Privacy Policy — milion888

milion888 is committed to protecting the privacy and security of all personal data entrusted to us by our players. This Policy is intended to provide clear, transparent information about our data practices so that you can make informed decisions about your interaction with the milion888 Platform.

This Policy should be read in conjunction with milion888's Terms and Conditions and Responsible Gambling Policy, both of which form part of the overall agreement governing your use of the Platform. By registering an account or using any part of the milion888 service, you acknowledge that you have read and understood this Privacy Policy.

If you have questions about this Policy or wish to exercise any of your data rights, please contact us using the details provided in Section 14 of this document.

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" — Any information that identifies or could reasonably be used to identify a natural person, directly or indirectly, including name, identification number, contact details, financial information, and online identifiers.
• "Processing" — Any operation performed on personal data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "Controller" — The entity that determines the purposes and means of processing personal data. For the purposes of this Policy, milion888 acts as the Data Controller in respect of personal data processed through the Platform.
• "Processor" — A third party that processes personal data on behalf of and under the instructions of the Controller.
• "Consent" — A freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose.
• "KYC" — Know Your Customer — the regulatory requirement to verify the identity and age of persons using financial services and gaming platforms.
• "Cookies" — Small text files placed on your device by a website to store information about your preferences, session, and browsing behaviour.

milion888 collects personal data in the following categories, depending on your level of interaction with the Platform:

When you create a milion888 account, we collect: full legal name, date of birth, email address, Malaysian mobile phone number, residential address, and your chosen username and password (passwords are stored in encrypted form only).

To comply with age verification and anti-money-laundering requirements, we collect: copies of government-issued photo identification (MyKad, passport, or driving licence), proof of residential address (utility bill or bank statement), and, where required by regulatory authority, documentary evidence of source of funds.

We collect records of all deposits and withdrawals processed through your milion888 account, including: transaction amounts in MYR, payment method used, timestamp, and transaction reference identifiers. We do not store your banking passwords, e-wallet PINs, or full payment account numbers.

We record details of your gaming activity on the Platform, including: games played, bet amounts, game outcomes, wagering history, and bonus usage records. This data is used for account management, regulatory compliance, responsible gambling monitoring, and dispute resolution.

When you access the Platform, we automatically collect: IP address, device type and operating system, browser type and version, approximate geolocation data (city/region level), session timestamps, and page interaction logs. This data is used for security monitoring, fraud prevention, and Platform performance optimisation.

If you contact milion888 via live chat, email, or any other support channel, we retain records of those communications, including the content of your messages, for quality assurance, training, and dispute resolution purposes.

milion888 uses the personal data we collect for the following purposes only:

milion888 will not use your personal data for any purpose not listed in this Policy or in any supplementary notice provided to you at the time of collection, without first obtaining your explicit consent or relying on a valid legal basis.

milion888 processes personal data only where a valid legal basis exists. The legal bases we rely upon are:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms and Conditions you agreed to on registration, including account management, payment processing, and the provision of gaming services.
• Legal Obligation: Processing required to comply with applicable law, including anti-money-laundering regulations, age verification requirements, and obligations imposed by regulatory or licensing authorities.
• Legitimate Interests: Processing where milion888 has a legitimate business interest that is not overridden by your privacy rights, including fraud prevention, security monitoring, and Platform analytics.
• Consent: Processing for purposes where we have obtained your freely given, informed consent, primarily in the context of marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

milion888 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share personal data with the following categories of recipients only where strictly necessary:

We engage carefully selected third-party service providers who process personal data on our behalf and under our instruction, including: payment gateway operators, identity verification service providers, cloud infrastructure providers, anti-fraud analytics services, and customer support platform operators. All processors are bound by contractual data processing agreements requiring them to handle your data in accordance with this Policy and applicable law.

milion888 may be required to disclose personal data to competent regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where required to do so by applicable law, court order, or regulatory directive. We will notify you of such disclosure where permitted by law to do so.

