Privacy Policy — mtown88a

This Privacy Policy (hereinafter "Policy") is issued by mtown88a (referred to as "mtown88a", "we", "us", or "our") and governs the collection, processing, use, storage, and disclosure of personal data relating to individuals who visit, register on, or otherwise interact with the mtown88a platform accessible at https://mtown88a.cam (the "Platform").

mtown88a is committed to handling personal data responsibly, transparently, and in accordance with internationally recognised data protection principles. We collect only the data we genuinely need to deliver our services, we store it securely, and we are clear about how it is used. This Policy is designed to give you complete visibility over those practices.

This Policy applies to all users of the Platform, including registered account holders (referred to as "Players" or "Users") and unregistered visitors. It covers all personal data provided directly by you, collected automatically during your use of the Platform, and received from third-party sources such as payment processors and identity verification providers.

By creating an account on mtown88a or by continuing to use the Platform after this Policy has been published, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the Platform and contact our support team to close your account.

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

• "Personal Data" — any information that directly or indirectly identifies a living individual, including but not limited to: full name, Malaysian MyKad number, email address, phone number, residential address, date of birth, financial account details, and IP address.
• "Processing" — any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. For data processed on the mtown88a Platform, mtown88a is the Data Controller.
• "Data Processor" — any third party that processes personal data on behalf of mtown88a under a contractual agreement, such as payment processors, identity verification providers, and cloud infrastructure providers.
• "Consent" — a freely given, specific, informed, and unambiguous indication of a User's agreement to the processing of their personal data for a stated purpose.
• "KYC" — Know Your Customer: the identity and age verification process applied to Player accounts in accordance with anti-money-laundering and responsible gambling requirements.
• "Cookie" — a small text file placed on a User's device by the Platform for the purpose of session management, analytics, or personalisation.

mtown88a acts as the Data Controller for all personal data collected and processed through the Platform. As Data Controller, mtown88a determines the purposes for which personal data is collected and the means by which it is processed.

mtown88a operates as an international online gaming platform under international licensing. All data processing activities are conducted in accordance with the data protection obligations imposed by our licensing jurisdiction and consistent with international data protection standards.

For all data protection enquiries, including requests to exercise your rights under this Policy, please contact our data protection team at the details specified in Section 16 of this Policy.

mtown88a collects personal data through several channels: directly from you when you register and interact with the Platform; automatically through the technical operation of the Platform; and, where necessary, from authorised third-party providers. The categories of personal data we collect are set out in the table below.

mtown88a processes personal data for the following specific, explicit, and legitimate purposes:

5.1 Account Management

We process registration data to create, maintain, and authenticate your mtown88a account. This includes managing your account balance (denominated in MYR), processing your game activity, and maintaining your account history for audit and dispute resolution purposes.

5.2 Payment Processing

Financial data is processed to facilitate deposits via DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, Touch 'n Go eWallet, Boost, GrabPay, BTC, and USDT, and to process withdrawal requests to your designated payment accounts. All financial data is transmitted using 256-bit SSL encryption.

5.3 Identity Verification (KYC)

KYC data — including copies of your MyKad, passport, or driving licence — is processed for the purposes of age verification (confirming 21+ eligibility), identity verification, and anti-money-laundering (AML) compliance. KYC data is handled by mtown88a's designated verification team and, where applicable, authorised third-party identity verification processors operating under binding data processing agreements.

5.4 Fraud Prevention & Security

Technical and usage data is processed to detect and prevent fraudulent activity, account takeovers, money laundering, bonus abuse, and other violations of our Terms and Conditions. IP address data and device fingerprinting are used to identify suspicious patterns and protect the integrity of the Platform.

5.5 Responsible Gambling

Usage data — including betting frequency, session duration, and deposit/loss patterns — is processed to identify Player behaviour that may indicate problematic gambling. This processing is undertaken in fulfilment of our responsible gambling obligations and may trigger proactive outreach from our support team or automated application of protective account controls.

5.6 Customer Support

Communications data (live chat transcripts, email history, support tickets) is processed to provide effective customer support in English, Bahasa Melayu, and Chinese. Support records are retained to enable continuity of service and for quality assurance purposes.

