MC888 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how MC888 ("the Company", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at mc888.casa ("the Platform"), collects, uses, stores, discloses, and protects the personal data of users ("Player", "User", "you") who register an account or interact with the Platform in any way.

By creating an MC888 account, accessing the Platform, or otherwise interacting with our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, please do not register an account or continue using the Platform.

MC888 takes its obligations as a data controller seriously. This Policy is written in plain, accessible English — the primary language of the MC888 Platform — and is intended to be clearly understood by our players, the majority of whom are based in Malaysia. Where this Policy refers to legal obligations, those obligations derive from MC888's international licensing framework and the data protection standards applicable to our operating jurisdiction.

2 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

3 Data We Collect

MC888 collects personal data in several categories depending on the nature of your interaction with the Platform. The following sets out the categories of data we may collect:

• Full legal name as it appears on your government-issued identification document.
• Date of birth (required for age verification — players must be 21 or older).
• Residential address, including postcode, city, and country (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya).
• Email address — used as your primary account identifier and for all account communications.
• Mobile phone number — used for two-factor authentication and support contact.
• Username and encrypted password hash.

• Scanned copy or photograph of your Malaysian MyKad, Passport, or other government-issued photo ID.
• Proof of address documents (utility bill, bank statement, or official government correspondence dated within three months).
• Proof of payment method ownership (screenshots of GrabPay, Touch 'n Go eWallet, Boost, DuitNow, FPX bank statement, or card details confirming account holder name).
• Selfie or liveness verification photograph in certain circumstances, as required for enhanced due diligence.

• Deposit and withdrawal transaction records including amounts in MYR, timestamps, payment method used, and transaction reference numbers.
• Payment method metadata (partial card numbers, eWallet account identifiers, bank account name — we do not store full card numbers).
• Cryptocurrency wallet addresses used for BTC or USDT transactions (where applicable).
• Account balance history and bonus allocation records.

• Betting history, including bet amounts, odds, markets selected (e.g., EPL, Liga Super Malaysia, UFC), outcomes, and returns.
• Casino game session data including game titles played, wager amounts, duration, and win/loss outcomes.
• Bonus claims, wagering requirement progress, and promotional participation records.
• Responsible gambling tool usage, including deposit limit settings, self-exclusion requests, and cooling-off activations.

• IP address and derived geolocation data (country and city level).
• Device type, operating system, browser type and version.
• Session timestamps, login history, and access logs.
• Cookies and similar tracking technology data (see Section 8).

• Records of live chat conversations, email correspondence, and support ticket interactions with the MC888 team.
• Feedback, complaints, and dispute records submitted through the Platform.

4 How We Collect Your Data

MC888 collects personal data through the following channels and mechanisms:

• Directly from you: Data you provide during account registration, the KYC verification process, deposit and withdrawal requests, support interactions, and the completion of any form or profile field on the Platform.
• Automatically during Platform use: Technical data collected passively through server logs, cookies, and device fingerprinting as you browse and interact with mc888.casa.
• From payment service providers: Transaction confirmation data passed to MC888 by payment processors — including GrabPay, Touch 'n Go eWallet, Boost, DuitNow, FPX, Visa/Mastercard networks, and cryptocurrency processors — to confirm deposits and withdrawals.
• From identity verification services: Results from third-party KYC and age verification providers used to authenticate identity documents.
• From fraud prevention partners: Risk signals and device intelligence data from fraud detection partners used to identify suspicious account activity.

5 Purposes of Data Processing

MC888 processes your personal data for the following specific and legitimate purposes:

6 Legal Basis for Processing

MC888 processes your personal data on the following lawful bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between you and MC888 — specifically, to operate your account, process transactions, and deliver the betting and gaming services you have requested.
• Legal Obligation: Processing required to comply with MC888's obligations under its international operating licence, including KYC verification, AML monitoring, and age verification.
• Legitimate Interests: Processing conducted in pursuit of MC888's legitimate business interests, including fraud prevention, platform security, abuse detection, and platform analytics — where those interests are not overridden by your rights and interests.
• Consent: Processing for optional purposes where you have provided explicit consent, such as receiving promotional emails or SMS marketing communications. You may withdraw consent at any time by contacting our support team.

