Privacy Policy mg108 — Member Personal Data Protection

1Introduction & Scope of This Policy

Mg108 is an online gaming platform operating in Malaysia since 2017, serving over 500,000 active members with a wide selection of slot games, fish shooting, sports, and live games. We understand that your trust is our most valuable asset, and personal data protection is the cornerstone of that trust.

This Privacy Policy explains in detail how mg108 — encompassing the mg108.vin website, mobile app, and all related services — collects, stores, processes, shares, and protects your personal information. It applies to all registered members, users browsing our website without registering, and all parties interacting with the mg108 platform in any capacity.

By registering an account or continuing to use the mg108 platform, you hereby consent to our processing of your personal data as described in this document. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to close your account and request data deletion.

2Personal Information We Collect

Mg108 only collects information that is genuinely necessary to provide a safe, fair, and compliant service. We do not collect excessive or irrelevant data. The following are the categories of data we collect along with the justification for collection:

3How We Collect Information

Your personal data is collected through various channels as you interact with the mg108 platform. It is important that you understand each collection method so you can make informed decisions about the information you share with us.

• Account registration — You provide personal information directly when completing the new member registration form, including your name, phone number, email, and bank account details.
• KYC verification process — Identity documents such as MyKad or passport are collected to fulfil identity verification requirements mandated by the regulatory authority.
• Gaming activity — Our system automatically logs every game session, bets placed, game outcomes, and usage patterns for security and service improvement purposes.
• Financial transactions — Every deposit and withdrawal is recorded, including the amount, payment method, date, and transaction time.
• Cookies and tracking technologies — The mg108 platform uses session cookies, preference cookies, and tracking pixels to enhance the user experience and analyse platform usage.
• Customer support interactions — When you contact the support team via live chat, email, or other methods, the conversation is recorded for quality control and reference purposes.
• Public sources and third parties — In certain circumstances required by law, we may verify your information through legitimate public databases or certified identity verification agencies.

4Personal Data Processing Purposes

Every piece of data we collect has a specific and limited purpose. mg108 operates on the principle of data minimisation — we do not process data beyond what is necessary to fulfil the stated purpose. The following are the primary purposes for processing member personal data:

• Account management and registration — Creates, maintains, and manages your member account including membership tier assignment and personal preference management.
• Identity verification and KYC — Ensures all members meet the minimum age requirement of 18 and verifies identity to prevent fraud and money laundering.
• Financial transaction processing — Processes deposits, withdrawals, and all financial transactions accurately and securely in accordance with your instructions.
• Security and fraud prevention — Detects, investigates, and prevents fraud, money laundering, and any other illegal activities involving our platform.
• Regulatory and legal compliance — Fulfils compliance obligations imposed by the operating licence, local laws, and relevant regulatory body requirements.
• Customer Support — Provides assistance, resolves disputes, and processes complaints effectively and in a timely manner.
• Product and service improvement — Analyses usage patterns in aggregate to improve platform quality, add new features, and optimise the user experience.
• Marketing communications — Sends notifications about relevant offers, promotions, and platform updates — only to members who have given consent to receive such communications.
• Responsible gaming — Monitors gaming patterns to identify early signs of addiction and offer appropriate support to members who need it.

5Data Sharing with Third Parties

Mg108 does not freely share your personal data with external parties or for purely commercial purposes. However, there are limited situations where data sharing is necessary to enable us to provide the services you use or to meet our legal obligations.

• Payment service providers — Minimal transaction information is shared with certified payment processors such as FPX, Touch 'n Go, GrabPay, and Boost solely to process your deposits and withdrawals.
• Gaming service providers — Third-party game operators receive the session data required to run games and verify results.
• Identity verification services — Certified KYC agents receive your identity documents for verification purposes only and may not use that data for any other purpose.
• Fraud prevention agency — In suspected fraud cases, relevant information may be shared with recognised fraud prevention agencies for investigation purposes.
• Regulatory authorities and law enforcement — mg108 will disclose personal data when required by law, court order, or legitimate requests from authorities.
• Business transfers — In the event of a merger, acquisition, or asset transfer, personal data may be transferred to the successor entity, subject to prior notification to members.

All third parties that receive personal data from mg108 are bound by strict data protection agreements and are only permitted to process data for specified purposes. mg108 conducts due diligence reviews on all service partners to ensure an equivalent level of data protection.

6Data Security Measures

Mg108 continuously invests in the latest cybersecurity infrastructure to ensure your personal data is always protected against any threat. Our approach to data security is comprehensive, covering technical, organisational, and physical aspects.

