Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how miga888 ("miga888", "we", "us", "our") collects, processes, stores, uses, and discloses personal data in connection with your use of the miga888 online casino and sports betting platform accessible at miga888.co (the "Platform").

miga888 is committed to handling your personal data with transparency and in compliance with applicable data protection and privacy legislation. This Policy applies to all registered players, visitors to the miga888 website, and any person whose data is processed in connection with the Platform, regardless of their location.

This Policy should be read alongside the miga888 Terms & Conditions. Capitalised terms not defined in this Policy have the meanings given in the Terms & Conditions.

Data Controller

For the purposes of applicable data protection law, miga888 is the data controller in respect of personal data collected through the Platform. As data controller, miga888 determines the purposes for which, and the means by which, personal data is processed.

For all data protection enquiries, correction requests, deletion requests, and complaints relating to this Policy, you may contact the miga888 data protection team at the email address listed in Section 15 of this Policy.

Data We Collect

miga888 collects personal data from you directly (when you provide it) and automatically (through your use of the Platform). The categories of personal data we collect include:

miga888 does not collect special category data (such as health information, racial or ethnic origin, or political opinions) except where it arises incidentally in the context of responsible gaming assessments or as part of a voluntary self-exclusion request.

How We Use Your Data

miga888 uses your personal data for the following purposes:

• Account Registration and Management: To create, operate, and maintain your miga888 player account, authenticate your identity on login, and communicate account-related information to you.
• KYC and Age Verification: To verify your identity and confirm that you meet the minimum age requirement of 21 years before processing withdrawals and as required by our licensing obligations.
• Payment Processing: To process deposits and withdrawals in Malaysian Ringgit (MYR) via the payment methods you select (including Maybank2u, Touch 'n Go eWallet, DuitNow, FPX, and others), and to maintain accurate financial records.
• Game Provision and Platform Operation: To provide access to the games library, live casino tables, and sportsbook; to record game outcomes; and to calculate and credit winnings to your account.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, money laundering, account takeover attempts, and other prohibited conduct. This includes device fingerprinting and unusual login pattern analysis.
• Regulatory Compliance: To fulfil miga888's anti-money laundering (AML), counter-terrorism financing (CTF), and licensing reporting obligations, including mandatory disclosure to regulatory and law enforcement authorities where required.
• Responsible Gaming: To monitor gaming patterns and identify players who may be showing signs of problem gambling, and to enforce responsible gaming tools including deposit limits and self-exclusion where applicable.
• Customer Support: To respond to your enquiries, complaints, and support requests through live chat, email, and other support channels.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the miga888 Platform, identify technical issues, and optimise the user experience.
• Marketing Communications: To send you promotional offers, bonus notifications, and other marketing materials by email or SMS, subject to your consent and the opt-out rights described in Section 13.

Legal Bases for Processing

miga888 processes your personal data on the following legal bases:

• Contract Performance: Processing necessary to provide the miga888 Platform services in accordance with the Terms & Conditions you have accepted, including account management, game provision, and payment processing.
• Legal Obligation: Processing required to comply with applicable laws, including AML and CTF legislation, age verification requirements under our licensing conditions, and obligations to report certain transactions or activities to regulatory authorities.
• Legitimate Interests: Processing for fraud prevention, security monitoring, platform improvement, and responsible gaming assessment, where our legitimate interests in operating a safe and compliant platform are not overridden by your privacy interests.
• Consent: Processing for marketing communications and the placement of non-essential cookies, where you have given explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Disclosure to Third Parties

6.1 miga888 does not sell, rent, or trade your personal data to third parties for commercial marketing purposes.

6.2 miga888 may disclose your personal data to the following categories of third parties, strictly as necessary for the purposes described in this Policy:

• KYC and Identity Verification Providers: Third-party identity verification services that process your KYC documents and conduct liveness checks to verify your identity and age.
• Payment Processors: Banks, e-wallet operators (including Touch 'n Go eWallet, Boost, GrabPay), FPX operators, cryptocurrency payment processors, and other payment infrastructure providers necessary to process your deposits and withdrawals.
• Game Software Providers: Licensed game providers (including Evolution, Pragmatic Play, NetEnt, Play'n GO) whose platforms deliver games to you through the miga888 interface. These providers may process technical and gaming data as part of game delivery.
• IT and Infrastructure Providers: Cloud hosting, content delivery, and cybersecurity providers whose services support the operation of the miga888 Platform.
• Regulatory and Law Enforcement Authorities: Government bodies, regulators, licensing authorities, financial intelligence units, and law enforcement agencies, where miga888 is legally required or compelled to disclose personal data.
• Legal and Professional Advisers: Lawyers, auditors, and other professional advisers engaged by miga888 in connection with legal proceedings, regulatory investigations, or compliance reviews.

6.3 All third parties to whom miga888 discloses personal data are required, by contract or applicable law, to maintain the confidentiality and security of that data and to use it only for the specified purpose.

