Privacy Policy

1. Introduction

This Privacy Policy (hereinafter "Policy") is issued by miga888 (hereinafter "the Platform", "we", "us", "our") and governs the collection, processing, storage, and disclosure of personal data relating to individuals who access or use the miga888 website at https://miga888.cam and all associated services (collectively, the "Services").

miga888 recognises the importance of privacy to our Members and visitors, particularly those accessing the Platform from Malaysia. We are committed to handling all personal data responsibly, in accordance with applicable data protection principles, and to being transparent about our data practices at all times.

By registering an Account, accessing the Platform, or otherwise using our Services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy.

2. Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data — in this context, miga888.
• "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller, subject to documented instructions.
• "Member" means any individual who has registered an Account on the miga888 Platform.
• "KYC" (Know Your Customer) refers to the identity and age verification process required under our licensing obligations.
• "Cookies" means small text files placed on a Member's device by the Platform for session management, security, and analytics purposes.

3. Data Controller

miga888 acts as the Data Controller in respect of all Personal Data collected through the Platform. miga888 operates under an international online gaming licence and is responsible for ensuring that all Personal Data is processed in accordance with the principles set out in this Policy and applicable data protection legislation.

For all data protection enquiries, requests to exercise your rights as a data subject, or complaints regarding our data practices, please contact our Data Protection team via the contact details provided in Section 14 of this Policy.

4. Personal Data We Collect

4.1 Data You Provide Directly

When you register an Account, complete KYC verification, or interact with our Services, we collect the following categories of Personal Data that you provide directly:

• Full legal name and date of birth
• Malaysian MyKad number, passport number, or other government-issued identifier
• Residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam)
• Email address and contact telephone number
• Payment and financial account information (e.g., bank account numbers for DuitNow/FPX, e-wallet identifiers for Touch 'n Go eWallet, Boost, or GrabPay)
• Copies of identity documents submitted for KYC purposes
• Communications you send to our support team

4.2 Data Collected Automatically

When you access the Platform, we automatically collect certain technical and behavioural data, including:

• Internet Protocol (IP) address and approximate geolocation
• Device type, operating system, and browser information
• Session start and end times, pages visited, and features used
• Betting and gaming activity logs, including wager amounts and game history
• Cookie identifiers and session tokens

4.3 Data from Third Parties

We may receive Personal Data about you from third-party identity verification providers engaged to support our KYC obligations, payment processors processing your deposits and withdrawals, and fraud prevention services used to protect the integrity of the Platform.

5. Purposes of Processing & Legal Basis

The table below sets out the primary purposes for which miga888 processes Personal Data and the corresponding legal basis for each processing activity.

Where we rely on consent as the legal basis for processing (e.g., marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To opt out of marketing communications, use the unsubscribe mechanism in any marketing email, or contact our support team.

6. Data Sharing & Disclosure

miga888 does not sell Personal Data to third parties. We may share Personal Data with the following categories of recipients, strictly to the extent necessary to operate the Platform and fulfil our legal obligations:

• Payment Processors: Including providers supporting DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency transaction processors.
• Identity Verification Providers: Third-party KYC and anti-fraud service providers engaged to verify the identity and age of Members.
• Gaming Platform Providers: Licensed game studios and platform technology providers who supply the gaming content and backend infrastructure for miga888.
• Customer Support Tools: Live chat and ticketing system providers that process communications between Members and our support team.
• Regulatory Authorities: Where required by our licensing obligations, applicable law, court order, or lawful request from a competent authority.
• Professional Advisers: Lawyers, auditors, and compliance consultants, subject to professional confidentiality obligations.

All third-party Data Processors engaged by miga888 are subject to written data processing agreements requiring them to process Personal Data only in accordance with our documented instructions and to implement appropriate technical and organisational security measures.

7. Data Retention

miga888 retains Personal Data for no longer than is necessary to fulfil the purposes for which it was collected, having regard to the nature of the data, the purpose of processing, and applicable legal and regulatory requirements. The following general retention periods apply:

• Account and identity data: Retained for the duration of the Member relationship, plus a minimum of five (5) years following account closure, to meet anti-money-laundering and licensing record-keeping obligations.
• Transaction and financial records: Retained for a minimum of five (5) years following the transaction date.
• KYC documents: Retained for a minimum of five (5) years from the date of submission, or longer if required by applicable regulatory guidance.
• Customer support communications: Retained for three (3) years from the date of the last interaction.
• Marketing consent records: Retained for the period of consent plus three (3) years to demonstrate compliance.
• Technical and analytical data (anonymised or aggregated): May be retained indefinitely as it does not constitute Personal Data once anonymised.

Upon the expiry of the applicable retention period, Personal Data will be securely deleted or anonymised. Where deletion is not immediately possible (e.g., data stored in backup archives), it will be isolated from further active processing and deleted at the next scheduled cycle.

8. Security Measures

miga888 implements a comprehensive suite of technical and organisational security measures designed to protect Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between Members' devices and the Platform
• Encryption of Personal Data at rest using industry-standard algorithms
• Role-based access controls limiting staff access to Personal Data on a strict need-to-know basis
• Multi-factor authentication for administrative access to data systems
• Regular security assessments and vulnerability testing of Platform infrastructure
• Formal incident response procedures for detecting, containing, and reporting data security incidents
• Ongoing staff training on data protection obligations and information security practices

Notwithstanding these measures, no method of electronic transmission or storage is completely secure. While we take every reasonable precaution, miga888 cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected Members as required by applicable law.

9. Cookies & Tracking Technologies

miga888 uses cookies and similar tracking technologies to operate and improve the Platform. The following types of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function. These include session management cookies that keep you logged in during your visit and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without affecting Platform functionality.
• Performance and Analytics Cookies: Used to collect anonymised or aggregated information about how Members use the Platform — such as pages visited and errors encountered — to help us improve performance and user experience.
• Functional Cookies: Used to remember your preferences (such as language settings) to provide a more personalised experience.

miga888 does not use cookies for cross-site advertising, behavioural profiling, or retargeting purposes. You may configure your browser to refuse or delete cookies; however, doing so may impair your ability to use certain features of the Platform, including maintaining an active login session.

10. Protection of Minors

The miga888 Platform is strictly for adults aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. If we become aware that Personal Data has been collected from a person under the minimum age, we will promptly delete such data, close the relevant Account, and return any balance in accordance with our responsible gambling obligations.

If you are a parent or guardian and believe that your child has provided Personal Data to miga888, please contact us immediately using the details in Section 14 of this Policy.

11. Third-Party Links & Services

The miga888 Platform does not contain links to third-party websites or applications for commercial purposes. Where payment processing redirects occur (for example, as part of a bank transfer or e-wallet authentication flow via Maybank, CIMB, Public Bank, or a similar provider), those services are governed by the respective third party's own privacy policies.

miga888 is not responsible for the privacy practices or data handling of any third-party service. Members should review the applicable privacy policy of any external service before submitting personal information.

12. Exercising Your Data Subject Rights

To exercise any of the rights described in this Policy — including access, rectification, erasure, restriction, portability, or objection — please submit a written request to our support team via live chat or by emailing [email protected].

To protect your privacy and security, we may need to verify your identity before processing your request. We will acknowledge receipt of your request promptly and provide a substantive response within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reasons for it.

Where we decline to action a request — for example, because a legal obligation requires us to retain the data — we will explain our reasons clearly. You will not be charged a fee for exercising your rights except in cases of manifestly unfounded or excessive requests, at our reasonable discretion.

13. Amendments to This Policy

miga888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing activities, applicable law, or regulatory guidance. The effective date at the top of this page will be updated accordingly.

Where changes are material — meaning they significantly alter how we process your Personal Data or affect your rights — we will notify active Members via a prominent notice on the Platform or by email to the address registered on your Account prior to the changes taking effect.

Your continued use of the Platform following the publication of any revised Privacy Policy constitutes your acknowledgement of the updated terms. If you object to any revised terms, you may request Account closure by contacting our support team.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have concerns about how miga888 handles your Personal Data, please contact us through any of the following channels:

• Live Chat: Available 24/7 directly on the miga888 Platform — the fastest way to reach us.
• Email: [email protected]

We aim to acknowledge all data protection enquiries within 24 hours and to provide a full response within 30 calendar days. For urgent matters — particularly those involving suspected unauthorised access to your account — please use the live chat channel to speak with a support agent immediately.