mcd888 Privacy Policy

In this Privacy Policy, "mcd888", "platform", "we", "us" and "our" refer to the mcd888 service. "User", "you" and "your" refer to any individual who accesses mcd888 or provides personal data through it.

"Personal data" means any information that identifies or could reasonably identify a living individual, including name, identity document number, address, contact details, device identifiers and payment references. "Processing" covers any operation performed on personal data, including collection, storage, use, sharing and deletion. "Sensitive data" refers to personal data warranting heightened protection, such as identity document images.

mcd888 may collect the following categories of personal data, depending on the feature used and the verification level required:

• Identity data: full name, date of birth, Malaysian MyKad number, driving licence, passport details or equivalent document information.
• Contact data: email address, phone number and mailing address in a city such as Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya or Shah Alam.
• Verification data: document images, facial photographs, selfies holding identification, and supporting proof-of-address documents.
• Financial data: payment method references, transaction amounts in MYR, deposit and withdrawal history, and eWallet or bank account ownership confirmation.
• Technical data: IP address, browser type, operating system, device identifiers and approximate geographic location derived from network data.
• Usage data: pages visited, session duration, game interactions, sports market activity, support conversation records and preference settings.

Personal data is collected through the following interactions with mcd888:

• Account registration form, including name, email and contact details.
• Identity and address verification uploads submitted through the secure account area.
• Deposit and withdrawal transactions processed through integrated payment channels.
• Support conversations conducted through live chat, email or other provided channels.
• Automatic collection of technical and usage data through cookies and server logs.
• Responses to optional preference or marketing communication settings where separately consented.

mcd888 does not knowingly collect personal data from individuals under the age of 21. Identity verification measures are applied to detect misrepresented age or identity.

mcd888 relies on one or more of the following lawful bases when processing personal data:

• Contractual necessity: processing required to create and operate an account, process a deposit, settle a withdrawal or respond to a support request.
• Legal obligation: processing required to comply with applicable anti-money-laundering, know-your-customer, fraud-prevention or regulatory requirements.
• Legitimate interests: processing carried out to detect and prevent fraud, maintain platform security, improve service quality and manage financial risk, where those interests are not overridden by user rights.
• Consent: processing for optional communications or non-essential tracking where separate user consent has been provided, which may be withdrawn at any time.

Personal data collected through mcd888 is used for the following purposes:

• Creating and administering a registered account.
• Verifying age, identity, address and payment method ownership to satisfy compliance and anti-fraud requirements.
• Processing MYR deposits and withdrawals through applicable payment channels.
• Detecting and preventing fraudulent activity, duplicate accounts and prohibited conduct.
• Applying and managing responsible-gambling controls, including deposit limits.
• Responding to account enquiries, disputes, verification requests and complaints.
• Improving platform functionality, content relevance and user experience.
• Meeting applicable legal, regulatory and reporting obligations.

mcd888 does not sell personal data. Data may be shared with third parties only in the following circumstances:

• Payment providers: transaction references and necessary confirmation data shared with Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX or other integrated payment systems to process transactions.
• Identity and fraud services: document images and identity data shared with verification partners to confirm user eligibility, age and document authenticity.
• Legal and regulatory bodies: data disclosed in response to a lawful request, court order, regulatory investigation or applicable reporting obligation.
• Service providers: data shared with contracted suppliers who assist with platform operations, security monitoring, data storage and technical support, bound by appropriate data-processing agreements.

Third-party payment providers and game suppliers have their own independent privacy policies and data-processing practices. mcd888 is not responsible for data handling within systems operated exclusively by those parties.

mcd888 may use servers, service providers or game suppliers located outside Malaysia. Where personal data is transferred to a country that may not provide an equivalent level of data protection, mcd888 will take reasonable steps to ensure appropriate safeguards are in place, such as contractual data-protection obligations with the relevant recipient.

Users who are concerned about cross-border data transfers may contact mcd888 using the details in clause 14 to request further information about the safeguards applied to a specific transfer category.

Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected, or as required by applicable law. Typical retention periods may include:

• Account and transaction records: retained while the account is active and for a defined period after closure to satisfy anti-money-laundering and audit requirements.
• Identity verification documents: retained while required for compliance and deleted after the applicable obligation expires.
• Support conversation records: retained for a reasonable period to assist with dispute resolution and service improvement.
• Technical and usage data: retained for a shorter period based on operational need and then anonymised or deleted.

Data that is no longer required and has no legal basis for retention will be securely deleted or anonymised so that it can no longer identify an individual.

mcd888 may use cookies, pixel tags and similar technologies to support platform functionality, session management, security checks and usage analysis. A cookie is a small file stored on a user's device that helps the platform recognise an existing session and maintain preferences.

Non-essential tracking, such as behavioural analytics or marketing measurement, may depend on separately provided consent. Users may adjust cookie settings through their browser, though disabling certain cookies can affect platform functionality, including session stability and payment navigation. mcd888 does not rely on third-party advertising cookies on pages that display account-related or financial information.

mcd888 is intended strictly for adults aged 21 and above. mcd888 does not knowingly collect personal data from individuals under 21. Age verification measures are applied during account registration and before certain transactions. Where mcd888 identifies that a person under 21 has provided personal data, that data will be deleted and the account closed as soon as reasonably practicable.

A parent or guardian who believes that a minor has submitted personal data to mcd888 should notify mcd888 using the contact details in clause 14 as soon as possible.

Users may have the following rights in relation to personal data held by mcd888, subject to applicable law and any lawful basis that limits those rights:

• Right of access: request a description of the personal data held and how it is being used.
• Right to rectification: request correction of inaccurate or incomplete personal data.
• Right to erasure: request deletion of personal data where there is no longer a lawful basis for holding it.
• Right to restrict processing: request a limit on how personal data is used while a dispute or review is ongoing.
• Right to object: object to processing carried out on the basis of legitimate interests where specific circumstances warrant it.
• Right to withdraw consent: where processing relies on consent, withdraw it at any time with effect for future processing.

A right may be declined where granting it conflicts with a legal obligation, fraud prevention, account security or the rights of another person. Requests can be submitted using the contact details in clause 14.

mcd888 applies technical and organisational measures to protect personal data from unauthorised access, loss, disclosure, alteration or destruction. HTTPS encryption is used on connections to the platform. Access to personal data within mcd888 operations is restricted to individuals who require it for their specific role.

Users share responsibility for account security. This includes using a strong unique password, not sharing login credentials, protecting the email address linked to the account and reporting suspected unauthorised access promptly. mcd888 will never ask a user for a banking password, card PIN or one-time authorisation code through any channel, including live chat, email or phone. Any such request should be treated as a potential fraud attempt.

mcd888 may update this Privacy Policy to reflect changes in applicable law, data practices, platform functionality or regulatory obligations. The effective date at the top of this page will be updated when a material change is made. Continued use of mcd888 after the effective date constitutes acceptance of the revised policy where permitted by law.

Users who do not accept a material change should stop using mcd888 and, where applicable, contact mcd888 to request account closure or to exercise any applicable data rights before ceasing use.

For a question, access request, correction request or erasure request relating to personal data held by mcd888, contact us using the email address below. Please include the registered account name, a concise description of the request and any relevant transaction or verification reference where applicable.

Do not include a banking password, card PIN or one-time security code in any communication sent to mcd888. mcd888 will aim to respond within a reasonable period and may request identity confirmation before processing a sensitive data request.