Privacy Policy

This Privacy Policy ("Policy") sets out how myr88d ("we", "us", "our", "the Operator") collects, uses, stores, shares, and protects personal data relating to registered users ("User", "you", "your") of the myr88d online gaming platform, accessible at https://myr88d.cam/ (the "Platform").

myr88d is committed to maintaining the trust and confidence of all individuals whose personal data we process. We recognise the importance of privacy, particularly in the context of online gaming where financial and identity information is involved.

This Policy applies to all personal data processed in connection with your use of the Platform, including data collected during account registration, identity verification, payment processing, gameplay, and customer support interactions.

This Policy should be read in conjunction with our Terms & Conditions, which govern the overall use of the Platform. In the event of a conflict between this Policy and the Terms & Conditions on matters of data privacy, this Policy shall prevail.

The following terms used in this Policy carry the meanings defined below:

• "Personal Data" — any information that identifies or can reasonably be used to identify a living individual, directly or in combination with other data.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, transfer, alteration, or deletion.
• "Data Subject" — the identified or identifiable individual to whom the personal data relates; in the context of this Policy, this means you as a registered myr88d User.
• "Data Controller" — myr88d, as the entity that determines the purposes and means of processing personal data obtained through the Platform.
• "Data Processor" — a third party that processes personal data on behalf of myr88d pursuant to a written data processing agreement (e.g., a payment gateway, KYC verification provider, or cloud hosting provider).
• "Sensitive Personal Data" — a subset of personal data that carries heightened protection requirements, including identity document numbers, financial account details, and data revealing a person's health status.
• "Consent" — a freely given, specific, informed, and unambiguous indication by the Data Subject that they agree to the processing of their personal data for a stated purpose.
• "Cookie" — a small text file stored on a User's device by a web browser, used to retain session state, preference settings, or tracking identifiers.

myr88d collects personal data from you through multiple interactions with the Platform. The categories of data we collect, and the context in which they are gathered, are described below.

myr88d processes personal data for the following specific, documented purposes:

• Account Creation and Management: To establish, verify, maintain, and terminate your myr88d account, including authentication for each login session.
• Identity and Age Verification (KYC): To confirm your identity, verify that you meet the minimum age requirement of 21 years, and comply with anti-money laundering (AML) obligations.
• Payment Processing: To process deposits from and withdrawals to your registered Malaysian payment methods (Maybank2u, CIMB Clicks, Public Bank, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency options).
• Service Delivery: To make games, sports betting markets, promotions, and other Platform features available to your account.
• Bonus and Promotion Administration: To apply bonus credits, track wagering requirement fulfilment, and process cashback or loyalty rewards.
• Responsible Gambling: To monitor account activity for indicators of problem gambling behaviour and to enforce deposit limits, session controls, and self-exclusion requests you have set.
• Fraud Prevention and Security: To detect and prevent fraudulent transactions, account takeover attempts, bonus abuse, and other prohibited activities described in our Terms & Conditions.
• Legal and Regulatory Compliance: To fulfil obligations arising from applicable gaming regulations, AML laws, data protection requirements, and lawful requests from competent authorities.
• Customer Support: To respond to enquiries, investigate complaints, and resolve disputes involving your account.
• Marketing Communications (where consented): To send you promotional offers, new game notifications, and personalised bonus recommendations via email or SMS where you have explicitly opted in.
• Platform Improvement: To analyse aggregate usage patterns and technical performance data to improve the functionality, security, and user experience of the Platform.

myr88d processes personal data on the following legal bases, depending on the nature and purpose of each processing activity:

• Contractual Necessity: Processing required to perform the contract with you — i.e., operating your account and providing the gaming services you have registered for. Without this processing, we cannot deliver the Platform's core services.
• Legal Obligation: Processing necessary to comply with applicable laws and regulations, including KYC/AML requirements, tax reporting obligations, and lawful directions from regulatory or law enforcement bodies.
• Legitimate Interests: Processing carried out for myr88d's legitimate business interests, including fraud prevention, security monitoring, responsible gambling assessment, and internal analytics — provided that such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — principally for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

myr88d does not sell, rent, or otherwise commercialise your personal data. We share data with third parties only in the limited circumstances described below, and only to the extent necessary for each stated purpose:

• Payment Processors: Malaysian payment infrastructure providers (FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and banking partners including Maybank, CIMB, Public Bank, and Hong Leong) receive the minimum financial data necessary to process your transactions.
• KYC and Identity Verification Providers: Specialist identity verification services that process your identity documents and biometric data on our behalf under strict data processing agreements.
• Game Providers: Software developers whose games are accessible through the Platform may receive your account reference identifier and gameplay data for game delivery and fairness certification purposes. They do not receive your full identity or payment data.
• Cloud Hosting and Infrastructure: Our Platform infrastructure is hosted on secure cloud servers. Hosting providers are bound by data processing agreements and may not use your data for any purpose other than providing the contracted infrastructure service.
• Fraud Detection Services: Specialist fraud and AML monitoring providers that analyse transaction patterns and risk signals on our behalf.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, regulation, or lawful authority request, myr88d will disclose personal data to competent bodies including gaming regulators, financial intelligence units, or law enforcement agencies.
• Professional Advisers: Legal counsel, auditors, and financial advisers where disclosure is necessary for the exercise or defence of legal claims, or for compliance purposes, under strict confidentiality obligations.

All third-party Data Processors engaged by myr88d are required to implement appropriate technical and organisational security measures and are contractually prohibited from processing your data for any purpose beyond the scope of their engagement with us.

myr88d uses cookies and similar tracking technologies (collectively, "Cookies") on the Platform. Cookies are small data files placed on your device that enable us to recognise you across sessions and deliver a consistent, functional experience.

