Privacy Policy Menang88 – Malaysian Player Data Protection

Menang88 takes the privacy and security of all players' personal data extremely seriously. This Privacy Policy ("Policy") explains in detail how Menang88 ("Platform", "We") collects, uses, stores, processes, and protects the personal information you provide when registering or using any service through menang88.im.

This policy applies to all users of the Menang88 platform — including registered players, guest users browsing the site without an account, and players who previously held an active account. It covers all access methods — whether via desktop web browser, mobile browser, or the Menang88 Progressive Web App (PWA).

Menang88 adheres to best-practice data protection standards in line with applicable laws, including Malaysia's Personal Data Protection Act 2010 (PDPA). If you have any questions about how we handle your data, please contact our data protection team using the details provided at the end of this document.

Menang88 collects several categories of personal data depending on how you interact with the platform. Below is a detailed explanation of the data we collect and why it is needed:

Menang88 uses collected personal data solely for legitimate and necessary purposes. We do not use your data for anything beyond what is stated below without first obtaining your additional consent.

The primary purposes for which Menang88 uses your data are:

• Account Management: Processing registrations, verifying identity, managing login credentials, and maintaining your account records on Menang88.
• Payment Processing: Verifying and processing all deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX, as well as processing withdrawal of winnings to your account.
• Gaming Service Delivery: Provides access to live casino, slots, Blackjack, jackpot, Sports Betting, Live Matches, and Virtual Sports based on your account profile and eligibility.
• Bonus Management: Verifying bonus claim eligibility, and calculating and crediting bonuses such as the Welcome Bonus of up to RM 688, weekly cashback, and seasonal promotions.
• Fraud Prevention & Security: Detecting and investigating any suspicious activity, unauthorized access, or fraudulent attempts that could compromise your account security or the integrity of the Menang88 platform.
• Responsible Gaming: Monitoring gameplay activity patterns to identify early signs of problem gambling and providing appropriate support resources in line with Menang88's responsible gaming policy.
• Customer Support: Handles complaints, responds to enquiries, and resolves issues raised with the Menang88 support team in Bahasa Malaysia.
• Service Communications: Sending important account-related notifications — including deposit confirmations, withdrawal confirmations, security alerts, and material policy updates.

Menang88 does not sell, rent, or share players' personal data with third parties for marketing or advertising purposes. However, in certain limited situations, Menang88 may need to share data with the following parties for legitimate operational purposes:

• Malaysian Payment Providers: To process deposit and withdrawal transactions, Menang88 shares the required transaction information with eWallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow, and FPX-participating banks. This sharing is limited strictly to the information needed for transaction verification.
• Game Software Providers: Licensed game providers that supply slots, Live Casino, and Blackjack to Menang88 may receive game session data that does not contain sensitive personally identifiable information, solely for the purpose of delivering technical services.
• Identity Verification Services (KYC): Menang88 uses approved third-party services for identity verification on withdrawal requests that exceed certain limits. Only the information required for verification is shared.
• Legal Authorities: Menang88 will disclose data to the relevant legal authorities or regulatory bodies when required by Malaysian law or a valid court order. Menang88 will not disclose more than what is strictly required by such legal obligations.

Menang88 implements a range of technical and organisational security measures to protect players' personal data from unauthorised access, loss, destruction, or disclosure. These measures include:

• Data Encryption in Transit: All communications between your device and Menang88's servers are encrypted using TLS 1.3 with 256-bit encryption — the same standard used by Maybank2u and CIMB Clicks.
• Data-at-Rest Encryption: Sensitive data stored in Menang88's databases — including identification information and financial details — is encrypted at rest using the AES-256 algorithm.
• Two-Factor Authentication (2FA): Menang88 provides and encourages the use of two-factor authentication for all player accounts as an additional layer of security beyond passwords.
• Role-Based Access Control: Only Menang88 staff who require access to specific data to perform their duties are granted that access — in accordance with the least privilege principle. All access is logged and monitored.
• Periodic Vulnerability Scanning: Menang88 systems are regularly scanned for security vulnerabilities, and any identified weaknesses are patched within defined timeframes according to severity level.
• Incident Response Plan: Menang88 has a tested security incident response plan in place. Should any data breach occur that may affect players, Menang88 will notify all affected players within 72 hours of the incident being confirmed.

Menang88 uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session security, and analyse how the platform is used in aggregate for continuous improvement.

Types of cookies used by Menang88:

• Essential Cookies (Required): Required for core platform operations — including login authentication, session security, and language preference memory. These cookies cannot be disabled as they are essential for the platform to function properly.
• Performance Cookies: Collects information on how pages are accessed and used — including the most frequently visited pages and time spent on them. All such data is aggregated and contains no personally identifiable information.
• Preference Cookies: Remembering your preferences such as display language, account settings, and last played games to deliver a more personalized experience on Menang88.
• Security Cookies: Helps detect and prevent fraudulent activity, unauthorised access, and other security threats — including identifying login attempts from unfamiliar locations or devices.

You can manage your cookie settings through your browser at any time. However, disabling essential cookies may affect the functionality of the Menang88 platform and the security of your account.

As a Menang88 player in Malaysia, you have the following rights regarding the personal data held by our platform. Menang88 is committed to respecting and facilitating the exercise of these rights:

Menang88 services are intended exclusively for individuals aged 18 and above. Menang88 does not knowingly collect personal data from individuals under the age of 18. The platform's registration process requires strict age verification, and access to all services is restricted to adult players who have confirmed their age.

If you have reason to believe that a minor has registered on Menang88, please contact our support team immediately at support@menang88.im so that prompt action can be taken.

Menang88 retains your personal data only for as long as necessary to fulfill the purpose for which it was collected, or to comply with applicable legal requirements. The following are the general retention period guidelines applied by Menang88:

• Active Account Data: Retained for the duration your account is active and for up to 7 years after account closure to meet financial record-keeping and audit requirements.
• Financial Transaction Records: Retained for 7 years from the transaction date in accordance with applicable accounting and tax legislation in Malaysia.
• Security Logs: Retained for 2 years for security incident investigation and audit trail purposes.
• Support Communication Data: Customer support conversations are retained for 2 years from the date the issue is resolved, for quality control and training purposes.
• Visitor Data (without an account): Cookie and visitor analytics data is stored for a maximum of 13 months before being automatically deleted or anonymized.

Once the retention period expires, the relevant personal data will be securely deleted or anonymised in a manner that makes it no longer attributable to any identified individual.

In the course of platform operations, some technical data may be processed or stored on servers located outside Malaysia — for example, for data backup purposes or the use of cloud infrastructure services. When this occurs, Menang88 ensures that such transfers are carried out with safeguards that are equivalent to or higher than those required in Malaysia.

Menang88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new technologies, legal requirements, or feedback received from our player community. When any material amendments are made, Menang88 will:

• Updating the "Last Updated" date at the top of this document
• Notifying all registered players via email or in-platform notification at least 14 days before any changes take effect
• Clearly displays a summary of key changes so players can quickly assess their impact

It is your responsibility to review this Privacy Policy periodically. Continued use of the Menang88 platform after any amendments take effect will be considered acceptance of the revised policy. If you do not agree with the changes made, you have the right to close your account and request the deletion of your personal data.

If you have any questions, concerns, or wish to exercise your personal data rights in relation to this Privacy Policy, the Menang88 data protection team can be reached through the following channels: