Privacy Policy Money888 — Our Commitment to Protecting Your Personal Data

Money888 takes our responsibilities as a personal data controller seriously. This Privacy Policy applies to all users of the money888 platform — including unregistered website visitors, registered members, and former members who have closed their accounts. The information in this policy is intended to give you a clear and comprehensive understanding of our privacy practices.

By using the money888 platform, submitting your personal data to us, or signing our electronic registration form, you consent to the collection and processing of your personal data as described in this policy. If you disagree with any aspect of this policy, please stop using the money888 platform and contact us to request deletion of your data.

Money888 collects personal data from you in several ways — directly when you register or interact with the platform, automatically as you use our services, and in certain cases, from legitimate third-party sources. We collect only what is genuinely necessary to provide our services and will never collect data in excess of that.

Money888 does not directly collect or store credit or debit card information. All payments via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u and CIMB Clicks) are processed by payment gateways that maintain their own PCI DSS security standards. We only receive transaction confirmation — not your actual card data.

Every piece of data we collect has a clear and legitimate purpose. Money888 does not use your data for any purpose unrelated to the provision of our gaming platform services. Here is how we use your personal data:

• Processing your account registration, verifying your identity, and managing your money888 account from sign-up through to closure.
• Securely processing deposits and withdrawals in MYR via your chosen local payment method.
• Grants you access to all slots, live casino baccarat, roulette, blackjack, dragon tiger, sic bo, and Sports Betting on the money888 platform.
• Managing the VIP programme, bonuses, and promotions — determining eligibility and correctly crediting rewards to your account.
• Providing 24/7 customer support in Bahasa Melayu — including resolving disputes, answering enquiries, and assisting with technical issues.
• Detecting and preventing fraud, money laundering, system abuse, and other unlawful activities.
• To comply with the legal and regulatory obligations applicable to money888, including reporting requirements to the relevant authorities where mandated.
• Sending important account-related communications — including security notifications, terms updates, and information about bonuses you are eligible for.
• Improving the money888 platform based on aggregated, non-identifiable usage analysis — helping us understand which games are most popular and where the experience can be enhanced.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), money888 must have a lawful basis for processing your personal data. We rely on the following bases depending on the purpose of processing:

• Contract Performance — Most data processing is necessary to fulfil the service contract between you and money888, including account management, payment processing, and providing access to games.
• Legitimate Interest — Data processing for security, fraud prevention, and platform improvement purposes is based on money888's legitimate interests, which do not override your privacy rights.
• Legal Obligation — In certain cases, money888 is legally required to process or disclose data — such as under AML (Anti-Money Laundering) and KYC obligations.
• Consent — For marketing communications and certain cookie usage, we rely on your consent, which may be withdrawn at any time.

Money888 does not sell your personal data to any party. We may share your personal data with the following categories of third parties, but only to the extent necessary and with appropriate safeguards in place:

• Payment Gateway Providers — Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX banks receive only the minimum transaction data required to process your payment in MYR. All these providers are subject to their own financial security standards.
• Game Software Providers — Live casino and slots providers (such as Evolution Gaming, Ezugi, Playtech, SA Gaming) receive minimal session information to operate the games — typically only a session ID and betting balance, not your full identity data.
• Statutory Authorities — Money888 will disclose data to Malaysian authorities (such as the PDRM, MACC, or Bank Negara) when required by law, court order, or a valid official investigation.
• Infrastructure Service Providers — Our server hosting providers, cloud services, and cybersecurity vendors may have limited access to data within the scope of their work, and all are bound by strict confidentiality agreements.

In all instances of data sharing, money888 ensures that appropriate written agreements are in place, that data is shared only to the extent necessary for the specific purpose, and that the receiving parties adhere to data protection standards equal to or higher than our own.

