Official Document

Privacy Policy MD88 Casino — Malaysian Member Data Protection

MD88 Casino takes your privacy seriously. This document clearly explains how we collect, use, store, and protect your personal information — written in plain, easy-to-understand language for every one of our Malaysian members.

Updated: January 2026 Bahasa Melayu (ms-MY) 256-bit SSL Protected
256-bit
Bank-Grade SSL Encryption
10
Privacy Policy Section
0
Sale of Data to Third Parties
7 Rights
Members' Rights Over Personal Data

MD88 Casino's Six Core Privacy Commitments

The core principles that guide how we manage your personal data

Encryption of All Sensitive Data

All your personal information, bank account details and financial transaction records are encrypted using 256-bit SSL technology — the same security standard used by Malaysia's major banks. Data is never stored in plain readable text.

Bank-Grade 256-bit SSL Standard
Data Is Never Sold to Third Parties

MD88 Casino never sells, rents, or shares members' personal data with advertisers, data brokers, or any commercial third party without your explicit consent. Your data belongs to you — it is not a business asset for us to commercialise.

No Sale of Data
Minimum Data Collection

We only collect data that is strictly necessary to provide MD88 Casino's services. No unnecessary questions, no excessive data gathering. Our data minimisation principle ensures we never retain more than what is required for safe and lawful operations.

Data Minimisation Principle
Full Control in Members' Hands

You have the right to access, correct, download, and request deletion of your personal data at any time. MD88 Casino provides a clear and straightforward process for exercising these rights at no additional cost and without unreasonable questioning.

Full Member Control
Transparency in Malay

Unlike many other platforms that bury their data practices within lengthy legal documents written in English, MD88 Casino has written this Privacy Policy in clear, straightforward Malay that every one of our Malaysian players can understand.

Clear in Malay
Compliance with Malaysian Law

MD88 Casino's privacy policy and data management practices are in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). An appointed Data Protection Officer ensures ongoing compliance and addresses any privacy-related complaints promptly.

Malaysia PDPA Compliance

This Privacy Policy explains how MD88 Casino collects, uses, stores, protects and shares your personal information. By registering and using our platform, you agree to the practices described in this document. We encourage you to read it in full. If anything is unclear, our Malay-speaking customer support team is available 24 hours a day via live chat.

Section 1

Introduction & Scope of Privacy Policy

MD88 Casino is an online gambling platform built specifically for Malaysian players. As a responsible operator, we recognise that protecting the privacy and personal data of our members is a fundamental part of the trust we are committed to maintaining every day. This Privacy Policy applies to all personal information collected through the website md88casino.xyz and all services available on it.

This Privacy Policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), the primary legislation governing the collection and use of personal data in Malaysia. We are committed to complying with all provisions of the PDPA and will update this policy from time to time as required by changes in legal requirements or our operational practices.

This Privacy Policy applies only to data collected directly by MD88 Casino. It does not apply to third-party websites or services that you may access via links on our platform.
Section 2

Types of Personal Data We Collect

MD88 Casino collects various types of personal data necessary to provide our members with a safe, compliant, and high-quality service. This data is grouped into the following categories:

Identity & Contact Data:

Full name Malaysian phone number Date of birth Email address (if provided) Full address (for KYC) ID card number (for KYC)

Financial & Transaction Data:

E-wallet account number Bank account details (for KYC) Deposit & withdrawal records Transaction history in MYR

Activity & Usage Data:

Betting history Login & logout timestamps Device type & browser IP address General location data
Note: We do not collect credit card information directly. All payments at MD88 Casino are processed through Malaysia's trusted e-wallet and online banking providers — Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX — each with their own security standards.
Section 3

How We Collect Your Personal Data

MD88 Casino collects personal data through several different channels, depending on how you interact with our platform:

  • Account Registration: When you register as a new MD88 Casino member, you provide your full name, Malaysian phone number, and password. OTP is used to verify your identity during this process.
  • KYC (Identity Verification) Process: When you make your first withdrawal above a certain threshold, or when requested for security reasons, we collect valid identification documents and proof of address to comply with anti-money laundering legal requirements.
  • Financial Transactions: Every time you make a deposit or withdrawal using Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay or FPX, the transaction record in Malaysian Ringgit (RM) is automatically logged.
  • In-Platform Activity: Your betting history, games played, session duration and other usage data are automatically recorded for security purposes, fraud detection and service improvement.
  • Customer Support Communications: When you contact our support team via live chat, conversation records are retained for service quality and dispute resolution purposes.
  • Cookies & Tracking Technologies: Our platform uses cookies and similar technologies to enhance the user experience. Further details are explained in Section 8.
Section 4

How We Use Your Personal Data

MD88 Casino uses the personal data collected for the following legitimate purposes:

  • Account Management: To create, manage, and maintain your member account, process logins, and ensure account security.
  • Financial Transaction Processing: To process deposits and withdrawals in Malaysian Ringgit (RM) via supported Malaysian e-wallets and online banking.
  • Legal Compliance: To comply with KYC requirements, anti-money laundering (AML) laws, and applicable gambling regulations that govern our operations.
  • Security & Fraud Detection: To identify and prevent multiple account usage, bonus abuse, identity fraud, and other unlawful activities that could compromise the integrity of the platform and the safety of other members.
  • Service Improvement: To analyse usage patterns and understand what our Malaysian players enjoy most, then use those insights to improve the overall user experience.
  • Service Communications: To send important account-related notifications such as transaction confirmations, security alerts, and terms of service updates.
  • Promotions & Bonuses: To determine your eligibility for specific promotions and to process bonus claims accurately.
  • Responsible Gaming: To monitor betting patterns and, where necessary, reach out to members showing signs of problem gambling in order to offer appropriate support.
MD88 Casino does not use your personal data for third-party marketing purposes or to make automated decisions that have significant legal effects on you without appropriate human review.
Section 5

Data Sharing with Third Parties

MD88 Casino does not sell, rent, or share members' personal data with third parties for commercial purposes. However, in certain limited and lawful circumstances, data may be shared with the following parties:

  • Payment Processing Providers: Required transaction data is shared with Malaysian payment service providers (such as DuitNow and FPX gateway providers) solely for the purpose of processing your deposits and withdrawals. They are bound by strict confidentiality agreements.
  • Game Software Provider: Account information required is shared with game providers partnered with MD88 Casino only to the extent necessary to grant access to the relevant games.
  • Lawful Authorities: MD88 Casino will disclose personal data to law enforcement agencies, regulatory authorities, or courts when required to do so under applicable Malaysian law, or when necessary to protect our legitimate rights.
  • Technical Service Providers: Technical infrastructure service providers — such as cloud and cybersecurity services that support our platform's operations — may have limited access to data within the scope of their work, and are bound by strict confidentiality agreements.
Key Assurance: In all instances of data sharing, MD88 Casino ensures that recipients adhere to data protection standards equivalent to or higher than those we uphold ourselves.
Section 6

Data Security Measures

MD88 Casino continually invests in security infrastructure to ensure your personal data is protected at all times. Our security measures encompass multiple layers of defence:

Layer 1 — Data Transmission
256-bit SSL Encryption

All communications between your browser and MD88 Casino's servers are encrypted using TLS 1.3 with 256-bit keys — the same standard used by Malaysia's leading financial institutions, including Maybank and CIMB.

Layer 2 — Identity Verification
Two-Factor Authentication (2FA) & OTP

Account login is supported by OTP verification sent via SMS to your registered Malaysian phone number. Two-factor authentication (2FA) is available to all members as an additional layer of protection and is strongly recommended.

Layer 3 — Data Storage
Data-at-Rest Encryption & System Segregation

Personal data is stored in fully encrypted databases. Systems that hold financial data are completely segregated from publicly accessible systems, with strict access controls in place.

Layer 4 — Monitoring
24/7 Real-Time Threat Monitoring

Our security monitoring system operates 24 hours a day to detect and respond to unauthorised access attempts, cyberattacks, and suspicious activity in real time.

Layer 5 — Audit
Periodic Security Reviews

Internal security audits are conducted regularly to identify and address vulnerabilities. Penetration testing is carried out to simulate real-world attacks and ensure our defences remain robust.

Section 7

Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and our commitment to member privacy, you have the following rights regarding your personal data at MD88 Casino:

Right of Access

You have the right to request a copy of all personal data we hold about you. Such requests will be processed within 21 business days.

Right to Rectification

You have the right to request correction of inaccurate or incomplete data. We will update your records within 7 business days of verification.

Right to Erasure

You may request the deletion of your personal data, subject to legal retention requirements. Your account must be closed first.

Data Portability Rights

You have the right to receive your data in a machine-readable format for transfer to another service upon request.

Right to Restrict Processing

In certain circumstances, you may request that we restrict the processing of your data while a review or decision is pending.

Right to Object

You may object to the processing of your data for specific purposes, such as marketing communications or profile analysis.

To exercise any of the rights above, contact our customer support team via live chat or email at support@md88casino.xyz. No fees are charged for reasonable data rights requests. We will verify your identity before processing any request.
Section 8

Cookies, Tracking & Similar Technologies

The MD88 Casino platform uses cookies and similar tracking technologies to enhance the user experience and ensure account security. Below is an overview of the types of cookies we use:

  • Essential Cookies: Required for core platform functions such as maintaining your login session, processing transactions securely, and providing essential security features. These cookies cannot be disabled without affecting platform functionality.
  • Functional Cookies: Saves your preferences such as language selection, display settings and your last accessed game so your experience is seamless every time you return to the platform.
  • Analytics Cookies: Collects anonymised information on how members use the platform — which pages are most frequently visited, average session duration and navigation patterns. This data is used to continuously improve the platform.
  • Security Cookies: Helps detect fraudulent activity, unauthorised access attempts and suspicious behaviour to protect your account and the overall integrity of the platform.

You can manage cookie settings through your web browser's preferences. However, disabling essential cookies may affect the functionality of the MD88 Casino platform. For more information on how to manage cookies in your browser, refer to your browser's official documentation.

Section 9

Personal Data Retention Period

MD88 Casino retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable law:

  • Active Account Data: For as long as your account remains active, your basic personal data is retained to ensure you can use MD88 Casino's services without interruption.
  • Financial Transaction Records: Records of deposits, withdrawals and betting activity in Malaysian Ringgit (RM) are retained for a minimum of 7 years in line with Malaysian financial and anti-money laundering legal requirements.
  • KYC Documents: Identity documents and proof of address collected for verification purposes are retained for a minimum of 5 years from the date of submission, or longer if required by law.
  • Platform Activity Data: Session logs and betting history are retained for 3 years for security audit and dispute resolution purposes.
  • Customer Support Communication Records: Live chat and email conversation records are retained for 2 years for quality control and dispute reference purposes.
  • After Account Closure: Upon account closure, data required by law will continue to be retained for the stipulated period. Data that is no longer required will be deleted or anonymised within 90 days.
Legal retention requirements take precedence over data deletion requests. This means that even if you request account deletion, we may be required to retain certain financial transaction records for a period stipulated under Malaysian law.
Section 10

Contact Us & Privacy Complaints

If you have any questions, concerns or complaints regarding this Privacy Policy or how MD88 Casino handles your personal data, we encourage you to contact us directly before raising a complaint with the relevant authorities:

  • Live Chat: The fastest way to get a response — our Malay-speaking customer support team is available 24 hours a day, 7 days a week, with an average response time of under 2 minutes.
  • Email: For enquiries that require detailed clarification or involve document attachments, please reach us at support@md88casino.xyz. We aim to respond within 2 business days.
  • Formal Data-Related Requests: For formal requests relating to personal data rights such as access, correction or deletion, please clearly state in your communication that it is a "Personal Data Rights Request" so it can be handled by the responsible officer.

MD88 Casino is committed to handling all privacy complaints seriously and within a reasonable timeframe. If you are not satisfied with how we have handled your complaint after following our internal process, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP) under the Ministry of Communications and Digital.

This Privacy Policy will be updated from time to time as required by changes in legislation or our operational practices. Members will be notified of material changes via in-platform notifications. The date of the last update is stated at the top of this document.

Why Does Data Privacy Matter for MD88 Casino Players?

When you register on any online platform — especially a gambling platform involving financial transactions — you are essentially entrusting it with highly sensitive information about yourself. Your name, phone number, payment details and activity history are all data that, if they fell into the wrong hands, could expose you to serious risk. MD88 Casino understands the weight of that trust and treats it as a responsibility that must never be taken lightly.

Malaysians are increasingly aware of data privacy issues, particularly following several widely reported data breach incidents in recent years. Trust in digital platforms has been tested, and many users are now more cautious about which platforms they share their data with. MD88 Casino welcomes this heightened awareness — players who are more informed about privacy will scrutinise platforms more closely, and we are confident that our practices will stand up to that scrutiny.

One aspect that our members value greatly is how we handle financial transaction data. All deposits and withdrawals at MD88 Casino are conducted through trusted Malaysian payment methods — Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX online banking such as Maybank2u and CIMB Clicks. This means your credit card details are never entered directly on our platform — you use payment systems you already know and trust, backed by their own proven layers of protection.

The KYC (Know Your Customer) process we carry out is an important legal requirement, not merely a bureaucratic procedure. In Malaysia, online gambling operators are required to verify player identities to prevent money laundering, terrorism financing and identity fraud. When MD88 Casino requests your identification documents before processing a large withdrawal, it is to protect both you and Malaysia's financial system as a whole. KYC data is stored with the highest level of protection and is only accessed by authorised personnel for designated purposes.

The rights granted to members under MD88 Casino's Privacy Policy reflect our genuine commitment to individual data control. The right to access your data, correct it if there are errors, request deletion when it is no longer needed, and obtain a copy in a usable format — these are not merely rights on paper, but rights you can practically exercise with ease through our support channels. We have established clear internal processes to handle data rights requests promptly and with full respect.

One thing we must make clear is that MD88 Casino has never sold, and will never sell, member personal data to advertisers or data brokers. Our business model does not depend on monetising user data — we generate revenue through legitimate gambling operations, not the buying and selling of personal information. This is a fundamental distinction between us and many free apps that appear "free" but actually monetise their users' data on a large scale. At MD88 Casino, you are our customer — not a product we sell to others.

Finally, it is important to note that data security is a shared responsibility between MD88 Casino and our members. While we invest heavily in technical security infrastructure, there are steps you should take on your own end to protect your account — using a strong and unique password, enabling two-factor authentication, not sharing your password with anyone, and reporting to us immediately if you suspect your account has been accessed without authorisation. Collaboration between the platform and its users is the most effective way to ensure optimal data security for everyone.

Your Data Is Safe. Register with MD88 Casino with Confidence

We protect your privacy with 256-bit SSL encryption, no sale of data to third parties, and full compliance with Malaysia's PDPA. Register for free in 2 minutes and claim a welcome bonus of up to RM888.

Important Notice Regarding This Privacy Policy

This Privacy Policy forms part of the overall agreement between you and MD88 Casino, together with Terms & Conditions us. By using the MD88 Casino platform, you agree to both documents. In the event of any conflict between a translated version and the original Malay version of this document, the Malay version shall prevail. For privacy questions or complaints, contact us at support@md88casino.xyz or via 24/7 live chat.

FAQ — MD88 Casino Privacy Policy

Answers to the most frequently asked questions about privacy and data protection at MD88 Casino

MD88 Casino retains records of payment methods used for withdrawal processing and anti-money laundering compliance purposes. However, we do not store your e-wallet password or PIN — that information remains entirely under your control and that of your e-wallet provider. When you make a deposit or withdrawal via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay or FPX, the transaction is processed through a secure payment gateway without sensitive details such as passwords being shared with MD88 Casino. E-wallet account numbers are stored with full encryption and are only accessible for the purpose of processing withdrawals to the same account.

Yes, you may request deletion of your personal data upon closing your MD88 Casino account, subject to certain conditions. Data that is not legally required to be retained will be deleted or anonymised within 90 days of the account closure date. However, financial transaction records in Malaysian Ringgit (RM) must be retained for a minimum of 7 years in line with Malaysian financial and anti-money laundering legal requirements — this is a legal obligation that cannot be waived at an individual's request. KYC documents must also be retained for at least 5 years. To submit a data deletion request following account closure, contact us by email at support@md88casino.xyz and specify clearly that this is a "Personal Data Deletion Request".

Should MD88 Casino undergo any business restructuring such as a merger, acquisition or asset sale, member personal data may be transferred to the new entity as part of the business assets. In such circumstances, MD88 Casino will ensure that the receiving entity is committed to upholding data protection standards equivalent to or higher than those in our current privacy policy. Members will be notified of any material changes to how their data is managed via in-platform notifications and email (where available), with sufficient notice before any changes take effect. You will have the option to close your account and request deletion of eligible data before those changes come into force if you do not wish for your data to be transferred.

MD88 Casino employs a layered defence approach to protecting member data. This includes 256-bit SSL encryption for all data in transit, encryption of data at rest within our databases, system segregation between sensitive data and publicly accessible systems, 24/7 real-time threat monitoring, two-factor authentication for internal access controls, and regular security audits and penetration testing. In the unlikely event of a data breach, MD88 Casino has a comprehensive incident response procedure in place — including notification to affected members and reporting to the relevant authorities within the timeframes required by law. We also encourage you to protect your account on your end by using a strong password, enabling 2FA, and never sharing your login credentials with anyone, including family members.

MD88 Casino's systems use automated data processing for specific purposes such as fraud detection, suspicious activity monitoring and identifying signs of problem gambling. However, for decisions that have a significant impact on your account — such as account suspension or withdrawal holds — a human review will be conducted before any action is taken. We do not make decisions that rely exclusively on automated processing with no human involvement for matters that could seriously affect your rights and interests. If you believe your account has been acted upon based on inaccurate automated processing, you have the right to request a human review through our customer support team.
Licensed Platform
256-bit SSL Encryption
No Sale of Data
24/7 BM Support
Malaysia PDPA Compliance
Responsible Gaming

Register with MD88 Casino — Your Privacy is Fully Protected

We protect your data with 256-bit SSL encryption, comply with Malaysia's PDPA, and never sell your information to any third party. Register for free in 2 minutes and claim a welcome bonus of up to RM888.

Bahasa Melayu