Privacy Policy — Master188

Master188 ("we", "us", "our", or "the Platform") operates the online casino and sports betting platform accessible at master188.cam and is the data controller in respect of the personal information processed under this Privacy Policy.

We take the privacy and security of our users' personal data seriously. This Privacy Policy describes what personal information we collect from users ("you", "your", "the User") when you register an account, make deposits or withdrawals, engage with our games, contact our support team, or otherwise interact with the Master188 Platform — and explains how that data is used, protected, and, in limited circumstances, shared.

This Policy applies to all users of the Master188 Platform, including registered players accessing the service from Malaysia and other permitted jurisdictions. It should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy.

In this Privacy Policy, the following terms carry the meanings set out below:

Master188 collects personal data through several channels — directly from you when you register or interact with the Platform, automatically as you use the service, and in limited cases from third-party service providers such as payment processors. The categories of personal data we may collect are set out in the table below.

Master188 processes the personal data we collect for clearly defined and lawful purposes. We do not process personal data in any manner that is incompatible with the purpose for which it was originally collected. The primary purposes for which we process your data are detailed below.

4.1 Account Management & Service Delivery

We use your Identity Data, Contact Data, and Financial Data to create and manage your Account, authenticate your logins, process deposits and withdrawals via Malaysian payment channels (DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong and BTC/USDT), credit bonuses, and deliver the casino and sports-betting services you have registered to use.

4.2 Identity Verification & Fraud Prevention

We process Identity Data and Financial Data for Know Your Customer (KYC) verification, anti-money laundering (AML) compliance, fraud detection, and to verify that you meet the minimum age requirement of21 years for access to the Platform. We may share KYC data with third-party identity verification services acting as Data Processors under our instruction.

4.3 Responsible Gambling Compliance

Gameplay Data and Preferences Data are processed to monitor player behaviour for signs of problem gambling, enforce self-exclusion requests, apply deposit and loss limits, and send reality-check notifications. This processing is conducted in the interests of player welfare and our responsible gambling obligations.

4.4 Customer Support

Communications Data is processed to respond to enquiries, resolve disputes, handle withdrawal issues, and improve the quality of our24/7 support service. Support interactions may be recorded and retained for quality assurance and compliance purposes.

4.5 Platform Analytics & Improvement

Technical Data and Gameplay Data are processed in aggregate or pseudonymised form to analyse Platform performance, identify technical issues, understand user behaviour, and improve the overall gaming experience. Individual gameplay records may also inform personalised game recommendations.

4.6 Legal & Regulatory Compliance

We process Personal Data where necessary to comply with applicable laws, regulations, court orders, or requests from law enforcement or regulatory authorities. This may include disclosing transaction records or account information where legally required.

Master188 processes personal data under one or more of the following legal bases, depending on the nature and purpose of the processing activity:

• Contractual Necessity: Processing required to perform our contractual obligations to you as a registered User, including operating your Account, processing transactions, and delivering the gaming services you have subscribed to.
• Legitimate Interests: Processing that is necessary for our legitimate business interests — such as fraud prevention, platform security, gameplay analytics, and responsible gambling monitoring — provided that such interests are not overridden by your privacy rights and interests.
• Legal Obligation: Processing that is required to comply with applicable laws and regulatory requirements, including AML obligations, age verification requirements, and responses to lawful requests from competent authorities.
• Consent: Where we rely on your consent as the legal basis for processing (e.g., for certain marketing communications), you have the right to withdraw that consent at any time without detriment to your Account standing, subject to any processing already conducted in reliance on that consent.

Master188 does not sell, rent, trade, or otherwise transfer your personal data to third parties for their own commercial or marketing purposes. We share personal data only in the limited circumstances described in this section, and only to the extent necessary for the relevant purpose.

6.1 Service Providers (Data Processors)

We share personal data with trusted third-party service providers acting as Data Processors under written data processing agreements. These providers assist us with: payment processing (including Malaysian banking and e-wallet infrastructure), identity verification and KYC screening, platform hosting and technical infrastructure, customer support tooling, and fraud detection services. All Data Processors are contractually required to process personal data only on our documented instructions and to maintain appropriate security measures.

6.2 Regulatory & Law Enforcement Disclosures

We may disclose personal data to competent governmental authorities, regulatory bodies, or law enforcement agencies where we are legally required to do so, or where such disclosure is necessary to protect the rights, property, or safety of Master188, our users, or third parties.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of Master188's assets, personal data held by Master188 may form part of the transferred assets. In such circumstances, we will take reasonable steps to ensure that the acquiring entity provides privacy protections consistent with this Policy, and will notify affected users where required by law.

