Privacy Policy mtown88 – Our Commitment to Protecting Your Personal Data in Malaysia

Mtown88 collects various types of information from you in the course of providing our platform services. This information is grouped into three main categories:

A. Information You Provide Directly

• Registration Information: Full name, active Malaysian phone number, email address and chosen password upon registering an mtown88 account.
• Identity Verification Information: A copy of your identity card or passport is required for advanced account verification or before processing withdrawals that exceed a specified limit.
• Financial Information: Bank account or e-wallet details (Touch 'n Go eWallet, GrabPay, DuitNow, FPX Maybank2u, CIMB Clicks, Boost, ShopeePay) that you register for deposit and withdrawal purposes.
• Communications: Any messages, complaints or information you send to the mtown88 customer support team via live chat, email or other channels.

B. Information Collected Automatically

• Usage Data: Game history, game types played (slots, Live Casino, Sports Betting, lottery), wagering amounts, outcomes and session duration.
• Technical Data: IP address, device type, operating system, web browser type, screen resolution, and other technical information transmitted automatically by your device.
• Cookie Data: Cookie files and similar tracking technologies that help us ensure the platform functions correctly and delivers a personalised experience to you.
• Transaction Data: A complete history of all deposits, withdrawals, and financial activity in your mtown88 account, including timestamps and transaction reference numbers.

C. Information from Third Parties

In certain cases, mtown88 may receive information about you from payment service providers (such as FPX gateway or e-wallet providers) to verify your financial transactions. This information is used solely for verification and fraud prevention purposes.

Every piece of data collected by mtown88 serves a clear and legitimate purpose. We use your information for the following:

Please note that mtown88 will not use your data for any purpose beyond those stated above without first obtaining your consent. Where we process your data on the basis of "consent", you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

Mtown88 does not sell, rent or transfer your personal data to third parties for marketing purposes. However, in the normal course of operating our platform, there are a limited number of situations where we may need to share your information with trusted parties:

• Payment Service Providers: Payment gateway providers such as FPX processors, Touch 'n Go, GrabPay, DuitNow and other Malaysian e-wallets receive only the transaction information necessary to process your deposits and withdrawals.
• Game Providers: Third-party gaming software providers that supply slots, Live Casino and sports platforms receive only the session data necessary to ensure games function correctly.
• Legal Authorities: mtown88 will disclose personal data to the police, courts, or relevant regulatory authorities when required by Malaysian law or a valid court order.
• Analytics Services: Third-party analytics providers help us understand platform usage patterns for improvement purposes — only aggregated, anonymised data is shared in this context.

All third parties that receive your data are required to: (1) use the data solely for the specified purpose, (2) protect the data to a security standard comparable to mtown88, and (3) not disclose the data to any other party without mtown88's authorisation. We enter into binding data protection agreements with all our service providers.

Protecting your personal data is mtown88's top priority. We implement multiple layers of technical and organisational safeguards to keep your data secure at all times:

• 256-bit SSL Encryption: All communication between your device and mtown88's servers is encrypted using SSL/TLS with 256-bit keys — effectively unbreakable with current technology.
• Secure Password Storage: Your password is never stored in plain text. We use one-way hashing with a random salt — meaning even if our servers were compromised, your password remains protected.
• Two-Factor Authentication (2FA): You can enable 2FA in your account settings for an additional layer of login protection, which we strongly recommend.
• 24/7 Security Monitoring: mtown88's cybersecurity team monitors all system activity around the clock to detect and respond to any threats or suspicious activity.
• Secure Servers: Your data is stored in data centres protected by physical security measures, biometric access controls and intrusion detection systems.
• Periodic Security Audits: mtown88 undergoes periodic independent security audits conducted by registered third-party security firms to identify and remediate any system vulnerabilities.

Despite all these protective measures, no system can be guaranteed 100% secure against every cyber threat. We therefore encourage you to take precautions on your end as well — use a strong password, never share your login credentials, and enable 2FA on your mtown88 account.

Mtown88 retains your personal data only for as long as necessary based on the purpose of collection or applicable legal obligations. In general, our data retention policy is as follows:

• Active Account Data: Retained for as long as your account remains active, plus 6 years after account closure to comply with legal and audit requirements.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's anti-money laundering (AML) legislation and tax requirements.
• Support Communication Logs: Retained for 3 years after the closure of the related support ticket for quality control and dispute reference purposes.
• Marketing Data: Deleted within 30 days of you withdrawing your marketing consent or closing your account.
• Technical Logs & IP: Retained for a maximum of 12 months for security and incident investigation purposes.

Once the relevant retention period has ended, your data will be securely deleted or anonymised so that it can no longer be linked to you personally. mtown88 conducts periodic data retention reviews to ensure that data no longer needed is disposed of in accordance with proper procedures.

The mtown88 platform uses cookies and similar tracking technologies to keep the platform running smoothly and to provide you with a better experience. We use several types of cookies:

• Essential Cookies: Required for core platform functions such as login session management, security, and transaction processing. These cookies cannot be disabled without seriously affecting platform functionality.
• Performance Cookies: Collecting information about how you use the platform — pages visited, time spent, and errors encountered — to help us improve platform performance and usability.
• Functionality Cookies: Storing your preferences such as preferred language, display settings, and saved login details so you do not have to re-enter them each time.
• Analytics Cookies: Helps us understand overall platform usage patterns in aggregate, anonymised form to make better product decisions.

You can manage or delete cookies through your web browser settings. However, disabling essential cookies may affect your ability to log in and use the mtown88 platform fully. For more information on managing cookies in your browser, refer to the Help section of your browser.

Under Malaysia's Personal Data Protection Act 2010 and mtown88's privacy commitments, you have the following rights regarding your personal data. We respect and facilitate the exercise of each of these rights:

In the course of operating the platform, some of your data may be processed by servers or service providers located outside Malaysia. This primarily relates to cloud services and technical infrastructure that keep the mtown88 platform running quickly and reliably for users across Malaysia.

Where such international data transfers occur, mtown88 ensures that:

• Data recipients in the destination country maintain a level of data protection equivalent to or higher than that of Malaysia.
• Legally binding data protection agreements are signed with all international data recipients.
• Data transfers are carried out only for legitimate purposes necessary to deliver mtown88's services to you.

You may contact us for more information about the protection mechanisms we use for international data transfers involving your account.

Mtown88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new technologies we use, evolving legal requirements, or other relevant factors. You will be notified of any amendments through:

• A prominent notice on the mtown88 platform homepage at least 14 days before any amendments take effect.
• Email notification to your registered email address (for material amendments).
• Update the "Updated" date at the top of this document.

We encourage you to review this Privacy Policy periodically. Continued use of the mtown88 platform after any amendment takes effect constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes made, you have the right to close your account before the amendment's effective date.

If you have any questions, concerns or complaints about how mtown88 handles your personal data, or if you wish to exercise any of your privacy rights, please contact us through the following channels:

• Privacy Email: support@mtown88.click (subject: "Privacy Inquiry")
• Live Chat: Available 24 hours a day, 7 days a week on the mtown88 platform
• Response Time: Under 48 hours for privacy-related enquiries

We are committed to handling every privacy enquiry with seriousness and transparency. If you are dissatisfied with our response to your privacy complaint, you have the right to refer the matter to the Department of Personal Data Protection Malaysia under the Ministry of Communications and Digital.

This Privacy Policy was last updated on 1 January 2026. By continuing to use the mtown88 platform after this date, you confirm that you have read and understood this Privacy Policy.