Money888 implements a range of technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. The following are among the key safeguards we have in place:

• 256-bit SSL encryption for all communication between your browser or app and money888's servers — all data transmitted is unreadable by third parties in transit.
• Sensitive data stored in our databases is encrypted using AES-256 standards — information such as passwords and financial data is never stored in plain text.
• Strict role-based access controls — money888 staff can only access the data necessary for their specific role, with a full audit trail for every access.
• Regular penetration testing by independent cybersecurity firms to identify and address vulnerabilities before they can be exploited.
• Round-the-clock monitoring for suspicious activity, intrusion attempts, and anomalies in data access patterns.
• Two-factor authentication (2FA) is available for all money888 member accounts — we strongly recommend all members enable this feature.
• Secure data backups are performed regularly with full encryption to ensure swift data recovery in the event of an incident.

Despite all these measures, no system can guarantee absolute 100% security. In the event of a data breach affecting your personal information, money888 is committed to notifying you within 72 hours of becoming aware of the incident, and to taking immediate action to contain the impact and prevent further breaches.

Money888 does not retain your personal data indefinitely. We have a clear data retention policy based on legal requirements, operational needs, and the original purpose of collection. Below are our general data retention guidelines:

Once the applicable retention period has expired, your personal data will be securely deleted or anonymised so that it can no longer be linked back to you personally. Anonymised data may be retained for longer for aggregate analytics purposes.

As a money888 member and as an individual protected under Malaysia's PDPA, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at support@money888.run or via live chat.

The money888 platform uses cookies and similar tracking technologies to keep the platform running smoothly, improve the user experience, and understand how members use our services. Below are the types of cookies we use and the controls available to you:

You can manage cookie settings through your browser preferences at any time. Please note that disabling certain cookies may affect the functionality of some money888 platform features. Essential cookies cannot be disabled as they are required for platform security and core functionality.

As a legitimate financial platform, money888 is required under Malaysian law to implement Know Your Customer (KYC) and Anti-Money Laundering (AML) procedures. This means we may need to collect, verify, and in certain cases, report specific information to the relevant authorities.

• Identity verification (a copy of your MyKad or passport) may be required before processing your first withdrawal or any withdrawal exceeding RM5,000.
• We use automated fraud detection software that monitors for suspicious transaction patterns — including unusually large or frequent deposits or withdrawals within a short period.
• Suspicious Transaction Reports (STRs) will be filed with Malaysia's Financial Intelligence Unit (ULFM) where required under the Anti-Money Laundering Act 2001.
• Data collected for KYC and AML purposes is subject to a mandatory seven-year retention period under Malaysian law.

The money888 platform is intended solely for individuals aged 21 and above. We do not knowingly collect personal data from anyone under the age of 21. If we discover that we have collected data from someone who does not meet the minimum age requirement, we will immediately take the following steps:

• The account in question will be terminated immediately and all associated balances will be frozen.
• All personal data collected will be securely deleted from money888's systems.
• If any actual cash (excluding bonuses) has been deposited, a refund process to the original account holder will be initiated.

If you believe someone under the age of 21 may have registered a money888 account, please contact us immediately by email at support@money888.run or via live chat. We take the protection of minors seriously and will respond promptly to any such report.

Money888 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, the technologies we use, legal requirements, or other relevant developments. When we make significant changes, we will notify you through one or more of the following methods: an in-platform notification on money888, an email to your registered address, or a prominent notice at the top of this page.

We recommend reviewing this Privacy Policy page periodically to stay informed of our latest practices. The "Updated" date at the top of this page will always reflect the most current version. Continued use of the money888 platform following any changes constitutes acceptance of the updated terms.

If you have any questions, concerns, or requests regarding this Privacy Policy or how money888 handles your personal data, please contact us through the following channels:

• Email: support@money888.run — for detailed privacy enquiries, data access requests, or complaints related to data protection.
• Live Chat: Available 24 hours a day, 7 days a week directly from the money888 platform — for general privacy enquiries in Bahasa Melayu.
• Frequently Asked Questions: Visit page Frequently Asked Questions us for quick answers to the most frequently asked privacy questions.

We are committed to addressing all privacy concerns seriously and within a reasonable timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) or the relevant regulatory body under the PDPA 2010.