Updated July 2026

M88 capital Privacy Policy – Personal Data Protection for Malaysian Users

M88 Capital takes the privacy of every member seriously. This Privacy Policy clearly explains how we collect, use, store, and protect your personal data as a user of our platform in Malaysia — written in plain language, free from confusing legal jargon.

Full 256-bit SSL Encryption
Never Sold to Third Parties
Protected User Rights
256-bit SSL
Full data encryption
PDPA Compliant
Malaysia Personal Data Protection Act
No Data Sales
Your data is never sold
11 Sections
Detailed & transparent
M88 Capital Privacy Policy Updated July 2026 256-bit SSL – All Data Fully Encrypted Personal Data is Never Sold to Third Parties Malaysia Personal Data Protection Act (PDPA) Compliant 24/7 Support – support@m88capital.best Regular Security Audits by Independent Third Parties M88 Capital Privacy Policy Updated July 2026 256-bit SSL – All Data Fully Encrypted Personal Data is Never Sold to Third Parties Malaysia Personal Data Protection Act (PDPA) Compliant 24/7 Support – support@m88capital.best Regular Security Audits by Independent Third Parties
Privacy Policy Summary

M88 Capital's Six Core Commitments to Your Privacy

These are the most important points in our Privacy Policy. Full details are available in the privacy sections below.

Data Collected Only for Stated Purposes

M88 Capital only collects data that is strictly necessary for platform operations — registration, identity verification, payment processing, and fraud prevention. We do not collect excessive data or data unrelated to the services you use.

256-bit SSL Encryption for All Transactions

All information transmitted between your device and M88 Capital's servers — including login data, Touch 'n Go or DuitNow payment details, and personal data — is protected by 256-bit SSL encryption. This is the same security standard used by leading banking institutions worldwide.

Your Data is Never Sold to Third Parties

M88 capital has never sold, rented, or transferred your personal data to third parties for marketing or any other commercial purpose, and never will. Your data is only shared with service providers directly involved in delivering services to you.

Full Compliance with Malaysia's PDPA

M88 Capital's Privacy Policy is built on the foundation of Malaysia's Personal Data Protection Act 2010 (PDPA). We comply with all principles set out under the PDPA, including the notice and choice principle, the use principle, the disclosure principle, and the security principle.

User Data Access and Rectification Rights

As an M88 Capital member, you have the right to access the personal data we hold about you, request corrections to any inaccurate data, and in certain circumstances, request that your data be deleted. These requests can be submitted to our support team at any time.

Regular Security Audits by Third Parties

M88 capital conducts periodic data security audits carried out by qualified, independent cybersecurity firms. This ensures our data protection systems remain current against the latest security threats and compliant with the international ISO 27001 standard.

Last Updated: 1 July 2026

Important Note: This Privacy Policy explains how M88 Capital collects, uses, stores, and protects your personal data. By registering for or using the M88 Capital platform, you agree to the terms set out in this Privacy Policy. Please read it carefully before using our services.

1

Introduction & Scope of This Privacy Policy

This Privacy Policy is issued by M88 Capital ("we", "the Company", "the Platform") and applies to all personal information collected through the m88capital.best website, the M88 Capital mobile app, and all related services we provide to members in Malaysia.

We understand that privacy is a fundamental right. When you entrust M88 Capital with your personal data — whether it's your phone number for registration, your Touch 'n Go e-wallet details for deposits, or your gameplay patterns — we take that responsibility seriously and guarantee that your data is handled with the utmost integrity.

Privacy Policy M88 Capital is formulated in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in personal data management. Every aspect of our data collection and use is grounded in legitimate necessity and disclosed transparently in this document.

Scope of This Policy: This Privacy Policy covers all data collected through account registration, game usage, financial transactions, communications with our support team, and use of the M88 Capital mobile app. It does not cover third-party websites or services that you may access via links on our platform.

2

Types of Personal Data We Collect

M88 Capital collects various types of personal data depending on how you interact with our platform. The following are the categories of data we collect:

2.1 Identity and Registration Data

  • An active Malaysian mobile number (used as your primary account identifier)
  • Full name (required during identity verification)
  • Identity card number (MyKad) — only when full identity verification is required
  • Date of birth (for age verification)
  • Email address (optional, for communications)

2.2 Financial & Transaction Data

  • E-wallet account information (Touch 'n Go, GrabPay, Boost, ShopeePay) used for deposits and withdrawals
  • Bank account information for FPX transactions (Maybank2u, CIMB Clicks) — bank account numbers only, not banking passwords
  • DuitNow reference number
  • Deposit and withdrawal transaction history
  • Betting and gaming history within the platform

2.3 Technical & Usage Data

  • Your device's IP address
  • Web browser type and version
  • Device type and operating system
  • Cookie data and session identifiers
  • Login and logout timestamps
  • Usage and navigation data within the platform

2.4 Communication Data

  • Records of conversations with the customer support team via live chat
  • Emails sent to support@m88capital.best
  • Feedback and complaints submitted

M88 Capital will never ask for your online banking password, ATM card PIN, or e-wallet OTP through any channel. If you receive such a request claiming to be from M88 Capital, please report it to our support team immediately.