• Data encryption in transit — All communications between your browser and mg108 servers are protected by TLS 1.3 protocol with 256-bit SSL certificates issued by recognized Certification Authorities.
• Data encryption at rest — Sensitive data is stored in encrypted form using AES-256 algorithms, ensuring data cannot be read even if unauthorised access to the servers occurs.
• Role-based access control — Only mg108 staff with a legitimate work need are permitted to access member personal data, and every access is recorded in a tamper-proof audit log.
• Multi-factor authentication — All mg108 internal systems storing member data require Multi-Factor Authentication (MFA) for staff access.
• Regular penetration testing — mg108 conducts penetration testing by independent security experts at least twice a year to identify and patch any vulnerabilities.
• 24/7 security monitoring — Our Security Information and Event Management (SIEM) system monitors all network activity in real time to detect any anomalies or potential threats.
• Encrypted Data Backup — A full data backup is performed daily to a geographically separate location, ensuring service continuity even in the event of a serious incident.

7Data Retention Period

Mg108 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by applicable laws and regulations. We enforce a strict data retention policy to ensure data is not kept longer than necessary.

• Active account data — Retained for the duration your account is active and for 7 years after account closure to meet financial record-keeping and audit requirements.
• KYC Documents — Retained for 7 years after the date of last verification or account closure, whichever is later, in line with anti-money laundering (AML) requirements.
• Financial transaction records — Retained for a minimum of 7 years in accordance with Malaysia's financial legislation and regulatory audit requirements.
• Game activity logs — Retained for 3 years for dispute resolution and responsible gaming analysis.
• Support communication records — Retained for 2 years after a case is resolved for reference and quality control.
• Cookie and tracking data — Session cookies are deleted when the browser is closed; preference cookies expire within 12 months; analytics data is aggregated and anonymised after 26 months.

Once the retention period expires, your data will be securely deleted or anonymised using methods that ensure it cannot be recovered. You may request further information on specific retention periods for particular data categories through our support team.

8Your Rights as a Data Subject

As a mg108 member and data subject under Malaysia's PDPA, you have certain rights regarding your personal data. mg108 fully respects these rights and provides straightforward mechanisms for you to exercise them.

9Cookies & Tracking Technology Policy

Mg108 uses cookies and similar tracking technologies to enhance platform functionality, analyse usage patterns, and deliver a more personalised experience to you. Cookies are small text files stored on your device when you visit our website.

• Necessary cookies — Required for core platform functions such as login, session tracking, and security. These cookies cannot be disabled without affecting platform functionality.
• Functional cookies — Saves your preferences such as language, time zone, and display settings for a better experience on your next visit.
• Analytics cookies — Collects information about how you use the platform in aggregate and anonymised form to help us understand and improve website performance.
• Security cookies — Used to detect suspicious activity, prevent fraud, and protect your account from unauthorised access.

You can manage and delete cookies through your browser settings at any time. However, disabling certain cookies may affect the functionality of the mg108 platform. For more information on managing cookies, refer to your browser's help documentation.

10Links to Third-Party Services

The mg108 platform contains links to third-party websites and services such as game providers, payment gateways, and content delivery networks. This Privacy Policy applies solely to the mg108 platform and does not cover the privacy practices of those third parties.

Mg108 is not responsible for the content, privacy policies, or security practices of any third-party websites or services. We recommend that you read the privacy policy of each third-party service you use separately before providing them with any personal information.

11Amendments to This Privacy Policy

Mg108 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or technological developments. We are committed to informing you of any significant changes.

• Material changes — Any changes that materially affect your privacy rights will be communicated via in-platform notifications, an email to your registered address, or a prominent notice on our website homepage at least 30 days before the changes take effect.
• Minor changes — Editorial or technical amendments that do not alter your fundamental rights may be implemented without prior notification but will be marked with a new update date at the top of this document.
• Continuity of use — Continued use of the mg108 platform after an amendment's effective date constitutes your acceptance of the updated policy.
• Version History — mg108 maintains an archive of all previous versions of this Privacy Policy. You may request access to earlier versions through our customer support.

We recommend that you review this page periodically to stay informed about how we manage your personal data. The most recent update date is always displayed at the top of this document.

12Contact Our Data Protection Officer

If you have any questions, concerns, or wish to exercise your rights under this Privacy Policy or the PDPA, please contact mg108's Data Protection Officer (DPO) through the following channels. Our team operates 24 hours a day, 7 days a week to ensure every enquiry receives the attention it deserves.