Privacy Policy MTK88 — Personal Data Protection for Malaysia Users

MTK88 is an online gaming and betting platform operating under the official domain mtk88.pro. We care about the privacy of every member and visitor to our website. This Privacy Policy is written in plain language because we believe you deserve to know exactly how your information is handled — without confusing jargon.

This policy applies to all information collected through the official MTK88 website, our Android and iOS mobile apps, and any communication channels between you and MTK88, including email, live chat, and customer support services.

We view privacy not merely as a compliance checkbox, but as a core element in building long-term trust with our members. Over 500,000 Malaysian members trust MTK88 to handle their data responsibly, and we uphold that trust with genuine commitment every day.

MTK88 collects various types of information depending on how you interact with our platform. Below is an overview of the data categories we may collect:

We only collect data that is genuinely necessary for specific purposes. We do not collect sensitive information such as biometric data or health information except in highly specific situations and with your explicit consent.

Every piece of information we collect is used for legitimate and transparent purposes. MTK88 uses your data for the following:

• Account management — creates, authenticates, and maintains your account so you can securely access all platform features.
• Transaction processing — accurately and securely processes deposits, withdrawals, and all other financial activity in your account.
• KYC/AML legal compliance — fulfils our obligations under anti-money laundering laws and user identity verification requirements.
• Platform security — detects and prevents fraud, hacking, unauthorised access, and suspicious activity within our systems.
• Customer support — enables our team to assist you more effectively when you contact us.
• Service improvement — analyses aggregate usage patterns (without identifying individuals) to improve the user experience on the platform.
• Account-related communications — sends important notifications such as transaction confirmations, security alerts, and policy updates.
• Responsible gaming — monitors gaming behaviour to identify users who may need support and activates appropriate limit tools.

MTK88 will not use your data for purposes unrelated to the services you use without first obtaining your additional consent.

MTK88 does not sell or disclose your personal information to third parties for commercial purposes. However, there are limited situations where we need to share your data with certain parties to enable our services to function properly:

• Payment service providers — such as FPX, Touch 'n Go eWallet, GrabPay, and Boost, which require transaction information to process your deposits and withdrawals.
• Gaming software providers — gaming technology companies supplying Slots, Live Casino, and other game platforms may receive the minimum technical data required for session authentication.
• Cloud service providers — our server infrastructure and data storage are managed by internationally accredited cloud providers bound by strict confidentiality agreements.
• Legal authorities — mtk88 will disclose the required information to the relevant authorities when mandated by law or a valid court order.
• Anti-fraud agency — in fulfilling our AML/CFT obligations, certain information may be shared with agencies responsible for detecting illegal activity.

All third parties we work with are required to meet data security standards equal to or exceeding those of MTK88, and are prohibited from using your data for any purpose other than what has been agreed upon.

The security of your data is MTK88's top technical priority. We continually invest in security infrastructure to ensure your information remains safe from both internal and external threats.

The technical security measures we implement include:

• 256-bit SSL/TLS Encryption for all data communications between clients and servers.
• Two-factor authentication (2FA) available to all member accounts as an additional layer of security.
• 24/7 Monitoring by an intrusion detection system (IDS) and intrusion prevention system (IPS) operating around the clock.
• Data-at-rest encryption for all sensitive information stored in our databases.
• Regular security audits conducted by independent parties to identify and address any system vulnerabilities.
• Role-based access control ensuring that only designated staff with a legitimate operational need can access sensitive data.

While we work hard to protect your data, no system in the world can guarantee 100% security at all times. We therefore encourage you to also take steps to secure your account by using a strong password, enabling 2FA, and never sharing your login credentials with anyone.

MTK88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

We use several types of cookies for different purposes:

• Essential cookies — required for core platform functions such as login session authentication and security. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies — collects information about how you use our website (pages visited, time spent) to help us improve content and navigation.
• Functional cookies — saves your preferences such as language, region, and display settings so you do not need to reconfigure them each time.
• Analytics cookies — used to understand aggregate traffic patterns and user interactions for platform improvement purposes.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect some features on the MTK88 platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the international privacy practices we adhere to, you have the following rights regarding your personal data:

• Right to access — you may request a copy of all personal data we hold about you at any time.
• Right to rectification — if any of your information is inaccurate or outdated, you have the right to request immediate correction.
• Right to erasure — you may request the deletion of your personal data, subject to any legal retention obligations binding on us.
• Right to object to processing — you may object to the use of your data for specific purposes such as direct marketing.
• Right to withdraw consent — where data processing is based on your consent, you may withdraw it at any time.
• Right to data portability — you may request your data in a machine-readable format for portability purposes.

To exercise any of the above rights, please contact the MTK88 customer support team via live chat on the platform. We will process your request within 14 business days and may require identity verification before implementing any changes to protect the security of your account.

MTK88 retains your personal data only for as long as necessary for the stated purposes or as required by applicable law. Retention periods vary by data type:

• Active account data — retained for the duration your account remains active and for the prescribed period following account closure.
• Financial transaction records — retained for a minimum of seven years in accordance with Malaysia's tax and AML/CFT legal requirements.
• KYC records — retained for the minimum period prescribed by the relevant regulatory body, typically no less than five years.
• Support communication log — retained for two years for service quality and dispute resolution purposes.
• Technical log data — typically retained for 90 days for security and threat detection purposes.

Once the retention period has expired and there are no ongoing legal obligations, your data will be securely deleted or anonymised using methods that ensure it can no longer be linked back to you.

The MTK88 platform is strictly for users aged 18 and above without exception. We do not intentionally collect, process, or store any personal information from individuals under the age of 18.

We enforce a strict age verification process during new account registration as part of our KYC procedures. If we find that information has been collected from someone under 18 years of age without proper verification, we will take immediate action to delete that information and close the account in question.

Parents and guardians with concerns about children's privacy are encouraged to reach out to us via live chat. We take every report on this matter seriously and will respond promptly.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, we encourage you to contact us directly. The MTK88 privacy team is ready to assist you.

You can reach us via:

• Live chat — the fastest way to get an immediate response, available 24 hours a day, 7 days a week via the chat icon on the platform.
• Email — send your privacy enquiries to [email protected] and we will respond within two business days.

MTK88 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any material changes will be communicated to you via in-account notifications or email. The effective date of the current version is shown at the top of this document.

Your continued use of the MTK88 platform after any changes to this Privacy Policy are published will be deemed as your acceptance of the updated policy.