Privacy Policy mhd88 – Transparent and Comprehensive Personal Data Protection for Malaysian Players

This Privacy Policy applies to all individuals who use the mhd88 platform — including website visitors, registered members, mobile app users, and anyone who interacts with any service offered by mhd88. The platform is operated by mhd88 and serves users in Malaysia exclusively.

Mhd88 acts as the data controller for all personal information collected through this platform. This means we determine the purposes and manner in which your personal data is processed. We are also responsible for ensuring that all data processing is carried out in accordance with robust data protection principles and in compliance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA).

This Privacy Policy covers all aspects of data collection and use in the context of the mhd88 platform, including the website, Sports Betting services, Live Casino, slots and jackpots, deposit and withdrawal functions, and customer service communications.

Mhd88 collects various types of personal data when you use our platform. The data collected depends on how you interact with the platform and the services you use. Below is a detailed breakdown of the data categories we collect:

Mhd88 does not collect sensitive personal data such as health information, religious beliefs, or political views, except in very limited circumstances and only with your explicit consent. We also do not directly collect credit or debit card numbers — all financial transactions are processed through certified third-party payment gateways, including DuitNow, GrabPay, Boost, ShopeePay, and FPX.

Mhd88 only uses your personal data for legitimate purposes directly related to the provision of platform services. The following are the primary purposes for which data is used:

• Account Management: Creating and managing your mhd88 account, verifying your identity, processing logins, and maintaining account security.
• Transaction Processing: Processing deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and FPX, as well as managing withdrawals to your registered bank account or e-wallet.
• Betting Services Provision: Enabling you to access and use all mhd88 services, including Sports Betting on the Malaysia Super League, EPL, badminton, e-sports, Live Casino, slots, and jackpots.
• Customer Support: Responding to enquiries, resolving complaints and providing technical assistance via live chat or email in Bahasa Melayu.
• Legal Compliance: Fulfilling compliance obligations including Anti-Money Laundering (AML) and Know Your Customer (KYC) procedures as required under Malaysian law.
• Platform Security: Detecting and preventing fraud, system abuse, illegal activity, and security threats to the mhd88 platform.
• Service Improvement: Analysing usage patterns in aggregate (not at an individual level) to improve user experience, platform performance, and mhd88's product offerings.
• Service Communications: Sends important account-related notifications, including security alerts, terms updates, and promotional information you have opted in to receive.

Mhd88 does not sell, rent, or transfer members' personal data to third parties for their own marketing purposes. This has been an unwavering commitment since mhd88 began operations in 2019. However, there are limited situations where we need to share certain information with carefully selected third parties in order to deliver our services to you:

• Payment Service Providers: Payment gateways such as DuitNow, FPX (via Maybank2u, CIMB Clicks), Touch 'n Go, GrabPay, Boost, and ShopeePay receive the transaction information required to process your deposits and withdrawals. They are subject to strict financial security standards.
• Game Software Providers: mhd88's game technology providers may receive technical data necessary to ensure games function correctly. They do not receive your full personal identity information.
• Technical Support Service Providers: Companies that assist us in maintaining the technical infrastructure of the mhd88 platform, subject to strict confidentiality agreements.
• Relevant Authority: Where required by Malaysian law, court order, or in the context of a legitimate law enforcement investigation, mhd88 will disclose the necessary information to the relevant authorities.

All third parties that receive data from mhd88 are bound by data processing agreements that require them to protect your data to a standard equivalent to the mhd88 Privacy Policy. We conduct regular reviews of all our third-party providers to ensure ongoing compliance.

Mhd88 continually invests in security infrastructure to ensure your personal data is protected to the highest standard. The technical and organisational security measures we implement include:

• 256-bit SSL Encryption: All communications between your browser or app and the mhd88 platform are encrypted using Transport Layer Security (TLS) with 256-bit keys – unbreakable with current technology.
• Data-at-Rest Encryption: Personal data stored in mhd88's databases is also encrypted — meaning that even in the highly unlikely event of a security breach, your data cannot be read without the correct encryption key.
• Two-Factor Authentication (2FA): mhd88 offers two-factor authentication for all member accounts as an added layer of security, preventing unauthorised access even if your password is compromised.
• Real-Time Monitoring: mhd88's security systems continuously monitor all account activity and transactions to detect any unusual or suspicious behaviour.
• Internal Access Controls: Only mhd88 staff with a legitimate operational need may access member personal data, and only at the level of access required for their specific role.
• Regular Security Audits: mhd88 conducts regular security testing and audits by independent experts to identify and address any vulnerabilities in our systems.
• Incident Response Plan: We have clear procedures to respond swiftly to any security incident, including notifying affected members within the timeframes required by law.

While mhd88 takes all reasonable steps to protect your data, no security system is 100% impenetrable against every threat. We encourage you to take personal precautions as well, such as using a strong and unique password for your mhd88 account, not sharing your login credentials, and enabling 2FA.

Mhd88 uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small text files stored on your device when you visit the mhd88 platform. The following are the types of cookies we use:

• Mandatory  Essential Cookies: Required for core platform functions such as maintaining your login session and ensuring transaction security. These cookies cannot be disabled, as the platform will not function properly without them.
• Analytics  Performance Cookies: Helps us understand how users interact with the mhd88 platform in aggregate — which pages are visited most often, where users encounter technical issues, and so on. This data is used solely to improve the platform.
• Options  Functional Cookies: Storing user preferences such as interface language and display settings. This allows the mhd88 platform to recognise you on future visits and deliver a more personalised experience.

You can manage or delete cookies through your web browser settings at any time. Please note that disabling all cookies may affect the functionality of certain parts of the mhd88 platform. For guidance on managing cookies in your browser, please refer to the official documentation for the browser you use.

Mhd88 retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal requirements. Once the designated retention period expires, your data will be securely deleted or anonymised. Our retention schedule is as follows:

• Active Account Data: Retained for the duration your account remains active on mhd88, plus any additional period required for audit and legal compliance purposes.
• Financial Transaction Data: Retained for a minimum of 7 years from the date of transaction to comply with applicable Malaysian financial and tax legal requirements.
• KYC (Identity Verification) Data: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later, to comply with AML/CTF requirements.
• CS Communication Records: Retained for 2 years for quality control and dispute resolution purposes.
• Technical Log Data: Retained for 90 days for technical troubleshooting and security purposes.
• Cookie Data: Depending on the type of cookie — session cookies are deleted when you close your browser, while persistent cookies have a set expiry period (typically 30 to 365 days).

When your mhd88 account is closed at your own request, we will initiate the deletion or anonymisation process within 30 days, except for data that must be retained to fulfil the legal obligations stated above. Data retained for legal reasons will not be used for routine operational purposes.

As a mhd88 member based in Malaysia, you have rights protected under the Personal Data Protection Act 2010 (PDPA). mhd88 is committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, contact the mhd88 privacy team by email at support@mhd88.click or via live chat, clearly stating your request. We will verify your identity before processing the request to safeguard your data. All requests will be resolved within 14 business days.

The mhd88 platform is intended for individuals aged 18 and above only. mhd88 does not knowingly collect or process personal data from individuals under the age of 18. If you are a parent or guardian who believes your underage child has registered a mhd88 account or provided us with their personal information, please contact us immediately by email at support@mhd88.click or via live chat.

Upon receiving a valid complaint regarding data belonging to a minor, mhd88 will take immediate action to:

• Suspending the relevant account while the investigation is ongoing.
• Delete or destroy all personal data collected from that individual.
• Refunding any deposits made to the original bank account or e-wallet used.
• Reporting cases to the relevant authorities where required by law.

Mhd88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, applicable law, or new technological developments. However, we will not amend this Privacy Policy in a way that reduces the protection afforded to your data without notifying you in advance.

When we make significant amendments to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this page.
• Displaying a clear notice on the mhd88 platform upon your next login.
• Sending a notification email to your registered email address for significant amendments.

Your continued use of the mhd88 platform after any amendments take effect will be considered acceptance of the revised Privacy Policy. If you do not agree with the changes made, you have the right to request account closure and deletion of your data in accordance with the procedure set out in Section 8.

If you have any questions, concerns, or complaints regarding how mhd88 handles your personal data, or if you wish to exercise any of the rights outlined in Section 8, please contact us through the following channels:

• Privacy Email: support@mhd88.click – for enquiries related to personal data, data access requests, or privacy complaints. Please include "Privacy Request" in the subject line of your email.
• Live Chat: Through the mhd88 platform, 24 hours a day, 7 days a week. Our Malay-speaking CS team is on hand to assist and will escalate complex privacy queries to our privacy officer.

Mhd88 is committed to responding to all privacy-related enquiries and requests within 14 business days. For cases requiring a more in-depth investigation, we will update you within 14 days regarding the progress of your case and an estimated resolution timeline.

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in Malaysia. mhd88 will cooperate fully with any investigation conducted by the relevant data protection authority.