7 Data Sharing & Disclosure

MC888 does not sell, rent, or trade your personal data. We may share your data with the following categories of third parties, strictly on a need-to-know basis and under appropriate contractual data protection obligations:

To process deposits and withdrawals, MC888 shares transaction data with payment processors including GrabPay, Touch 'n Go eWallet, Boost, DuitNow, FPX participating banks (Maybank, CIMB, Public Bank, Hong Leong), Visa/Mastercard networks, and cryptocurrency processors. Each provider operates under their own privacy policy and data protection obligations.

To fulfil our KYC obligations, identity document data and verification selfies may be shared with third-party identity verification service providers who process this data on our behalf under strict confidentiality agreements.

Device fingerprint data, IP addresses, and behavioural signals may be shared with fraud detection and platform security partners to identify and prevent fraudulent activity, account takeovers, and abuse.

MC888 may disclose personal data to regulatory bodies, licensing authorities, law enforcement agencies, or legal representatives where required to do so by law, court order, or valid regulatory request. Such disclosures will be limited to the minimum data necessary to satisfy the obligation.

Aggregated, anonymised session data (game title, wager amount, outcome) may be passed to game content providers for the purpose of RTP calculation and game performance reporting. This data is not personally identifiable.

8 Cookies & Tracking Technologies

MC888 uses cookies and similar tracking technologies to operate the Platform effectively, maintain session security, prevent fraud, and analyse usage patterns. The following categories of cookies are used:

You may manage non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality and performance of the MC888 Platform. For more information on managing cookies in your browser, refer to your browser's help documentation.

9 Data Retention

MC888 retains personal data for as long as is necessary for the purposes for which it was collected, or as required by our licensing and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, as required by anti-money laundering record-keeping obligations.
• KYC documentation: Retained for a minimum of five (5) years from the date of verification completion or account closure, whichever is later.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Support communications: Retained for three (3) years from the date of the final communication in a support thread, or longer where the communication is related to an active dispute or regulatory matter.
• Technical and device logs: Retained for twelve (12) months in a readily accessible format, with archival storage for an additional period as required for fraud investigation purposes.

When personal data is no longer required to be retained, it will be securely deleted or irreversibly anonymised in accordance with MC888's data disposal procedures.

10 Data Security

MC888 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and mc888.casa.
• Encrypted storage of sensitive data fields including passwords (using one-way cryptographic hashing) and payment method identifiers.
• Role-based access controls ensuring that MC888 staff access personal data only on a strict need-to-know basis.
• Two-factor authentication (2FA) options for all player accounts.
• Regular internal security assessments and vulnerability testing of the Platform.
• Audit logging of all access to personal data by MC888 personnel.
• Incident response procedures for managing and communicating data security events.

11 Your Data Rights

As a data subject, you hold the following rights in relation to the personal data MC888 holds about you. To exercise any of these rights, please contact our support team via live chat or email at the details in Section 15.

Please note that the exercise of certain rights may be limited where MC888 is required to retain or process data in order to comply with legal obligations, including KYC record-keeping, AML compliance, and dispute resolution requirements.

12 Children & Minors

The MC888 Platform is strictly intended for adults aged 21 years and above. MC888 does not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration and KYC process.

If MC888 becomes aware that personal data has been collected from an individual who is under 21 years of age, the account will be suspended immediately, the personal data will be deleted as soon as practicably possible, and any funds will be handled in accordance with our Terms & Conditions and applicable regulatory guidance.

If you believe that a minor under the age of 21 has accessed or registered an account on mc888.casa, please contact our support team immediately at the details provided in Section 15.

13 Third-Party Links

The MC888 Platform may contain references to third-party services or products — such as payment providers including GrabPay, Touch 'n Go eWallet, Boost, and financial institutions. Please note that MC888 does not operate those external platforms and is not responsible for the data handling practices of third parties.

We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of MC888, including your chosen payment method providers.

14 Amendments to This Policy

MC888 reserves the right to update or revise this Privacy Policy at any time. Where material changes are made to how we process your personal data, we will provide notice through a prominent announcement on the Platform and, where appropriate, by direct email notification to registered players.

The effective date at the top of this document will be updated to reflect the date of the most recent revision. We recommend reviewing this Policy periodically to stay informed about how MC888 handles your personal data. Continued use of the Platform following any update constitutes your acceptance of the revised Policy.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data MC888 holds about you, please contact our Data Support team through the following channels. We aim to respond to all data-related enquiries within five business days.