Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how Macau888 ("Company", "We", "Us", "Our") collects, processes, stores, and protects the personal data of individuals ("Player", "User", "You") who access or use the online gaming platform available at macau888.cam ("Platform").

Macau888 is committed to handling your personal data responsibly, transparently, and in accordance with applicable international data protection frameworks. We recognise that privacy is a fundamental right, and we design our data practices with that principle at the centre.

By registering an account, accessing the Platform, or otherwise using our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not use the Platform.

2. Definitions

The following definitions apply throughout this Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, email address, payment details, IP address, and behavioural data.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, alteration, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data — in this context, Macau888.
• "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller, such as payment processors or cloud hosting providers.
• "Sensitive Data" means categories of data requiring heightened protection, including financial account information, identity document details, and data relating to health or problem gambling behaviour.
• "KYC Data" means identity and address verification documentation collected as part of the Know Your Customer process mandated by our licensing obligations.
• "Cookies" means small data files placed on your device by our Platform for purposes of session management, functionality, and analytics.

3. Data Controller

Macau888 acts as the Data Controller for all Personal Data collected through the Platform. As Data Controller, we determine the purposes for which your data is processed and the means by which it is handled.

For any privacy-related enquiries, requests to exercise your data rights, or concerns regarding data handling, please contact our Privacy Team using the details provided in Section 17 of this Policy. We aim to acknowledge all privacy enquiries within 5 business days and respond substantively within 30 calendar days.

4. Personal Data We Collect

Macau888 collects the categories of Personal Data described below. We collect only what is necessary for the stated purposes and do not collect data that is not required to operate our services or fulfil our legal obligations.

Data Category	Examples	Purpose
Identity Data	Full name, date of birth, MyKad / passport number, nationality	Account registration, KYC verification, age enforcement
Contact Data	Email address, phone number, residential address	Account communication, verification, support
Financial Data	Payment method details (e-wallet ID, bank account info), transaction history	Processing deposits and withdrawals, fraud prevention
KYC Documents	MyKad scan, passport copy, proof of address, payment method screenshots	Identity verification, regulatory compliance
Technical Data	IP address, device type, browser, operating system, session data	Security monitoring, fraud detection, geo-restriction enforcement
Gameplay Data	Game history, bet amounts, win/loss records, session durations	Account management, responsible gambling monitoring, dispute resolution
Communication Data	Support chat transcripts, emails, WhatsApp messages	Customer service, quality assurance, dispute evidence
Marketing Preferences	Promotional opt-in/opt-out status, communication preferences	Targeted promotions and communications (with consent)

5. How Your Data Is Collected

We collect Personal Data through the following channels:

5.1 Direct Collection

Data provided directly by you during: account registration; KYC document submission; deposit and withdrawal requests; customer support interactions (live chat, WhatsApp, email); promotional opt-ins; and completion of any forms on the Platform.

5.2 Automated Collection

Data collected automatically during your use of the Platform, including: IP address and geolocation data; device identifiers and browser fingerprinting data; cookies and session tokens; gameplay and transaction logs; and platform navigation behaviour.

5.3 Third-Party Sources

In limited circumstances, we may receive data about you from third parties, including: payment processors (such as FPX, DuitNow, and e-wallet providers like Touch 'n Go) for transaction verification; identity verification services used in the KYC process; fraud detection and anti-money laundering screening partners; and publicly available sanctions and watchlist databases.

6. Data Processing & Use

Macau888 processes your Personal Data for the following purposes. Each purpose is tied to a specific legal basis described in Section 7.

• Account Management: To create, maintain, and administer your player account, including authentication and access control.
• Payment Processing: To facilitate deposits and withdrawals via approved Malaysian payment channels including Maybank2u, CIMB Clicks, Public Bank, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX.
• Identity & Age Verification: To verify your identity and confirm that you are 21 years of age or older, as required by our licensing obligations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, money laundering, account takeovers, and other prohibited activities.
• Regulatory Compliance: To fulfil obligations arising from our international gaming licence, including anti-money laundering (AML) record-keeping, and to respond to lawful requests from regulatory or law enforcement authorities.
• Customer Support: To respond to queries, resolve disputes, and maintain records of support interactions.
• Responsible Gambling: To monitor gameplay patterns for indicators of problem gambling behaviour and to administer responsible gambling tools including deposit limits, cooling-off periods, and self-exclusion.
• Platform Improvement: To analyse usage data and improve platform functionality, user experience, and game product offerings.
• Marketing Communications: To send you promotional offers, bonus notifications, and updates regarding new products or features — only where you have provided consent or where we have a legitimate interest that is not overridden by your privacy interests.

7. Legal Basis for Processing

We rely on the following legal bases for processing your Personal Data:

• Contractual Necessity: Processing required to perform our contract with you — i.e., to operate your account, process payments, and provide gaming services.
• Legal Obligation: Processing required to comply with our licensing conditions, AML legislation, and responses to lawful regulatory requests.
• Legitimate Interests: Processing where our legitimate interests (fraud prevention, security, platform improvement) are not outweighed by your privacy interests.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

8. Data Retention

We retain your Personal Data for as long as your account remains active and for a defined period thereafter, as required by our licensing obligations, applicable law, or to defend against legal claims.

• Account and Identity Data: Retained for the duration of your account and for a minimum of 5 years following account closure, in line with standard AML record-keeping requirements applicable to online gaming operators.
• Financial and Transaction Data: Retained for a minimum of 5 years from the date of the transaction for AML compliance purposes.
• KYC Documents: Retained for the duration of account registration and for 5 years following closure or last transaction.
• Support Communications: Retained for up to 3 years from the date of the interaction for quality assurance and dispute resolution purposes.
• Marketing Data: Retained until you withdraw consent or request removal from marketing communications, whichever occurs earlier.
• Technical Logs: Typically retained for 12 months for security monitoring, unless required longer for an active investigation.

Following the expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with any individual.

9. Data Sharing & Third-Party Disclosure

Macau888 does not sell your Personal Data to any third party. We may share your data with the following categories of recipients under strict contractual data protection obligations:

• Payment Service Providers: Including operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong, for the purpose of processing deposits and withdrawals.
• Identity Verification Partners: Third-party KYC and AML screening service providers used to verify player identities and screen against sanctions lists.
• Game Content Providers: Licensed game studios that provide casino games and sports betting content on our Platform. These providers may receive anonymised gameplay data for platform operation purposes.
• Cloud Infrastructure Providers: Hosting, storage, and security service providers who process data on our behalf under data processor agreements.
• Regulatory and Law Enforcement Authorities: Where required by law, court order, or valid regulatory request — including reporting obligations under applicable AML legislation.
• Professional Advisers: Legal counsel, auditors, and compliance consultants, under professional confidentiality obligations.

10. International Data Transfers

Given the international nature of our operations, your Personal Data may be transferred to and processed in countries outside of Malaysia. Such transfers are conducted only where appropriate safeguards are in place to ensure a level of data protection equivalent to that applicable in the data's country of origin.

Safeguards used for international transfers include: standard contractual clauses approved by relevant data protection authorities; binding corporate rules where applicable; and transfers to jurisdictions recognised as providing adequate data protection levels.

Players may request details of the safeguards applied to international transfers of their personal data by contacting our Privacy Team at the details set out in Section 17.

11. Data Security Measures

Macau888 implements technical and organisational security measures appropriate to the risk posed by our data processing activities. These measures include, but are not limited to:

• Encryption: 256-bit SSL/TLS encryption for all data in transit; AES-256 encryption for sensitive data at rest.
• Access Controls: Role-based access controls restricting staff access to Personal Data on a need-to-know basis; multi-factor authentication for administrative system access.
• Network Security: Firewalls, intrusion detection systems, and regular vulnerability scanning of our platform infrastructure.
• Staff Training: Mandatory data protection and security awareness training for all personnel who handle Personal Data.
• Penetration Testing: Periodic third-party penetration testing of platform systems and infrastructure.
• Incident Response: A documented data breach response procedure, including notification obligations to affected players and relevant authorities where required.

