Privacy Policy mi888 — Our Commitment to Protecting Your Data

Mi888 collects your personal information through several channels to ensure a safe, seamless, and personalised gaming experience. We only collect data that is strictly necessary to operate the platform effectively and comply with applicable legal requirements.

The categories of information we collect are as follows:

The personal data we collect is used exclusively for purposes directly related to the operation of the mi888 platform and your experience as a member. We never use your data for unrelated purposes without your explicit consent.

• Processing account registration and verifying identity through a transparent KYC process.
• Enabling deposits, withdrawals, and all financial transactions to be processed securely and accurately.
• Providing responsive and effective customer support via Live Chat, email, or other communication channels.
• Sending important account-related notifications such as transaction confirmations, security alerts, and terms updates.
• Detecting and preventing fraud, money laundering, and other illegal activities that may compromise platform security.
• Complying with applicable legal and regulatory obligations, including reporting to authorities where required by law.
• Personalising your gaming experience based on your preferences and gaming habits, including relevant promotional recommendations.
• Improving platform performance, identifying technical issues, and developing better new features.
• Running a responsible gaming programme that includes self-imposed deposit limits, self-exclusion, and gaming habit monitoring.

Mi888 takes seriously its responsibility not to disclose your personal information arbitrarily. Your data is only shared in specific, limited situations and is always governed by strict confidentiality agreements.

Third parties that may receive your data include:

• Payment providers and financial gateways — to securely process deposits and withdrawals. These providers are subject to PCI-DSS security standards.
• Gaming software providers — providing game titles on the mi888 platform, receive only the data necessary to verify a legitimate game session.
• Regulatory authorities and law enforcement — where required by applicable law or a valid court order.
• Technical service providers — such as server hosts, cloud service providers, and cybersecurity companies that assist in operating mi888's infrastructure, subject to strict data processing agreements.
• Companies within the mi888 group — for internal operational purposes only, with strict access controls based on role requirements.

Mi888 never sell, rent, or share your personal data for third-party marketing purposes, data-driven advertising, or any commercial activity unrelated to the operation of our platform.

Data security is at the core of the trust you place in mi888. We continuously invest in the latest cybersecurity infrastructure to ensure your personal information is always protected against any threats.

Technical security measures we implement:

• Data encryption in transit using TLS 1.3 and 256-bit SSL protocols for all communications between your device and mi888 servers.
• Data encryption at rest using AES-256 algorithm for all databases storing sensitive information.
• Two-factor authentication (2FA) is available and strongly encouraged for all member accounts to add an extra layer of protection.
• Real-time security monitoring by a dedicated cybersecurity team operating around the clock.
• Regular penetration testing conducted by independent security experts to identify and remediate any system vulnerabilities.
• Automatically encrypted data backups stored at separate locations to ensure service continuity.
• Active intrusion detection systems (IDS/IPS) that continuously monitor network traffic for suspicious activity.

Mi888 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies used by mi888:

You can manage cookie settings through your internet browser. However, disabling essential cookies may affect the functionality of the mi888 platform, including your ability to log in to your account.

Mi888 retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by Malaysian law and applicable regulatory requirements.

• Active account data — retained for the duration your account is active plus an additional five (5) years following account closure for legal compliance purposes.
• Financial transaction records — retained for a minimum of seven (7) years in accordance with Malaysia's tax and financial legal requirements.
• Support communication logs — retained for three (3) years for dispute reference and service quality improvement.
• Technical log data — retained for one (1) year for security and fraud detection purposes.
• Marketing data — deleted immediately upon your withdrawal of consent to receive marketing communications.

When the retention period ends, your data will be securely deleted or anonymised so it can no longer be linked back to your identity. Deletion is carried out using data removal methods that comply with recognised security standards.

As a mi888 member and data subject, you have certain rights regarding your personal data under Malaysia's Personal Data Protection Act 2010. mi888 is committed to facilitating the exercise of these rights promptly and efficiently.

As an online platform operating with international service providers, your data may be processed on servers located outside Malaysia in certain circumstances, particularly in relation to game provider services and cloud infrastructure.

All cross-border data transfers are carried out with adequate safeguards, including:

• Ensuring the destination country has a level of data protection equivalent to or greater than Malaysia.
• Implementing recognised Standard Contractual Clauses to protect your data during transfers.
• Ensuring all foreign service providers comply with the security and privacy standards set by mi888 through legally binding data processing agreements.
• Conducting Data Protection Impact Assessments (DPIA) before any large-scale data transfer to a new location.

Mi888 does not transfer your personal data to countries or territories lacking adequate data protection mechanisms without first obtaining your explicit consent.

Mi888 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, new technologies, legal requirements, or other relevant operational reasons.

When we make material changes to this policy, we will:

• Updating the "Last Updated" date at the top of this page.
• Sending email notifications to all registered members at least thirty (30) days before the changes take effect.
• Displaying a prominent notice on the mi888 platform homepage during the transition period.
• In cases of highly material changes, we may request your explicit re-consent before you can continue using the platform.

Continued use of the mi888 platform after any changes to the Privacy Policy take effect will be considered your acceptance of the latest version of that policy. We encourage you to review this page periodically.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how mi888 handles your personal data, please contact our Data Protection Officer (DPO) through the following channels: