mea88 Privacy Policy

1. Introduction

mea88 ("mea88", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who interact with the mea88 Platform, including registered players, prospective players, and visitors to the mea88 website (collectively, "you"). This Privacy Policy ("Policy") sets out how mea88 collects, processes, stores, shares, and protects personal data in connection with the operation of the mea88 online gaming platform and associated services.

This Policy applies to all personal data processed by mea88 regardless of the medium through which it is collected — including via the mea88 website, mobile browser interface, customer support channels, and payment processing flows. By registering an account or using any mea88 service, you acknowledge that you have read and understood this Policy. This Policy should be read together with the mea88 Terms & Conditions available at /terms-conditions.

2. Data Controller

For the purposes of applicable data protection legislation, mea88 is the data controller in respect of personal data collected through the Platform. mea88 determines the purposes and means of processing personal data as described in this Policy. Where mea88 engages third-party processors to handle personal data on its behalf, mea88 ensures that those processors operate under data processing agreements that impose obligations equivalent to those under this Policy.

3. Personal Data We Collect

mea88 collects only the personal data that is necessary to provide its gaming and account services, comply with its legal obligations, and maintain the security and integrity of the Platform. The categories of personal data we collect include:

mea88 does not collect sensitive personal data (such as racial or ethnic origin, religious beliefs, or medical history) except where strictly required for responsible gaming assessments and only with your explicit consent.

4. How We Collect Your Data

mea88 collects personal data through the following primary means:

• Direct collection: Data you provide when registering your mea88 account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the mea88 Platform, including through cookies, server logs, and session tracking technologies. See Section 8 for details on our cookie practices.
• Third-party sources: Data received from identity verification providers, payment processors (such as Touch n Go eWallet or Boost infrastructure partners), fraud prevention services, and publicly available sources where permitted by law.

5. Legal Basis for Processing

mea88 processes personal data only where a lawful basis for processing exists under applicable data protection law. The primary legal bases on which mea88 relies are:

• Performance of a contract: Processing necessary to create and manage your mea88 account, process deposits and withdrawals, settle bets, and deliver the gaming services you have subscribed to.
• Legal obligation: Processing required to comply with anti-money laundering ("AML") obligations, Know Your Customer ("KYC") regulatory requirements, tax reporting obligations, and any other applicable legal or regulatory duty.
• Legitimate interests: Processing for fraud detection and prevention, platform security, responsible gaming monitoring, and the improvement of mea88 services, where those interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications and certain cookie-based tracking, where your consent is obtained and can be withdrawn at any time.

6. How We Use Your Personal Data

mea88 uses the personal data it collects for the following purposes:

• To register, manage, and maintain your mea88 account, including verifying your identity and age (21+) in accordance with our KYC obligations.
• To process financial transactions — deposits via Touch n Go eWallet, Boost, Maybank FPX, CIMB, or Public Bank, and withdrawals to your nominated payment method.
• To settle bets, credit winnings, apply bonuses, and maintain accurate MYR account records.
• To fulfil our AML, counter-terrorism financing (CTF), and other regulatory compliance obligations, including transaction monitoring and suspicious activity reporting.
• To provide customer support and respond to your enquiries via live chat, email, or other support channels.
• To send you transactional communications related to your mea88 account (such as deposit confirmations, withdrawal notifications, and security alerts). These communications are not marketing and cannot be opted out of while your account is active.
• To send you marketing communications about mea88 promotions, offers, and new features where you have provided consent to receive such communications. You may withdraw this consent at any time via your account communication preferences.
• To monitor gaming activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling and applying appropriate player protection measures.
• To detect, investigate, and prevent fraud, abuse, collusion, and other prohibited conduct on the mea88 Platform.
• To improve and develop mea88 products and services through anonymised or aggregated analytical data.

7. Sharing Your Personal Data

mea88 does not sell your personal data to third parties. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Service providers and processors: Third-party vendors engaged by mea88 to provide operational services, including payment processors (Touch n Go, Boost, FPX gateway partners), KYC and identity verification providers, fraud detection services, cloud hosting infrastructure, and customer support platform operators. All such vendors are bound by data processing agreements requiring them to handle your data only for the specified purpose and in accordance with applicable data protection law.
• Game providers: Licensed game studios and live dealer operators whose games are hosted on the mea88 Platform may receive limited gameplay data (such as session identifiers and bet records) necessary to deliver the game service. These providers do not receive your full personal profile.
• Regulatory and law enforcement authorities: mea88 will disclose personal data to government authorities, regulators, or law enforcement agencies where required to do so by applicable law, court order, or regulatory instruction — including AML/CTF reporting obligations.
• Professional advisers: Lawyers, auditors, and other professional advisers engaged by mea88 in connection with legal proceedings, compliance reviews, or corporate transactions, subject to professional confidentiality obligations.
• Corporate transactions: In the event of a merger, acquisition, restructuring, or sale of mea88's business or assets, personal data held by mea88 may be transferred to the acquiring entity, subject to the same data protection obligations described in this Policy.