Despite these measures, no electronic transmission or storage technology can be guaranteed to be 100% secure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and applicable authorities in accordance with our legal obligations.

12. Cookies & Tracking Technologies

Macau888 uses cookies and similar tracking technologies on our Platform. Cookies are small text files stored on your device when you visit our site. They serve several functions as described below.

12.1 Types of Cookies We Use

Cookie Type	Purpose	Consent Required
Essential Cookies	Required for login sessions, authentication tokens, security, and core platform functionality. Cannot be disabled without impairing platform operation.	No — operationally necessary
Functional Cookies	Remember your preferences such as language settings, display options, and previously selected payment methods for a more convenient experience.	No — serves your direct interests
Analytics Cookies	Collect anonymised data on page views, navigation paths, and feature usage to help us understand how the Platform is used and identify areas for improvement.	Yes — at first visit
Session Cookies	Temporary cookies deleted when you close your browser. Used to maintain your session state during active gameplay or transaction sequences.	No — operationally necessary

12.2 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Most modern browsers (Chrome, Firefox, Safari, Edge) allow you to block or delete cookies via their privacy or settings menus. Please note that disabling certain cookies may impair Platform functionality.

For analytics cookies specifically, you may withdraw consent at any time by adjusting your cookie preferences via your account settings on the Platform.

13. Your Data Rights

As a data subject, you hold the following rights with respect to your Personal Data held by Macau888. You may exercise any of these rights by contacting our Privacy Team (see Section 17). We will respond within 30 calendar days of receiving a valid request.

Please note that some rights are subject to exemptions. For example, we may be unable to erase data that we are legally required to retain under our AML obligations or gaming licence conditions. Where an exemption applies, we will inform you clearly and explain the basis for our position.

14. Protection of Minors

Macau888 strictly prohibits the use of the Platform by individuals under 21 years of age. Our registration process includes identity and age verification steps to prevent minors from accessing the Platform.

We do not knowingly collect Personal Data from individuals under the age of 21. If we become aware that a minor has provided us with Personal Data, we will take immediate steps to delete that data and close the associated account. Parents or guardians who believe that a minor may have registered an account on our Platform should contact us immediately.

15. Responsible Gambling Data Processing

Macau888 processes certain Personal Data specifically in connection with our responsible gambling programme. This includes monitoring gameplay patterns, deposit and loss behaviour, session duration, and frequency of access for the purpose of identifying players who may be exhibiting indicators of problem gambling.

Where indicators of problematic gambling behaviour are detected, we may use this data to: proactively contact the player with support resources; apply responsible gambling restrictions; or escalate the matter to our responsible gambling support team for a welfare check.

Data processed for responsible gambling purposes is handled with the highest level of sensitivity. It is not shared with third parties except where required by our licensing obligations or where we are directed to share it with an authorised responsible gambling organisation as part of a referral process.

For more information on responsible gambling tools and support resources available to Malaysian players, please visit our Responsible Gambling page.

16. Amendments to This Policy

Macau888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform functionality. Material changes will be communicated to registered players via email notification to the address registered on their account, or via a prominent notice on the Platform, prior to the change taking effect.

The effective date of this Policy is displayed at the top of this page. Your continued use of the Platform following notification of any amendment constitutes acceptance of the revised Policy. If you do not accept the amended Policy, you must cease using the Platform and may request account closure in accordance with our Terms & Conditions.

17. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact our Privacy Team through the following channels:

• Live Chat: Available 24/7 directly on the Platform — average response time 3–5 minutes
• WhatsApp: Contact details available in your Account dashboard
• Email: [email protected] (plain text — not a clickable link)

All privacy enquiries are acknowledged within 5 business days. Substantive responses to data subject rights requests are provided within 30 calendar days of receipt of a valid, verified request.

Support is available in English, Bahasa Melayu, and Mandarin Chinese. For responsible gambling data enquiries specifically, our dedicated responsible gambling team is available via the same channels, with priority handling.

For further information about your account rights and general platform policies, please review our Terms & Conditions.