miga888 Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how miga888 ("miga888", "we", "us", "our"), the operator of the online gaming platform at miga888.org, collects, uses, stores, shares, and protects personal data relating to registered players, prospective players, and visitors to the miga888 website ("you", "your").

miga888 is committed to handling personal data responsibly and in accordance with applicable data protection law, including Malaysia's Personal Data Protection Act 2010 ("PDPA") and any other applicable legislation in the jurisdictions from which miga888 accepts players. This Policy applies to all personal data processed by miga888 in connection with the miga888.org platform and all associated services.

By registering an account on miga888.org or by continuing to use the miga888 platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein. This Policy should be read alongside the miga888 Terms & Conditions, which govern your use of the platform.

Data We Collect

miga888 collects personal data in the following categories, depending on how you interact with the platform:

miga888 does not knowingly collect special categories of sensitive personal data (e.g., racial or ethnic origin, political opinions, health data, biometric data) unless specifically required for regulatory compliance and with your explicit consent where required by law.

How We Use Your Data

miga888 uses your personal data only for purposes that are lawful, specified, and not incompatible with the purpose for which the data was originally collected. The primary purposes for which miga888 processes personal data are:

• Account management: Creating, maintaining, and administering your miga888 player account, including authentication, balance management, and account history.
• Identity verification (KYC): Verifying your identity, age (21+ requirement), and payment method ownership in compliance with anti-money laundering and responsible gaming obligations.
• Transaction processing: Processing deposits and withdrawals in Malaysian Ringgit via your selected payment method (DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Touch 'n Go eWallet, Boost, GrabPay).
• Platform operation: Delivering games, sportsbook services, promotions, and all other miga888 platform features to you.
• Customer support: Responding to your enquiries, resolving complaints, and providing account assistance.
• Responsible gaming: Monitoring gaming patterns to detect problem gambling indicators and administering deposit limits, self-exclusion, and other responsible gaming tools in accordance with platform policy.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, unauthorised account access, and other prohibited conduct.
• Legal and regulatory compliance: Complying with applicable law, responding to lawful requests from regulatory or law enforcement authorities, and maintaining records as required.
• Marketing (where consented): Sending promotional communications, bonus offers, and platform updates where you have provided consent and have not subsequently withdrawn it.
• Platform improvement: Analysing aggregated usage data to improve game selection, platform performance, and user experience.

Legal Basis for Processing

miga888 processes personal data on the following legal bases under applicable data protection law:

• Contract performance: Processing necessary to perform the contract between miga888 and you as a registered player (e.g., account management, transaction processing, game delivery).
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering regulations, gaming licence conditions, and tax reporting requirements.
• Legitimate interests: Processing carried out for miga888's legitimate business interests where those interests are not overridden by your rights — including fraud prevention, platform security, and aggregate analytics.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for direct marketing communications. You may withdraw consent at any time by contacting miga888 customer support.

Data Sharing

miga888 does not sell, rent, or trade your personal data to any third party. Personal data is shared only in the following limited circumstances:

• Licensed game providers: Game studios and live dealer operators (e.g., Evolution Gaming, Pragmatic Play, Ezugi) receive the minimum data necessary to deliver their games to your account session. These providers are bound by data processing agreements and are prohibited from using player data for their own marketing purposes.
• Payment processors: Banks, e-wallet operators (Touch 'n Go, Boost, GrabPay, DuitNow, FPX), and other payment service providers receive financial and identity data necessary to process your transactions. They operate under their own privacy policies and applicable Malaysian financial services regulations.
• KYC and identity verification services: Third-party verification platforms receive identity and document data to perform age and identity checks required by licensing conditions.
• Regulatory and law enforcement authorities: miga888 will disclose personal data to competent authorities when required to do so by law, court order, or regulatory direction — including reporting obligations under anti-money laundering legislation.
• Professional advisers: Legal, financial, and audit advisers may access personal data on a strictly need-to-know basis subject to professional confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all miga888 assets, personal data held by miga888 may be transferred to the successor entity, subject to equivalent privacy protections.