8. Cookies & Tracking Technologies

The mea88 Platform uses cookies and similar tracking technologies to operate the Platform, maintain login sessions, remember your preferences, and collect analytical data about Platform usage. The primary types of cookies used by mea88 are:

• Essential cookies: Required for the basic operation of the mea88 Platform, including maintaining your login session, processing transactions, and ensuring Platform security. These cookies cannot be disabled without impairing Platform functionality.
• Performance and analytics cookies: Used to collect anonymised information about how players use the mea88 Platform — which pages are visited most frequently, where users navigate from, and how they interact with game categories. This data is used in aggregate form to improve the Platform.
• Marketing cookies: Used to track whether you have visited the mea88 Platform from a referral source and to deliver relevant promotional content. These cookies are only activated with your consent.

You may manage your cookie preferences through your browser settings. Note that disabling essential cookies will affect your ability to use key mea88 features, including logging in and placing bets.

9. Data Retention

mea88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory retention obligations, and to resolve any disputes that may arise. Specific retention periods applicable to mea88 data categories include:

• Account and identity data: Retained for the duration of your mea88 account relationship and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of seven (7) years following each transaction, in accordance with financial record-keeping obligations.
• Customer support communications: Retained for a minimum of three (3) years following the closure of the relevant support case.
• Marketing consent records: Retained until consent is withdrawn and for a reasonable period thereafter to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an identifiable individual.

10. Data Security

mea88 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. Security measures applied by mea88 include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and the mea88 Platform.
• Encrypted storage of passwords using one-way cryptographic hashing functions — mea88 does not store passwords in readable form.
• Role-based access controls restricting employee access to personal data to those with a documented operational need.
• Regular security assessments, penetration testing, and vulnerability scanning of the mea88 Platform infrastructure.
• Two-factor authentication available to all mea88 account holders and enforced for internal administrative access.
• Formal incident response procedures for detecting, containing, and notifying affected parties of any data security incidents in accordance with applicable notification requirements.

Notwithstanding these measures, no internet transmission or electronic storage system is entirely secure. You are responsible for maintaining the confidentiality of your mea88 account credentials and for enabling available security features such as two-factor authentication.

11. Your Data Protection Rights

Subject to applicable data protection law, you have the following rights in respect of your personal data held by mea88:

• Right of access: You may request a copy of the personal data mea88 holds about you, together with information about how it is processed.
• Right to rectification: You may request correction of inaccurate or incomplete personal data held about you.
• Right to erasure: In certain circumstances, you may request deletion of your personal data. Note that mea88's AML and regulatory retention obligations may prevent immediate erasure of certain data categories.
• Right to restriction: You may request that mea88 restrict processing of your personal data in certain circumstances, such as where you contest the accuracy of the data.
• Right to data portability: Where processing is based on your consent or performance of a contract and is carried out by automated means, you may request your personal data in a structured, machine-readable format.
• Right to object: You may object to processing of your personal data where mea88 relies on legitimate interests as the legal basis. mea88 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time via your mea88 account communication preferences or by contacting support.

To exercise any of these rights, please contact mea88 support via live chat or email at [email protected]. mea88 will respond to verified data subject requests within 30 days of receipt.

12. Children's Privacy

The mea88 Platform is strictly for persons aged 21 years and above. mea88 does not knowingly collect personal data from individuals under the age of 21. If mea88 becomes aware that personal data has been collected from an underage individual, that data will be deleted and the associated account will be permanently closed. If you are a parent or guardian and believe that an underage person has registered a mea88 account, please contact us immediately via our customer support team.

13. International Data Transfers

mea88 operates infrastructure and engages service providers that may be located in jurisdictions outside Malaysia. Where personal data is transferred to countries that do not provide a level of data protection equivalent to that applicable in Malaysia, mea88 implements appropriate safeguards — such as standard contractual clauses, data processing agreements with equivalent obligations, or transfers to jurisdictions recognised as providing adequate protection — to ensure that your personal data receives a consistent and appropriate level of protection regardless of where it is processed.

14. Changes to This Privacy Policy

mea88 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or Platform features. Material changes will be communicated to registered players via the email address on file and/or by a prominent notice on the mea88 Platform, with a minimum of 14 days' advance notice where reasonably practicable. The "Last Updated" date at the top of this Policy will reflect the most recent revision. Your continued use of the mea88 Platform following the effective date of any revision constitutes your acknowledgement of the updated Policy. We encourage you to review this Policy periodically to stay informed about how mea88 protects your personal data.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by mea88, please contact our Data Protection team. mea88 customer support is available 24/7 via live chat on the mea88 Platform. You may also contact us by email at: [email protected] (plain text only — not a clickable link). We aim to acknowledge all privacy enquiries within 1 business day and to provide a substantive response within 30 days.