πŸ”’ OFFICIAL DATA PROTECTION DOCUMENT

Privacy Policy mhd888 β€” Our Commitment to Protecting the Personal Data of Malaysian Members

Mhd888 takes the privacy and data protection of every member seriously. This document clearly explains how we collect, use, store, and protect your personal information β€” in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Last Updated: 1 January 2026
Law: Malaysia PDPA 2010

Contents of This Policy

  • Data We Collect
  • How We Use Your Data
  • Sharing Data with Third Parties
  • Data Security & Storage
  • Cookies & Tracking Technologies
  • Your Rights as a Data Subject
  • International Data Transfers
  • How to Contact Us
256-bit
Bank-Grade SSL Encryption for All Data
PDPA
Full Compliance with the Personal Data Protection Act 2010
7 Years
Minimum Data Retention Periods Required by Law
0
Data Sold to Third Parties for Marketing

Mhd888's Six Privacy Commitments to Members

The core principles that shape how mhd888 manages and protects your personal data

Bank-Grade Encryption

All data transmitted between your device and mhd888's servers is protected by 256-bit SSL encryption β€” the same security technology used by leading Malaysian banks such as Maybank and CIMB. No third party can intercept or read your data in transit.

Malaysia PDPA Compliance

All data processing at mhd888 is carried out in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). You have the legal right to access, correct, and request the deletion of your data, and we honour those rights fully, without question.

Restricted Data Access

Your personal data at mhd888 is accessible only to staff who have been granted specific authorisation for legitimate operational purposes. All access to sensitive member data is logged and automatically monitored. Any unauthorised access is prevented by our internal access control systems.

No Sale of Data to Advertisers

Mhd888 does not sell, rent, or transfer members' personal data to any third-party advertisers or marketing companies. The information you provide is used solely for platform operations and legal compliance β€” not as an additional revenue stream.

Marketing Communications Controls

You have full control over marketing communications from mhd888. Opt in or out of promotional emails, bonus notifications, and platform updates at any time directly from your account settings β€” no need to contact anyone.

Right to Data Erasure

If you close your mhd888 account, you may request the deletion of personal data that is no longer required for legal or operational purposes. Deletion requests will be processed within 30 days and you will be notified upon completion.

1

Introduction

Welcome to the mhd888 Privacy Policy. This document outlines the privacy practices of the mhd888 platform, which operates under the domain mhd888.best. We are the data controller for all personal information collected through this platform.

Mhd888 is committed to protecting the privacy of all members and visitors to our platform. We process personal data transparently, responsibly, and in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). Every data-related decision is guided by one key question: is this in the best interest of our members?

By registering an account or using the mhd888 platform, you consent to the collection and use of your personal information as described in this policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us with any questions.

This Privacy Policy applies to all mhd888 services β€” including our website, mobile app, slots, Live Casino, Sports Betting, lottery, and all interactions through our customer support channels.


2

Personal Data We Collect

Mhd888 collects several categories of personal data depending on how you use our platform. We only collect data that is genuinely necessary for the stated purposes β€” no excessive data collection.

Data You Provide Directly

  • Identification Information: Full name, national identification number (for KYC), date of birth, gender
  • Contact Information: Active Malaysian phone number, email address (if provided)
  • Password: Stored in hashed format and unreadable β€” we do not have access to your password
  • KYC Documents: A copy of your identity card or passport for identity verification prior to large withdrawals

Automatically Collected Data

  • Transaction Data: Deposit and withdrawal records including date, time, amount, and payment method (TNG eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX) β€” excluding full account numbers
  • Game Data: Betting records, games played, session duration, outcomes β€” used for support and compliance
  • Technical Data: IP address, device type, operating system, web browser, screen resolution
  • Usage Data: Pages visited, time spent, buttons clicked, navigation flow
  • Approximate Location Data: Country and state based on IP address β€” not precise GPS location

Mhd888 never stores full bank account numbers, full credit/debit card numbers, or other sensitive financial details. All financial transactions are processed through secure payment gateways β€” we only receive transaction confirmations, not your full financial information.


