Master188 Privacy Policy – Personal Data Protection for Malaysian Players What You Need to Know

Master188 collects players' personal information to ensure the platform operates safely, fairly, and in accordance with required compliance standards. Below are the categories of information we collect and how they are obtained.

1.1 Information You Provide Directly

When you register a Master188 account or use our services, you provide the following information:

• Identity Information: Full name as per Malaysian identity card, date of birth, gender, and identity card number (for KYC verification).
• Contact Information: Active email address, Malaysian mobile number, and current residential address.
• Financial Information: Malaysian bank account or e-wallet numbers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, or CIMB Clicks) used for deposits and withdrawals.
• Verification Documents: A copy of your Malaysian identity card or passport, plus proof of address such as a recent utility bill, for KYC purposes.
• Account Information: The username you choose and the password you set (passwords are stored in encrypted form and cannot be read by any staff member).

1.2 Automatically Collected Information

When you use the Master188 platform, our system automatically records the following technical information for security and service improvement purposes:

• Technical Data: Your device's IP address, web browser type, operating system, and screen resolution.
• Session Data: Login and logout times, session duration, pages visited within the platform, and actions performed.
• Location Data: Approximate geographic location based on your IP address, to verify that you are accessing from Malaysia.
• Gaming Data: Betting history, game types played, odds selected, and game outcomes for all activity on the Master188 platform.
• Transaction Data: Complete records of all deposits and withdrawals, including payment method used, amount, and transaction status.

1.3 Information from Third Parties

In certain circumstances, Master188 may receive information about you from trusted third-party sources, including:

• Payment service providers (such as FPX providers or e-wallet operators) to verify transactions.
• Identity verification agencies used to validate the information you provide during registration or KYC.
• Legally authorised anti-money laundering monitoring and responsible gambling monitoring databases.

Master188 uses players' personal information only for lawful and transparent purposes. Below are all the data use purposes we practise.

2.1 Marketing Communications

Master188 may send information about new promotions, bonuses, and special offers via email or in-platform notifications. These marketing communications are sent only to players who have given their consent during registration or through account settings. You may opt out of marketing communications at any time by using the "unsubscribe" link in any email or by contacting the Master188 support team.

Master188 does not sell or transfer players' personal information to third parties for their marketing purposes. However, there are limited situations where we need to share data to keep the platform running and to comply with applicable laws.

3.1 Trusted Service Providers

Master188 works with carefully selected third-party service providers to support platform operations. These providers are only permitted to use your data for specified purposes and must adhere to strict data protection agreements:

• Payment Provider: FPX providers, Malaysian e-wallet operators (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow), and banking partners for processing financial transactions.
• Game Providers: Licensed casino gaming and sports betting software providers that supply games within the Master188 platform.
• Identity Verification Provider: KYC services that assist in verifying player identities in accordance with legal requirements.
• Technical Infrastructure Provider: Cloud and hosting services that store platform data to certified security standards.
• Analytics Providers: Analytics tools that help us understand how the platform is used for improvement purposes (data is used in anonymised form).

3.2 Legal Requirements

Master188 may be required to disclose player information to the relevant authorities under the following circumstances:

• When required by a valid court order or writ of summons
• Investigation requests from Malaysian law enforcement authorities
• Reporting requirements under anti-money laundering legislation
• Investigations relating to financial fraud or unlawful activity involving the platform

In all such cases, Master188 will verify the legitimacy of the request before disclosing any information, and will only disclose what is strictly necessary.

The security of players' personal information is a core operational priority at Master188. We continuously invest in security infrastructure to ensure your data is protected at every level.

4.1 Technical Security

• 256-bit SSL Encryption: All communications between your device and Master188's servers are encrypted using TLS/SSL protocols consistent with Malaysian banking standards.
• Data Encryption at Rest: Sensitive data stored in our database, including financial information and identity documents, is encrypted at rest.
• Multi-Layer Firewall: Server infrastructure is protected by multi-layered firewalls and an Intrusion Prevention System (IPS) that monitors traffic in real time.
• Two-Factor Authentication: Players can enable two-factor authentication (2FA) for an added layer of security during login.
• 24/7 Security Monitoring: Our cybersecurity team monitors platform activity around the clock to detect and respond to any security threats.

4.2 Internal Access Controls

• Access to player data among Master188 staff is restricted to individuals who require it for their specific job responsibilities only.
• All internal access to sensitive data is logged and subject to regular audit monitoring.
• Master188 staff undergo background checks and receive comprehensive privacy and security training.
• Internal passwords are subject to strict security policies and must be changed on a regular basis.

