Mahkota888 Privacy Policy – Transparent & Comprehensive Data Protection for Malaysian Players

1 Personal Data We Collect

Mahkota888 collects various types of personal data depending on how you interact with our platform. Below are the main categories of data collected:

Mahkota888 does not collect sensitive information such as biometric data, health information, or religious and political beliefs unless specifically required by applicable law. All data is collected directly from you during registration or use of the platform — not from unknown third-party sources.

2 How Mahkota888 Uses Your Data

Mahkota888 uses the personal data collected for the following purposes, all of which are necessary to operate a safe and effective online betting platform for Malaysia players:

• Account Management: Creating and managing your Mahkota888 account, processing registrations, verifying identity, and enabling secure login.
• Financial Transaction Processing: Processing deposits via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX, as well as managing withdrawal of winnings in Malaysian Ringgit (MYR) to your account.
• Security & Fraud Prevention: Detecting unusual activity, preventing unauthorized access, identifying duplicate accounts, and complying with anti-money laundering (AML) requirements.
• Customer Support: Responding to enquiries, resolving complaints, and providing assistance via live chat or email.
• Experience Personalisation: Recommending games that match your interests, displaying relevant promotions, and optimising the platform interface based on your usage habits.
• Responsible Gaming: Monitoring gaming patterns to proactively identify signs of problem gambling and activate relevant protection tools.
• Legal Compliance: Meeting reporting requirements, record-keeping, and cooperation with relevant authorities in accordance with applicable Malaysian law.
• Marketing Communications: Sending promotional information, bonuses, and platform updates — only where you have given consent, and you may unsubscribe at any time.

Mahkota888 will not use your data for any purpose beyond those stated above without first obtaining your consent. Any changes to the purpose of data use will be communicated to you via your registered email or an in-platform notification, with sufficient notice for you to make an informed decision.

3 Data Sharing & Disclosure to Third Parties

Mahkota888 does not sell, rent, or trade members' personal data to any third party for marketing or commercial gain. However, in the course of operating the platform, Mahkota888 may share your data with a limited set of third-party categories as follows:

• Payment Service Providers: Digital wallet providers and banking services such as Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX-participating banks receive the information necessary to process your financial transactions. These providers operate under their own privacy policies and security standards.
• Game Providers: Game companies such as Pragmatic Play, PG Soft, NetEnt, and others receive only the minimum data required (such as player ID and bet value) to provide casino games on the Mahkota888 platform. This data does not include your full identity information.
• Technical Service Providers: Companies that provide the technical infrastructure, cloud services, analytics, and cybersecurity required for mahkota888's operations may access your data in a limited data processor capacity, subject to strict confidentiality agreements.
• Legal Authorities: Mahkota888 will disclose required data to Malaysian authorities when mandated by law, court order, or to cooperate in a legitimate criminal investigation.
• Business Transfer: In the event of a merger, acquisition, or transfer of business assets involving mahkota888, user data may be transferred as part of those business assets, subject to prior notice to you and continued privacy protections.

In all instances of data sharing, mahkota888 ensures that only the minimum necessary data is shared, and that recipients are bound by appropriate confidentiality and security obligations. We are not responsible for the privacy practices of third parties beyond our control, and we encourage you to read the relevant provider's privacy policy.

4 Data Security Measures at Mahkota888

The security of your data is mahkota888's absolute priority. We implement multiple layers of protection to keep your personal and financial information safe at all times:

• 256-bit SSL Encryption: All data transmitted between your device and mahkota888's servers is protected by the highest-grade TLS/SSL protocols — the same industry standard used by Malaysia's major banks.
• Encrypted Data Storage: Sensitive data stored in mahkota888's databases, including financial information and passwords, is encrypted using robust algorithms. Passwords are never stored in plain text.
• Internal Access Controls: Only Mahkota888 staff with a legitimate business need are permitted to access user data, and all such access is logged and monitored continuously.
• 24/7 Security Monitoring: An automated monitoring system operates around the clock to detect and flag any unusual or suspicious activity on the Mahkota888 platform.
• Two-Factor Authentication (2FA): 2FA is available for all Mahkota888 accounts as an added layer of security — we recommend all members enable it.
• Regular Security Testing: Mahkota888 conducts regular penetration testing and security audits by independent cybersecurity experts to identify and address vulnerabilities before they can be exploited.

While we take all reasonable steps to protect your data, no system is 100% impenetrable. In the event of a data breach affecting your personal information, Mahkota888 is committed to notifying you within the timeframe required by applicable law and taking immediate remedial action. You also have a responsibility to protect your Mahkota888 account password and not disclose it to anyone else.

5 Your Rights as a Data Subject at Mahkota888

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and related privacy legislation, you as a mahkota888 member have the following rights regarding your personal data:

To exercise any of the rights listed above, please reach out to the Mahkota888 support team via live chat or email at support@mahkota888.asia. We will process your request within 14 business days of receipt. In certain cases where your request involves data that must be retained for legitimate legal or contractual purposes (for example, financial transaction records required under Malaysia's AML laws), we may be unable to fully delete that data and will explain the reasons to you.

Please note that exercising your right to deletion or account closure will result in you no longer being able to access the Mahkota888 platform. Any remaining credit balance in your account will be processed for withdrawal to your registered account before the data is deleted, subject to any necessary security checks.

6 Cookies, Analytics & Tracking Technologies

The Mahkota888 platform uses cookies and similar tracking technologies for various purposes necessary to its operation and improvement. Cookies are small text files stored on your device by your browser when you visit the Mahkota888 website. The following are the types of cookies we use:

• Essential Cookies (Session): Required for core Mahkota888 platform functions such as maintaining your login session, storing items in your betting slip, and securing transactions. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Saving your preferences such as language, display theme, and game settings so you don't have to reconfigure them each time you log in to mahkota888.
• Analytics Cookies: Helps us understand how members use the Mahkota888 platform — which pages are visited most, time spent, and navigation paths. This data is used in aggregate and non-identifiable form to improve platform design and functionality.
• Security Cookies: Used to detect unusual activity, prevent unauthorized access, and protect your mahkota888 account from security threats such as CSRF attacks and session hijacking.

You can manage or delete cookies through your browser settings at any time. However, disabling essential cookies may affect the functionality of the mahkota888 platform, including your ability to log in and use the service fully. For more information on managing cookies across different browsers, please refer to your browser's help documentation.

7 Data Retention Period

Mahkota888 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by applicable Malaysian law. Once the data is no longer needed, it will be securely deleted or anonymised.

• Active Account Data: Retained for the duration of your active Mahkota888 account and for a reasonable period after account closure to facilitate the resolution of any outstanding disputes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's financial reporting and anti-money laundering legal requirements, even after account closure.
• Security Logs: Retained for 12 months for security investigation and digital forensics purposes if required.
• Support Communication Records: Retained for 24 months to ensure continuity of customer support and resolution of complaints.
• Gaming Data & Betting History: Retained for the duration of the active account and 5 years after account closure for dispute resolution and legal compliance purposes.

Once the retention period has lapsed and there is no legal requirement for continued storage, Mahkota888 will securely delete or anonymise the data using methods that ensure it cannot be recovered. You may request further details on specific data retention periods for particular data categories by contacting Mahkota888 support.

8 Child Data Protection

The Mahkota888 platform is exclusively for individuals aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. Should we discover that personal data from an underage individual has been collected without proper age verification, we will take immediate steps to delete that data and close the account in question.

If you believe that a person under the age of 21 has registered on Mahkota888 or that their data has been collected by our platform, please contact us immediately at support@mahkota888.asia so we can take appropriate action without delay. Mahkota888 employs age verification mechanisms during registration to prevent sign-ups by underage individuals, but we rely on community cooperation to ensure these safeguards remain effective.

9 Links to Third-Party Websites

The Mahkota888 platform may contain links to third-party websites or services not operated by us. These links are provided solely for your convenience and do not imply that Mahkota888 endorses or is responsible for the content, privacy policies, or security practices of those websites.

Once you leave the Mahkota888 platform and access a third-party website, our Privacy Policy no longer applies. We encourage you to read the privacy policy of every website you visit, especially before providing any personal information. Mahkota888 is not responsible for any loss or damage arising from your use of those third-party websites.

10 Privacy Policy Amendments

Mahkota888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or improvements to how we protect your information. When material amendments are made, we will notify you via:

• In-platform notifications on Mahkota888 while you are logged in.
• Email sent to the address registered to your Mahkota888 account.
• Update the "Last Updated" date at the top of this document.

Your continued use of the Mahkota888 platform after any amendments take effect will be considered your acceptance of the updated Privacy Policy. If you disagree with the changes, you have the right to stop using the platform and request account closure. It is your responsibility to review this page periodically to stay informed of any updates.

11 Contact Us About Data Privacy

If you have any questions, concerns, or wish to exercise any of your data rights in relation to the Mahkota888 Privacy Policy, please contact us through the following channels:

• Live Chat: Available on the Mahkota888 platform 24 hours a day, 7 days a week in Bahasa Melayu — the fastest way to get an immediate response from our support team.
• Privacy Email: support@mahkota888.asia — please use "Data Privacy Request" as your email subject for faster processing. We aim to respond within 3 business days.

For requests related to your data rights under Malaysia's PDPA — such as access, correction, or deletion — please clearly state the type of request and the relevant details in your communication. We may need to verify your identity before processing any data request to ensure the security of your information. Mahkota888 is committed to responding to all privacy enquiries seriously, transparently, and within a reasonable timeframe.