Miga 888 Privacy Policy – How We Protect the Personal Data of Malaysian Members

Miga 888 is fully committed to protecting the privacy and personal information of all its members. This Privacy Policy ("Policy") describes miga 888's practices regarding the collection, use, storage, protection, and disclosure of personal data in connection with the use of our platform by members from Malaysia.

This policy applies to all services provided by miga 888, including football Sports Betting, Live Casino, baccarat, e-sports, cricket, and all other game categories, as well as platform features such as the deposit system, withdrawals, notifications, and customer support. By using any part of the miga 888 platform, you acknowledge that you have read and understood this Privacy Policy.

Miga 888 operates in accordance with best-practice data protection standards to ensure your personal information is handled responsibly, securely, and transparently. We have never sold, rented, or traded members' personal data to any third party for marketing or commercial purposes.

Miga 888 only collects information that is genuinely necessary to provide a safe, fair, and properly functioning service. We do not collect excessive or irrelevant data. The following are the categories of information miga 888 collects:

Some information is collected directly when you register an account, complete your profile, or make a financial transaction. Technical information is collected automatically when you use the miga 888 platform. In all cases, this data collection is necessary to ensure the platform operates correctly and securely.

Miga 888 uses collected personal data solely for the purposes stated in this Privacy Policy and never uses it for any other purpose without your consent. The following are the primary purposes for which miga 888 uses your data:

• Account Management: Creating, verifying and maintaining your miga 888 account, including the KYC process to confirm you meet the minimum age requirement of 18 years and other applicable eligibility criteria.
• Financial Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX, Maybank2u or CIMB Clicks, and settling winning withdrawals in Malaysian Ringgit (RM) to the account registered in your name.
• Platform Security: Detecting and preventing fraud, money laundering, attempts to exploit the system, and any suspicious activity on the miga 888 platform. Usage data and technical data are continuously analysed for this purpose.
• Customer Support: Responding to enquiries, resolving complaints and providing technical assistance to miga 888 members in both Bahasa Melayu and English via live chat and email.
• Responsible Gaming: Monitoring usage patterns to identify members who may be showing signs of problem gambling, and proactively reaching out to them with support information. Betting history data is used solely for this welfare purpose.
• Service Communications: Sends important account-related notifications, including changes to our Terms & Conditions or Privacy Policy, transaction confirmations, and security alerts, via SMS or email to the phone number or email address registered to your account.
• Platform Improvements: Analyses aggregated usage data (in a form that cannot identify any individual) to understand how members use the miga 888 platform, in support of the ongoing improvement of our products and services.
• Legal Compliance: To fulfil applicable legal and regulatory obligations, including financial reporting requirements and anti-money laundering (AML) compliance obligations applicable to miga 888.

Miga 888 never sells members' personal data to any third party for commercial or marketing purposes. However, there are limited situations where data must be shared to ensure the platform operates correctly or to meet legal requirements:

• Payment Provider: Required transaction information is shared with your chosen payment gateway provider (such as Touch 'n Go, GrabPay, or bank transfers via FPX) solely to process your deposits and withdrawals in MYR. These providers are bound by strict confidentiality agreements with miga 888.
• Game Service Providers: World-class Live Casino providers such as Evolution Gaming and Pragmatic Play Live, who partner with miga 888, may receive the minimum technical data required to ensure smooth gameplay sessions. They do not receive your personal identity information.
• Identity Verification Provider: For the KYC process, miga 888 uses certified identity verification services that help authenticate documents and prevent identity fraud. Only the minimum necessary data is shared, and it is protected under a data protection agreement.
• Legal Authorities: miga 888 will disclose information to legal authorities if required to do so by a valid court order, or where there is a legally binding obligation to do so. In such cases, miga 888 will notify the member concerned unless prohibited from doing so by law.

The security of members' personal data is miga 888's highest technical priority. Our platform employs multiple layers of protection to keep your information safe from unauthorised access, data breaches or misuse:

• 256-bit SSL Encryption: All data transmitted between your browser or app and miga 888's servers is encrypted using TLS 1.3 with 256-bit SSL — the same security standard used by Malaysia's major banks. Any intercepted data would be completely unreadable without the encryption key.
• Data Encryption at Rest: Sensitive personal information stored in the miga 888 database, including MyKad numbers and financial account details, is encrypted at rest using the latest industry-standard encryption.
• Strict Access Control: Access to miga 888 members' personal data is restricted to staff who genuinely require it to perform their duties. All access is automatically logged and monitored to detect any unusual activity.
• Two-Factor Authentication (2FA): miga 888 provides and encourages the use of two-factor authentication via OTP to your registered Malaysian phone number to protect your account from unauthorised access.
• 24/7 Security Monitoring: miga 888's technology security team continuously monitors systems to detect any intrusion attempts, cyberattacks, or suspicious activity, and responds promptly when a threat is identified.
• Regular Penetration Testing: miga 888 conducts regular security assessments, including penetration testing by independent cybersecurity experts, to identify and remediate any system vulnerabilities before they can be exploited.

