milion888 Privacy Policy

1. Introduction

milion888 ("we", "us", "our") operates the online gaming platform accessible at milion888.lat. We are committed to protecting the privacy and personal data of all registered users, visitors, and prospective members ("you", "your") in accordance with applicable data protection legislation, including Malaysia's Personal Data Protection Act 2010 (PDPA).

This Privacy Policy describes the types of personal data we collect, the purposes for which we process it, how we store and protect it, the conditions under which we may share it, and the rights available to you as a data subject. By accessing or using the milion888 platform, you acknowledge that you have read and understood this Privacy Policy.

2. Data We Collect

We collect personal data through different interactions with our platform. The categories of data we may collect include, but are not limited to:

• Account Registration Data: Full name, date of birth, email address, username, and password hash.
• Identity Verification (KYC) Data: Government-issued identification documents (e.g., MyKad, passport), selfie photographs, and proof of address where required for regulatory compliance.
• Financial Data: Transaction history, deposit and withdrawal amounts, payment method identifiers (e.g., Maybank, CIMB, Public Bank account references; Touch n Go eWallet; Boost wallet). We do not store full card numbers or complete bank account details on our servers.
• Device and Technical Data: IP address, browser type and version, operating system, device identifiers, time zone settings, and session duration.
• Usage Data: Pages visited, games played, bets placed, features accessed, and in-platform behaviour logs.
• Communications Data: Records of correspondence when you contact our support team via live chat or email.
• Location Data: General geographic region inferred from your IP address, used for regulatory compliance and fraud prevention.

3. Purposes of Data Processing

milion888 processes your personal data for the following clearly defined purposes:

• Account Management: Creating, maintaining, and securing your player account.
• Identity Verification: Fulfilling Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations under applicable licensing requirements.
• Service Delivery: Processing deposits, withdrawals, bets, and game outcomes accurately and securely.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, abuse of promotional offers, and unauthorised account access.
• Regulatory Compliance: Meeting obligations under international gaming licensing conditions and applicable Malaysian law.
• Customer Support: Responding to enquiries, resolving disputes, and providing platform assistance.
• Platform Improvement: Analysing aggregated usage data to improve game performance, user experience, and platform stability.
• Marketing Communications: Sending promotional offers, bonus updates, and platform news, where you have given explicit consent. You may withdraw consent at any time.
• Responsible Gaming: Monitoring gaming behaviour to identify potential problem gambling indicators and to apply self-imposed limits or restrictions at your request.

4. Legal Basis for Processing

milion888 processes your personal data on the following legal grounds, consistent with the PDPA and internationally recognised data protection principles:

• Contractual Necessity: Processing is required to fulfil our obligations under the Terms and Conditions you agreed to upon registration.
• Legal Obligation: Certain processing activities, such as KYC, AML checks, and transaction record-keeping, are mandated by our licensing conditions and applicable law.
• Legitimate Interests: Fraud prevention, platform security, and service improvement activities are carried out in pursuit of our legitimate business interests, provided these do not override your fundamental rights.
• Consent: Marketing communications and optional analytics are conducted only where you have provided clear, informed, and freely given consent.

5. Cookies and Tracking Technologies

The milion888 platform uses cookies and similar tracking technologies to deliver a seamless experience. Cookies are small text files stored on your device. We categorise our cookies as follows:

• Essential Cookies: Required for the platform to function correctly, including session authentication and security tokens. These cannot be disabled without disrupting core functionality.
• Analytical Cookies: Used to understand how visitors interact with the platform, which pages are visited most frequently, and where performance bottlenecks occur. Data is aggregated and anonymised.
• Preference Cookies: Remember your language and display preferences to personalise your experience across sessions.
• Marketing Cookies: Used to deliver relevant promotional content on and off the milion888 platform, where consent has been obtained.

You may control cookie settings through your browser's privacy preferences. Note that disabling certain cookies may affect the availability of some platform features.