4.3 Your Responsibilities in Account Security

While Master188 takes all reasonable technical measures to protect your data, account security also depends on your own actions:

• Use a strong, unique password for your Master188 account – do not reuse a password from any other account.
• Do not share your login credentials with anyone, including family members or friends.
• Log out of your account after each session, especially when using a shared device.
• Enable two-factor authentication for an added layer of protection.
• Contact Master188 support immediately if you suspect your account has been accessed without your authorisation.

The Master188 platform uses cookies and similar tracking technologies to enhance the user experience, ensure security, and understand how the platform is used. This section explains what cookies are, the types we use, and how you can control them.

5.1 What Are Cookies?

Cookies are small text files stored in your device's web browser when you visit a website. They help the site remember your preferences, maintain your login session, and collect information about how you use the platform. Master188 uses first-party cookies (from our own domain) and, in limited circumstances, third-party cookies from trusted service providers.

5.2 Types of Cookies Used

• Essential Cookies: These cookies are required for core platform functions such as maintaining your login session, saving items to your betting history, and processing transactions. Without them, the platform cannot function properly. Essential cookies do not require your consent as they are a technical necessity.
• Functional Cookies: These cookies remember your preferences – such as language, display settings, and favourite matches – to deliver a more personalised experience, so you don't have to reconfigure your settings every time you log in.
• Analytics Cookies: We use analytics cookies to understand how players interact with the platform — which pages are visited most frequently, how long sessions last, and where technical errors occur. This data is used in aggregated form and cannot identify you as an individual. It helps us continuously improve the Master188 platform over time.
• Security Cookies: These cookies help our security systems identify suspicious sessions and protect your account from unauthorised access. They track login patterns and usage behaviour to flag any unusual activity.

5.3 Managing Your Cookies

You can control and manage cookies through your web browser settings. Most modern browsers allow you to view, delete, or block cookies. However, please be aware that blocking essential cookies may affect the functionality of the Master188 platform — for example, you may be required to log in again each time a page is refreshed if session cookies are blocked.

As a Master188 player, you hold privacy rights protected under Malaysia's Personal Data Protection Act 2010 (PDPA). Master188 fully respects and upholds these rights.

Master188 does not retain your personal information longer than necessary for the purposes set out in this policy, or longer than required under Malaysian law. The following guidelines outline our data retention periods.

7.1 Retention Periods by Data Type

• Active Account Information: Retained for as long as your account remains active on the Master188 platform. Upon account closure, data is held for 7 years to comply with legal and tax requirements.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with applicable Malaysian financial and taxation legal requirements.
• KYC Documents: Identity verification documents are retained for the duration of the active account plus 7 years following account closure, in accordance with anti-money laundering legal requirements.
• Betting History: Retained for 3 years for dispute resolution and platform analytics purposes. After 3 years, data is anonymised and can no longer be linked to your identity.
• Security Logs: Technical and security logs are retained for 90 days, after which they are automatically deleted unless required for an ongoing investigation.
• Marketing Communications Data: If you withdraw consent for marketing, your information will be removed from our marketing lists within 5 business days.

7.2 Data Deletion Procedure

When a retention period expires or when you submit a valid deletion request, Master188 will delete or anonymise your data using secure procedures that ensure it cannot be recovered or reused. Deletion covers all copies across our primary systems, backup systems, and relevant third-party provider systems.

Master188 may update this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or changes in how the platform operates. We are committed to keeping you informed of any material changes.

8.1 How We Notify You of Changes

• For material changes that significantly affect your privacy rights, we will send an email notification to your registered address at least 14 days before the changes take effect.
• A clear notice will be displayed on the Master188 platform when you log in until you confirm your acceptance of the updated terms.
• The "Last Updated" date at the top of this document will be revised to reflect the date of the most recent amendment.
• Previous versions of this Privacy Policy are retained and may be requested through customer support.

8.2 Your Consent

Continued use of the Master188 platform after the effective date of an updated Privacy Policy constitutes acceptance of the changes. If you disagree with any amendments, you have the right to close your account and request withdrawal of any eligible balance before the changes take effect. To do so, contact Master188 support promptly.

If you have any questions, concerns, or requests regarding this Privacy Policy or how Master188 handles your personal information, our team is ready to help.

9.1 Contact Channels

• Privacy Email: support@master188.best – for data-related requests such as access, correction, or deletion, please include "Privacy Request" in the subject line of your email.
• Live Chat: In-platform live chat support is available 24 hours a day, 7 days a week for general privacy enquiries.
• Response Time: Privacy rights requests will be acknowledged within 5 business days and resolved within 30 business days from the date of receipt.

9.2 Complaints Regarding Data Handling

If you are dissatisfied with how Master188 handles your personal information or our response to your privacy request, you have the right to lodge a complaint with the relevant data protection authority in Malaysia. Master188 treats every complaint seriously and will cooperate fully with any investigation by a competent authority.