MCT88 Privacy Policy

1Introduction

This Privacy Policy ("Policy") describes how MCT88 ("MCT88", "we", "us", "our") collects, uses, discloses, stores, and protects the personal data of individuals ("you", "Player", "User") who access and use the MCT88 online casino and sports betting platform at mct88.cam ("Platform").

This Policy applies to all personal data processed in connection with your registration, account management, deposits and withdrawals, game play, promotional participation, and any other interaction with the MCT88 Platform. It covers data processed through our website, mobile-optimised site, live chat, email, and any other communication channel we operate.

By registering an account on MCT88 or continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood the terms of this Policy. If you do not agree with any aspect of this Policy, please discontinue use of the Platform and contact us to close your account.

2Definitions

The following terms carry the meanings set out below wherever used in this Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial data, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this context, MCT88.
• "Data Processor" means a third party that processes personal data on behalf of MCT88 under a written data processing agreement.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a stated purpose.
• "KYC Data" means identity and address verification documents collected from Players in connection with Know Your Customer obligations.
• "Cookie" means a small data file stored on your device by your web browser when you visit the Platform.

3Data Controller Identity

MCT88 is the Data Controller in respect of all personal data collected through the Platform. MCT88 operates the platform at mct88.cam under an international online gaming licence. Queries regarding data controller identity, the processing activities described in this Policy, or any aspect of your data rights may be directed to our support team via the contact details set out in Section 17.

Where MCT88 engages third-party service providers to process data on its behalf (for example, payment processors, identity verification services, or analytics providers), those parties act as Data Processors and are bound by written data processing agreements that restrict their use of your data to the specific services contracted.

4Personal Data We Collect

MCT88 collects the following categories of personal data in connection with platform operation. The specific data points collected will vary depending on your level of engagement with the Platform:

4.1 Identity & Contact Data

• Full legal name (as appears on your identity document)
• Date of birth (for age verification — players must be 21 or above)
• Gender (optional, collected during registration)
• Email address and/or mobile phone number
• Residential address (for KYC purposes)

4.2 Identity Verification (KYC) Documents

• Malaysian MyKad (front and back), passport, or other government-issued identity document
• Proof of address documentation (utility bill, bank statement, official correspondence)
• Payment method ownership verification (e-wallet screenshot, bank statement excerpt)

4.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts, dates, and payment methods
• E-wallet identifiers (Touch 'n Go, Boost, GrabPay, DuitNow account numbers)
• Bank account details for FPX transfers (Maybank, CIMB, Public Bank, Hong Leong)
• Cryptocurrency wallet addresses where applicable
• Account balance history and bonus allocation records

4.4 Gaming & Betting Activity Data

• Game session history (games played, wagers placed, outcomes, durations)
• Sports betting selections, odds accepted, and settlement records
• Bonus and promotional participation records
• Responsible gambling tool settings (deposit limits, self-exclusion status)

4.5 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, browser type, and version
• Session timestamps, login records, and access logs
• Cookie identifiers and similar tracking technology data

4.6 Communications Data

• Live chat transcripts and support ticket records
• Email correspondence between you and MCT88
• Feedback, survey responses, and complaint records

5How We Collect Your Data

MCT88 collects personal data through the following channels and means:

• Directly from you: Information you provide during account registration, KYC document uploads, deposit and withdrawal requests, live chat and email interactions, and promotional opt-ins.
• Automatically during platform use: Technical data collected via cookies, server logs, and similar technologies when you browse or interact with the Platform.
• From third-party payment processors: Transaction confirmation data from e-wallet providers (Touch 'n Go, Boost, GrabPay), DuitNow, FPX participating banks, and cryptocurrency networks.
• From identity verification services: Verification results and risk signals from contracted KYC and fraud prevention service providers.
• From publicly available sources: Where necessary for compliance purposes, we may cross-reference information against publicly available databases (e.g., sanctions lists, politically exposed person registers).

6Purposes of Processing & Legal Basis

MCT88 processes your personal data only where we have a valid legal basis to do so. The table below summarises our primary processing purposes and the corresponding legal basis for each:

7Data Sharing & Disclosure

MCT88 does not sell or rent your personal data. We share personal data only in the following circumstances, and only to the extent necessary for the specified purpose:

• Payment processors: We share transaction data with your chosen payment service providers — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow operators, FPX-participating banks (Maybank, CIMB, Public Bank, Hong Leong), and cryptocurrency network operators — to process deposits and withdrawals.
• KYC and identity verification providers: We share identity and document data with contracted verification service providers to fulfil our age verification and AML obligations.
• Game technology providers: Session and wager data is shared with the platform's licensed game studio partners to the extent necessary to deliver game functionality, settle outcomes, and detect cheating.
• Fraud and risk management services: We may share technical and transaction data with fraud detection services to identify and prevent prohibited activities on the Platform.
• Regulatory and licensing authorities: We are required to disclose player data to our licensing authority and, in certain circumstances, to law enforcement agencies or regulatory bodies where required by law, court order, or pursuant to our licensing obligations.
• Professional advisers: Legal counsel, auditors, and compliance consultants acting under appropriate confidentiality obligations may access relevant personal data in the context of professional engagements.
• Business transfers: In the event of a merger, acquisition, or sale of all or a substantial portion of our business assets, personal data may be transferred to the acquiring entity subject to equivalent data protection commitments.

8International Data Transfers

MCT88 operates on a global infrastructure. Your personal data may be stored and processed in countries outside of Malaysia, including jurisdictions where MCT88's hosting infrastructure and contracted service providers are located. These locations may not have data protection laws equivalent to those in Malaysia.