5.7 Platform Improvement & Analytics

Aggregated and anonymised usage data is processed to analyse Platform performance, identify technical issues, improve user experience, and develop new features. Where analytics require individual-level data, this is pseudonymised to reduce privacy risk.

5.8 Legal & Regulatory Compliance

Personal data may be retained or disclosed to the extent required by applicable law, regulatory authority direction, court order, or our licensing obligations. This includes retention of transaction records for AML audit purposes.

mtown88a relies on the following legal bases when processing your personal data:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms and Conditions you accepted upon registration — including account creation, payment processing, game access, and withdrawal management.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including AML obligations, KYC verification mandates, and licensing conditions.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gambling monitoring, and business analytics — where our legitimate interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and certain analytics where your explicit opt-in consent has been obtained. You retain the right to withdraw consent at any time without affecting the lawfulness of prior processing.

mtown88a does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. Personal data may be shared with third parties only in the following circumstances:

7.1 Authorised Data Processors

We engage third-party service providers who act as Data Processors on our behalf under binding data processing agreements. These include:

• Payment processing partners facilitating MYR transactions via DuitNow, FPX, local bank integrations, and e-wallet providers;
• KYC and identity verification service providers;
• Cloud infrastructure and data storage providers operating data centres in secure, compliant facilities;
• Customer support platform providers that host live chat and ticketing systems;
• Analytics and fraud detection platform providers operating under pseudonymisation and data minimisation controls.

7.2 Legal Disclosure

mtown88a may disclose personal data where required to do so by law, court order, regulatory authority direction, or to protect the rights, property, or safety of mtown88a, its Players, or third parties. Such disclosure will be limited to the minimum data necessary for the stated purpose.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of mtown88a's business, personal data may be transferred to the acquiring entity as part of the transaction, subject to confidentiality obligations and continuity of the protections afforded by this Privacy Policy.

mtown88a retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or licensing obligations.

• Active Account Data: Retained for the duration of your active account plus a post-closure period of five (5) years to satisfy AML and regulatory audit requirements.
• KYC Documents: Retained for a minimum of five (5) years following account closure, in accordance with standard AML record-keeping obligations under international licensing requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of the relevant transaction.
• Support Communications: Retained for three (3) years following the date of the interaction, to enable dispute resolution and quality assurance.
• Technical / Log Data: Retained for up to twelve (12) months from collection for security and analytics purposes, after which it is anonymised or deleted.
• Marketing Preferences: Retained until you withdraw consent or close your account, whichever occurs first.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Requests for early deletion are handled in accordance with Section 13 of this Policy.

mtown88a implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, accidental loss, or destruction. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the mtown88a Platform is encrypted in transit using industry-standard SSL/TLS protocols.
• Encryption at Rest: Sensitive personal data — including KYC documents and financial account details — is encrypted at rest using AES-256 encryption.
• Password Security: Account passwords are stored as salted cryptographic hashes and are never stored or transmitted in plain text. We strongly recommend enabling two-factor authentication where available.
• Access Controls: Access to personal data within mtown88a's systems is restricted on a strict need-to-know basis. Staff with access to personal data receive training on data handling obligations.
• Regular Security Assessments: Our Platform undergoes periodic security vulnerability assessments and penetration testing by qualified security professionals.
• Incident Response: mtown88a maintains a data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify affected Users promptly in accordance with applicable notification obligations.

As an international online gaming platform, mtown88a may process and store personal data on servers located outside of Malaysia. Where personal data is transferred to countries that do not offer a level of data protection equivalent to that provided by Malaysia's PDPA 2010, mtown88a applies appropriate safeguards to ensure that your data continues to receive adequate protection.

Safeguards applied to international data transfers include binding contractual clauses with Data Processors that impose data protection obligations consistent with internationally recognised standards, and selection of infrastructure providers that hold recognised security certifications (such as ISO 27001 or SOC 2).

By using the mtown88a Platform and providing your personal data, you acknowledge that your data may be transferred to, stored, and processed in countries outside Malaysia, subject to the safeguards described in this section.

mtown88a uses cookies and similar tracking technologies to operate, secure, and improve the Platform. A cookie is a small text file placed on your device when you visit the Platform. Cookies allow the Platform to recognise your session, remember your preferences, and analyse how you use our services.