International Data Transfers

miga888 operates under international licensing and may process or store personal data on servers located outside Malaysia. Where personal data is transferred outside Malaysia, miga888 ensures that appropriate safeguards are in place — including contractual data processing agreements incorporating standard data protection clauses — to maintain a level of protection for your data that is equivalent to applicable Malaysian personal data protection standards.

If you have questions about the specific safeguards applied to any international transfer of your personal data, please contact us using the details in Section 15.

Data Retention

8.1 miga888 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the duration of your active account plus a minimum of 5 years following account closure, as required by AML legislation and licensing conditions.
• Transaction and Financial Records: Retained for a minimum of 7 years from the date of the transaction, as required by financial record-keeping obligations.
• KYC Documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Support and Communications Data: Retained for up to 3 years from the date of the communication.
• Technical and Device Data: Typically retained for 12 months from the date of collection, unless retained longer for fraud investigation purposes.

8.2 When personal data is no longer required, miga888 will securely delete or anonymise it in accordance with our data disposal procedures.

Cookies & Tracking Technologies

9.1 The miga888 Platform uses cookies and similar tracking technologies to operate the Platform and improve your experience. Cookies are small text files stored on your device when you visit the Platform.

9.2 miga888 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session management cookies that keep you logged in during your visit and security cookies that help detect fraud. These cannot be disabled without affecting core Platform functionality.
• Analytics Cookies: Used to collect aggregated, anonymised data about how visitors use the Platform — including pages visited, session duration, and error reports. This data helps miga888 identify and fix problems and improve the Platform experience. These cookies are optional and subject to your consent.
• Preference Cookies: Used to remember your settings and preferences (such as language preferences) to personalise your experience on return visits.

9.3 You can control non-essential cookies through your browser settings. Disabling certain cookies may affect some Platform functionality. Instructions for managing cookies are available in the help documentation of your browser (Chrome, Firefox, Safari, or Edge).

Security Measures

miga888 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the miga888 Platform;
• Encrypted storage of sensitive personal data, including KYC documents and financial records;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security assessments and penetration testing of Platform infrastructure;
• Two-factor authentication for administrative access to Platform systems;
• Data breach detection and incident response procedures aligned with applicable data protection requirements.

While miga888 takes all reasonable precautions to protect your data, no security system is completely impenetrable. You also have a role in protecting your account — use a strong, unique password and enable two-factor authentication on your miga888 account where available.

Your Rights

Subject to applicable law and certain limitations arising from miga888's legal obligations, you have the following rights in respect of your personal data:

• Right of Access: You may request a copy of the personal data miga888 holds about you.
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected. For basic account details, you can update information directly from the account dashboard.
• Right to Erasure: You may request that your personal data be deleted where it is no longer necessary for the purposes for which it was collected. This right is subject to miga888's legal retention obligations (see Section 8).
• Right to Restrict Processing: You may request that miga888 restrict the processing of your personal data in certain circumstances, for example while a correction request is being assessed.
• Right to Data Portability: You may request a machine-readable copy of the personal data you provided to miga888 for the purpose of transferring it to another service provider.
• Right to Object: You may object to processing based on legitimate interests, including for marketing purposes. You may opt out of marketing communications at any time (see Section 13).
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, contact miga888 using the details in Section 15. We aim to respond to all valid requests within 30 days. Complex or multiple requests may take longer, in which case we will notify you of the extended timeframe.

Children & Minors

The miga888 Platform is strictly for persons aged 21 and above. miga888 does not knowingly collect personal data from persons under the age of 21. Age verification is a mandatory step of the account KYC process. Where miga888 discovers that personal data has been collected from a person under 21, the relevant account will be closed, the data will be deleted (except where retention is required by law), and any funds in the account will be returned.

If you believe a minor has registered or is using the miga888 Platform, please contact customer support immediately at the address in Section 15.

Marketing Communications

13.1 miga888 may send you promotional emails, SMS messages, and in-Platform notifications about bonuses, new games, sportsbook promotions, and other miga888 offers. We will only send marketing communications where you have provided consent to receive them or where we have a legitimate interest in doing so under applicable law.

13.2 You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email received from miga888;
• Updating your communication preferences in the account dashboard; or
• Contacting customer support with a request to be removed from marketing lists.

13.3 Opting out of marketing communications does not affect the delivery of transactional communications necessary for the operation of your miga888 account, such as deposit confirmations, withdrawal notices, and security alerts.

Changes to This Policy

miga888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, Platform functionality, or applicable law. When material changes are made, miga888 will notify you via email to your registered address and/or via a notice on the Platform at least 7 days before the changes take effect. The "Effective Date" at the top of this page will be updated accordingly. Your continued use of the miga888 Platform after the effective date of any revision constitutes your acceptance of the revised Policy.

Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by miga888, please contact our data protection team: