Personal Data Protection

Privacy Policy Million888

Your trust is our priority. At million888, every piece of personal information you share with us is protected by industry-grade encryption technology and managed in accordance with strict privacy practices. We believe you have the right to know how your data is used.

256-bit SSL
Updated: January 2026
Malaysia PDPA
Our Privacy Commitment
Your data is not sold to third parties without your consent.
End-to-end encryption for all financial transactions
You may request access to, correction of, or deletion of your data at any time.
Full compliance with Malaysia's Personal Data Protection Act (PDPA)
Dedicated data security team operating around the clock

Six Pillars Privacy Protection We

Every decision we make regarding your data is grounded in these six core principles — not merely legal compliance, but a genuine commitment to your trust.

High-Grade Data Security

All your personal and financial information is stored using AES-256 encryption and protected by a multi-layered security infrastructure that is periodically audited by independent third-party auditors.

Data Collection Minimization

We only collect information that is strictly necessary to deliver our services. No excess data is collected or retained beyond the period required for its original purpose.

Full Control in Your Hands

As a million888 member, you have the full right to access, update, transfer, or request deletion of your personal data. This process can be initiated through our customer support team.

Genuine Transparency

We are committed to remaining fully transparent about how your data is used. Any changes to this privacy policy will be communicated to you via a clear notice before they take effect.

Full Legal Compliance

Million888 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international standards. We continuously monitor regulatory developments to ensure ongoing compliance.

No Unauthorized Sharing

Your personal data will not be shared, sold or transferred to any third party without your explicit consent, except where required by law or a legitimate authority.


Full Privacy Policy Million888

1Privacy Policy Introduction & Scope

This Privacy Policy explains in detail how million888 ("we", "our platform") collects, uses, stores and protects your personal information when you use our platform — whether through the website at million888.vu or our mobile app.

This document was drafted with the needs and rights of users in Malaysia in mind, and complies with the provisions of the Personal Data Protection Act 2010 (PDPA). It is intended to ensure every member clearly understands their rights and how we handle their data responsibly.

Important Note: By registering an account or using any part of the million888 platform, you are deemed to have read and agreed to this Privacy Policy. If you do not agree, please stop using the platform immediately.

This Privacy Policy applies to all million888 platform users regardless of their geographic location, provided they access the platform through any available device or method. It covers all products and services offered under the million888 brand.

2Information We Collect

Million888 collects various categories of information to enable us to provide a secure, effective, and personalized service for every member. The following are the types of information we collect:

2.1 Information You Provide Directly

  • Identity Information: Full name, date of birth, identification card number (MyKad) or passport, gender, and nationality.
  • Contact Information: Email address, mobile number and residential address.
  • Financial Information: Bank account number, bank name, and details of other payment methods used for deposits and withdrawals.
  • Verification Documents: Copies of identification cards, bank statements, or other documents submitted during the KYC (Know Your Customer) process.

2.2 Information Collected Automatically

  • Technical Data: IP address, device type, operating system, browser type and language settings.
  • Activity Data: Login history, pages visited, games played, session duration, and in-platform actions.
  • Transaction Data: Complete history of deposits, withdrawals, wagering, wins, and bonus usage in your account.
  • Cookie Data: Information collected through cookies and similar tracking technologies as described in Section 6.
Data Category Example Primary Purpose
Identity Name, IC, Date of Birth Account verification (KYC)
Contact Email, Phone Number Communications & Notifications
Financial Bank accounts, e-wallets Transaction processing
Technical IP, Device Type Security & Anti-Fraud
Activity Game history Service improvement

3How We Use Your Data

The information we collect is used responsibly and only for the following legitimate purposes:

3.1 Account Management & Services

Your data is used to create and manage your million888 account, process registrations, verify your identity through KYC, and allow you to securely access all platform features. Without this information, we are unable to deliver the high standard of service you expect.

3.2 Financial Transaction Processing

Your financial information is used solely to process deposits, withdrawals, and any other financial transactions you carry out on the platform. Every transaction is recorded to ensure complete accuracy, security, and auditability.

3.3 Security & Fraud Prevention

Technical and activity data is actively used to detect and prevent fraudulent activity, money laundering, unauthorised access and other security threats. Our monitoring systems operate around the clock to protect you and the platform from cyber threats.