11.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in during your visit and security cookies that prevent cross-site request forgery. These cannot be disabled without rendering the Platform non-functional.
• Functional Cookies: Used to remember your preferences, such as your chosen display language and notification settings. These improve your experience but are not strictly essential.
• Analytics Cookies: Used to collect aggregated information about how Users interact with the Platform — pages visited, session duration, error occurrences — to help us improve the Platform's performance and user experience. Analytics data is pseudonymised or anonymised where possible.
• Security & Fraud Detection Cookies: Used to identify unusual patterns of behaviour that may indicate fraudulent activity or account compromise. These are a key component of our Platform security infrastructure.

11.2 Managing Your Cookie Preferences

You can manage non-essential cookies through your browser settings. Most modern browsers allow you to view, delete, and block cookies. Blocking strictly necessary cookies will impair the functionality of the Platform. For instructions on managing cookies in your specific browser, please refer to your browser's help documentation. Note that mtown88a does not currently support a cookie consent management banner — all cookies deployed are described above and are proportionate to the Platform's operational requirements.

The mtown88a Platform is strictly intended for use by adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If mtown88a becomes aware that personal data has been collected from a minor, that account will be immediately closed, all associated data will be deleted, and any deposits made will be refunded following verification.

Parents and guardians who believe their minor child has registered on mtown88a are encouraged to contact our support team immediately at [email protected]. We take underage access extremely seriously and will respond to such reports with urgency.

As a User of mtown88a, you hold the following rights in relation to your personal data. These rights are subject to applicable legal limitations, including our regulatory obligations to retain certain data for AML and licensing compliance purposes.

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is being processed. We will provide this within thirty (30) calendar days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request its correction. You may update basic account information directly within your account settings; for KYC data corrections, please contact our support team.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis exists), or where you object to processing based on legitimate interests. Note that this right is subject to our legal obligations to retain certain records — we cannot delete data we are legally required to retain.
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances — for example, where you contest the accuracy of the data while we verify it.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on our legitimate interests, including profiling. You also have an absolute right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please submit a request to our support team via live chat or email at [email protected]. We will acknowledge your request within five (5) business days and provide a substantive response within thirty (30) calendar days. Where requests are complex or numerous, we may extend this period by a further thirty (30) days, with notification.

mtown88a may, with your explicit opt-in consent, send you promotional communications about new games, bonuses, promotions, and platform updates. These communications may be delivered via email, WhatsApp, or in-platform notification, depending on the channel preferences you have selected in your Account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your notification preferences within your mtown88a Account settings;
• Clicking the unsubscribe link included in any marketing email;
• Contacting our support team directly via live chat or email and requesting removal from our marketing list.

Withdrawing consent to marketing communications will not affect your ability to use the Platform or receive essential service communications (such as transaction confirmations, KYC notifications, account security alerts, and support responses). Service communications are not marketing and do not require opt-in consent.

mtown88a reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or changes to the services we provide. Where material changes are made, we will notify registered Users via the email address associated with their Account and/or display a prominent notification on the Platform.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated Policy. If you do not accept the revised Policy, you should discontinue use of the Platform and may request Account closure in accordance with our Terms and Conditions.

For all privacy-related enquiries, data subject rights requests, or complaints regarding mtown88a's data handling practices, please contact us through the following channels. Our multilingual support team is available 24 hours a day, 7 days a week, in English, Bahasa Melayu, and Chinese.

• Email: [email protected] — please include "Privacy Request" or "Data Rights" in your subject line. Responses within one (1) business day for acknowledgement; full response within thirty (30) calendar days.
• Live Chat: Available directly on the Platform at https://mtown88a.cam. Live chat is the fastest route to our support team — average response time under 5 minutes at any hour.
• WhatsApp: Contact details available within the Platform's help section. Suitable for real-time support queries relating to data access or account privacy settings.

When submitting a data rights request, please provide your registered username, the email address associated with your mtown88a Account, and a clear description of the right you wish to exercise. This information enables us to locate your Account, verify your identity, and process your request efficiently.

If you are dissatisfied with our response to a data rights request, you have the right to escalate your concern to the relevant data protection authority in the jurisdiction whose laws apply to your situation.