mct88 Privacy Policy

1. Who We Are

mct88 ("we", "us", "our") is the operator of the online gaming platform accessible at mct88.app, offering sports betting, live casino, slot games, and lottery services primarily to players in Malaysia. For the purposes of applicable data protection legislation, mct88 is the data controller in respect of personal data collected through the Platform.

If you have any questions regarding the handling of your personal data, or wish to exercise any of your data rights, you may contact our Data Protection Officer at: [email protected].

2. Personal Data We Collect

mct88 collects the following categories of personal data from users of the Platform:

2.1 Identity & Contact Data

• Full legal name as it appears on official identification;
• Date of birth and age verification documentation (e.g. MyKad, passport);
• Email address and mobile phone number;
• Residential address and postcode.

2.2 Financial Data

• Bank account details or e-wallet identifiers associated with deposits and withdrawals (e.g. Maybank account number, Touch n Go eWallet ID, Boost account);
• Transaction history including deposit amounts, withdrawal amounts, and dates;
• Source of funds documentation where required by our licensing obligations.

2.3 Account & Gaming Data

• mct88 Account username and encrypted password hash;
• Betting history, game session logs, wager amounts, and game outcomes;
• Bonus usage records and promotion participation history;
• Responsible gaming preferences including deposit limits and self-exclusion status.

2.4 Technical & Usage Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser type;
• Pages visited, session duration, and clickstream data;
• Login timestamps and session identifiers.

2.5 Communications Data

• Records of correspondence with mct88 customer support;
• Responses to surveys or feedback forms where voluntarily submitted.

3. How We Collect Personal Data

mct88 collects personal data through the following means:

• Direct provision: Information you provide when registering an Account, completing KYC verification, making deposits, requesting withdrawals, or contacting customer support;
• Automated collection: Technical and usage data collected automatically via server logs, cookies, and similar tracking technologies as you interact with the Platform;
• Third-party sources: Identity verification data from KYC service providers; payment data from payment processors (e.g. Touch n Go, Boost, bank transfer APIs); fraud prevention data from third-party screening services;
• Publicly available sources: Information from regulatory watchlists or sanctions databases used for compliance screening purposes.

4. Purposes of Processing

mct88 processes your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your mct88 Account; verifying your identity and age (21+ requirement); managing login authentication;
• Service delivery: Processing bets and game sessions; calculating and crediting winnings; processing deposits and withdrawals; applying bonuses and promotions;
• Legal and regulatory compliance: Meeting Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations under our gaming licence; responding to regulatory enquiries; maintaining mandatory audit records;
• Fraud prevention and security: Detecting and preventing fraudulent activity, account takeovers, bonus abuse, and money laundering;
• Responsible gaming: Monitoring gaming behaviour for indicators of problem gambling; administering self-exclusion and deposit limit tools; complying with responsible gaming obligations;
• Platform improvement: Analysing usage patterns to improve the mct88 Platform experience, fix technical issues, and optimise game loading performance;
• Customer support: Responding to your enquiries, complaints, and support requests;
• Marketing communications: Where you have provided consent, sending you promotional communications about mct88 offers, new games, and events.

5. Legal Basis for Processing

mct88 relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing required to perform the contract between mct88 and you as an Account holder — account creation, bet processing, deposits, withdrawals;
• Legal obligation: Processing required to comply with KYC, AML, and gaming licence regulatory requirements;
• Legitimate interests: Fraud prevention, security monitoring, Platform analytics, and improvement activities, where these do not override your privacy interests;
• Consent: Marketing communications and non-essential cookies, where your explicit consent has been obtained and can be withdrawn at any time.

6. Data Sharing and Disclosure

mct88 does not sell your personal data. We may share your data with the following categories of third parties:

• Payment processors: Banks, Touch n Go, Boost, and other payment service providers required to process your deposits and withdrawals;
• KYC and AML service providers: Third-party identity verification and sanctions screening services used to meet our regulatory compliance obligations;
• Game software providers: Licenced game studios (such as PG Soft, Pragmatic Play, Evolution Gaming) receive limited technical session data necessary to deliver game functionality;
• Technology infrastructure providers: Cloud hosting, content delivery, and cybersecurity vendors who process data on our behalf under contractual data processing agreements;
• Regulatory authorities: Gaming regulators, financial intelligence units, or law enforcement agencies where mct88 is legally required to disclose information;
• Professional advisers: Auditors, lawyers, and accountants under obligations of confidentiality.