3

How We Use Your Data

Every use of personal data at mhd888 has a clear purpose and a valid legal basis. The table below explains in detail how your data is used:

Data Type Purpose of Use Basis
Identity Information KYC identity verification, fraud prevention, AML compliance Legal Obligation
Phone Number Account verification, security notifications, and customer support Contract Performance
Transaction Data Processing of deposits & withdrawals, financial records, audits Legal Obligation
Game Data Game operation, dispute resolution, abuse detection Contract Performance
Technical Data & IP Platform security, fraud detection, technical improvements Legitimate Interests
Usage Data Product improvement, UX analysis, experience personalisation Legitimate Interests
Email address (where provided) Account notifications, promotional information (with consent), and terms updates Contract Performance

Mhd888 does not use your data to make automated decisions that significantly affect you without human review, except for preliminary fraud detection β€” which is always reviewed by our team before any action is taken.


4

Legal Basis for Data Processing

Under Malaysia's Personal Data Protection Act 2010 (PDPA), mhd888 only processes your personal data where a valid legal basis exists. The three primary bases we rely on are:

1. Contract Performance

Most data processing at mhd888 is necessary to deliver the services you signed up for. This includes processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, operating games, managing accounts, and processing withdrawals. Without this processing, we are unable to provide mhd888 services to you.

2. Legal Obligations

Certain data processing activities are required under applicable Malaysian law. This includes KYC and AML (anti-money laundering) obligations, retention of financial records for legally prescribed periods, and disclosure of information to authorities upon valid and lawful request.

3. Legitimate Interests

In certain cases, we process data based on mhd888's legitimate interests, provided those interests do not override your rights and interests. Examples include using technical data to improve platform security, analysing usage patterns to enhance the member experience, and detecting fraudulent activity that protects all members.

For optional marketing communications such as promotional emails and bonus notifications, we request your consent separately. You are free to give or withdraw this consent at any time from your mhd888 account settings.


5

Sharing Data with Third Parties

Mhd888 does not sell or share members' personal data with third parties for their own marketing purposes. However, in the course of operating the platform, we may need to share limited data with the following parties:

Trusted Service Providers

Mhd888 works with carefully selected service providers who assist us in operating the platform. These include:

  • Payment Providers: Gateways that process transactions for Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX. They receive only the data necessary to process the relevant transaction.
  • Game Providers: Companies that provide slots, Live Casino, and jackpot game software. Only the data necessary to operate the games is shared.
  • Cloud Computing Services: Infrastructure providers that host platform data with industry-standard levels of protection
  • Analytics Services: Tools that help us understand platform usage patterns β€” the data processed is in aggregate form and cannot be used to identify any individual

All third-party service providers are required to meet data protection standards at least equivalent to Malaysia's PDPA, and are bound by data processing agreements that prohibit them from using your data for any other purpose.

Legal Authorities

Mhd888 will disclose members' personal data to Malaysian authorities only when required by a valid court order, a lawful request from a law enforcement body, or a mandatory legal compliance obligation. We will notify you of any such disclosure where we are permitted by law to do so.

In all cases of data sharing, mhd888 adheres to the principle of data minimisation β€” we only share data that is strictly necessary for the specific purpose in question. No bulk or undirected data sharing takes place.


6

Data Security

Protecting the personal data of mhd888 members is a responsibility we take very seriously. We invest in multiple layers of technical and organisational security to ensure your data remains safe.

Technical Security Measures

  • Data Encryption in Transit: All data transmitted between your browser or app and mhd888 servers is encrypted using TLS 1.3 with a 256-bit SSL certificate.
  • Encryption of Stored Data: Sensitive information such as KYC documents and financial records is stored in encrypted format on our servers
  • Password Hashing: Your password is stored in bcrypt hashed format β€” we can never view your actual password
  • Two-Factor Authentication: 2FA is available on all mhd888 accounts as an additional layer of protection
  • 24-Hour Security Monitoring: An automated threat detection system monitors for unusual activity around the clock
  • Regular Security Testing: Penetration testing is carried out periodically by independent third parties

Organisational Measures

  • Role-based access controls β€” staff can only access data required for their specific responsibilities
  • Complete audit logs for all access to sensitive member data
  • Mandatory data security training for all mhd888 staff
  • Tested incident response procedures to address any data breach swiftly

In the event of a data breach affecting your personal data, mhd888 will notify you within 72 hours of becoming aware of it, in line with international data protection best practices. The notification will include details of the breach and steps you can take to protect yourself.


7

Cookies & Tracking Technologies

Mhd888 uses cookies and similar tracking technologies to keep the platform running smoothly, improve your experience, and understand how the platform is used.

Types of Cookies We Use

  • Essential Cookies: Required for core platform functions β€” login, game sessions, and security. Cannot be disabled without disrupting your use of the platform.
  • Preference Cookies: Saves your preferences such as language, theme, and game settings so you do not have to reconfigure them each time
  • Analytics Cookies: Collecting anonymous information about how visitors use the platform to help us make improvements
  • Security Cookies: Detecting suspicious activity, preventing CSRF (Cross-Site Request Forgery), and protecting your session

Managing Cookies

You can manage cookies through your web browser settings. Disabling certain cookies may affect platform functionality β€” for example, disabling essential cookies will require you to log in again each visit. mhd888 does not use third-party tracking cookies for retargeting advertising purposes.


8

Data Retention Period

Mhd888 retains personal data only for as long as necessary for the stated purpose, or as required by Malaysian law. We do not store data beyond the period needed.

Specific Retention Periods

  • Financial Records (Deposits & Withdrawals): Minimum 7 years in accordance with Malaysian accounting and AML legal requirements
  • Game Records: 5 years for dispute resolution and compliance purposes
  • KYC Documents: For the lifetime of the active account, plus 7 years after account closure
  • Support Communication Logs: 3 years after last interaction
  • Analytics Cookie Data: Maximum 26 months
  • Security & Access Logs: 12 months for routine operational monitoring, or longer where an active investigation is ongoing

Once the relevant retention period has ended, your data will be securely deleted or anonymised so that it can no longer be linked to you as an individual.


9

International Data Transfers

As part of global operations, some mhd888 personal data may be stored or processed outside Malaysia β€” for example, by international game software providers or cloud computing infrastructure.

For all international data transfers, mhd888 ensures adequate protections are in place through one or more of the following mechanisms:

  • Data processing agreements incorporating recognised standard data protection clauses
  • Confirmation that the recipient country maintains equivalent data protection standards
  • Additional contractual requirements ensuring that service providers comply with Malaysia's PDPA

Payment data relating to Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX transactions is processed within Malaysia by the respective providers and is not transferred overseas.


10

Your Rights as a Data Subject

Under Malaysia's PDPA, you have a number of rights regarding the personal data mhd888 holds about you. We respect these rights and make it straightforward for you to exercise them:

πŸ‘οΈ
Right of Access

You have the right to request a copy of the personal data mhd888 holds about you. We will provide the data in a readable format within 30 days of your request.

✏️
Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request a correction. For details such as your name and date of birth, updates can be made through your account settings or by contacting mhd888 support.

πŸ—‘οΈ
Right to Erasure

You may request the deletion of your personal data when it is no longer needed, when you withdraw your consent, or when the processing is unlawful. Such requests are subject to applicable legal retention obligations.

β›”
Right to Object

You may object to the processing of your data for direct marketing purposes at any time. You may also object to processing based on legitimate interests in certain circumstances.

πŸ“¦
Data Portability Rights

You have the right to receive the data you have provided to us in a structured, machine-readable format, for portability to another platform should you choose to do so.

⏸️
Right to Restrict Processing

In certain circumstances β€” such as when you are disputing the accuracy of your data or the legitimacy of its processing β€” you may request that mhd888 temporarily restrict the processing of your data.

To exercise any of the rights above, contact the mhd888 privacy team by email at support@mhd888.best with the subject line "Privacy Rights Request β€” [Account Number]". We will respond within 30 days. Your identity will be verified before we process any request, to safeguard your account security.


11

Children's Privacy

The mhd888 platform is intended for adults aged 18 and above only. We do not knowingly collect or process personal data from anyone under the age of 18.

The mhd888 registration process requires date-of-birth verification, and we apply KYC measures to confirm a user's age before granting full access to the platform. Should we discover that we have collected data from someone under the age of 18, we will delete that data immediately and close the account in question.

If you believe someone under the age of 18 has registered an account on mhd888, please contact us immediately at support@mhd888.best. We will investigate and take prompt action to protect the minor in question.


12

How to Contact Us

For any enquiries, concerns, or requests relating to your privacy and personal data protection at mhd888, you may reach us through the following channels:

  • Privacy Email: support@mhd888.best (with the subject line "Privacy Enquiry" or "Privacy Rights Request")
  • Live Chat: Available 24 hours a day via the mhd888 platform β€” please indicate that your enquiry relates to privacy so it can be directed to the appropriate team

We aim to respond to all privacy enquiries within 5 business days. For formal requests involving PDPA rights, we target completion within 30 days from the date the request is received and verified.

If you are not satisfied with how mhd888 has handled your data after contacting us, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia, the country's data protection regulatory authority.

This Privacy Policy may be updated from time to time to reflect changes in our privacy practices or legal requirements. Any changes will be communicated to members via platform notification or email at least 14 days before they take effect. The date of the most recent update is always displayed at the top of this document.

Related Documents

Read the other documents that together form the complete data protection and platform usage framework for mhd888

Terms & Conditions

Rules governing the use of the mhd888 platform, covering account terms, deposits, withdrawals, bonuses, and dispute resolution.

Read Terms & Conditions
Responsible Gaming

Self-exclusion tools, game limits, and support resources to keep gambling a safe form of entertainment.

Read Guide
Frequently Asked Questions

Answers to the most frequently asked questions about accounts, deposits, withdrawals, bonuses, and games at mhd888.

Read FAQs

FAQ β€” mhd888 Privacy

Quick answers to the most frequently asked questions about privacy and data protection at mhd888

No. mhd888 never sells, rents, or transfers members' personal data to any third-party advertising or marketing company for their own marketing purposes. Your data is used solely to operate the mhd888 platform, provide the services you signed up for, and fulfil our obligations under Malaysian law. This is an unconditional commitment that will not change.

mhd888 does not store your full payment details. All deposit and withdrawal transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX are processed directly by the respective payment gateways β€” we only receive confirmation that a transaction was successful, not your full financial details. This means that even in the event of unauthorised access to mhd888 servers, your full payment information would not be exposed, because we simply do not store it.

Yes. Under Malaysia's PDPA, you have the right to access the personal data mhd888 holds about you. To submit a data access request, send an email to support@mhd888.best with the subject line "Data Access Request β€” [Your Account Number]". We will verify your identity and provide a data report within 30 days. The report will include your account information, game records, transaction history, and communication data we hold, in a readable format.

When you close your mhd888 account, we do not immediately delete all of your data. Certain data must be retained for a minimum period as required by Malaysian law β€” for example, financial records must be kept for 7 years under the Companies Act and AML requirements. This data is stored securely and is not used for marketing purposes or shared without a valid legal basis. Once the mandatory retention period has expired, your data will be permanently deleted. You may contact our privacy team to find out which specific data will be retained and for how long.

There are three easy ways to stop receiving marketing communications from mhd888. First, log in to your mhd888 account, go to Account Settings, and disable the "Receive Promotions & Offers" option β€” changes take effect within 24 hours. Second, click the "Unsubscribe" link found at the bottom of any promotional email you receive from us. Third, contact mhd888 support via live chat and request to be removed from the marketing list. Please note that opting out of marketing emails does not affect important account notifications such as transaction confirmations and security alerts.
mhd888's Privacy Commitments to Malaysian Members

Mhd888 does not sell members' personal data to third parties. All data processing is carried out in compliance with Malaysia's PDPA 2010 and protected by bank-grade 256-bit SSL encryption. For privacy enquiries or requests, contact us at support@mhd888.best or read Terms & Conditions full one.

Your Data Is Safe with mhd888 β€” Register with Confidence

Your privacy is fully protected in accordance with Malaysia's PDPA 2010. Register your mhd888 account today, claim a Welcome Bonus of up to RM 288, and enjoy a safe, fair, and exciting betting experience alongside more than 500,000 Malaysian members.

Bahasa Melayu