mea888 Privacy Policy

mea888 is the data controller in respect of personal data collected through the mea888 platform and website at mea888.net. As data controller, mea888 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection obligations under our international licensing framework.

For all data protection enquiries, requests, or concerns, you may contact mea888's data support team via in-platform live chat (available 24/7) or by email to [email protected]. Email addresses on this page are displayed as plain text only and are not clickable links.

2.1 Registration Data

When you register a mea888 account, we collect the following mandatory information:

• Full legal name (as it appears on your government-issued identification document);
• Date of birth (used to verify minimum age eligibility of 21 years);
• Residential address, including country and postcode;
• Email address;
• Mobile telephone number;
• Chosen username and password (password stored in hashed, non-reversible format).

2.2 Identity Verification (KYC) Data

To comply with our anti-money laundering (AML) and know-your-customer (KYC) obligations, mea888 may collect:

• Government-issued photographic identification (Malaysian MyKad / NRIC or valid Passport);
• Proof of residential address (utility bill, bank statement, or equivalent document dated within 3 months);
• Payment method verification documents (e.g., screenshot of eWallet account matching name on file);
• Source of funds documentation where required under enhanced due diligence procedures.

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts, dates, times, and payment method identifiers;
• Payment method details to the extent provided (e.g., last four digits of bank account, eWallet account identifier). mea888 does not store full card numbers or banking credentials;
• Bonus activity, wagering history, and account balance records.

2.4 Gaming & Behavioural Data

• Game session data, including games played, bet amounts, win/loss outcomes, session durations, and game type preferences;
• Sports betting activity, including markets wagered on, bet types, odds, and results;
• Responsible gaming tool usage, including deposit limits set, session reminders acknowledged, and self-exclusion history.

2.5 Technical & Device Data

• IP address at time of registration and each subsequent login session;
• Device type, operating system, and browser version;
• Geolocation data derived from IP address (country-level only, unless you grant browser-level geolocation permission);
• Session timestamps and Platform interaction logs.

2.6 Communications Data

Records of your communications with mea888 support (live chat transcripts, email correspondence) are retained for quality assurance, training, and dispute resolution purposes.

mea888 collects personal data through the following channels:

• Directly from you — information you provide at registration, during KYC verification, when contacting support, or when updating your account profile;
• Automatically through Platform use — technical data, session data, and gaming activity data generated as you interact with the mea888 Platform;
• Through cookies and tracking technologies — as described in Section 9 of this Policy;
• From third-party service providers — including payment processing partners (for transaction verification), identity verification services (for KYC document authentication), and fraud prevention providers, to the extent necessary for the relevant service and subject to appropriate data sharing agreements.

5.1 Service Providers

mea888 engages third-party service providers to support Platform operations. These providers process personal data only on mea888's behalf, under binding data processing agreements, and are prohibited from using your data for their own purposes. Categories of third-party service providers include: payment processors, identity verification and KYC services, game software providers (who may receive anonymised session data), fraud detection and prevention services, IT infrastructure and hosting providers, and customer support software platforms.

5.2 Regulatory & Legal Disclosure

mea888 may disclose personal data to regulatory bodies, law enforcement authorities, financial intelligence units, or other public authorities where required or permitted by law, including in connection with AML investigations, court orders, or requests from competent authorities under applicable legal frameworks. mea888 will not disclose personal data beyond what is strictly required by the applicable legal obligation.

5.3 No Sale of Personal Data

mea888 does not sell, rent, or otherwise transfer your personal data to third parties for their independent commercial use. Any data sharing arrangement described in this Policy is subject to appropriate contractual safeguards.

mea888 operates internationally and may process or store your personal data on servers located outside Malaysia. Where personal data is transferred to jurisdictions that may not provide an equivalent level of data protection to that applicable in your home jurisdiction, mea888 implements appropriate safeguards, which may include standard contractual clauses approved by competent regulatory authorities, binding corporate rules, or reliance on recognised adequacy determinations.

