🔒 Privacy Policy & Data Protection

Privacy Policy Million888 — Our Commitment to Protecting the Personal Data of Malaysian Users

Your privacy is a trust we take seriously. This document clearly explains how million888 collects, uses, stores, and protects your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Last updated: 1 January 2026 Bahasa Malaysia (ms-MY) PDPA 2010 Compliance

Million888's Six Data Protection Principles

Every aspect of how your data is handled on the million888 platform is guided by these six core principles.

Limited & Purpose-Driven Collection

We only collect data that is genuinely necessary for platform operations and never collect excessive data without a clear and legitimate purpose.

High-Grade Data Security

All data is stored with 256-bit SSL encryption. Our servers are protected by multi-layered firewalls and regularly audited by independent security experts.

You're in Full Control

You have the right to access, correct, delete, or withdraw consent for the use of your personal data at any time through your account or by contacting our support team.

Not Sold to Third Parties

Million888 has never and will never sell, rent, or trade users' personal data to any third party for marketing or commercial purposes.

Malaysia PDPA 2010 Compliance

All our data handling practices comply with the Personal Data Protection Act 2010 (PDPA) Malaysia — the data privacy legislation governing all companies operating in Malaysia.

Full Transparency

We have nothing to hide. This privacy policy document is written in plain language so every Malaysian user knows exactly how their data is handled.

Important Note: By registering or using the million888 platform, you confirm that you have read, understood, and agreed to this Privacy Policy. If you do not agree, please discontinue use of the platform.

1. Introduction & Scope of This Policy

This Privacy Policy ("Policy") is published by million888 ("Platform", "We", "Company") and applies to all users who access or use the website, mobile application, and any services provided under the million888 brand.

As a digital entertainment platform operating in Malaysia and serving Malaysian users, million888 is bound by the Personal Data Protection Act 2010 (PDPA) Malaysia. We take this responsibility seriously and ensure that all our data handling practices comply with the applicable legal requirements.

This policy applies to all personal data we collect from users of our services — including account registration, financial transaction processing, casino game activity (baccarat, poker, blackjack, roulette, slots), Sports Betting (Malaysia Super League football, EPL, BWF badminton, ICC cricket, e-sports), and all other interactions with our platform.

2. Types of Personal Data We Collect

Million888 collects various types of personal data from users depending on how they interact with our platform. Below is a full breakdown of the data we collect:

Data Category Example Information Required
Identity Data Full name, date of birth, identification card number (MyKad), KYC selfie photo Mandatory
Contact Data Malaysian phone number, email address, residential address Mandatory
Financial Data Bank account number, bank name, deposit & withdrawal history in MYR Mandatory
Technical Data IP address, device type, operating system, web browser, session logs Automatic
Usage Data Betting history, games played, session duration, game preferences Automatic
Communication Data Customer support conversation records, filed complaints, and user feedback Where Applicable

We no collect full credit card numbers — transactions via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, FPX Maybank2u, and CIMB Clicks are processed directly through payment gateways managed by licensed service providers. million888 only receives transaction confirmations, not sensitive card or account details.

3. How We Use Your Personal Data

The personal data we collect is used for the following legitimate and necessary purposes in the operation of the million888 platform:

  • Service provision: Creating and managing your account, processing deposits and withdrawals in MYR, and enabling you to play games and place bets
  • Identity verification (KYC): Verifying your identity to meet legal requirements and prevent fraud and money laundering
  • Platform security: Detecting and preventing fraudulent activity, unauthorised access, and multi-account usage
  • Customer support: Responding to enquiries, resolving complaints, and providing technical assistance to users
  • Platform communications: Sending important notifications relating to your account, transactions, and security
  • Product improvement: Analysing usage patterns to improve platform features and the overall user experience
  • Legal compliance: Complying with Malaysian legal requirements, including PDPA 2010 and regulatory agency obligations
  • Marketing (with consent): Sending promotional information and the latest bonus offers where you have given consent to receive marketing communications

You may withdraw consent to receive marketing communications at any time without affecting your use of the platform. Submit your request to support@million888.biz or use the "unsubscribe" option in our promotional emails.

4. Legal Basis for Data Processing

Under Malaysia's Personal Data Protection Act 2010 (PDPA), million888 processes users' personal data on the following legal bases:

  • Contract fulfilment: Processing is necessary to provide the services you have requested — including account management, bet processing, and winnings payouts
  • Legitimate interest: Preventing fraud, detecting misuse, and maintaining platform security for the benefit of all users
  • Legal compliance: Meeting Malaysian legal obligations such as KYC requirements, suspicious transaction reporting, and record-keeping
  • Consent: For marketing communications and non-essential cookies, we rely on your explicit consent

5. Sharing Data with Third Parties

Million888 does not sell, rent, or disclose users' personal data to third parties for their own marketing purposes. However, we may share data with the following parties in limited and controlled circumstances:

  • Payment service providers: Malaysian payment gateway providers (such as platforms supporting Touch 'n Go, DuitNow, GrabPay, FPX) receive only the information needed to process your transaction
  • Technology providers: Companies that provide us with technical infrastructure, cloud services, and data analytics are bound by strict confidentiality agreements
  • Law enforcement agencies: Where required by Malaysian law, a valid court order, or binding regulatory requirements
  • Fraud prevention bodies: In circumstances where fraudulent activity or money laundering is suspected, information may be shared with the relevant authorities

All third parties with whom we share data are required to comply with PDPA 2010 and are bound by adequate data protection agreements. million888 remains accountable for the security of all shared data.