In the event of a merger, acquisition, or sale of all or substantially all of the assets of milion888, personal data held on our Platform may be transferred to the acquiring entity as part of that transaction. You will be notified of any such change and the acquiring entity will be bound by the terms of this Policy or an equivalent policy of equal or greater protection.

milion888 supports all major Malaysian payment methods, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, Bitcoin (BTC), and USDT. All payment transactions are processed through certified, PCI-DSS compliant payment gateway partners.

milion888 does not at any time store, access, or retain your banking login credentials, e-wallet PINs, card numbers, or equivalent sensitive authentication data. The payment processing infrastructure is entirely managed by our payment gateway partners who are subject to their own regulatory obligations and security standards.

The following payment-related data is retained by milion888 for accounting, compliance, and dispute resolution purposes:

• Transaction reference identifiers issued by payment gateways.
• Transaction amounts in MYR and timestamps.
• Payment method category (e.g., "Touch 'n Go eWallet", "FPX — Maybank") without account number details.
• Deposit and withdrawal status records (pending, approved, rejected).

milion888 uses cookies and similar tracking technologies to operate the Platform effectively, maintain session integrity, and improve user experience. By continuing to use the Platform, you consent to the use of cookies in accordance with this section.

• Strictly Necessary Cookies: Required for the Platform to function. These include session management cookies that keep you logged in and security tokens that protect against cross-site request forgery. These cannot be disabled without impacting Platform functionality.
• Functional Cookies: Store your preferences such as language settings and game display preferences to personalise your experience on return visits.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the Platform. This data helps us identify performance issues, optimise page layouts, and understand which features are most used.
• Security Cookies: Used for fraud detection and prevention, including identifying unusual login patterns or suspicious transaction behaviour.

You may adjust your browser settings to refuse non-essential cookies or to alert you when cookies are being placed. Please note that disabling strictly necessary cookies may impair your ability to use certain features of the Platform. Instructions for managing cookies are available in the help section of your browser.

milion888 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. Our standard retention periods are as follows:

• Account and KYC Data: Retained for the duration of the account and for a minimum of 5 years following account closure, as required by anti-money-laundering regulations.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction for accounting, regulatory, and dispute resolution purposes.
• Gaming Activity Logs: Retained for up to 3 years from the date of the relevant activity, unless a regulatory obligation requires longer retention.
• Support Communications: Retained for up to 3 years from the date of the communication for quality assurance and dispute resolution.
• Technical & Device Data: Typically retained for 12 months, after which it is aggregated and anonymised for analytical purposes.

On expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our internal data destruction procedures.

milion888 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and our servers.
• Encryption of sensitive data at rest, including identity documents and account credentials.
• Role-based access controls ensuring that only personnel with a legitimate operational need can access specific categories of personal data.
• Continuous intrusion detection and real-time security monitoring of Platform infrastructure.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Multi-factor authentication requirements for sensitive administrative operations.
• Regular staff training on data protection and information security best practices.

Despite these measures, no data transmission over the internet or storage system can be guaranteed to be entirely secure. milion888 will notify you and relevant authorities of any confirmed personal data breach in accordance with applicable law and within required timeframes.

Subject to applicable law and certain conditions, you have the following rights in respect of the personal data milion888 holds about you. To exercise any of these rights, please contact us at [email protected]. We will respond to valid requests within 30 days of receipt.

To verify your identity when handling data access or deletion requests, milion888 may ask you to confirm account-specific information before processing your request. This is to protect your data from unauthorised requests.

milion888 employs identity verification procedures at the account registration and withdrawal stages to confirm that users meet the minimum age requirement. If you believe a minor has registered an account on the Platform, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action.

Parents and guardians of minors are encouraged to use parental control software to prevent access to online gambling platforms. milion888 supports responsible access to gambling content and encourages all users to visit our Responsible Gambling page for further guidance.

milion888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. Material changes to this Policy will be communicated to registered users by email notification or by prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this page reflects the most recent revision. Your continued use of the milion888 Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically to remain informed of how we are protecting your information.

If you do not agree to the terms of any amended Policy, you should cease using the Platform and contact our support team to request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by milion888, please contact our Data Protection team using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Response Timeframe: We aim to acknowledge all privacy-related enquiries within 3 business days and to resolve data rights requests within 30 calendar days of receipt.
• Subject Line: Please include "Privacy Request" in your email subject line to ensure your message is routed to the appropriate team promptly.

For queries related to responsible gambling, account self-exclusion, or deposit limits, please visit our dedicated Responsible Gambling page. For general platform queries, our 24/7 live chat support team is available directly on the milion888 Platform.