Mea88 Privacy Policy – Malaysia Personal Data Protection

Mea88 collects several categories of personal data to provide and improve our services to you. Below are the categories of data we collect along with their specific purposes:

Mea88 operates on the principle of minimum data collection — we collect only the data genuinely necessary for the stated purposes. We do not collect sensitive data such as health information or political affiliations unless required by law in highly specific circumstances.

Mea88 collects your personal data through several channels:

• Directly From You: During account registration, identity verification (KYC) form completion, when making deposits or withdrawals via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay or FPX, and when interacting with the mea88 customer support team.
• Automatically When You Use the Platform: Technical data such as IP addresses, device type, platform activity logs, and cookie data are collected automatically when you browse or use the mea88 platform. This is standard industry practice that enables us to maintain security and improve the user experience.
• From Payment Service Providers: When you carry out financial transactions through Malaysian payment providers, mea88 receives transaction confirmations containing the minimum information necessary to correctly process your deposits and withdrawals.
• From Legitimate Third-Party Sources: As part of the identity verification process, mea88 may engage authorised third-party services to verify the accuracy of the information you provide — for example, for age verification or anti-money laundering (AML) compliance checks.

Mea88 does not purchase or acquire personal data lists from public sources or third parties for marketing purposes. All data we hold is data you have provided to us directly, or data we have lawfully collected during your use of our services.

Mea88 processes your personal data for the following purposes. Each purpose has a valid legal basis under Malaysia's PDPA:

• Service Provision: Managing your account, processing deposits and withdrawals, and providing access to all games and betting on mea88 including football, badminton, Live Casino, baccarat and slots. (Basis: Contractual necessity)
• Identity Verification & KYC/AML Compliance: To verify your identity, confirm that you meet the minimum age requirement (18 years and above), and comply with Anti-Money Laundering (AML) obligations mandated under Malaysian law. (Basis: Legal obligation)
• Account Security & Fraud Prevention: Detecting and preventing unauthorised access, fraud, platform abuse and other illegal activities that could compromise your safety or the integrity of the mea88 platform. (Basis: Legitimate interests)
• Service Communications: Sending important account-related notifications such as OTP confirmations, transaction alerts, terms change notifications and security information. (Basis: Contractual necessity / Legitimate interests)
• Experience Personalisation: Personalising content, promotions and game recommendations based on your playing habits on mea88 — for example, showing you badminton promotions if you frequently bet on that sport. (Basis: Consent / Legitimate interests)
• Responsible Gaming: Monitoring playing behaviour to identify patterns that may indicate problem gambling and providing appropriate support, including activating automatic limit tools where necessary. (Basis: Public interest / Legal obligation)
• Platform Improvements: Analysing aggregated and anonymised usage data to understand how the mea88 platform is used and to identify opportunities for technical and user experience improvements. (Basis: Legitimate interests)
• Marketing & Promotions: Sending you information about mea88's latest bonuses, promotions and offers that may interest you. You can withdraw consent for marketing communications at any time through your account settings. (Basis: Consent)

Mea88 does not sell or commercialise members' personal data to third parties. However, in the course of operating the platform, mea88 may need to share certain data with a limited number of third-party categories in the following situations:

• Malaysia Payment Service Providers: Payment processors such as Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay and the FPX network (Maybank2u, CIMB Clicks) receive the information necessary to process your deposit and withdrawal transactions. Data shared is kept to a minimum — only what is required to complete the transaction.
• Identity Verification Service Provider: Accredited KYC/AML verification companies may receive your identity information for the purposes of age verification and compliance checks. All such providers are bound by strict confidentiality agreements.
• Relevant Authorities: mea88 will disclose personal data to Malaysian authorities when required by law, court order or a legitimate request from a law enforcement agency. mea88 will notify you of any such disclosure wherever possible, unless prohibited from doing so by law.
• Platform Technology Provider: Certain technical functions of the mea88 platform are supported by third-party software providers acting as data processors on our behalf. All data processors are contractually bound to process data solely in accordance with mea88's instructions and may not use the data for their own purposes.

Every third party we share data with is bound by strict data protection agreements requiring them to safeguard your information to a standard no less stringent than mea88's own. mea88 does not transfer Malaysian members' personal data overseas except in circumstances that satisfy PDPA cross-border data transfer requirements.

Mea88 implements multiple layers of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction:

• Data Encryption in Transit: All communications between your device and mea88's servers are secured with TLS 1.3 protocol using 256-bit SSL certificates issued by recognised certificate authorities.
• Encryption of Data at Rest: Sensitive data stored in mea88's databases is encrypted using AES-256. Passwords are never stored in plain text — we use secure cryptographic hashing algorithms.
• Layered Access Controls: Access to systems containing members' personal data is strictly controlled using multi-factor authentication (MFA), role-based access control (RBAC) and comprehensive audit logs.
• Regular Security Audits: mea88 conducts regular penetration testing and independent security audits to identify and address potential vulnerabilities before they can be exploited.
• 24/7 Monitoring: A real-time threat monitoring system operates around the clock to detect and respond to suspicious activity or unauthorised access attempts.
• Incident Response Plan: mea88 has a comprehensive cybersecurity incident response plan to ensure any breach is addressed swiftly and effectively, with minimal impact on members.

While mea88 implements all reasonable security measures, no system can guarantee absolute security. You also play an important role in protecting your account — use a strong, unique password, never share your login credentials with anyone, and contact us immediately if you suspect any suspicious activity on your account.

Mea88 retains your personal data only for as long as necessary to fulfil the stated processing purposes, or for the period required under Malaysian law. The following are general guidelines for our retention periods:

• Active Account Data: Your account's personal data is retained for as long as your account remains active on mea88. You may request account closure at any time through our support team.
• Data After Account Closure: After your account is closed, mea88 retains the minimum necessary personal data (primarily financial transaction records and identity verification) for seven (7) years to meet Malaysia's financial and tax compliance obligations, as well as anti-money laundering record-keeping requirements.
• Technical Log Data: Technical logs such as IP address records and login activity are retained for twelve (12) months for security and fraud detection purposes before being deleted or anonymised.
• Support Communication Data: Customer support conversation records are retained for three (3) years for quality control purposes and resolution of any disputes that may arise at a later date.
• Marketing Data: Data used for marketing communications is deleted or deactivated as soon as you withdraw your consent or close your account.

Once the relevant retention period has expired, mea88 will either securely delete the data or anonymise it so that it can no longer be associated with you personally. Anonymised data is no longer subject to the provisions of this Privacy Policy.

The mea88 platform uses cookies and similar tracking technologies to enhance functionality and user experience. Below are the categories of cookies we use:

• Essential Cookies: These cookies are necessary for the mea88 platform to function properly. They include session cookies that keep you logged in and security cookies that help protect your account. Essential cookies cannot be disabled as they are fundamental to the platform's functionality.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, display settings, and game choices — to enhance your experience on mea88. They are not used to track your activity across other websites.
• Analytics Cookies: mea88 uses aggregated usage data to understand how the platform is used and to identify opportunities for improvement. This data is collected anonymously and is not linked to your personal identity.
• Security Cookies: These cookies help mea88's security systems detect abnormal or suspicious behaviour that may indicate a fraud attempt or unauthorised access.

You can manage your cookie settings through your web browser settings. However, disabling essential cookies may affect the functionality of the mea88 platform and you may not be able to access all available features. For non-essential cookies, you may opt out without any significant impact on your core gaming experience at mea88.

Malaysia's Personal Data Protection Act 2010 (PDPA) grants you several important rights over your personal data held by mea88. mea88 respects and facilitates the exercise of these rights:

To exercise any of the rights above, contact mea88 by email at support@mea88.best or via Live Chat on the platform. Please specify the particular right you wish to exercise and provide sufficient information for us to verify your identity before processing your request.

The mea88 platform is FOR USERS AGED 18 AND ABOVE ONLY. mea88 does not knowingly collect, process or store personal data of individuals under the age of 18.

Mea88 employs multiple mechanisms to prevent minors from registering or using the platform, including age verification requirements at registration and a KYC process that verifies date of birth using valid identity documents. Should mea88 become aware that personal data of an individual under 18 has been collected without our knowledge, we will take immediate steps to delete that data and close the relevant account.

If you are a parent or guardian who believes your underage child may have registered for or used the mea88 platform, please contact us immediately at support@mea88.best. We will take immediate action to investigate and resolve the situation.

Mea88 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, changes to the services we offer, or feedback from our members.

When we make material changes to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this page.
• Displaying a clear notice on the mea88 platform upon your next login after the amendments take effect.
• Sending a notification email to your registered address for significant amendments that directly affect your privacy rights.

We encourage you to review this Privacy Policy periodically. Your continued use of the mea88 platform after any amendments take effect constitutes your acceptance of the updated terms.