6. Data Storage & Retention Period

Million888 retains users' personal data for as long as necessary for the purposes set out in this Policy, or as required to fulfil legal obligations.

Data TypeRetention PeriodReason
Active account dataThroughout the active account periodPlatform operational requirements
Financial transaction records7 yearsMalaysian legal & tax requirements
KYC Documents5 years after account closurePDPA & AML Compliance
Technical & security logs90 daysSecurity investigations
Customer support records3 yearsDispute resolution
Marketing data (with consent)Until consent is withdrawnBased on consent

Upon expiry of the retention period, data will be securely deleted or anonymised in accordance with our internal procedures.

7. Data Security Measures

Million888 implements robust technical and organisational security measures to protect users' personal data from unauthorised access, disclosure, alteration, or destruction:

Data Encryption256-bit SSL
Firewall ProtectionMulti-layered
24/7 MonitoringReal-Time
Access ControlsNeed to Know
Security AuditsQuarterly
Data BackupDaily
  • All communications between your browser and million888's servers are encrypted using TLS 1.3 protocol
  • User passwords are stored in hashed form using modern cryptographic algorithms — we are unable to view your original password
  • Two-factor authentication (2FA) is available and encouraged for all accounts
  • Million888 staff only have access to the data they need to carry out their responsibilities
  • All staff undergo regular information security training

In the event of a material data breach affecting users, million888 will notify affected users and the relevant authorities as required by law within the stipulated timeframe.

8. Your Rights as a User

Under Malaysia's PDPA 2010 and million888's privacy policy, you have the following rights regarding your personal data:

Right of Access

Request a copy of the personal data we hold about you. We will provide a report within 21 business days.

Right to Rectification

Correct any inaccurate or incomplete personal data via your account settings or by contacting our support team.

Right to Erasure

Request the deletion of your personal data, subject to applicable legal retention obligations.

Right to Object

Object to the processing of your data for direct marketing or for specific purposes that are not based on legal obligations.

Right to Data Portability

Receive your data in a machine-readable format for transfer to another platform where applicable.

Withdraw Consent

Withdraw your consent for data processing based on consent (such as marketing) at any time.

To exercise any of the rights above, please contact us at support@million888.biz with the subject line "Personal Data Rights Request". We will process your request within 21 business days. In certain cases, we may require additional identity verification before proceeding.

9. Use of Cookies & Tracking Technologies

Million888 uses cookies and similar tracking technologies to enhance the user experience, analyse traffic, and ensure certain platform features function correctly.

Cookie TypePurposePeriodType
Session Cookies Maintaining your login status & betting cart Until logout Mandatory
Preference Cookies Saving your language preference, odds format, & display settings 1 year Mandatory
Analytics Cookies Analysing how users interact with the platform for continuous improvement 2 years Options
Security Cookies Detecting suspicious login attempts & fraudulent activity 30 days Mandatory

You can manage cookie settings through your web browser preferences. Please note that disabling essential cookies may affect the functionality of the million888 platform.

10. Protection of Children's Data

The million888 platform is strictly for adult users aged 18 years and above. We do not knowingly process, store, or collect any personal data from individuals under the age of 18.

If we discover or are informed that a child's data has been collected without valid parental or guardian consent, we will promptly delete the relevant data and close the associated account. Parents or guardians who find that their child has registered on our platform should contact us immediately at support@million888.biz.

11. Links to Third-Party Websites

The million888 platform may contain links to other websites for informational convenience. However, once you leave our platform, this Privacy Policy no longer applies. million888 is not responsible for the privacy practices of third-party websites.

We encourage users to read the privacy policy of every website they visit. The presence of a link to a third-party website does not imply that million888 endorses or vouches for its content.

12. Amendments to This Privacy Policy

Million888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new Malaysian legal requirements, or technological developments. The "Last Updated" date at the top of this document will be revised whenever material changes are made.

For material changes that affect how we use your data, we will provide reasonable notice via registered email or in-app notification before the changes take effect. Continued use of the platform after such notice is considered your acceptance of the revised policy.

13. How to Contact Us

If you have any enquiries or concerns, or wish to exercise your privacy rights, please contact million888's Data Protection Officer via:

  • Email: support@million888.biz (subject: "Privacy Policy Enquiry")
  • Live Chat: Available 24/7 within the million888 platform
  • WhatsApp: The number displayed in the platform's support section

We are committed to responding to all privacy-related enquiries within 7 business days. For data access or deletion requests, the processing period is up to 21 business days.

The latest version of this Privacy Policy is effective from 1 January 2026. You may also refer to our Terms & Conditions which serves as a supplementary document to this Privacy Policy.

🔐 Your Data Is Safe With Us

Join Million888 — The Platform That Puts Your Security & Privacy First

Over 200,000 Malaysian users have entrusted their data to million888. Register today and enjoy premium digital entertainment in a safe, fair, and trusted environment.

256-bit SSL PDPA 2010 Compliance No Data Sales 18 Years and Above
Bahasa Melayu