MyKad88 is committed to protecting the personal data of every player on our platform. This Privacy Policy explains exactly what data we collect, why we collect it, how it is used, who it may be shared with, and what rights you hold as a data subject. Please read this document carefully.
MyKad88 ("we", "us", "our", or "the Platform") operates the online casino and sports betting services available at mykad88.cam and its associated subdomains. We serve players across Malaysia — including players in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam — and we take our responsibility to protect your personal data seriously.
This Privacy Policy describes how MyKad88 collects, processes, stores, discloses, and protects personal information provided by or gathered about users ("you", "your", or "the Player") who access or use our platform. It applies to all users of the MyKad88 website, mobile platform, and related Services, regardless of the device or location from which they are accessed.
This Policy should be read in conjunction with our Terms & Conditions, which govern your use of the platform as a whole. By registering an account on MyKad88, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.
The following definitions apply throughout this Privacy Policy:
| Term | Definition |
|---|---|
| Personal Data | Any information relating to an identified or identifiable natural person, including name, email address, phone number, government ID number, IP address, device identifiers, and payment account details. |
| Processing | Any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, combination, restriction, erasure, or destruction. |
| Data Controller | The entity that determines the purposes and means of processing Personal Data. In the context of this Policy, the Data Controller is MyKad88. |
| Data Processor | A third party that processes Personal Data on behalf of the Data Controller under a written agreement, such as a payment gateway or cloud infrastructure provider. |
| Consent | A freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their Personal Data. |
| Cookies | Small data files stored on your device by the MyKad88 platform for purposes including authentication, session management, analytics, and personalisation. |
| KYC Data | Identity and document data collected during the Know Your Customer verification process, including copies of government-issued identification such as the Malaysian MyKad. |
MyKad88 acts as the Data Controller for all Personal Data collected from users of its platform. The Platform is operated by an internationally incorporated gaming company holding a valid online gaming licence from a recognised offshore regulatory authority.
As Data Controller, MyKad88 is responsible for determining what Personal Data is collected, for what purposes it is processed, and for ensuring that appropriate safeguards are in place to protect that data. Our Data Protection contact point can be reached through the support channel identified in Section 16 of this Policy.
Where third-party service providers process data on our behalf, they do so as Data Processors under contractual agreements that require them to process data only on our documented instructions and to implement appropriate technical and organisational security measures.
MyKad88 collects the following categories of Personal Data from players, the scope of which depends on how you interact with the platform:
| Data Category | Examples & Detail |
|---|---|
| Identity Data | Full legal name, date of birth, nationality, gender (where provided) |
| Contact Data | Email address, mobile phone number |
| Credentials | Username, hashed password (plaintext passwords are never stored) |
| KYC Documents | Scanned copy or photograph of Malaysian Identity Card (MyKad), passport, or other accepted government-issued ID; selfie photograph |
| Address Data | Residential address (where required for KYC compliance) |
| Data Category | Examples & Detail |
|---|---|
| Payment Method Data | E-wallet account identifier (Touch 'n Go, Boost, GrabPay), bank account number and name (Maybank, CIMB, Public Bank, Hong Leong Bank), DuitNow registered number, USDT TRC20 wallet address |
| Transaction Records | Deposit amounts, timestamps, method, reference numbers; withdrawal requests, amounts, processing outcomes |
| Balance History | Account balance changes, bonus credits and debits, wagering activity summaries |
| Data Category | Examples & Detail |
|---|---|
| Device & Network Data | IP address, device type, operating system, browser type and version, screen resolution, device identifiers |
| Usage Data | Pages visited, games played, betting history, session duration, click paths, search queries within the platform |
| Geolocation Data | Approximate location derived from IP address (used for fraud prevention and jurisdictional compliance — we do not collect GPS-level location data) |
| Communication Data | Records of live chat conversations, email correspondence, and any other communications with our support team |
We collect Personal Data through the following means:
MyKad88 processes Personal Data on one or more of the following lawful bases, depending on the specific processing activity:
MyKad88 uses the Personal Data we collect for the following purposes:
Where you have opted in to receive marketing communications, we may send you promotional emails, bonus notifications, and platform updates. You may opt out of marketing communications at any time by following the unsubscribe link in any email or by contacting our support team.
MyKad88 does not sell your Personal Data. We may share your data with the following categories of third parties, strictly for the purposes described and under appropriate contractual safeguards:
We share necessary transaction data with payment processors to facilitate deposits and withdrawals. This includes providers of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and Malaysian banking services (Maybank, CIMB, Public Bank, Hong Leong Bank). These providers receive only the data necessary to process the specific transaction.
We use third-party identity verification and AML screening services to fulfil our compliance obligations. Your KYC documents and identity data may be passed to these providers for verification against relevant databases. These providers are contractually bound to process data only for verification purposes.
Our platform relies on cloud hosting, content delivery, and analytics providers to operate reliably. These providers act as Data Processors and may have incidental access to Personal Data as part of the services they provide. They are not permitted to use this data for their own purposes.
We may be required to disclose Personal Data to law enforcement agencies, regulatory authorities, or our licensing authority in response to a valid legal request, court order, or as required by our licensing obligations. We will provide only the minimum data necessary to comply with the specific legal requirement.
MyKad88 uses cookies and similar tracking technologies to operate the platform, maintain your session, and improve your experience. Cookies are small data files placed on your device when you access our platform.
You may control non-essential cookies through your browser settings. Disabling strictly necessary cookies will impair the functionality of MyKad88 and may prevent you from logging in or completing transactions. Instructions for managing cookies are available in your browser's help documentation.
MyKad88 retains Personal Data for no longer than is necessary for the purposes for which it was collected, subject to the following retention periods:
Upon the expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our data destruction procedures.
MyKad88 implements appropriate technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:
MyKad88 operates internationally and may transfer your Personal Data to countries outside Malaysia for storage, processing, or service delivery purposes. This may occur when using cloud infrastructure providers, KYC verification services, or payment processors whose servers are located in jurisdictions outside Malaysia.
Where Personal Data is transferred internationally, MyKad88 ensures that appropriate safeguards are in place — including contractual data processing agreements with our service providers that impose data protection obligations equivalent in substance to those described in this Policy.
By using MyKad88, you acknowledge and consent to the transfer of your Personal Data to jurisdictions outside Malaysia as described in this section.
As a data subject, you have the following rights with respect to your Personal Data held by MyKad88. To exercise any of these rights, please contact our support team via the channels described in Section 16. We will respond to verified requests within a reasonable period and in no case later than 30 days.
You have the right to request a copy of the Personal Data we hold about you and information about how it is processed.
You have the right to request correction of inaccurate or incomplete Personal Data held on your account.
You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
You may request that we restrict processing of your data while the accuracy of the data or our basis for processing it is being contested.
You may request a machine-readable copy of Personal Data you have provided to us for the purpose of transferring it to another service.
You may object to processing of your data where we rely on legitimate interests as our lawful basis, unless our legitimate grounds override your rights.
MyKad88 is strictly for individuals aged 21 and above. We do not knowingly collect Personal Data from individuals under the age of 21. Age verification is conducted at registration and prior to the processing of any withdrawal, and accounts identified as belonging to minors are immediately closed.
If you believe that a minor has provided Personal Data to MyKad88 or has registered an account on our platform, please contact us immediately at the address in Section 16. We will investigate the matter promptly, close the account, and securely delete all associated Personal Data where we are not required by law to retain it.
MyKad88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or operational requirements. The "Last updated" date at the top of this page will be revised whenever a substantive change is made.
Where changes are material — for example, changes to the categories of data we collect, the purposes for which we use it, or the third parties with whom we share it — we will notify registered players via email or via a prominent notice on the platform prior to the changes taking effect.
Continued use of the MyKad88 platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the updated Policy, you should discontinue use of the platform and may request account closure in accordance with our Terms & Conditions.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by MyKad88, please contact us through the following channels. We will acknowledge your enquiry promptly and respond fully within 30 days.
Live Chat: Available on-site, 24 hours a day, 7 days a week. Identify your enquiry as a "Data Protection Request" when initiating the chat.
Email (plain text — not a link): [email protected] — please include "Privacy Request" in the subject line.
To protect your account security, data subject requests will be verified against the identity information we hold on your account before we process them. We may need to request proof of identity before actioning a request.
Privacy at a Glance
A plain-language summary of the most important data protection commitments in this Policy.
Your Personal Data is never sold, rented, or shared with third-party advertisers or data brokers. Sharing is strictly limited to operational partners who process data on our behalf under written agreements.
Every page, transaction, and data exchange on MyKad88 is encrypted with industry-standard 256-bit SSL/TLS. Your login credentials, payment details, and personal information are protected in transit at all times.
You can request access to, correction of, or deletion of your Personal Data at any time. Requests are processed within 30 days. We verify your identity before actioning any request to protect you from unauthorised data access.
We do not keep your data indefinitely. Active account data and transaction records are retained for the legally required period (typically five years post-closure) and then securely destroyed. No indefinite data warehousing.
We only send promotional emails and bonus notifications to players who have explicitly opted in. You can withdraw marketing consent at any time — by unsubscribing from any email or by contacting our support team directly.
Your MyKad and identity documents are encrypted at rest and accessible only to authorised compliance staff on a strict need-to-know basis. Documents are never used for any purpose beyond identity and age verification.
Your Data, Your Rights
Our 24/7 support team handles data protection requests alongside general account enquiries. We take privacy seriously — not as a legal formality, but as a fundamental obligation to every Malaysian player who trusts us with their data.
For players aged 21 and above only. Play responsibly. Responsible Gambling