Privacy Policy

This Privacy Policy ("Policy") describes how m88apk ("we", "us", "our", "the Platform") collects, uses, stores, discloses, and protects the personal data of individuals ("you", "User", "Player") who access or use the services available at https://m88apk.cam and any associated applications or digital services operated by m88apk.

m88apk is committed to handling all personal data in a manner consistent with applicable data protection legislation and internationally recognised privacy principles. We recognise that Users in Malaysia expect their personal information to be treated with the same level of care and confidentiality that they would apply to their own financial and identity documents.

By registering an account, making a deposit, or otherwise using the m88apk Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data in the manner described herein. If you do not agree with any part of this Policy, you should not use our Services.

For the purposes of this Privacy Policy, the following definitions apply:

m88apk collects the following categories of personal data, depending on how you interact with the Platform:

3.1 Registration Data

• Full legal name as it appears on your government-issued identity document
• Date of birth (to verify you are aged 21 or above)
• Residential address (including postcode and state in Malaysia)
• Email address and mobile phone number
• Username and encrypted account password

3.2 Identity Verification (KYC) Data

• Scanned or photographed copies of your Malaysian MyKad, Driving Licence, or Passport
• Proof of residential address (utility bill, bank statement — dated within 3 months)
• Selfie photograph holding your identity document
• Source of funds documentation (where required for large transactions)

3.3 Financial & Payment Data

• Payment method identifiers (e.g., GrabPay account reference, Touch 'n Go eWallet ID, Boost account ID, DuitNow registered bank)
• Bank account details where bank transfer is used (Maybank, CIMB, Public Bank, Hong Leong, RHB)
• Cryptocurrency wallet address for USDT TRC20 transactions
• Transaction history — deposit amounts, withdrawal amounts, dates, and payment method used

3.4 Usage & Behavioural Data

• IP address, device type, operating system, and browser type
• Pages visited, features accessed, time spent, and navigation paths within the Platform
• Betting history, game session data, and wagering patterns
• Login timestamps and session duration records

m88apk collects personal data through the following means:

• Directly from you — when you complete the registration form, submit KYC documents, make deposits or withdrawal requests, contact our support team, or respond to surveys.
• Automatically — through cookies, web beacons, server logs, and device fingerprinting when you access and use the Platform. This data is collected even where you have not created an account.
• From payment processors — when you initiate a deposit or withdrawal, our payment service providers (e.g., GrabPay, Touch 'n Go eWallet operator, FPX gateway) share transaction confirmation data with us.
• From identity verification providers — where we use third-party KYC technology to verify the authenticity of documents submitted by Users.
• From fraud prevention and AML screening services — cross-referencing your registration data against sanction lists, politically exposed persons (PEP) databases, and fraud signals databases as required by our compliance obligations.

m88apk processes your personal data on one or more of the following lawful bases:

m88apk uses your personal data exclusively for the following purposes:

• Creating, managing, and operating your account, including processing deposits, withdrawals, and bet settlement.
• Verifying your identity (KYC) to comply with regulatory obligations and enable full account functionality.
• Processing payments via your chosen method — including GrabPay, Touch 'n Go eWallet, Boost, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and USDT TRC20.
• Detecting, preventing, and investigating fraud, money laundering, unauthorised account access, and other prohibited activities.
• Monitoring betting activity to identify signs of problem gambling and applying responsible gambling tools where appropriate.
• Communicating with you regarding your account, transactions, promotions, and platform updates via email, SMS, or in-platform notification.
• Improving the Platform through analytics, performance monitoring, and user experience research.
• Complying with legal obligations, including responding to lawful requests from regulatory or law enforcement authorities.

We do not use your personal data for automated decision-making that produces significant legal effects without human review, except where such processing is explicitly required by our AML or fraud screening obligations.

m88apk does not sell, rent, or commercially transfer your personal data to any third party. We may share your data only in the following limited circumstances:

• Payment Service Providers: Your payment data is shared with our integrated Malaysian payment providers (GrabPay, Touch 'n Go eWallet operator, Boost, DuitNow/FPX gateway, and banking partners) solely for the purpose of processing your transactions. All payment processors are contractually bound to handle your data securely and in accordance with PCI DSS standards.
• Identity Verification Partners: Where KYC documents are processed through a third-party verification platform, that provider receives your document data solely for verification purposes and is contractually prohibited from using it for any other purpose.
• Regulatory & Law Enforcement Authorities: We will disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where we are legally compelled to do so. We will notify you of such disclosures where we are legally permitted to do so.
• Corporate Transfers: In the event of a business merger, acquisition, or asset sale involving m88apk, User personal data may be transferred to the acquiring entity. We will notify affected Users prior to any such transfer where practicable.

The m88apk Platform uses cookies and similar tracking technologies to enable core functionality, remember your preferences, analyse usage patterns, and detect fraud or unusual access patterns. The categories of cookies we use are described below:

You may manage cookie preferences through your browser settings. Please note that disabling non-essential cookies may affect certain Platform features. Most modern browsers (Chrome, Safari, Firefox, Edge) provide accessible cookie management tools in their privacy or settings menus.

m88apk implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security infrastructure includes:

• Transport Layer Security (TLS 1.3) with 256-bit SSL encryption for all data in transit between your device and our servers.
• AES-256 encryption for personal and financial data stored in our databases.
• Multi-factor authentication (MFA) available for User accounts and mandatory for all internal administrative access.
• Regular independent security penetration testing and vulnerability scanning of all Platform components.
• Strict role-based access controls — internal staff can only access User personal data on a need-to-know basis relevant to their specific function.
• Comprehensive audit logging of all internal access to User account data.
• Dedicated incident response procedures for data breaches, including notification obligations.

Whilst we employ robust security measures, no system is entirely immune to security risks. Users are strongly encouraged to protect their own account by using a strong, unique password, enabling two-factor authentication, and logging out after each session, particularly when accessing the Platform from shared or public devices.

m88apk retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following indicative retention periods apply:

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised. Where data is anonymised, it may be retained for statistical or analytical purposes without further restriction under this Policy.

Subject to applicable law and certain legitimate restrictions, you have the following rights in respect of your personal data held by m88apk. You may exercise any of these rights by contacting our support team as described in Section 16.

We will respond to all rights requests within a reasonable timeframe, typically within 30 days of receipt. Where a request is complex or numerous, we may extend this period and will notify you accordingly. We may be required to verify your identity before processing any rights request.

The m88apk Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect or process personal data from any person under the age of 21. Access to gambling-related services by minors is prohibited, and we enforce this through our mandatory KYC identity verification process.

If we become aware that personal data has been collected from a person under 21 without parental consent, or where the individual has provided false age information during registration, we will immediately close the relevant account, delete or securely quarantine the associated personal data, and — where applicable — report the matter to relevant authorities.

Parents and guardians are encouraged to use parental control software and to monitor minors' internet access to prevent accidental or deliberate access to online gambling platforms. For more information on protecting minors online, please visit our Responsible Gambling page.

As an internationally licensed platform, m88apk may store or process certain categories of personal data on servers or through service providers located outside Malaysia. Where personal data is transferred outside of Malaysia, m88apk ensures that appropriate safeguards are in place to protect the data in transit and at its destination, including:

• Contractual obligations on recipient entities that mandate data protection standards equivalent to those applied by m88apk;
• Transfers only to jurisdictions or recipients where an adequate level of data protection is ensured in the context of the specific processing purpose;
• End-to-end encryption of personal data during international transmission.

By using the m88apk Platform and agreeing to this Privacy Policy, you acknowledge and consent to the possible transfer of your personal data to processors or sub-processors in other jurisdictions, subject to the safeguards described above.

The m88apk Platform may contain references to or integrations with third-party services — such as payment gateways including GrabPay, Touch 'n Go eWallet, and Boost — that are operated by entities independent of m88apk. This Privacy Policy applies exclusively to data processed by m88apk and does not extend to the data practices of third-party services.

When you interact with a third-party payment provider or service as part of a transaction on m88apk, that provider's own privacy policy governs how your data is handled within their systems. We recommend reviewing the privacy policies of any third-party service you interact with in connection with your use of m88apk.

m88apk reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. Material changes — those that significantly affect how your data is processed or your rights in respect of it — will be communicated to registered Users via:

1. Email notification to your registered account email address;
2. A prominent in-platform announcement displayed upon your next login;
3. An updated "Last Reviewed" date at the top of this page.

Your continued use of the m88apk Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with a material amendment, you may request account closure as described in our Terms and Conditions. We encourage you to review this page periodically to remain informed of how we handle your personal data.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data held by m88apk, please contact us through the following channels. We aim to respond to all privacy-related enquiries within 5 business days.

When submitting a data rights request, please include your registered account email address, a description of your request, and any supporting information. We will verify your identity before processing any access, rectification, or deletion request. You will not be charged a fee for exercising your data rights under this Policy.