mea888 Privacy Policy

1. Introduction

mea888 is an online sports betting and casino platform operated for Malaysian players. We are committed to protecting the privacy and personal data of every individual who accesses our website at mea888.lat. This Privacy Policy has been prepared in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and applies to all personal data processed by mea888 in connection with your use of our platform.

"Personal data" means any information that directly or indirectly identifies you as an individual — including your name, identification number, contact details, financial information, device identifiers, and behavioural data generated during your use of mea888. We take our obligations under the PDPA seriously and process your personal data only for lawful, specified, and transparent purposes.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming guidelines, which together form the full framework governing your relationship with mea888.

2. Information We Collect

mea888 collects personal data through several channels — directly from you during registration and account management, automatically through your use of our platform, and occasionally from third parties engaged for identity verification or payment processing. The categories of data we collect include:

2.1 Account Registration Data

• Full name as per your Malaysian identity card (MyKad) or passport
• Date of birth (used to verify that you are 21 years of age or older)
• Email address and mobile phone number
• Residential address, including postcode and state (e.g., Kuala Lumpur, Selangor, Penang, Johor)
• Username and encrypted password

2.2 Identity Verification Data (KYC)

• Copy of government-issued identification document (MyKad front and back, or passport)
• Selfie photograph for liveness verification where required
• Proof of address document (e.g., utility bill, bank statement)

2.3 Financial and Transaction Data

• Bank account name and number for FPX, DuitNow, Maybank, CIMB, Public Bank, RHB, or AmBank withdrawals
• e-Wallet identifiers for Touch n Go eWallet and Boost transactions
• Cryptocurrency wallet addresses for BTC, ETH, USDT, or BNB transfers
• Deposit and withdrawal history, transaction timestamps, and amounts in MYR or equivalent

Please note: mea888 does not store full card numbers, CVV codes, or online banking PINs on its own servers. Payment credentials are handled by regulated payment gateway partners in compliance with applicable financial data security standards.

2.4 Platform Usage Data

• IP address, browser type and version, operating system, and device type
• Pages visited, session duration, click patterns, and betting or gaming activity logs
• Referral source and campaign identifiers (where applicable)
• Cookie data and local storage identifiers (see Section 5)

2.5 Communications Data

• Records of support interactions via live chat, email, or in-platform messaging
• Survey responses, feedback submissions, and promotional correspondence

3. How We Use Your Data

mea888 processes your personal data only for purposes that are lawful and directly related to the operation of our platform and the delivery of services to you. The primary purposes include:

• Account Management: Creating, verifying, and maintaining your mea888 player account.
• Identity Verification: Confirming that you are 21 years of age or older and fulfilling our Know Your Customer (KYC) obligations under applicable anti-money laundering (AML) regulations.
• Transaction Processing: Facilitating deposits and withdrawals via FPX, DuitNow, e-Wallets, and cryptocurrency channels in Malaysian Ringgit (MYR) and supported digital currencies.
• Platform Security: Detecting and preventing fraud, unauthorised access, and suspicious activity on player accounts.
• Responsible Gaming: Monitoring play patterns to identify potential problem gambling behaviour and, where necessary, applying account limits, cooling-off periods, or self-exclusion measures in line with our Responsible Gaming policy.
• Customer Support: Responding to queries, complaints, and account-related requests submitted to our support team.
• Legal Compliance: Meeting our obligations under Malaysian law, including record-keeping requirements under PDPA, AML legislation, and any lawful orders from regulatory authorities.
• Service Improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, and user experience.
• Marketing (with consent): Sending you relevant promotional communications about mea888 bonuses, new games, and platform updates — but only where you have explicitly opted in. You may withdraw this consent at any time.

mea888 does not use automated decision-making processes (including profiling) that produce legal or similarly significant effects on you without human oversight.

4. Sharing of Information

mea888 does not sell your personal data. We share your information only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment Service Providers: Licensed payment gateways and financial institutions (including FPX operators, DuitNow networks, and regulated e-Wallet providers) receive the minimum data required to process your transactions. These providers are bound by their own privacy and security obligations.
• Identity Verification Partners: Third-party KYC service providers may receive copies of your identity documents solely for the purpose of verifying your identity and age. These partners are contractually prohibited from using your data for any other purpose.
• Technology and Hosting Providers: Infrastructure partners that host or maintain platform components may have access to encrypted or pseudonymised data as part of their service delivery, subject to strict data processing agreements.
• Legal and Regulatory Authorities: Where required by a valid court order, legal process, or request from a Malaysian government authority, mea888 may disclose your personal data to the extent mandated by law.
• Corporate Transactions: In the event of a merger, acquisition, or asset sale, personal data may be transferred to the successor entity, provided that equivalent privacy protections remain in place. Affected users will be notified in advance.

