At Million88, your privacy is more than a legal obligation — it is a genuine commitment. We have written this policy in plain language so every Malaysian member can truly understand how their data is managed, protected, and used by our platform.
By registering and using the Million88, you agree to the collection and use of your data as described in this Privacy Policy. Please read it carefully — you have the right to know what happens to your information.
This is a brief overview of the key privacy practices of Million88. For full details on each item, please read the relevant section below.
| Item | Million88's Position |
|---|---|
| Data Collected | Name, Malaysian phone number, e-wallet/bank details, betting history, IP address, and device information. Only data necessary for operations. |
| Purpose of Use | Processing transactions, verifying identity, customer support, account security, and compliance with Malaysian law. |
| Data Sharing | Not sold or shared with third parties for marketing purposes. Shared only with payment processors (Touch 'n Go, GrabPay, DuitNow, FPX) as required to complete your transactions. |
| Technical Security | 256-bit SSL encryption for all communications. Passwords are stored in encrypted form. 24/7 security monitoring and two-factor authentication (2FA) available. |
| Member Rights | You have the right to access, correct, transfer, and request deletion of your personal data at any time by contacting us. |
| Data Retention Period | Active data is retained for the duration the account is active. Transaction data is retained for up to 7 years for financial compliance requirements. Data may be deleted upon request, subject to legal obligations. |
| Cookies | Session and analytics cookies are used to enhance the user experience. You can manage your cookie preferences through your browser settings. |
| Contact Us | For any privacy inquiries, contact support@million88.life. We respond within 48 hours to all data-related queries. |
This is the concrete commitment Million88 towards the privacy of every Malaysian member — not just words, but practices you can verify and test for yourself.
Every bit of information transmitted between your device and Million88's servers is protected by 256-bit SSL encryption — the same standard used by Malaysia's major banking institutions such as Maybank and CIMB. Stored data is also encrypted using industry-recognized algorithms.
Million88 has never and will never sell, rent, or trade our members' personal data to third parties for marketing or commercial purposes. Your data belongs to you — we use it only for the platform operations you agreed to at registration.
You have full rights to access, amend, transfer, and request the deletion of your personal data held by Million88. The process is straightforward — contact us via email or live chat and we will process your request within the stipulated timeframe.
Million88's privacy operations comply with Malaysia's Personal Data Protection Act 2010 (PDPA), the country's primary data protection legislation. This means your rights as a data subject are safeguarded by a recognised Malaysian legal framework.
When you make a deposit using Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost, or ShopeePay, your payment details are processed directly through a certified payment gateway and are not stored on Million88's servers. We receive only a transaction confirmation — not your card or account details.
You can manage your communication preferences with Million88 at any time — including promotional notifications, system updates, and account communications. Unsubscribing from any marketing communications is straightforward via the unsubscribe link or your account settings.
Million88 (also referred to as "we", "the platform", or "million88.life") takes seriously our responsibility as a data controller over the personal information of all members and users of our platform. This Privacy Policy explains transparently how we collect, store, use, protect, and in certain circumstances, share your personal data when you use the platform Million88.
This policy was drafted to comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection. It applies to all registered members, website visitors, and anyone who interacts with the Million88 in any way.
We understand that your trust is our most valuable asset. Many Malaysian players who have joined Million88 do so partly out of trust that their data will be handled responsibly. We take that trust seriously — not just through the words in this document, but through ongoing investment in security infrastructure, staff training, and regular audits of our data processing practices.
Legal Basis: The processing of your personal data by Million88 is carried out on several lawful bases: (a) the performance of a service contract between you and us; (b) legal obligations applicable to us as a platform operator; and (c) our legitimate interests in maintaining the security and integrity of the platform, provided these do not override your rights and interests.
Million88 only collects data that is strictly necessary to operate the platform safely and effectively. The following are the categories of data we collect:
This is the basic data required to open an account:
Data related to your deposit and withdrawal activity:
Important note: Million88 does not store your bank account numbers, card numbers, or e-wallet login credentials. This information is processed directly by third-party payment gateways (Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost, ShopeePay), each of which maintains its own privacy and security policies.