Master188 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for such longer period as may be required to comply with applicable legal, regulatory, accounting, or reporting obligations.

As a general principle, the following retention periods apply:

• Account and Identity Data: Retained for the duration of your Account and for a minimum of five (5) years following Account closure, in accordance with standard AML record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of seven (7) years following each transaction, consistent with financial reporting and audit obligations.
• Gameplay and Session Data: Retained for three (3) years following the relevant session, subject to regulatory requirements and responsible gambling monitoring purposes.
• Customer Support Communications: Retained for two (2) years following resolution of the relevant query or complaint.
• Self-Exclusion Records: Retained indefinitely to prevent circumvention of self-exclusion by future re-registration attempts.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data destruction protocols.

Master188 implements a comprehensive range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the Master188 Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Two-Factor Authentication (2FA): Available on all user Accounts to provide an additional layer of login security beyond username and password.
• Access Controls: Personal data is accessible only to authorised Master188 personnel who require it for legitimate business purposes, under role-based access control policies.
• Encrypted Data Storage: Sensitive data, including financial information and KYC documents, is stored in encrypted form on secured servers.
• Fraud Detection Systems: Automated monitoring systems continuously scan for suspicious activity, unusual transaction patterns, and unauthorised access attempts.
• Regular Security Audits: Our platform infrastructure undergoes regular security assessments and penetration testing by qualified professionals.

Notwithstanding these measures, no method of electronic transmission or storage is one hundred percent secure. While we take every reasonable precaution to protect your personal data, Master188 cannot guarantee the absolute security of information transmitted to or stored on the Platform.

Master188 uses cookies and similar tracking technologies (such as web beacons and local storage objects) to operate and improve the Platform. Cookies are small text files stored on your device that help us recognise you across sessions, maintain your login state, and understand how the Platform is being used.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies that keep you logged in during your visit. These cookies cannot be disabled without impairing core Platform functionality.
• Functional Cookies: Enable enhanced features such as remembering your language preferences, notification settings, and responsible gambling tool configurations across sessions.
• Analytics Cookies: Help us understand how users interact with the Platform by collecting aggregated, pseudonymised data on page visits, session duration, and feature usage. This data informs ongoing Platform improvements.
• Security Cookies: Used to detect and prevent fraudulent activity, bot access, and account takeover attempts.

9.2 Managing Your Cookie Preferences

You may configure your browser to refuse or delete cookies at any time. Please note that disabling strictly necessary cookies will prevent core Platform functionality from operating correctly, including maintaining your logged-in session. Instructions for managing cookies are available in your browser's help documentation. Master188 does not use third-party advertising cookies or share cookie data with external marketing networks.

As a data subject, you hold specific rights in relation to the personal data that Master188 holds about you. These rights are set out below. To exercise any of these rights, please contact our support team at [email protected] with a description of your request and verification of your identity.

We will aim to respond to all valid data rights requests within 30 days of receipt. Where a request is complex or requires additional time, we will notify you of the extended timeframe within the initial 30-day period.

The Master188 Platform is strictly for persons aged21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of our account registration and KYC process.

If Master188 becomes aware that personal data has been collected from an individual under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated Account. Any deposits made and winings accumulated by an underage user will be forfeited in accordance with our Terms & Conditions.

If you believe that a minor may have accessed the Platform using your credentials or created an Account without your knowledge, please contact our support team immediately at [email protected].

Master188 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. Any material amendments will be communicated to registered users via the email address associated with their Account and/or through a prominent notice on the Platform homepage.

The date of the most recent update to this Privacy Policy is displayed at the top of this page. Your continued use of the Platform following the publication of any revised Privacy Policy constitutes your acceptance of the updated terms. We recommend reviewing this page periodically to stay informed of how your personal data is being handled.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way Master188 handles your personal data, you are welcome to contact our Data Protection team through any of the following channels:

• Support Email: [email protected] — please include "Privacy Request" in the subject line and provide your registered Account username for faster processing.
• Live Chat: Available24 hours a day, 7 days a week via the live chat widget on the Master188 Platform. Our support agents are trained to handle data protection queries and will escalate complex requests to our data protection team where necessary.

Our support team is available in English and is familiar with the Malaysian data protection environment. Players from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other regions of Malaysia are encouraged to reach out with any concerns about how their data is managed.