MCW88 Privacy Policy – Malaysia Personal Data Protection

This MCW88 Privacy Policy applies to all individuals who register an account, access the platform, make deposits or withdrawals, use any of our services or products, or simply browse the MCW88 website without registering. In short, if you interact with MCW88 in any way, this Privacy Policy applies to you.

MCW88 is the data controller for the purposes of the Personal Data Protection Act 2010 (PDPA) Malaysia. This means MCW88 is directly responsible for how your personal data is handled, and we are legally bound to comply with all applicable provisions of the PDPA.

This Privacy Policy covers all MCW88 products and services — from Malaysia Super League and EPL football Sports Betting, live casino, baccarat, table games, Texas Hold'em and Omaha poker, e-sports, and virtual sports, to online slots — all accessible via the official MCW88 website.

MCW88 only collects personal data that is genuinely necessary to operate the platform and provide services to you. The following are the categories of data we may collect:

Registration & Identity Data:

• Full name as stated on your official Malaysian identity document (MyKad)
• Identity card number (MyKad) — collected only when identity verification is required
• Date of birth — to verify that you are 18 years of age or older
• Active mobile phone number
• Email address
• Password (stored as a non-readable cryptographic hash)

Financial Transaction Data:

• Payment method used — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, or CIMB Clicks
• Deposit and withdrawal history (amount, date, method)
• Current account balance and transaction history within the MCW88 platform

Usage & Technical Data:

• IP address of the device used to access MCW88
• Device type, web browser, and operating system
• Game history and betting activity within the MCW88 platform
• Access timestamps and in-account activity logs
• Cookie and website performance data (for improving user experience)

MCW88 uses your personal data for the following purposes, all of which are necessary to operate the platform and deliver the best possible service to you:

• Account management: Creating, managing, and securing your MCW88 account — including the login process, two-factor authentication, and account recovery where necessary.
• Payment processing: Processing deposits and withdrawals made through Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, and other accepted methods. Financial data is used solely for transactions that you initiate.
• Identity verification & compliance: Verifying your age and identity in accordance with applicable legal and regulatory requirements, and fulfilling anti-money laundering (AML) compliance obligations.
• Service improvement: Analysing aggregated, anonymised usage patterns to improve MCW88 platform performance, refine the interface, and identify technical issues.
• Account-related communications: Sending important account-related notifications — such as deposit confirmations, withdrawal status updates, password changes, and security alerts — via your registered phone number or email address.
• Customer support: Enables the MCW88 support team to verify your identity and provide effective assistance when you reach out via live chat or email.
• Fraud prevention & security: Detecting and preventing fraudulent activity, multi-account usage, bonus abuse, and other security threats that could affect other MCW88 members.

MCW88 no using your personal data for third-party marketing, selling it to advertisers, or for any commercial purpose not stated in this Privacy Policy without your explicit prior consent.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), MCW88 must have a valid legal basis for each instance of personal data processing. The bases MCW88 relies on are:

• Performance of contract: Data processing required to fulfil the agreement between MCW88 and you — for example, processing deposits via Touch 'n Go eWallet or GrabPay, managing your account, and providing access to MCW88 platform products.
• Legal compliance: Processing required to fulfil MCW88's legal obligations under PDPA 2010 and other applicable Malaysian laws, including anti-money laundering requirements.
• Legitimate interest: Processing required for MCW88's legitimate interests — such as fraud prevention, platform security, and service improvement — provided these interests do not override your fundamental privacy rights.
• Consent: For certain non-mandatory uses of your data — such as optional marketing communications — MCW88 will obtain your explicit consent beforehand, and you have the right to withdraw that consent at any time.

MCW88 does not sell, rent, or share members' personal data with third parties for marketing or commercial purposes without your explicit consent. However, there are limited circumstances in which MCW88 may need to share data with certain parties:

• Payment service providers: Transaction details are shared with e-wallet and banking providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX) solely for the purpose of processing deposits and withdrawals you have requested. These providers are bound by strict confidentiality agreements with MCW88.
• Platform technology provider: MCW88 uses third-party software providers and technical infrastructure necessary to operate the platform. These providers are given access only to the data required for their technical functions and are bound by data processing agreements that comply with PDPA 2010.
• Legal requirement: MCW88 may be required to disclose personal data to Malaysian authorities — such as the police, courts, or relevant law enforcement agencies — when mandated by law or a valid court order. MCW88 will endeavour to notify you of any such disclosure, provided this is not prohibited by applicable law.

MCW88 takes data security seriously as part of our commitment to member privacy. The following layers of protection are in place to safeguard your personal data:

• 256-bit SSL Encryption: All data transmitted between your device and MCW88's servers is encrypted using TLS 1.2/1.3 with 256-bit encryption strength — the same standard used by major banks in Malaysia.
• Secure password storage: MCW88 account passwords are never stored in plain text. They are stored as irreversible cryptographic hashes — meaning even if MCW88's servers were accessed without authorisation, your password cannot be retrieved.
• Two-factor authentication (2FA): MCW88 offers an additional layer of security through two-factor authentication using your mobile number, ensuring that no one but you can access your account even if your password is compromised.
• Real-time activity monitoring: MCW88's systems continuously monitor account activity to detect suspicious patterns — such as repeated login attempts from unfamiliar locations or unusual transactions — and take preventive action promptly.
• Internal access controls: Only authorised MCW88 staff who require access as part of their job function are permitted to view members' personal data, and every instance of access is automatically logged for audit purposes.
• Regular security testing: The MCW88 platform undergoes regular penetration testing and security audits conducted by independent cybersecurity experts to identify and address vulnerabilities before they can be exploited.

While MCW88 takes all reasonable steps to protect your data, no system can guarantee 100% security in an online environment. You also play an important role in keeping your account secure by using a strong password, not sharing your login credentials, and promptly reporting any suspicious activity to MCW88.

MCW88 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable Malaysian law.

• Active account data: For as long as your MCW88 account remains active and you continue using the platform. This data is necessary to maintain your account and provide you with uninterrupted service.
• Financial transaction data: Records of deposit, withdrawal, and gaming activity transactions are retained for a minimum of 7 years from the date of the transaction, in line with Malaysia's financial and tax record-keeping requirements.
• Identity verification data: Retained for the duration of account activity and for any additional period required under applicable anti-money laundering laws.
• Closed account data: When an MCW88 account is closed at your request, your personal data will be retained for the minimum period required by law before being securely deleted or anonymised.

Once the relevant retention period has expired, MCW88 will securely delete or anonymise your personal data so that it can no longer be linked to you as an identifiable individual.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by MCW88:

To exercise any of the above rights, contact the MCW88 support team via live chat or email at support@mcw88-jit.com. MCW88 will process your request within 21 days of receiving a complete application, in accordance with the requirements of PDPA 2010.

MCW88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files stored in your web browser when you visit the MCW88 website.

Types of cookies MCW88 uses:

• Essential cookies: These cookies are essential for the basic functions of the MCW88 platform — such as maintaining your login session, remembering your language preference, and ensuring deposit transactions are processed securely. Without them, the platform will not function properly. These cookies cannot be disabled.
• Performance cookies: Collecting information about how you use the MCW88 platform — such as the most frequently visited pages, time spent, and any errors encountered. This data is used in aggregated, anonymised form to improve the platform.
• Functional cookies: Remembering your preferences and settings within the platform — such as your preferred betting limits and display options — so you don't have to reconfigure them every time you log in.

You can manage and delete cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality of some parts of the MCW88 platform. For instructions on managing cookies in Chrome or Safari — commonly used by Malaysian players — please refer to your browser's help section.

MCW88 does not knowingly collect or process personal data of individuals under the age of 18. The MCW88 platform is strictly for adults aged 18 and above.

If MCW88 discovers that personal data of an individual under 18 has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question. Parents or guardians who suspect their child has registered an MCW88 account should contact the MCW88 support team immediately via email at support@mcw88-jit.com for immediate action.

MCW88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or platform service improvements. The "Last Updated" date at the top of this page will be revised whenever a material amendment is made.

When we make significant changes to this Privacy Policy, MCW88 will notify you via:

• A clear notice displayed on the MCW88 homepage or login page
• Email to the address registered on your account (for material amendments)
• In-account notification on MCW88 upon your next login

It is your responsibility to review this Privacy Policy periodically. Your continued use of the MCW88 platform after any amendments take effect constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes made, you have the right to close your MCW88 account and request deletion of your data in accordance with the rights set out in Section 8.

If you have any questions, concerns, or complaints regarding how MCW88 handles your personal data, or if you wish to exercise any of your rights under PDPA 2010, please contact us through the following channels:

• Live Chat: The MCW88 support team is available 24 hours a day, 7 days a week via in-platform live chat. This is the fastest way to get a response to privacy enquiries that do not require in-depth investigation.
• Email: For formal requests relating to personal data — such as data access, correction, or deletion — please email support@mcw88-jit.com with the subject line "Personal Data Request — [Username]".

MCW88 is committed to responding to all privacy-related enquiries within 5 business days of receiving a complete request. For formal requests to exercise rights under PDPA 2010, the response period is within 21 days, in accordance with legal requirements.

If you are not satisfied with MCW88's response to your privacy inquiry or complaint, you have the right to escalate the matter to the Department of Personal Data Protection Malaysia (JPDP), the regulatory body overseeing the PDPA 2010 in this country.