Categories of Cookies We Use:

• Strictly Necessary Cookies: Essential for the Platform to function. These enable session authentication, security controls, and basic navigation. They cannot be disabled without severely impairing the Platform's functionality.
• Functional Cookies: Remember your preferences (e.g., language settings, last-visited game categories) to personalise your experience. They do not track behaviour across unrelated third-party websites.
• Analytics Cookies: Collect anonymised data on how Users interact with the Platform — pages visited, features used, session lengths — to help us identify improvements. Aggregate data only; not linked to your personal identity.
• Security and Fraud Prevention Cookies: Help detect suspicious activity, bot traffic, and fraudulent account access attempts. These are classified as necessary for security purposes.

myr88d does not deploy third-party advertising or behavioural tracking cookies that profile you across external websites.

myr88d retains personal data only for as long as necessary to fulfil the purpose for which it was collected, comply with applicable legal obligations, or resolve disputes. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active account relationship with myr88d, plus a minimum of five (5) years after account closure, to satisfy AML record-keeping requirements.
• Transaction and Financial Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with applicable financial record-keeping obligations.
• KYC Verification Documents: Retained for the duration of the account relationship plus five (5) years post-closure. Original document images are stored in encrypted form with restricted access.
• Customer Support Correspondence: Retained for three (3) years from the date of the final interaction in each support ticket or complaint case.
• Marketing Data: Retained while you remain opted-in to marketing communications. Upon unsubscription, marketing preferences data is retained in suppression lists for up to three (3) years to ensure your opt-out is honoured.
• Responsible Gambling Records: Self-exclusion records are retained for a minimum of five (5) years post-exclusion to prevent re-registration during active exclusion periods.
• Technical and Log Data: System logs and security data are retained for twelve (12) months and then automatically purged, unless retained further due to an ongoing security investigation.

Following the expiry of applicable retention periods, personal data is either securely deleted using certified data destruction processes or anonymised such that it can no longer be associated with an identifiable individual.

myr88d implements a comprehensive suite of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the Platform is encrypted using industry-standard TLS protocols, preventing interception in transit.
• Encryption at Rest: Sensitive personal data — including identity documents and financial account details — is stored in encrypted form using AES-256 encryption at rest.
• Access Control: Access to personal data is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access control systems and multi-factor authentication for administrative access.
• Regular Security Audits: Independent third-party security assessments, including penetration testing and vulnerability scanning, are conducted on the Platform and underlying infrastructure on a regular basis.
• Data Breach Response: myr88d maintains a documented data breach response plan. In the event of a breach that is likely to result in risk to affected individuals, we will notify relevant supervisory authorities and affected Users within the timeframes required by applicable law.
• Employee Training: All myr88d staff with access to personal data undergo mandatory data protection training and are bound by contractual confidentiality obligations.

Subject to applicable law, you have the following rights in relation to your personal data held by myr88d. To exercise any of these rights, please submit a written request to our support team at [email protected] with the subject line "Data Subject Request — [your account username]".

myr88d will acknowledge data subject requests within 5 business days and provide a substantive response within 30 calendar days. Where a request is complex or involves a high volume of data, the response period may be extended by a further 30 days, with written notice provided.

Please note that certain rights may be limited where legal obligations require myr88d to retain or continue processing data — for example, AML record-keeping requirements may prevent immediate deletion of transaction records.

myr88d's services are strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from individuals below this age. Our registration process includes an age declaration step, and KYC verification is conducted to confirm that all registered Users meet the minimum age requirement.

If myr88d becomes aware that personal data has been collected from an individual below the age of 21, we will promptly close the associated account, return any deposited real money funds, void all associated bonus and winnings, and delete the relevant personal data unless retention is required for regulatory reporting purposes.

If you believe that a minor has registered on the Platform, please contact us immediately at [email protected] so that we may investigate and take appropriate action.

myr88d's primary operations are directed at users in Malaysia. In certain circumstances, personal data may be transferred to and processed in jurisdictions outside Malaysia — for example, where cloud hosting infrastructure or specialist Data Processors are located in other countries.

Where such international transfers occur, myr88d ensures that appropriate safeguards are in place to protect the security and integrity of transferred data. These safeguards include:

• Execution of data processing agreements with all international processors, incorporating appropriate contractual data protection clauses;
• Transfer only to jurisdictions that provide an adequate level of data protection or to recipients that have implemented binding corporate rules or equivalent approved transfer mechanisms;
• Ongoing assessment of the security practices of international processors, including periodic audits where contractually required.

myr88d reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory guidance. The date of the most recent revision is displayed at the top of this page.

Where changes are material — meaning they significantly affect how we process your personal data or alter your rights — myr88d will provide advance notice by:

• Posting a prominent notice on the Platform;
• Sending an email notification to your registered address, where practicable; or
• Displaying an in-Platform notification upon your next login.

Your continued use of the Platform following the effective date of a revised Policy constitutes your acceptance of the changes. If you object to any amendment, you should cease using the Platform and contact us to request account closure and data deletion (subject to applicable retention obligations).

If you have any questions, concerns, or requests relating to this Privacy Policy or our data processing practices, please do not hesitate to contact us through the following channels:

myr88d's support team serves players across Malaysia — including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and Bangsar — every day of the year, around the clock.

For formal data protection complaints that cannot be resolved through our internal channels, you may have the right to escalate to a relevant data protection supervisory authority under applicable law.