Where personal data is transferred internationally, MCT88 takes appropriate safeguards to ensure that such transfers are conducted in accordance with applicable data protection principles, including:

• Executing data processing agreements with service providers that include standard contractual clauses or equivalent transfer mechanisms;
• Conducting due diligence assessments on the data protection practices of international service providers prior to engagement;
• Restricting international data transfers to jurisdictions and organisations that provide an adequate level of data protection.

9Data Retention

MCT88 retains personal data for the period necessary to fulfil the purposes for which it was collected, subject to any extended retention periods required by applicable law or our licensing obligations. Indicative retention periods are as follows:

• Account and identity data: Retained for the duration of your Account plus a minimum of five (5) years following Account closure, consistent with anti-money laundering and record-keeping requirements;
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction;
• KYC documentation: Retained for a minimum of five (5) years following Account closure or the completion of the last transaction, whichever is later;
• Gaming activity logs: Retained for a minimum of three (3) years for dispute resolution, compliance, and responsible gambling monitoring purposes;
• Support and communications records: Retained for two (2) years from the date of last correspondence;
• Marketing consent records: Retained for the duration of consent and for two (2) years thereafter as a compliance record.

Following the expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents reconstruction of individual identity.

10Security Measures

MCT88 implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security programme includes:

• SSL/TLS encryption: All data transmitted between your device and the MCT88 platform is encrypted in transit using current-generation SSL/TLS protocols;
• Encryption at rest: Sensitive data stored on our servers, including identity documents and payment credentials, is encrypted at rest;
• Access controls: Strict role-based access controls limit employee access to personal data on a need-to-know basis. All access is logged and audited;
• Regular security assessments: MCT88 conducts periodic vulnerability assessments and penetration tests to identify and remediate potential security weaknesses;
• Incident response: We maintain a documented incident response plan. In the event of a data breach affecting your rights, we will notify you and relevant authorities in accordance with applicable requirements.

11Cookies & Tracking Technologies

MCT88 uses cookies and similar tracking technologies on the Platform to support functionality, analyse usage, and improve the player experience. The types of cookies we use include:

• Strictly necessary cookies: Essential to the operation of the Platform — for example, maintaining your logged-in session state and remembering security settings. These cannot be disabled without materially affecting platform functionality;
• Functional cookies: Enable enhanced functionality such as remembering your display preferences, language settings, and game filter selections;
• Analytics cookies: Collect aggregated, anonymised data about how Players use the Platform — including pages visited, session duration, and navigation paths. This data is used to improve platform design and performance;
• Security cookies: Help detect and prevent fraudulent activity, bot traffic, and other security threats.

You may manage cookie preferences through your browser settings. Disabling certain categories of cookies may affect the functionality of the Platform. MCT88 does not use third-party advertising cookies or sell cookie data to advertising networks.

12Your Data Rights

Subject to applicable law and any overriding legal obligations, you hold the following rights in relation to your personal data held by MCT88:

To exercise any of the above rights, please contact MCT88 via the live chat on the Platform or by email to the address set out in Section 17. We will respond to verified requests within 30 calendar days. We may request proof of identity before processing your request.

13Minors & Age Policy

The MCT88 Platform is strictly intended for individuals aged 21 years and above. MCT88 does not knowingly collect or process personal data from minors. Age verification is a mandatory step in the account registration and KYC processes.

If MCT88 discovers or has reason to believe that an account has been opened by a person under the age of 21, we will immediately suspend the account, conduct an investigation, and — if the breach is confirmed — permanently close the account, forfeit all winnings, and return any verified real-money deposits made by the underage individual.

14Marketing Communications

MCT88 may send you marketing communications about our promotions, bonuses, new games, and platform features where you have provided your explicit consent to receive such communications during registration or subsequently through your account settings.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email we send;
• Updating your notification preferences in your MCT88 account settings;
• Contacting our support team via live chat or email to request removal from marketing lists.

Opting out of marketing communications does not affect our ability to send you essential service-related communications — such as transaction confirmations, KYC document requests, security alerts, or account status notifications — which are sent on the basis of contractual necessity rather than consent.

15Third-Party Links & Services

The MCT88 Platform may contain references to or integrations with third-party services — for example, your chosen payment provider's interface when processing a deposit. These third-party services operate under their own privacy policies and data practices, which are independent of MCT88.

MCT88 does not control the privacy practices of any third-party service, and this Policy does not apply to the collection and use of your data by such parties. We encourage you to review the privacy notices of any third-party service you interact with, including your e-wallet provider (Touch 'n Go eWallet, Boost, or GrabPay) and your bank (Maybank, CIMB, Public Bank, or Hong Leong).

16Policy Amendments

MCT88 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. The date of the most recent revision is displayed at the top of this page.

Where a proposed amendment is material — meaning it significantly changes your rights, the purposes for which we process your data, or the parties with whom we share it — we will provide advance notice via email and/or a prominent platform notice at least 14 days before the change takes effect.

Your continued use of the Platform after the effective date of an amended Policy constitutes your acknowledgement of the updated terms. If you do not accept the amendments, you should discontinue use of the Platform and contact us to close your account.

17Contact Us & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how MCT88 has handled your personal data, please contact us through any of the following channels:

• Live Chat: Available 24/7 directly on the MCT88 platform — the fastest channel for privacy-related queries;
• Email: support@mct88.cam (plain text only — not a clickable link);
• FAQ: Visit our FAQ page for answers to common questions about account management and data handling.

We will acknowledge your privacy-related request within five (5) business days and endeavour to resolve it within 30 calendar days. For complex requests, we may extend this period by a further 30 days and will notify you of the extension and reason.