mgclub8 Privacy Policy – How We Collect, Use & Protect Your Data

1. Introduction

mgclub8 ("mgclub8", "we", "us", "our") operates the online gaming platform accessible at mgclub8.net, providing Malaysian players with casino games, sports betting, and related services. We are committed to protecting your personal information and your right to privacy.

This Privacy Policy ("Policy") describes how mgclub8 collects, uses, discloses, and safeguards personal information provided by users ("Player", "you") when accessing or using the mgclub8 platform. This Policy should be read together with the mgclub8 Terms & Conditions.

By registering an account or using any service on the mgclub8 platform, you confirm that you have read and understood this Policy and consent to the processing of your personal data as described herein.

2. Data Controller

For the purposes of applicable data protection legislation, mgclub8 is the data controller responsible for personal data collected through the mgclub8 platform. All data protection enquiries may be directed to the mgclub8 Data Protection contact at [email protected].

3. Personal Data We Collect

mgclub8 collects the following categories of personal data from players:

Category	Examples	Purpose
Identity Data	Full legal name, date of birth, MyKad / passport number	Account registration, KYC, age verification
Contact Data	Email address, mobile number	Account communication, OTP, support
Financial Data	Bank account / e-wallet details, transaction history	Deposits, withdrawals, AML compliance
Technical Data	IP address, device type, browser, session tokens	Security, fraud prevention, platform optimisation
Usage Data	Game history, bet amounts, session duration, page interactions	Platform improvement, responsible gaming monitoring
KYC Documents	Identity document images, proof of address, selfie verification	Identity verification, regulatory compliance

mgclub8 does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, health data, or biometric data beyond what is strictly required for identity verification.

4. How We Collect Personal Data

We collect personal data through the following means:

• Direct submission: Information you provide when registering, completing KYC, making deposits or withdrawals, contacting support, or participating in promotions;
• Automated collection: Technical data collected automatically when you access the mgclub8 platform, including IP address, session data, device identifiers, and browser information;
• Transaction data: Records of deposits, withdrawals, and gameplay generated through your use of the platform;
• Third-party verification: Identity verification data from KYC service providers used to confirm your identity and comply with anti-money laundering (AML) obligations;
• Cookies and similar technologies: Session and analytics data collected via cookies placed on your device during platform use. See Section 11 for full cookie details.

5. How We Use Your Personal Data

mgclub8 uses your personal data for the following purposes:

• To create, manage, and maintain your player account;
• To process deposits, withdrawals, and financial transactions, including currency conversion to MYR where applicable;
• To verify your identity and age in accordance with our 21+ age restriction policy and KYC requirements;
• To detect, investigate, and prevent fraudulent activity, money laundering, collusion, and other prohibited conduct;
• To comply with applicable legal, regulatory, and tax obligations;
• To provide customer support and respond to your enquiries via live chat or email;
• To deliver platform notifications, account updates, and promotional communications where you have consented to receive them;
• To monitor responsible gaming indicators and reach out to players displaying patterns associated with problem gambling;
• To improve the mgclub8 platform through usage analytics and performance monitoring;
• To enforce our Terms & Conditions and other platform policies.

6. Legal Basis for Processing

mgclub8 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the player account agreement — including account management, payment processing, and support;
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML), counter-terrorism financing (CTF), and gaming regulatory requirements;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your data protection rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit consent. You may withdraw consent at any time by contacting support or updating your account communication preferences.

7. Data Sharing and Disclosure

mgclub8 does not sell, rent, or trade your personal data to third-party marketers. We may share your personal data with the following categories of third parties where strictly necessary:

• Payment processors and financial institutions: To process deposits and withdrawals, including Touch 'n Go eWallet, DuitNow, Boost, and Malaysian bank FPX partners;
• KYC and identity verification providers: To conduct identity checks as required by AML/CTF obligations;
• Game content providers: Certain game providers may receive session data necessary to deliver and audit game outcomes, solely for operational purposes;
• Regulatory and law enforcement authorities: Where required by law, court order, or regulatory instruction, mgclub8 will disclose personal data to the relevant authorities;
• IT and infrastructure service providers: Third-party providers who assist with platform hosting, security, analytics, and support operations, subject to contractual data protection obligations.

All third parties with whom mgclub8 shares personal data are required to process that data in accordance with applicable data protection law and only for the purposes specified by mgclub8.

8. International Data Transfers

The mgclub8 platform serves Malaysian players, and we aim to process personal data within jurisdictions that maintain adequate data protection standards. Where data is transferred to third parties or service providers located outside Malaysia, mgclub8 requires appropriate safeguards to be in place — including contractual data protection clauses — to ensure your personal data receives an equivalent level of protection.

9. Data Retention

mgclub8 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including legal, accounting, and regulatory requirements. As a general guideline:

• Active account data is retained for the duration of your account relationship with mgclub8;
• Financial transaction records and KYC documentation are retained for a minimum of 5 years following the conclusion of the business relationship, in accordance with AML/CTF obligations;
• Technical and usage logs are retained for a rolling period of 12–24 months for security and audit purposes;
• Data submitted in support of a closed or suspended account is retained for the periods required by applicable law before being securely deleted.

10. Your Data Rights

Subject to applicable law and regulatory constraints, you have the following rights in relation to your personal data held by mgclub8:

• Right of access: You may request a copy of the personal data mgclub8 holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations;
• Right to restrict processing: You may request that we limit the processing of your data in certain circumstances;
• Right to data portability: You may request your personal data in a structured, commonly used, machine-readable format;
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes;
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact the mgclub8 support team via live chat or at [email protected]. mgclub8 will respond to data rights requests within 30 days of receipt.

11. Cookies and Tracking Technologies

mgclub8 uses the following types of cookies on the platform:

• Strictly necessary cookies: Required for the platform to function, including session authentication tokens and security cookies. These cannot be disabled without impairing platform functionality;
• Analytics cookies: Used to collect aggregated, anonymised usage data to help us understand how players interact with the platform and identify areas for improvement;
• Preference cookies: Used to remember your platform settings and preferences between sessions.

mgclub8 does not use third-party advertising or retargeting cookies. You may manage or disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect your ability to use some features of the mgclub8 platform.

12. Children's Privacy

The mgclub8 platform is strictly intended for persons aged 21 years and above. mgclub8 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from an underage individual, the associated account will be suspended and the data will be deleted in accordance with applicable law. If you believe an underage individual has registered on the mgclub8 platform, please contact support immediately.

13. Security Measures

mgclub8 implements technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and mgclub8 servers;
• Bcrypt password hashing — your login password is never stored in plaintext;
• Access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security assessments and penetration testing of platform infrastructure;
• Two-factor authentication (2FA) available to all players to protect account access.

While mgclub8 takes all reasonable precautions, no data transmission over the internet can be guaranteed to be 100% secure. You are also responsible for maintaining the security of your account credentials.

14. Third-Party Links

The mgclub8 platform may contain references to affiliated services or game providers. mgclub8 is not responsible for the privacy practices of third-party services. This Policy applies solely to data processed by mgclub8 through the mgclub8.net platform.

15. Changes to This Privacy Policy

mgclub8 reserves the right to update this Privacy Policy at any time. Where changes are material, we will notify you via the platform or by email to your registered address no less than 7 days before the revised Policy takes effect. Your continued use of the mgclub8 platform following any such update constitutes acceptance of the revised Policy. We encourage you to review this page periodically.

16. Contact and Data Protection Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or your personal data held by mgclub8, please contact the support team via the live chat function on the platform (available 24/7, MYT) or in writing to: [email protected]

We aim to acknowledge all data protection enquiries within 3 business days and to resolve them within 30 calendar days.