All third-party processors engaged by mct88 are contractually required to process personal data only in accordance with mct88's instructions and applicable data protection standards.

7. International Data Transfers

7.1 Some of the third parties with whom mct88 shares personal data operate outside Malaysia. Where personal data is transferred internationally, mct88 takes reasonable steps to ensure that appropriate safeguards are in place — including contractual data transfer agreements and vendor due diligence — to protect your data in a manner consistent with this Policy.

7.2 By using the mct88 Platform and creating an Account, you acknowledge that your personal data may be processed outside Malaysia in the manner described in this Policy.

8. Data Retention

8.1 mct88 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, and regulatory reporting requirements.

8.2 Account data (including KYC documents, transaction records, and betting history) is retained for a minimum of five (5) years from the date of Account closure, in accordance with standard gaming licence requirements and anti-money laundering regulations.

8.3 Where personal data is no longer required, mct88 will securely delete or anonymise it in accordance with our internal data retention schedule.

9. Cookies and Tracking Technologies

9.1 mct88 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies: Required for the Platform to function — session authentication, login state persistence, security tokens;
• Analytics cookies: Used to understand how users navigate the Platform and to measure the performance of features;
• Preference cookies: Used to remember your settings and preferences (e.g. language, display preferences).

9.2 You can control non-essential cookies through your browser settings. Disabling cookies may affect the functionality of certain features of the mct88 Platform.

9.3 mct88 does not use cookies or tracking pixels to serve targeted advertising on third-party websites.

10. Your Data Rights

Subject to applicable law, you may have the following rights in respect of your personal data held by mct88:

• Right of access: To request a copy of the personal data mct88 holds about you;
• Right to rectification: To request correction of inaccurate or incomplete personal data;
• Right to erasure: To request deletion of your personal data where we no longer have a lawful basis to retain it;
• Right to restriction: To request that mct88 restricts processing of your personal data in certain circumstances;
• Right to data portability: To receive your personal data in a structured, machine-readable format where processing is based on consent or contract;
• Right to object: To object to processing of your personal data for legitimate interests purposes;
• Right to withdraw consent: Where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our Data Protection Officer at: [email protected]. We will respond to verified requests within 30 days. Note that some rights are subject to exceptions — for example, we may be unable to delete data that we are legally required to retain under our gaming licence.

11. Security

11.1 mct88 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include 256-bit SSL/TLS encryption for data in transit, encrypted storage of sensitive data at rest, and access controls limiting employee access to personal data on a need-to-know basis.

11.2 While mct88 takes reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your mct88 Account credentials. If you suspect unauthorised access to your Account, please contact us immediately at [email protected].

12. Children and Minors

12.1 The mct88 Platform is strictly for individuals aged 21 years and above. mct88 does not knowingly collect personal data from persons under 21.

12.2 If mct88 becomes aware that personal data has been collected from a person under 21, the associated Account will be immediately suspended and the data will be deleted as soon as reasonably practicable, subject to any legal retention obligations.

12.3 If you believe an underage person has registered an mct88 Account, please contact us at [email protected] immediately.

13. Third-Party Links

The mct88 Platform may contain references to game providers and payment partners. mct88 is not responsible for the privacy practices of third parties. This Privacy Policy applies solely to data processed by mct88 in connection with the Platform.

14. Changes to This Privacy Policy

14.1 mct88 may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect the date of the most recent revision.

14.2 For material changes, mct88 will notify registered Account holders via email or in-platform notification. Continued use of the Platform after the effective date of any revision constitutes acceptance of the updated Policy.

15. Contact Our Data Protection Officer

For all privacy-related enquiries, requests to exercise your data rights, or concerns about how mct88 handles your personal data, please contact our Data Protection Officer:

Email: [email protected]
Platform: mct88.app

We aim to acknowledge all privacy enquiries within 5 business days and to provide a substantive response within 30 calendar days.