While miga 888 takes all reasonable steps to protect your data, no online system can be guaranteed 100% secure against every cyber threat. We encourage you to play your part in keeping your account safe by using a strong password and not sharing your login credentials with anyone.

Miga 888 uses cookies and similar tracking technologies such as web beacons and pixels to keep the platform running smoothly and to deliver a better experience to our members. Cookies are small text files stored on your device when you visit the miga 888 platform.

You can manage your cookie preferences through your web browser settings. Please note that disabling certain cookies — especially essential cookies — may affect the functionality of the miga 888 platform, and you may be unable to log in or use some features properly.

As a miga 888 member, you have the following rights regarding your personal data. To exercise any of these rights, contact the miga 888 support team at support@miga888.xyz, stating the right you wish to exercise and the information needed to verify your identity.

Miga 888 does not retain personal data for longer than is necessary for the purposes stated in this Privacy Policy. Retention periods vary depending on the type of data and operational or legal requirements:

• Active Account Data: For as long as your miga 888 account remains active, and for a reasonable period following account closure to allow for the resolution of any disputes that may arise.
• Financial Transaction Records: Deposit and withdrawal records in MYR are retained for a minimum of seven (7) years in accordance with financial compliance requirements and applicable anti-money laundering laws.
• Security Logs: Access logs and security activity are retained for twelve (12) months to support security incident investigations should they arise.
• Customer Support Data: Support conversation records are retained for two (2) years to assist with follow-up cases and miga 888 service quality improvements.
• KYC Data: Identity verification documents are retained for the period required by applicable laws and the industry compliance obligations that apply to miga 888.

Once the specified retention period has expired, your personal data will be securely deleted or permanently anonymised so that it can no longer be associated with you. This deletion process is carried out in accordance with miga 888's established data security procedures.

The miga 888 platform is intended for individuals who are Aged 18 and above only. miga 888 does not knowingly collect any personal information from individuals under the age of 18. Protecting children and minors from gambling activities is a core commitment of miga 888.

As part of the KYC process, miga 888 verifies the age of every new member. If miga 888 discovers that personal information belonging to an individual under the age of 18 has been collected, we will take immediate steps to delete that information, close the relevant account, and return any funds involved in accordance with established protocols.

The miga 888 platform may contain information about third-party services such as payment providers (Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX via Maybank2u or CIMB Clicks) and game providers that partner with miga 888. Each of these providers has their own privacy policy governing how they handle your data when you interact directly with their services.

Miga 888 is not responsible for the privacy practices or content of any third-party services that operate independently from the miga 888 platform. We encourage you to read the privacy policy of any payment provider you use for deposits and withdrawals to understand how they handle your transaction information.

Miga 888 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or the services we offer. Any significant amendments will be communicated to members through:

• In-platform notifications on miga 888 when you log in after an amendment takes effect.
• An email will be sent to your registered address for amendments that involve material changes to your privacy rights.
• SMS notifications to your registered Malaysian phone number for amendments that require your immediate attention.

The "Updated" date at the top of this page reflects the date of the most recent amendment. It is your responsibility to review this Privacy Policy periodically. Your continued use of the miga 888 platform after any amendment takes effect will be considered your acceptance of the revised Policy.

If you have any questions, concerns or feedback regarding this miga 888 Privacy Policy, or if you wish to exercise any of your rights in relation to your personal data (including requesting access, correction or deletion of your data), please contact us through the following channels:

• Privacy Email: support@miga888.xyz — please include "Privacy Enquiry" in the subject line of your email
• Live Chat: Available on the miga 888 platform 24 hours a day, 7 days a week
• Language: Bahasa Malaysia and English are accepted
• Response Time: miga 888 is committed to responding to all privacy enquiries within 3 business days

For requests related to personal data rights that require identity verification (such as data access or deletion requests), we will ask you to complete a brief verification process to ensure we only disclose or delete data to and at the request of the legitimate account owner. This is a protective measure for your own security.