following rights in relation to the personal data that menang888 holds about you. To exercise any of these rights, please contact our support team as detailed in Section 14.

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right to Rectification: If you believe any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data. This right is subject to overiding legal retention obligations — for example, transaction records required under AML law cannot be deleted on request.
• Right to Restriction of Processing: You may request that we limit the processing of your data in specific circumstances, such as while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request a structured, machine-readable copy of your personal data.
• Right to Object: You may object to processing based on legitimate interests, including profiling for fraud prevention, subject to our demonstrating compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

We will respond to all valid data subject requests within thirty (30) calendar days. In complex or high-volume cases, we may extend this period by a further sixty (60) days, with written notice provided within the initial30-day window.

The menang888 platform is strictly intended for adults aged 21 and above. We do not knowingly collect, solicit, or process personal data from individuals under the age of 21. All account registrations are subject to mandatory KYC age verification to enforce this requirement.

If we become aware that personal data has been submitted by or on behalf of a person under the age of 21, we will immediately suspend the associated account, void any gameplay or financial transactions, return deposited funds to the originating payment method, and delete the personal data in question without undue delay.

If you believe a minor may have accessed or registered on the menang888 platform, please contact our support team immediately so that the matter can be investigated and resolved promptly.

In the course of operating the menang888 platform, your personal data may be transferred to and processed in countries outside of Malaysia, including countries where our cloud infrastructure, KYC providers, and game content partners are based.

Where such transfers occur, menang888 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that which would apply within Malaysia. These safeguards include contractual data processing clauses, binding corporate rules where applicable, and transfer to jurisdictions assessed as providing adequate data protection standards.

You may request further information regarding the specific safeguards in place for international transfers by contacting our support team as set out in Section 14.

menang888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. Where amendments are material — for example, changes that significantly affect how we use your personal data or the rights available to you — we will notify you via the platform or to your registered email address prior to the change taking effect.

The "Last Updated" date displayed at the top of this Policy indicates when the most recent revision was made. We recommend reviewing this Policy periodically to stay informed of how your data is being protected. Continued use of the menang888 platform following any amendment constitutes acceptance of the revised Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy — including requests to exercise your data subject rights — please contact the menang888 data protection team through the following channels:

• Live Chat: Available24/7 directly on the menang888 platform. Suitable for general enquiries and time-sensitive requests.
• Email (plain text — not a link): [email protected]

Please include "Privacy Request" in the subject line of any email correspondence and provide your registered account username so that we may locate your records and respond efficiently. All privacy-related correspondence is handled with strict confidentiality.