3.4 Communication & Customer Support

Your contact information is used to send important account notifications, service updates, security alerts, and responses to customer support enquiries. You may also receive promotional communications if you have given consent for that purpose.

3.5 Legal & Regulatory Compliance

In certain circumstances, we are legally required to use or disclose your data to the relevant authorities — for example, in financial crime investigations or to comply with a court order. Any such disclosure is made only when legally required and to the extent mandated by law.

Our Commitment: Million888 has never and will never use your data for any third-party marketing purposes without your explicit, revocable consent.

4Information Sharing with Third Parties

Your privacy is our foremost responsibility. Million888 does not sell, rent, or disclose your personal information to third parties for marketing or commercial purposes. However, there are a limited number of situations where data sharing is necessary:

4.1 Trusted Service Providers

We work with a number of third-party service providers that help us operate the platform — including payment gateway providers, cloud infrastructure providers, and identity verification service providers. All these providers are bound by strict confidentiality agreements and are only permitted to use your data for specified purposes.

4.2 Authorities & Legal Requirements

Million888 will disclose required information to lawful authorities — such as the police, financial intelligence units, or courts — when mandated by law or a valid court order. We cannot refuse these legitimate legal obligations.

4.3 Business Transfers

If million888 is involved in any merger, acquisition, or sale of business assets, user data may be transferred as part of that process. You will be notified in advance should this occur, and your rights will remain protected.

All third parties that receive million888 user data are bound by legally binding data processing agreements and must comply with security standards equal to or higher than our own.

5Data Security Measures

Million888 continuously invests in the latest security technologies and procedures to ensure your data remains protected against all threats. The following are the security layers we have in place:

  • 256-bit SSL/TLS Encryption: All communications between your device and our servers are encrypted using the latest SSL/TLS protocols, ensuring data cannot be intercepted in transit.
  • Stored Data Encryption: Sensitive information such as passwords and financial details is stored in encrypted form using the AES-256 algorithm, which cannot be decrypted without the appropriate secret key.
  • Two-Factor Authentication (2FA): Members are encouraged to enable two-factor authentication for an added layer of security when logging in and performing important transactions.
  • Active 24/7 Monitoring: Our security team continuously monitors the platform using real-time threat detection systems to identify and respond to any suspicious activity.
  • Periodic Security Assessments: Penetration testing and independent security audits are conducted regularly by certified third-party cybersecurity firms.
  • Internal Access Controls: Only specially authorised million888 staff may access user data, and every such access is recorded and audited on a regular basis.

While we take all reasonable precautions, no security system can be guaranteed to be completely foolproof. You also play an important role in keeping your account secure by using a strong password and not sharing your login credentials.

6Cookies & Tracking Technologies

The million888 platform uses cookies and similar tracking technologies to enhance user experience, maintain session security, and collect analytical data that helps us improve our services.

6.1 Types of Cookies We Use

  • Session Cookies: Temporary cookies required to maintain your login session. They are automatically deleted when you close your web browser.
  • Preference Cookies: Saves your preferences such as language, display theme, and game settings to deliver a more personalized experience.
  • Security Cookies: Helps us detect and prevent fraudulent activity, and protects your account from unauthorized access.
  • Analytical Cookies: Collects aggregated information on how users interact with the platform for continuous improvement purposes.

6.2 Managing Your Cookie Settings

You can manage cookies through your browser settings. However, disabling certain cookies may affect platform functionality. Session cookies and security cookies are essential for basic platform operations and cannot be disabled without impacting your overall user experience.

7Your Rights as a User

Under the Malaysian Personal Data Protection Act (PDPA) and our internal policies, you have the following rights regarding your personal data:

  • Right of Access: You have the right to request a copy of the personal data we hold about you. This request will be processed within 21 business days.
  • Right to Rectification: If any information we hold is inaccurate or outdated, you have the right to request an immediate correction or update.
  • Right to Erasure: In certain circumstances, you may request that your personal data be deleted from our systems, subject to our legal obligations to retain certain records.
  • Right to Restrict Processing: You may request that we restrict how we process your data in certain situations during a dispute investigation.
  • Right to Withdraw Consent: For processing activities that rely on your consent (such as marketing communications), you may withdraw that consent at any time without affecting your use of the platform.
  • Right to Lodge a Complaint: You have the right to lodge a complaint with the relevant data protection authority if you believe your privacy rights have been violated.
To exercise any of the above rights, please contact the million888 customer support team via live chat in your account. We will handle every request seriously and within a reasonable timeframe.