Cookies & Tracking Technologies

miga888.org uses cookies and similar tracking technologies to operate the platform, maintain your login session, remember your preferences, and analyse platform usage. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function — including session authentication, load balancing, and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, last visited game category, and responsible gaming settings. Disabling these may reduce platform functionality.
• Analytical cookies: Collect aggregated, anonymised data about how players navigate the platform — pages visited, time on page, error events. Used to improve platform performance.
• Marketing cookies: Used only where you have provided consent, to personalise promotional communications and measure the effectiveness of campaigns. May be disabled via your account settings or browser controls.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging into your miga888 account or using core platform features.

Data Retention

miga888 retains personal data only for as long as necessary for the purpose for which it was collected, subject to any longer retention period required by applicable law. The general retention periods applied by miga888 are as follows:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of seven (7) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction and financial records: Retained for a minimum of seven (7) years from the date of the transaction, as required by applicable financial services regulations.
• KYC documents: Retained for a minimum of five (5) years following the end of the business relationship, or longer if required by a regulatory investigation.
• Customer support communications: Retained for three (3) years from the date of the communication, unless subject to an ongoing dispute or complaint.
• Technical and usage logs: Retained for thirteen (13) months from the date of collection, after which aggregated analytics data may be retained indefinitely.
• Marketing consent records: Retained for the duration of the account relationship and for one (1) year following consent withdrawal.

When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

Data Security

miga888 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction, including:

• SSL/TLS encryption for all data transmitted between your device and the miga888 platform;
• Encryption at rest for sensitive data including financial information and identity documents;
• Role-based access controls limiting internal access to personal data on a need-to-know basis;
• Multi-factor authentication for internal systems handling player data;
• Regular security assessments and penetration testing by independent third parties;
• Incident response procedures for the detection, containment, and notification of data security incidents.

Notwithstanding the above measures, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, miga888 will notify affected players without undue delay in accordance with applicable law.

Your Rights

Subject to applicable data protection law and any overriding legal obligations of miga888, you have the following rights in respect of your personal data held by miga888:

• Right of access: You may request a copy of the personal data miga888 holds about you and information about how it is used.
• Right of correction: You may request that inaccurate or incomplete personal data be corrected. For most account data, you can update your information directly from your miga888 account settings panel.
• Right of erasure: You may request deletion of personal data that is no longer necessary for the purpose for which it was collected, subject to miga888's legal retention obligations.
• Right to restrict processing: You may request that miga888 limit the processing of your data in certain circumstances, for example while a data accuracy dispute is being resolved.
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
• Right to object to marketing: You may opt out of direct marketing communications at any time by contacting miga888 customer support or adjusting your account notification preferences.

To exercise any of the above rights, contact miga888 via live chat (available 24/7 on MYT) or by email at [email protected]. miga888 will respond to verifiable requests within thirty (30) days.

Children & Minors

miga888 services are strictly restricted to persons aged 21 years and above. miga888 does not knowingly collect personal data from persons under the age of 21. If miga888 becomes aware that personal data has been collected from a person under 21, the relevant account will be immediately suspended, all data associated with the account will be deleted (subject to any legal retention requirements), and any funds in the account will be handled in accordance with the miga888 Terms & Conditions and applicable law.

If you believe that a person under the age of 21 has registered an account on miga888.org, please contact miga888 immediately via the customer support live chat or by email at [email protected].

International Data Transfers

miga888's platform infrastructure and some of its third-party service providers operate from locations outside Malaysia. Where personal data is transferred outside Malaysia, miga888 ensures that appropriate safeguards are in place — including standard contractual clauses or equivalent transfer mechanisms — to ensure that your data receives a level of protection consistent with Malaysian data protection law and the standards applied within the miga888 platform.

By using the miga888 platform and accepting this Policy, you acknowledge that your personal data may be transferred to and processed in countries outside Malaysia in connection with the services described in this Policy.

Changes to This Policy

miga888 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, miga888 will notify registered players by email (to the address registered on your account) or by an in-platform notification, at least seven (7) days before the change takes effect. The "Last updated" date at the top of this Policy will be revised accordingly.

Continued use of the miga888 platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, please stop using the platform and contact miga888 to close your account.

Contact & Complaints

For any queries, requests, or complaints relating to this Privacy Policy or miga888's handling of your personal data, please contact the miga888 data protection team:

• Live Chat: Available 24/7 via the miga888.org platform (MYT, GMT+8)
• Email: [email protected]

miga888 will acknowledge data protection enquiries within five (5) business days and aims to resolve all substantive complaints within thirty (30) days. If you are not satisfied with miga888's response to a data protection complaint, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.