meha888 Privacy Policy

meha888 ("meha888", "we", "us", "our") operates the online casino and sportsbook platform available at meha888.co and all associated subdomains. meha888 is the data controller responsible for the personal information collected from players and visitors who access the meha888 platform.

For the purposes of this Privacy Policy, "personal data" means any information that identifies or could reasonably be used to identify you as an individual, including your name, email address, payment details, device identifiers, and gaming activity records.

This Policy applies to all players registered on meha888, visitors to the meha888 website, and individuals who communicate with meha888 via live chat or email. By using meha888, you consent to the data practices described in this Policy.

meha888 collects personal data through several channels, including account registration, KYC verification, payment processing, gameplay activity, and communications with our support team. The categories of data we collect include:

meha888 does not collect payment card numbers directly. Card-based transactions, where applicable, are processed by PCI-DSS-compliant third-party payment processors who do not share full card data with meha888.

meha888 uses your personal data strictly for the purposes set out below. We do not sell your personal data to third parties for their own marketing purposes.

• Account management: to create, administer, and maintain your meha888 account, process your meha888 login sessions, and verify your identity;
• Service delivery: to provide access to games, process bets, settle sportsbook markets, and manage your MYR wallet balance;
• Payment processing: to process deposits and withdrawals via Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, and other accepted methods;
• Legal and regulatory compliance: to conduct KYC and AML (Anti-Money Laundering) checks as required under applicable gaming regulations and international gaming authority obligations;
• Fraud prevention and security: to detect, investigate, and prevent fraudulent transactions, account takeover attempts, and misuse of the Platform;
• Responsible gaming: to monitor gaming patterns that may indicate problem gambling and to enforce self-exclusion, deposit limits, and cooling-off restrictions set by you;
• Customer support: to respond to your enquiries submitted via live chat or email;
• Communications: to send you transactional notifications (deposit confirmations, withdrawal updates, security alerts) and, where you have opted in, promotional communications about meha888 offers.

meha888 processes your personal data on the following legal grounds:

• Contract performance: processing necessary to provide the gaming services you have registered for and to manage your account;
• Legal obligation: processing required to comply with KYC, AML, and responsible gaming regulations applicable to meha888's operations under its gaming authority licence;
• Legitimate interests: processing for fraud prevention, platform security, and internal analytics to improve meha888 services, where such interests are not overridden by your fundamental rights;
• Consent: for optional processing such as marketing communications and non-essential cookies, where we rely on your explicit opt-in consent, which may be withdrawn at any time.

meha888 does not disclose your personal data to third parties except in the following circumstances:

• Service providers: third-party vendors who provide services integral to the meha888 platform, including payment processors, KYC verification providers, game suppliers, cloud hosting providers, and customer support technology providers. All such providers are contractually bound to use your data only for the purpose of providing services to meha888 and to maintain appropriate security standards;
• Regulatory and legal authorities: gaming regulatory authorities, financial intelligence units, law enforcement agencies, and courts where meha888 is legally required or permitted to disclose data under applicable law;
• Fraud and AML networks: industry-shared databases used to detect and prevent fraud, money laundering, and problem gambling, where meha888 participates under its regulatory obligations;
• Business transfers: in the event of a merger, acquisition, or asset sale involving meha888, your personal data may be transferred as part of that transaction, subject to equivalent privacy protections.

meha888 uses cookies and similar tracking technologies on meha888.co for the following purposes:

• Essential cookies: required for the Platform to function correctly, including maintaining your meha888 login session, storing your wallet currency preference, and enabling secure authentication;
• Analytics cookies: used to understand how players navigate meha888, which games are most accessed, and where technical issues occur, enabling platform improvements;
• Preference cookies: used to remember your settings and display preferences across sessions;
• Marketing cookies: used only with your explicit consent to deliver relevant promotional content about meha888 on third-party platforms.

You may configure your browser to refuse non-essential cookies at any time. Refusing essential cookies may impair your ability to access the meha888 login page and use platform services. meha888 honours browser-level Do Not Track signals for analytics purposes.

meha888 retains personal data for as long as is necessary to fulfil the purposes set out in this Policy, comply with legal obligations, resolve disputes, and enforce meha888's agreements.

For active accounts, data is retained throughout the account lifecycle. For closed accounts, meha888 retains identity, financial, and gaming activity data for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements applicable to licensed gaming operators. Communications data is retained for two (2) years. Technical and log data is retained for twelve (12) months.

Where data is retained solely to comply with legal retention requirements, it is held in a restricted-access archive and not used for any operational or marketing purpose.

meha888 implements technical and organisational security measures designed to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and meha888's servers;
• Encryption of sensitive data fields (passwords, financial identifiers) at rest using industry-standard algorithms;
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis;
• Regular penetration testing and security audits of the meha888 platform and infrastructure;
• Two-factor authentication (2FA) available to all meha888 account holders as an additional login security layer.

No data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. meha888 maintains an incident response procedure to address any personal data breach and will notify affected players and relevant authorities in accordance with applicable data breach notification obligations.

Subject to applicable law and meha888's legal obligations, you have the following rights in relation to your personal data held by meha888:

• Right of access: to request a copy of the personal data meha888 holds about you;
• Right to rectification: to request correction of inaccurate or incomplete personal data;
• Right to erasure: to request deletion of your personal data, subject to meha888's legal retention obligations;
• Right to restrict processing: to request that meha888 limit how it uses your data in certain circumstances;
• Right to data portability: to receive your personal data in a structured, machine-readable format;
• Right to object: to object to processing based on legitimate interests or for direct marketing purposes;
• Right to withdraw consent: where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact meha888 support via live chat inside your account or by email at the address shown in the footer of this page. meha888 will respond within 30 days. Identity verification will be required before processing data subject requests.

If you believe that a minor may have registered on meha888, please contact our support team immediately via live chat so that appropriate action can be taken without delay.

meha888 operates on infrastructure that may involve the processing of personal data in countries outside Malaysia. Where personal data is transferred internationally, meha888 ensures that appropriate safeguards are in place, such as contractual data transfer agreements incorporating standard contractual clauses or reliance on adequacy decisions by competent authorities.

meha888's core payment processing for Malaysian payment methods — including Touch 'n Go eWallet, DuitNow, and FPX — is handled by payment service providers operating within Malaysian regulatory frameworks.

For any privacy-related enquiries, data subject requests, or complaints, please contact meha888 by email at [email protected] or via the live chat function available within your meha888 account. Please mark the subject line of any email as "Privacy Enquiry — [your username]" to ensure prompt routing to the appropriate team.

meha888 takes privacy complaints seriously and will acknowledge receipt of your complaint within five (5) business days. If you are not satisfied with meha888's response to your privacy complaint, you may have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.

meha888 reserves the right to update this Privacy Policy at any time. Where changes are material, meha888 will notify registered players via email to the registered address or via an in-account notification prior to the changes taking effect. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision.

Continued use of the meha888 platform after notification of updates to this Privacy Policy constitutes your acceptance of the revised Policy. Players who do not accept updated terms may request account closure in accordance with the Terms & Conditions.

Last updated: June 2026. Version: meha888-PP-2026-06.