8Data Storage & Deletion

Million888 retains your personal data only for as long as necessary to fulfill the original purpose of collection, or as required by applicable laws and regulations. The following are our general data retention guidelines:

  • Active Account Data: Retained for the lifetime of your active account on the million888 platform.
  • Financial Transaction Records: Retained for a minimum of seven (7) years after a transaction occurs, in compliance with Malaysia's accounting and anti-money laundering legal requirements.
  • KYC & Verification Data: Retained for a minimum of five (5) years after account termination, in accordance with applicable regulatory requirements.
  • Security Logs: Retained for twelve (12) months for security investigation and digital forensics purposes if required.
  • Data After Account Closure: Information that is no longer legally required will be deleted or anonymised within ninety (90) days after an account closure request has been processed.

9Changes to This Privacy Policy

Million888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, new legal requirements, or improvements in how we protect your data.

Any significant changes will be communicated to you through the following means:

  • A prominent notice on the million888 platform homepage at least seven (7) days before the changes take effect.
  • Notification to the email address registered on your account.
  • A pop-up notice on your first login after the changes come into effect.

The "Updated" date at the top of this document will always reflect the latest version of the Privacy Policy. Your continued use of the million888 platform after any changes take effect will be considered your acceptance of the updated Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. The latest version is always accessible at million888.vu/privacy-policy.

10Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, our team is ready to assist you.

You can reach us through the following channels:

  • Privacy Email: [email protected] — Use the subject line "Data Privacy Inquiry" for faster handling.
  • Live Chat 24/7: Log in to your account and use the live chat function to get an immediate response from our support team.
  • Help Center: Visit the FAQ us for answers to frequently asked questions about privacy and data security.

We are committed to responding to every privacy enquiry within three (3) business days. For more complex cases requiring in-depth investigation, we will notify you within that timeframe and provide a realistic estimated resolution time.

Data Protection Officer: Million888 has appointed an internal Data Protection Officer responsible for ensuring ongoing compliance with the PDPA and the platform's privacy policies. You may contact this officer directly via email by stating "Attn: Data Protection Officer" in your subject line.

Related FAQs Privacy Policy

Answers to the most frequently asked questions by million888 members regarding data protection and privacy.

Not at all. million888 does not sell, rent, or disclose your personal data to any third party for marketing or commercial purposes. Your data is only shared with service providers who assist in operating the platform, and they are bound by strict confidentiality agreements. We only disclose information to authorities when legally required by law.

You may submit a data access request by contacting our customer support team via live chat within your account, or by emailing [email protected] with "Data Access Request" in the subject line. We will process your request and respond within 21 business days. Please ensure you verify your identity when making this request for security purposes.

When you close your account, we will delete or anonymise data that is no longer required within 90 days. However, financial and transaction records will be retained for a minimum of seven (7) years in accordance with Malaysian accounting legal requirements, while KYC documents are retained for five (5) years. These are legal obligations that cannot be waived.

Your financial information is protected with banking-grade AES-256 encryption and 256-bit SSL/TLS protocols for all data transmissions. Your bank account details are never stored in plain text and are only used for the purpose of processing transactions you initiate. Our fraud monitoring system also operates around the clock to detect any suspicious activity involving your account.

Yes, you have the right to request the deletion of your personal data. However, this request is subject to our legal obligations to retain certain records. Data that can be deleted immediately includes profile information, preferences, and non-critical data. Transaction and KYC records must be retained for the legally prescribed period before they can be deleted. Contact our team to discuss your specific case.

Yes, million888 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and all regulations issued under it. We have appointed an internal Data Protection Officer responsible for ensuring ongoing compliance. We also continuously monitor legislative developments and the latest guidelines from relevant authorities to ensure our practices remain aligned with current legal requirements.

🔐

Your Data Is Safe. Play Responsibly at Million888

With industry-grade data protection and our commitment to transparency, you can enjoy the best online entertainment experience with full confidence. Register today and feel the difference.

256-bit SSL Encryption Malaysia PDPA Compliance 24/7 Customer Support No Data Sharing Without Consent

Bahasa Melayu