Privacy Policy

01 Introduction

This Privacy Policy ("Policy") sets out the data processing practices of me888 ("the Platform", "we", "us", "our"), the operator of the website located at https://me888.cam and all associated subdomains, mobile interfaces, and related services. This Policy governs how me888 collects, processes, stores, transfers, and protects the personal data of individuals ("Users", "Players", "you") who access or use the Platform.

me888 is an online gaming and sports betting platform serving players internationally, with a significant user base in Malaysia and the broader Southeast Asian region. We take our obligations under applicable international data protection frameworks seriously and have designed our data practices to uphold the highest standards of transparency, security, and user control.

This Policy should be read in conjunction with our Terms & Conditions, which together form the complete legal framework governing your relationship with me888.

02 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings assigned below:

• "Personal Data" means any information that directly or indirectly identifies a natural person, including name, identification number, contact details, location data, and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, transfer, disclosure, or deletion.
• "Data Controller" means me888, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means a third party that processes Personal Data on behalf of me888 under a written data processing agreement.
• "Cookies" means small text files placed on a User's device by the Platform to facilitate session management, analytics, and personalisation.
• "KYC" (Know Your Customer) means the mandatory identity and age verification process conducted in accordance with anti-money laundering obligations.
• "Sensitive Data" means Personal Data that is subject to heightened protection, including government-issued identification numbers and financial information.

03 Data We Collect

me888 collects Personal Data across several categories, each of which is necessary for the legitimate operation of the Platform and the delivery of our services to Malaysian and international players:

3.1 Registration & Identity Data

• Full legal name as appearing on government-issued identification
• Date of birth (required for mandatory 21+ age verification)
• Residential address, including city, state, and postcode
• Email address and mobile phone number
• Username and encrypted account password
• Nationality and country of residence

3.2 KYC & Verification Documents

• Copies of government-issued photo identification (e.g., Malaysian MyKad, passport, or driver's licence)
• Proof of address documentation (e.g., utility bill, bank statement dated within three months)
• Payment method verification documentation (e.g., bank statement header, eWallet account screenshot)
• Source of funds declarations where required for high-value transactions

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records including amounts, timestamps, and payment method references
• Partial payment instrument details (e.g., last four digits of bank account, masked eWallet identifier)
• Currency denomination (Malaysian Ringgit / MYR or cryptocurrency equivalent)
• Bonus and promotional credit history

3.4 Gaming & Betting Activity Data

• Wager history, game session logs, and bet outcomes
• Sports betting selections, odds accepted, and market types (e.g., Mix Parlay, live in-play)
• Session duration, game category preferences, and login/logout timestamps
• Responsible gambling tool usage (deposit limit settings, self-exclusion requests)

3.5 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, browser version, and screen resolution
• Unique device identifiers and mobile advertising identifiers
• Platform access logs, error logs, and performance data

3.6 Communications Data

• Records of live chat support conversations, email correspondence, and support ticket history
• Feedback, complaints, and dispute records submitted by Users
• Marketing preference records and communication opt-in/opt-out history

04 How We Collect Data

me888 collects Personal Data through the following channels:

• Direct submission: Information you provide during account registration, KYC verification, deposit and withdrawal requests, or when contacting our support team.
• Automated collection: Technical data collected automatically through cookies, web beacons, and server logs when you access the Platform.
• Payment processors: Transaction confirmation data received from our integrated payment partners, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB Bank, Public Bank, Hong Leong Bank, and cryptocurrency networks.
• Third-party verification services: Identity and address verification data received from accredited KYC and AML screening service providers.
• Analytics providers: Aggregated and anonymised usage data from web analytics tools used to improve Platform performance and user experience.

05 Data Processing & Purpose

The following table summarises the primary purposes for which me888 processes your Personal Data:

06 Legal Basis for Processing

me888 processes Personal Data only where a valid legal basis exists under applicable international data protection law. The legal bases we rely upon are:

• Contractual necessity: Processing required to perform our contract with you — including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering obligations, age verification requirements, and regulatory reporting duties.
• Legitimate interests: Processing carried out in pursuit of our legitimate business interests — including fraud prevention, platform security, and service improvement — where those interests are not overridden by your fundamental rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

07 Data Sharing & Disclosure

me888 does not sell, rent, or trade your Personal Data to third parties for commercial purposes. We may disclose Personal Data to the following categories of recipients only where necessary and proportionate:

• Payment service providers: To process your deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency networks. These providers process data solely for the purpose of completing transactions.
• KYC and AML screening services: To verify your identity and comply with anti-money laundering obligations. These services are bound by strict confidentiality and data protection obligations.
• Game content providers: Licensed international game studios and sports data providers who supply game content and live betting data to the Platform. Data shared is limited to session tokens and anonymised game interaction data.
• IT infrastructure providers: Cloud hosting, content delivery, and cybersecurity providers who maintain the technical infrastructure of the Platform under data processing agreements.
• Legal and regulatory authorities: Where required by law, court order, or a competent regulatory authority with jurisdiction over me888's international operations. me888 will notify affected Users of disclosure requests where legally permitted to do so.
• Professional advisors: Legal counsel, auditors, and compliance consultants engaged by me888 on a confidential basis in connection with legitimate business operations.