In all cases where data is shared with third parties, mea888 requires those parties to maintain appropriate confidentiality and security standards consistent with this Policy and applicable law.

5. Cookies & Tracking Technologies

mea888 uses cookies and similar technologies to operate the platform effectively, keep your session secure, and understand how players interact with our website. The types of cookies we use are:

• Essential Cookies: Strictly necessary for the platform to function. These manage your login session, store authentication tokens, and prevent cross-site request forgery (CSRF). They cannot be disabled without breaking core functionality.
• Security Cookies: Used for fraud detection and bot mitigation. These help us identify unusual access patterns that may indicate account compromise or automated abuse.
• Analytics Cookies: Collect anonymised data on page views, session lengths, and navigation paths. This data is used in aggregate form only and cannot be used to identify individual users. mea888 does not use Google Analytics or other third-party analytics tools that send data to external advertising networks.
• Preference Cookies: Remember your language preference, display settings, and other platform customisations between sessions.

mea888 does not use third-party advertising cookies, retargeting pixels, or cross-site tracking technologies. You can manage or delete cookies through your browser settings. Note that disabling essential cookies will prevent you from logging into your mea888 account.

6. Data Retention

mea888 retains your personal data for as long as your account is active and for a period thereafter as required by applicable law and legitimate business purposes. Specific retention periods are as follows:

• Account and KYC data: Retained for a minimum of 7 years from the date of account closure or last activity, in accordance with Malaysian AML and financial record-keeping requirements.
• Transaction records: Retained for 7 years from the transaction date to support audit, dispute resolution, and regulatory reporting obligations.
• Support communications: Retained for 3 years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Marketing consent records: Retained for the duration of your consent and for 1 year after withdrawal, to demonstrate compliance with our consent obligations.
• Technical logs: Retained for up to 12 months and used solely for security and fraud monitoring purposes, after which they are permanently deleted.

Where retention is no longer required by law or legitimate business purposes, data is securely deleted or anonymised so that it can no longer be linked to any individual.

7. Your Rights Under the PDPA

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to your personal data held by mea888:

• Right of Access: You may request a copy of the personal data we hold about you and information about how it is being used.
• Right of Correction: You may request that inaccurate or outdated personal data be corrected. You can update most account details directly through your mea888 account settings.
• Right to Withdraw Consent: Where our processing is based on your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.
• Right to Restrict Processing: In certain circumstances, you may request that we limit the processing of your personal data — for example, while we investigate a dispute regarding data accuracy.
• Right to Object: You may object to the processing of your data where we are relying on a legitimate interest as the legal basis for processing.
• Right to Erasure: You may request deletion of your personal data. We will honour such requests where no legal obligation requires us to retain the data, and will confirm deletion within 30 days.

To exercise any of these rights, contact our Data Protection team at [email protected]. Please include your registered email address and a description of your request. We may require identity verification before processing your request. We will respond within 21 days of receipt.

8. Security Measures

Protecting your personal data against unauthorised access, loss, or misuse is a core operational priority at mea888. The technical and organisational security measures we implement include:

• 256-bit TLS/SSL encryption for all data in transit between your device and our servers
• AES-256 encryption for sensitive data fields stored in our databases
• Multi-factor authentication (MFA) options available on all player accounts
• Firewall and intrusion detection systems monitoring our server infrastructure 24/7
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis
• Regular penetration testing and security audits conducted by independent specialists
• Incident response procedures to detect, contain, and notify affected users of any data breach within 72 hours, consistent with best-practice standards

While mea888 employs industry-standard security measures, no online platform can guarantee absolute security. We encourage all players to use strong, unique passwords for their mea888 accounts and to enable MFA where available.

9. Minors and Age Restriction

mea888 is strictly an adults-only platform (21+). We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration and KYC process; any account found to belong to a person below 21 years of age will be immediately suspended and all funds returned in accordance with our Terms & Conditions.

If you believe that a minor has registered an account on mea888, please notify us immediately at [email protected] and we will take prompt action to investigate and close the account.

10. Changes to This Privacy Policy

mea888 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable legal requirements. When material changes are made, we will notify registered users via the email address associated with their account and update the "Last updated" date at the top of this page.

We encourage you to review this Policy periodically. Your continued use of mea888 after the effective date of any updated Policy constitutes your acknowledgement of the changes. If you disagree with the updated terms, you may close your account by contacting our support team.

11. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by mea888, please reach out to our Data Protection team:

• Email: [email protected]
• Response Time: Within 3 business days for general queries; within 21 days for formal PDPA data subject requests
• Platform: In-platform live chat available 24/7

If you are not satisfied with our response to your privacy concern, you may refer the matter to the Department of Personal Data Protection (JPDP) Malaysia, the supervisory authority responsible for enforcement of the PDPA 2010.