A record of your activity on the platform for operational and security purposes:
Data collected automatically when you use the platform:
Million88 collects your data through several different methods, and we want you to know exactly how each one works.
The majority of data we hold is provided directly by you when:
Some data is collected automatically through standard web technologies when you browse or use the platform Million88. This includes cookies, server logs, and analytics technologies that help us understand usage patterns in order to improve the user experience.
When you make a deposit using Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Boost, or ShopeePay, the respective payment processor sends us a transaction confirmation containing only the minimum information needed to credit your account — typically the amount, timestamp, and transaction reference.
Million88 will never ask you to share your e-wallet password, PIN, or bank login credentials through any channel. If anyone claims to be a member of our staff and requests this information, please contact our support team immediately as it may be a fraud attempt.
Every use of personal data by Million88 has a clear and lawful purpose. Below is the complete list of those purposes along with their legal basis:
This is the primary use — your data is required to:
Data is used to protect you and the platform from harmful activity:
When you contact our support team Million88, we use your account data to verify your identity and provide accurate, secure assistance. Support communication records are retained for quality control purposes and as evidence in the event of a dispute.
Aggregated and anonymised data (not personally identifiable) is used to understand platform usage patterns and drive continuous improvements to the user experience Million88.
We use your phone number to send important notifications such as transaction confirmations, account security alerts, and account status updates. These are operational communications, not marketing, and cannot be fully disabled as they are essential to your account security.
Million88 does not sell, rent, or trade our members' personal data. However, in the course of operating the platform, there are limited situations where we need to share data with certain parties.
When you make a deposit or withdrawal, the information needed to complete the transaction is shared with the relevant payment provider — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or banks supporting FPX such as Maybank2u and CIMB Clicks. This sharing is limited strictly to the minimum data required to process the transaction.
Certain platform features Million88 carried out through third-party service providers — such as cloud computing services, web analytics tools, and casino and slots game providers. All such providers are bound by strict data protection agreements and are permitted to process your data only for purposes agreed upon with us.
Million88 may be required to disclose personal data if mandated by Malaysian law, a court order, or a directive from a competent authority. In such cases, we will disclose only the minimum data necessary and, where permitted, will notify you of the disclosure.
In all of the above cases, Million88 ensures that all data recipients are bound by confidentiality and security obligations that are equivalent to or stricter than our own standards. We do not permit any third party to use our members' data for their own purposes.
Data security is not just an add-on feature at Million88 — it is at the core of the trust our members place in us. Here is the security infrastructure we use to protect your data:
All communications between your browser or app and the Million88 encrypted using TLS 1.3 protocol with AES-256 encryption — the same encryption standard used by banking institutions and government bodies. Our SSL certificates are issued by recognised certification authorities and renewed on a regular basis.
Account password Million88 are never stored in plain text. We use a one-way cryptographic hashing function (bcrypt with a high cost factor), meaning that even our own servers cannot retrieve your actual password — only the hash value is stored. This provides an additional layer of protection in the event of any security incident.
Member Million88 are encouraged to enable two-factor authentication (2FA) on their accounts. With 2FA active, even if someone knows your password, they still cannot log in without the verification code sent to your Malaysian mobile number. We recommend all members enable this security feature.
IT security team Million88 monitors system activity 24 hours a day, 7 days a week. Our anomaly detection system automatically flags unusual access patterns and may temporarily lock an account if suspicious activity is detected — to protect you, not to cause you inconvenience. If your account is locked for security reasons, please contact our support team immediately.
Access to members' personal data within the organisation Million88 is limited to staff who require it to perform their duties. All access is logged and audited. Our staff undergo data protection training and are bound by strict confidentiality agreements.
Million88 does not retain your personal data for longer than necessary. The following outlines our data retention guidelines:
Note: Even if you request deletion of your data, Million88 may be required to retain certain minimum records (such as financial transaction records) to fulfil Malaysian legal obligations, including tax reporting and AML compliance requirements. In such cases, the data retained is the minimum necessary and is not used for any other purpose.
Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices, you have the following rights in relation to your personal data held by Million88:
You have the right to request and receive a copy of all personal data we hold about you in a readable format.
If any data we hold about you is inaccurate or out of date, you have the right to request an immediate correction.