08 Data Retention

me888 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years from the date of submission, as required under international AML/CTF frameworks.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming and betting activity logs: Retained for a minimum of two (2) years for the purpose of dispute resolution and responsible gambling monitoring.
• Customer support records: Retained for a minimum of two (2) years from the date of each interaction.
• Marketing preference records: Retained until consent is withdrawn or for two (2) years from the last active engagement, whichever is earlier.

Where retention beyond these standard periods is required by a specific legal obligation, court order, or ongoing investigation, me888 will retain the relevant data until the obligation is discharged. Data that is no longer required will be securely deleted or anonymised.

09 Data Security

me888 implements a comprehensive suite of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, or destruction:

• 256-bit TLS encryption on all data transmitted between your device and our servers
• AES-256 encryption for data stored in our databases, including account credentials and sensitive identification data
• Two-factor authentication (2FA) available for all player accounts to provide an additional layer of access protection
• Segregated player fund accounts held separately from operational funds to protect player balances
• Intrusion detection systems and continuous network monitoring to identify and respond to security incidents in real time
• Access controls limiting employee access to Personal Data on a strict need-to-know basis, with activity logging and regular access reviews
• Regular penetration testing and third-party security audits conducted by accredited cybersecurity specialists

10 Cookies & Tracking Technologies

me888 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we use are:

• Strictly necessary cookies: Essential for Platform operation — including session management, authentication state, and security tokens. These cannot be disabled without impairing core Platform functionality.
• Performance & analytics cookies: Used to collect aggregated, anonymised data about how users interact with the Platform — including page views, session duration, and feature usage — to inform product improvements.
• Functional cookies: Used to remember your preferences, such as language settings, display preferences, and previously selected payment methods, to improve your experience on return visits.
• Marketing cookies: Used, where consent has been given, to deliver relevant promotional content and measure campaign effectiveness. These cookies are only activated upon your express consent.

You may manage cookie preferences through your browser settings at any time. Disabling certain cookies may limit Platform functionality. A full cookie disclosure is available upon request from our support team.

11 Your Rights

Subject to applicable law, me888 users hold the following rights with respect to their Personal Data. To exercise any of these rights, please contact our Data Protection contact via the details provided in Section 15.

me888 will respond to all data rights requests within thirty (30) calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further sixty (60) days, with notice provided to you within the initial thirty-day period.

12 Children's Privacy

me888 is strictly an adult platform. Our services are not directed at, and are not intended for use by, persons under the age of 21 years. We do not knowingly collect Personal Data from individuals under this age threshold.

Where me888 becomes aware that Personal Data has been collected from a minor — whether through misrepresentation during registration or any other means — we will immediately suspend the relevant Account, initiate an investigation, delete all associated Personal Data to the extent permitted by our legal retention obligations, and report the matter to relevant authorities where required.

13 International Data Transfers

me888 operates globally and may transfer your Personal Data to countries outside your country of residence for the purposes of data storage, processing, or service delivery. Such transfers may include data flowing between Malaysia and jurisdictions where our hosting infrastructure, KYC providers, or game content partners are located.

Where Personal Data is transferred internationally, me888 ensures that adequate safeguards are in place — including contractual data transfer agreements that impose obligations on recipients equivalent to those applied by me888 under this Privacy Policy. We do not transfer Personal Data to jurisdictions that do not offer an adequate level of data protection without appropriate protective mechanisms in place.

14 Policy Amendments

me888 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. Material changes will be communicated to registered Users by email to their registered address and/or through a prominent notice displayed on the Platform at least fourteen (14) days prior to the effective date of the change.

The date at the top of this Policy indicates when it was last revised. Continued use of the Platform following the effective date of a revised Policy constitutes acceptance of the updated terms. Users who do not accept the revised Policy should cease using the Platform and contact our support team to arrange account closure.

15 Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or me888's handling of your Personal Data, please contact us through the following channels:

• Live Chat Support: Available 24 hours a day, 7 days a week through the Platform interface — the fastest route for urgent account-related privacy queries.
• Email: [email protected] — for formal data rights requests, please state "Data Rights Request" in the subject line of your communication.

me888 aims to acknowledge all privacy-related communications within forty-eight (48) hours and to provide a substantive response within thirty (30) calendar days. For requests involving erasure, access, or portability of data, we may require identity verification before processing your request.