mi888 Privacy Policy for Malaysian Players

Introduction

mi888 respects the privacy of its players and recognises that account, identity, financial, and gaming information requires careful handling. This Privacy Policy explains the types of personal data processed by mi888, the reasons for processing that data, the circumstances in which it may be shared, and the controls available to eligible users.

This policy applies whenever you browse the mi888 website, create or use an account, communicate with customer support, complete verification, participate in a promotion, make a deposit or withdrawal, or use casino and sports betting services. It should be read together with the mi888 Terms & Conditions and Responsible Gambling information.

Scope and definitions

In this policy, personal data means information that identifies you or can reasonably be linked to you. Processing includes collecting, recording, organising, storing, reviewing, using, sharing, restricting, and deleting personal data. Account means the individual mi888 profile registered by an eligible player.

This Privacy Policy covers data processed directly through mi888 and data received from payment, identity-verification, game, security, and technical service providers. It does not create rights beyond those provided by applicable law or contractual terms.

Personal data we collect

The information collected by mi888 depends on how you use the platform. Some data is supplied directly by you, while other information is generated through transactions, gaming activity, devices, and security systems.

mi888 may also record communications with customer support, including the date, subject, content, and resolution of an enquiry. Players must not send passwords, one-time verification codes, or unnecessary sensitive information when contacting mi888.

Sources of personal data

mi888 obtains information when you register, update account details, upload verification documents, use a payment method, claim a bonus, place a wager, set an account limit, or contact support. Technical information may be collected automatically when your browser or device communicates with mi888.

Information may also be received from payment providers and Malaysian banking channels used by the account holder. These may include DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, or Hong Leong. For example, mi888 may receive a payment reference, amount, transaction status, and account-holder confirmation without receiving full banking credentials.

Verification and security providers may return identity-match results, fraud indicators, duplicate-account signals, or document-authenticity assessments. mi888 uses such information only where reasonably relevant to account management, security, compliance, and player protection.

How and why we use personal data

mi888 may process personal data for the following purposes:

• to register, authenticate, maintain, and administer a mi888 account;
• to verify identity, age, address, payment ownership, and eligibility;
• to accept wagers, record game outcomes, settle sports markets, and maintain account balances;
• to process MYR deposits, withdrawals, adjustments, refunds, and payment enquiries;
• to identify fraud, collusion, chargeback abuse, bonus misuse, account takeover, or unlawful conduct;
• to deliver support, investigate complaints, and maintain communication records;
• to apply deposit limits, cooling-off periods, self-exclusion, and other player-protection measures;
• to maintain platform performance, diagnose faults, and improve navigation or mobile usability;
• to comply with legal, regulatory, security, record-keeping, and dispute-resolution obligations; and
• to communicate relevant service updates or promotions where permitted and consistent with your preferences.

Processing may be necessary to perform the agreement between you and mi888, meet a legal obligation, protect legitimate operational or security interests, respond to a request, or act with your consent where consent is required. Where mi888 relies on legitimate interests, it considers the necessity and potential effect of the processing on players.

Payments and financial information

mi888 processes payment information to credit deposits, approve withdrawals, investigate failed transactions, reconcile account balances, and confirm that the payment method belongs to the registered player. Transaction records may include an MYR amount, date, status, provider, reference number, and limited account identifiers.

mi888 does not ask players to disclose online banking passwords or DuitNow, FPX, bank, or e-wallet security codes. Payment authentication is ordinarily handled by the relevant provider. You should verify that you are using your own payment account and protect every banking code supplied by Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, or GrabPay.

When personal data may be shared

mi888 does not sell personal data. Information may be disclosed to carefully selected service providers where access is reasonably necessary to operate the platform. These providers may support payments, identity verification, fraud prevention, hosting, game delivery, sports settlement, analytics, communications, customer support, or professional advice.

Service providers are expected to process data according to documented purposes, appropriate confidentiality duties, and relevant security requirements. mi888 may limit the information supplied according to the task. A payment provider, for example, may require transaction and account-holder details but does not need an unrelated history of EPL or Liga Super Malaysia wagers.

mi888 may also disclose information where required by applicable law, a valid legal process, or a competent authority, or where reasonably necessary to protect users, investigate suspected fraud, enforce the Terms & Conditions, defend legal claims, or preserve platform security. If business ownership or operations change, relevant data may transfer as part of that transaction subject to suitable safeguards.

Cookies, devices, and technical records

mi888 may use cookies and similar browser technologies to maintain login sessions, remember language or display preferences, support account security, understand page performance, and prevent duplicate or suspicious activity. Some cookies are necessary for the website to function, while others assist with measurement and service improvement.

Technical logs may record an IP address, browser version, device category, session time, navigation event, and error report. mi888 uses these records to protect accounts, investigate interruptions, optimise mobile access, and distinguish genuine activity from automated requests.

Browser controls can restrict or remove cookies, although disabling necessary cookies may prevent sign-in, payment navigation, or other mi888 functions from operating correctly. Cookie choices apply to the relevant browser and device and may need to be renewed after browser data is cleared.

Data security

mi888 applies technical and organisational safeguards intended to protect personal data against accidental loss, alteration, unauthorised access, misuse, or disclosure. Measures may include encrypted transmission, restricted administrative access, account authentication, monitoring, backups, logging, provider assessment, and staff confidentiality controls.

No internet service can promise absolute security. Players share responsibility for protecting their mi888 accounts by using a strong and unique password, securing their mobile devices, signing out on shared computers, and reporting suspected unauthorised activity promptly. Credentials should not be shared with relatives, friends, agents, or support personnel.

If mi888 identifies a personal data incident, it will assess the scope, contain the issue, preserve relevant evidence, and take reasonable remedial action. Affected players or authorities will be notified where such notice is required under applicable rules.

Data retention and deletion

mi888 retains personal data only for as long as reasonably necessary for the purposes described in this policy. Retention periods vary according to the type of record, account status, payment and verification requirements, fraud-prevention needs, responsible gambling controls, dispute time limits, and applicable legal obligations.

Closing an account does not always result in immediate deletion. mi888 may need to retain identity, transaction, security, self-exclusion, complaint, and wagering records after closure. For example, limited information may remain necessary to prevent a self-excluded player from opening another account or to answer a later payment dispute.

When information is no longer required, mi888 will take reasonable steps to delete, anonymise, or securely isolate it. Anonymised information that can no longer identify a player may be used for statistical, security, and service-improvement purposes.

Your privacy rights

Subject to applicable law, eligible players may ask mi888 to provide access to personal data, correct inaccurate or incomplete information, explain certain processing, restrict particular uses, or review a deletion request. Players may also update communication preferences and withdraw consent where processing depends on consent.

A request must contain enough information for mi888 to identify the account and understand the action sought. Additional verification may be required before data is disclosed or changed. This protects the player from an unauthorised person attempting to obtain account, payment, or identity information.

Some requests may be limited where retention or processing remains necessary to settle transactions, establish or defend legal claims, comply with record-keeping duties, investigate fraud, maintain self-exclusion, or protect other users. Where appropriate, mi888 will explain why a request cannot be completed in full.

Responsible gambling and age-verification data

mi888 casino-style gambling is available only to players aged 21 and above. Identity and date-of-birth information may therefore be processed to verify eligibility and prevent underage access. mi888 may retain age-verification results even where registration is declined if that retention is reasonably necessary for security or compliance.

Responsible gambling records may include deposit limits, session controls, cooling-off periods, self-exclusion instructions, support communications, and risk indicators arising from account activity. mi888 processes this data to apply requested controls, identify potential harm, and avoid sending inappropriate promotional communications.

A self-exclusion record may be retained after account closure so that mi888 can recognise and restrict later registration attempts. Players must not attempt to bypass a restriction by changing an email address, mobile number, device, payment method, or identity information. Further guidance is available on the Responsible Gambling page.

Changes to this Privacy Policy

mi888 may revise this Privacy Policy when services, security practices, payment methods, legal requirements, or data-processing activities change. The effective date at the top of the page identifies the current version. Material changes may also be highlighted through an account or website notice where appropriate.

Players should review this page periodically to understand how mi888 handles their information. Continued use of the platform after an updated policy takes effect acknowledges the revised notice, although mi888 will obtain consent separately where applicable law requires new consent.

Contact Us

Questions about this Privacy Policy, account data, security, access requests, corrections, or communication preferences may be directed to mi888 customer support. Live chat is available 24 hours a day, seven days a week. The support email address is displayed below as plain text:

When contacting mi888, provide enough information to identify the relevant account or request, but do not include your password, complete banking credentials, or one-time verification codes.