You may request the deletion of your personal data, subject to any applicable legal retention obligations.
You have the right to receive your data in a structured, machine-readable format for transfer to another service provider.
You may object to the processing of your data for specific purposes, including direct marketing communications from Million88.
Under certain circumstances, you may request that the processing of your data be restricted while your request or complaint is being resolved.
To exercise any of the rights above, contact us by email at support@million88.life by clearly stating your request along with the identifying information required to verify your identity. We will process your request within 30 business days from the date it is received.
Platform Million88 uses cookies and similar tracking technologies to enhance the user experience and platform operations. Here is an honest breakdown of what we use:
Session cookies are temporary and are deleted when you close your browser. They are used to maintain your login session so you do not need to log in again each time you navigate to a different page within the Million88. Without these cookies, the platform will not function properly.
These cookies save your settings and preferences — such as your chosen language and display options — so you do not have to reconfigure them on every visit. They are stored on your device until you delete them.
Million88 uses standard web analytics tools to understand how members use the platform — which pages are visited most, average session duration, and where users encounter difficulties. This data is collected in aggregated, anonymised form solely for platform improvement purposes.
You can manage or delete cookies through your browser settings at any time. Please note that deleting session cookies may affect certain platform functions. For instructions on managing cookies in popular browsers such as Chrome, Firefox, or Safari, please refer to the respective browser's help documentation.
Million88 is a platform restricted to individuals aged 21 and above. We do not knowingly collect or process personal data from minors.
If you believe that someone under the age of 21 has registered an account Million88 or provide their personal data to us, please contact us immediately at support@million88.life. We will investigate and, if confirmed, will close the relevant account immediately and delete all associated data as soon as possible.
If you are a parent or guardian who discovers that your child has accessed or registered on the platform Million88, please contact us immediately. We take the protection of minors seriously and will respond promptly.
Part of the technical infrastructure used by Million88 may involve processing data on servers located outside Malaysia — primarily for cloud computing services and international game software providers used on our platform.
In all such cases, Million88 ensuring that:
Such data transfers are solely for the purpose of delivering platform services and do not involve sharing data for any third-party marketing or commercial purposes.
Although Million88 invests seriously in data security, we acknowledge that no system is 100% immune to threats. As such, we have a comprehensive incident response procedure in place to protect you in the event of any security incident.
Our 24/7 monitoring system is designed to detect anomalies and potential intrusions as quickly as possible. When a security incident is identified, our security team will assess its scope and impact within 4 hours.
In the event of a data breach involving members' personal data that could potentially pose a risk to their rights and freedoms, Million88 committed to notifying affected members within 72 hours of becoming aware of an incident — in line with international best practices.
Following any security incident, Million88 will take immediate remedial action, including changing any potentially compromised passwords, strengthening security controls, and conducting a thorough investigation to prevent similar incidents in the future.
Million88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new Malaysian legal requirements, or relevant technological developments.
When we make material changes to this Privacy Policy, we will notify you via:
Continued use of the platform Million88 after the effective date of any amendment constitutes your acceptance of the updated policy. If you do not agree with any changes, you have the right to close your account and request a refund of your balance in accordance with the applicable procedures.
We recommend reviewing this Privacy Policy page periodically — at least once every 6 months. The date of the most recent update is always displayed at the top of this page.
If you have any questions or concerns, or wish to exercise your rights regarding personal data held by Million88, please reach us through the following channels:
When submitting a data rights request, please include the following information so we can verify your identity and process your request securely:
We take every privacy inquiry we receive seriously. Your trust in Million88 relies in part on the confidence that your data is managed responsibly and with care — and we will not betray that trust.
The most frequently asked questions from members about privacy and how Million88 manage their personal data.
All transactions are processed through certified payment gateways. Your financial information is not stored on Million88's servers.
This Privacy Policy should be read together with the following documents, which form part of your agreement with Million88: Terms & Conditions — Responsible Gaming — About Us
We are committed to protecting your privacy every step of the way. Register for free today and enjoy a safe, fair, and enjoyable sports betting and casino experience alongside more than 65,000 Malaysian members who trust Million88.
Privacy questions? Reach us at support@million88.life