By using the mea888 Platform and accepting this Policy, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Malaysia in connection with the provision of our services.

mea888 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulation. General retention principles applied by mea888:

• Active account data — retained for the duration of the account's active status plus a minimum post-closure period required under AML regulations (typically five years from account closure or last transaction);
• KYC and identity verification documents — retained for the period required by applicable AML/KYC regulatory obligations from the date of collection or account closure, whichever is later;
• Transaction records — retained for the minimum period required under applicable financial record-keeping regulations;
• Support communications — retained for up to 3 years from the date of the interaction, or longer where the communication is relevant to an ongoing dispute or legal matter;
• Marketing consent records — retained for the period of the consent's validity and for a reasonable period thereafter for compliance demonstration purposes.

Following the expiry of the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be linked to an identifiable individual.

mea888 implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS/SSL encryption for all data in transit between the user's browser and mea888 servers;
• Encryption at rest for sensitive data categories including KYC documents and payment identifiers;
• Hashing of user passwords using industry-standard one-way algorithms — mea888 does not store passwords in recoverable form;
• Role-based access controls limiting staff access to personal data to those with a legitimate operational need;
• Regular security assessments and penetration testing of Platform infrastructure;
• Two-factor authentication available to all mea888 account holders and required for administrative access;
• Incident response procedures to detect, assess, and respond to personal data breaches in compliance with applicable notification obligations.

Whilst mea888 takes data security seriously and maintains the measures described above, no internet-based platform can guarantee absolute security against all possible threats. You are responsible for maintaining the security of your own device and mea888 account credentials.

9.1 What Are Cookies

Cookies are small text files placed on your device by websites you visit. mea888 uses cookies and similar technologies (including local storage and session storage) to operate core Platform functionality, maintain your login session, analyse usage patterns, and, where you have consented, to deliver relevant promotional content.

9.2 Categories of Cookies Used by mea888

• Strictly necessary cookies — required for the Platform to function. These include session management cookies, authentication tokens, and security cookies. These cannot be disabled without impairing Platform functionality.
• Functional cookies — used to remember your preferences, such as language settings, game lobby filters, and responsible gaming tool settings.
• Analytical cookies — used to understand how users interact with the Platform, identify technical issues, and improve the user experience. Data collected is aggregated and does not identify individual users.
• Marketing cookies — used, with your consent, to deliver relevant promotional content and measure the effectiveness of marketing activities. These may be placed by mea888 or by third-party advertising partners acting on our behalf.

9.3 Managing Cookies

You may manage or delete cookies through your browser settings. Disabling strictly necessary cookies will prevent the mea888 Platform from functioning correctly — you will not be able to log in or access your account. Disabling other cookie categories will not prevent you from using the Platform but may result in reduced functionality or less relevant content.

Subject to applicable law and certain limitations, you have the following rights in respect of your personal data held by mea888:

• Right of access — you may request a copy of the personal data mea888 holds about you;
• Right to rectification — you may request correction of inaccurate or incomplete personal data;
• Right to erasure — you may request deletion of your personal data in certain circumstances, subject to overriding legal retention obligations (e.g., AML record-keeping requirements);
• Right to restriction — you may request that processing of your personal data be restricted in certain circumstances pending resolution of a query or objection;
• Right to data portability — where processing is based on contract or consent and carried out by automated means, you may request a copy of your data in a machine-readable format;
• Right to object — you may object to processing of your personal data for direct marketing purposes at any time, and to other processing based on legitimate interests where you have grounds relating to your particular situation;
• Right to withdraw consent — where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, contact mea888 via in-platform live chat or email at [email protected]. mea888 will respond to valid requests within 30 days. We may require verification of your identity before processing a request.

mea888 is strictly prohibited to individuals under the age of 21. mea888 does not knowingly collect personal data from individuals under 21 years of age. If mea888 becomes aware that personal data belonging to a person under 21 has been collected, the account will be immediately closed, the data securely deleted to the extent not required for regulatory compliance, and the matter handled in accordance with our underage gambling prevention procedures.

Parents and guardians are encouraged to implement parental controls and internet filtering software on devices accessible to minors. If you believe a minor has registered a mea888 account, contact support immediately.

mea888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or Platform operations. Material changes to this Policy will be communicated to registered users via email to the address on file or via a prominent notice on the mea888 Platform prior to the change taking effect.

Continued use of the mea888 Platform following the effective date of an amended Policy constitutes acceptance of the revised terms. If you do not agree to the amended Policy, you must cease using the Platform and contact support to close your account.

The date at the top of this Policy reflects the most recent revision. We encourage you to review this Policy periodically to stay informed of how mea888 processes your personal data.