6. Data Sharing and Third-Party Disclosure

milion888 does not sell or rent your personal data to third parties. We may share your data in the following limited circumstances:

• Payment Processors: To facilitate secure deposits and withdrawals, your payment-related data is shared with licensed payment service providers (such as banks and e-wallet operators) on a need-to-know basis.
• Identity Verification Providers: To fulfil our KYC obligations, identity documents may be processed by certified third-party verification partners.
• Technology and Infrastructure Partners: Cloud hosting, game studios, and cybersecurity providers may process limited technical or anonymised data as part of delivering the platform.
• Regulatory Authorities: We may disclose data to law enforcement agencies, gaming regulators, or other government authorities where required by law or by our licensing conditions, without prior notice to you where disclosure is mandatory.
• Corporate Transactions: In the event of a merger, acquisition, or asset sale, your personal data may be transferred as part of that transaction, subject to continuing data protection obligations.

All third-party data processors engaged by milion888 are contractually required to maintain appropriate technical and organisational security measures.

7. International Data Transfers

Given the international nature of the online gaming industry, your personal data may be transferred to and processed in jurisdictions outside of Malaysia. Where such transfers occur, milion888 ensures that appropriate safeguards are in place — including contractual clauses, server-side encryption, and access controls — to maintain a level of data protection consistent with the PDPA and international best practices.

8. Data Retention

milion888 retains your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, and as required by applicable law and our licensing obligations. Specifically:

• Account data is retained for the lifetime of your active account, plus a minimum of five (5) years following account closure, in line with AML record-keeping requirements.
• Transaction records are retained for a minimum of seven (7) years to comply with financial reporting and audit obligations.
• KYC documents are retained for the duration required by our licensing authority.
• Customer support correspondence is retained for up to three (3) years following resolution.

After the applicable retention period, data is securely deleted or anonymised such that it can no longer be linked to any individual.

9. Your Rights as a Data Subject

Subject to applicable law, you have the following rights in relation to your personal data held by milion888:

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is processed.
• Right to Rectification: You may request that inaccurate or incomplete data be corrected. Minor updates (e.g., contact details) may be made directly through your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent, subject to our legal retention obligations.
• Right to Restrict Processing: You may request that we limit the processing of your data in certain circumstances, such as while a dispute regarding accuracy is being resolved.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including direct marketing communications.
• Right to Data Portability: Where technically feasible and legally applicable, you may request that your data be provided in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact our Data Protection team at the email address listed in the Contact section of this policy. We will respond to verified requests within thirty (30) calendar days. In some cases, we may need to verify your identity before actioning a request.

10. Security Measures

milion888 implements a layered approach to information security. Technical and organisational measures in place include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data at rest, including KYC documents and financial records.
• Multi-factor authentication (MFA) options available for player accounts.
• Regular independent penetration testing and vulnerability assessments of platform infrastructure.
• Role-based access controls ensuring internal staff can only access data necessary for their specific job functions.
• Automated fraud detection systems monitoring for unusual account activity, irregular transaction patterns, and potential account compromise.
• Staff training on data handling best practices and security awareness.

While no system can guarantee absolute security, milion888 is committed to maintaining industry-leading standards to protect your information. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant authorities in accordance with applicable legal requirements.

11. Children and Minors

The milion888 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data belonging to a minor has been submitted to us, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has created an account on our platform, please contact us immediately at the email address provided below.

12. Links to Third-Party Content

The milion888 platform may reference third-party services (such as payment gateways accessed externally during transactions). These third-party services operate under their own privacy policies, and milion888 is not responsible for their data handling practices. We encourage you to review the privacy policies of any third-party services you interact with independently of our platform.

13. Changes to This Privacy Policy

milion888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform services, or applicable law. When material changes are made, we will notify registered users via email or through a prominent notice on the platform at least fourteen (14) days prior to the changes taking effect. The "Last Updated" date at the top of this page will always reflect the most current version.

Your continued use of the milion888 platform following notification of any such changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated terms, you must cease using the platform and may request account closure.

14. Governing Law

This Privacy Policy is governed by and shall be construed in accordance with the laws of Malaysia, including the Personal Data Protection Act 2010 (PDPA). Any dispute arising from this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of Malaysia, unless otherwise required by applicable licensing regulations.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way milion888 processes your personal data, please contact our Data Protection team:

When submitting a data subject request, please include your registered username and a brief description of your request so we can locate your records and respond efficiently. We may ask for additional verification to confirm your identity before processing sensitive requests.