3

How We Collect Your Personal Data

Personal data collected by M88 Capital through several different methods:

3.1 Information You Provide Directly

This is data you enter directly while using our platform, including:

  • New account registration form
  • Identity and age verification forms
  • Deposit and withdrawal transaction details
  • Profile settings and account preferences
  • Communications with the support team
  • Participation in promotions, contests, or surveys

3.2 Automatically Collected Data

When you browse or use the M88 Capital platform, our systems automatically record certain technical data required for the platform to operate securely and efficiently. This includes IP addresses, session log data, device information, and cookie data. This data is collected using standard technologies common to all digital platforms.

3.3 Data From Third-Party Sources

In certain circumstances, M88 Capital may receive your personal data from legitimate third parties, including:

  • Third-party identity verification service providers we use to meet KYC (Know Your Customer) requirements
  • Payment providers (such as FPX, Touch 'n Go, and DuitNow) to verify that transactions have been completed successfully
  • Third-party fraud prevention agents for identity verification and suspicious activity detection

In all cases, data obtained from third-party sources is acquired only through legitimate channels and in a manner that complies with Malaysia's PDPA.

4

How We Use Your Personal Data

M88 Capital uses the personal data collected for the following clearly defined purposes:

4.1 Platform Operations and Services

  • Creating and managing your member account
  • Processing deposits and withdrawals via Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX
  • Providing access to all games and platform services
  • Managing VIP programs and bonus credits
  • Providing customer support services

4.2 Security & Fraud Prevention

  • Verifying member identity and age to comply with legal requirements
  • Detecting and investigating fraudulent activity or platform abuse
  • Protecting member accounts from unauthorised access
  • Compliance with anti-money laundering (AML) and know your customer (KYC) requirements

4.3 Platform Improvements

  • Analysing usage patterns to improve the user experience
  • Testing and developing new platform features
  • Resolving technical issues and bugs within the platform

4.4 Communications and Marketing

  • Sending account-related notifications (transaction confirmations, security alerts)
  • Sending m88 capital promotions, bonuses, and new offers — only to members who have opted in to marketing communications
  • Sending important updates regarding changes to terms or privacy policy

Marketing Consent: M88 Capital will only send you marketing communications if you have given explicit consent during registration or subsequently through your account settings. You may withdraw this consent at any time by contacting our support team or through the notification settings in your account.

4.5 Legal and Regulatory Compliance

M88 Capital uses your personal data to meet applicable legal and regulatory obligations, including compliance with Malaysia's data protection laws, financial reporting requirements, and directives from relevant authorities.

5

Data Sharing With Third Parties

M88 Capital sell, rent, or transfer your personal data to third parties for their marketing purposes. However, in the course of operating the platform, we may share certain personal data with selected third parties in the following situations:

5.1 Operational Service Providers

Data is shared with service providers who assist us in operating the M88 Capital platform, including:

  • Payment Providers: Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX providers receive the transaction information required to process your deposits and withdrawals.
  • Game Providers: Companies such as Pragmatic Play and Evolution Gaming receive the player identifiers necessary to deliver their games. These providers do not receive your real name or any financial information.
  • Identity Verification Provider: Third-party KYC services we use to verify the identity and age of members.
  • Cloud Service Providers: Cloud computing infrastructure used to securely store and process our platform's data.

All third-party service providers are bound by strict data confidentiality agreements and are only permitted to use your data for the purposes specified in their agreements with M88 Capital.

5.2 Legal Requirements

M88 Capital may disclose your personal data when required by law or by direction from a competent authority in Malaysia, including regulatory bodies, law enforcement agencies, or courts of competent jurisdiction.

5.3 Protection of Rights and Safety

Data may be disclosed to third parties where we believe such disclosure is necessary to: protect the rights, property, or safety of M88 Capital, our members, or the public; detect, prevent, or address fraud, security issues, or technical problems; or comply with legal proceedings.

M88 Capital does not share your personal data with advertisers, third-party marketing companies, or any other entity for their own marketing purposes without your explicit consent. This is our absolute commitment to your privacy.

6

Data Security – How We Protect Your Information

Data security is the highest priority at M88 Capital. We continually invest in the latest security infrastructure to ensure your personal and financial data remains protected at all times.

6.1 Data Encryption

All data transmitted between your device and M88 Capital's servers is protected by 256-bit Secure Sockets Layer (SSL) encryption — the same encryption standard used by Malaysia's leading banks and international financial institutions. Data stored in our databases is also encrypted using AES-256, one of the strongest encryption standards currently available.

6.2 Access Controls

Access to member personal data within internal systems M88 Capital is strictly limited to staff with a legitimate business need to access such information. All staff access is monitored and logged. Multi-factor authentication (MFA) is mandatory for all staff accessing systems that contain user data.

6.3 Regular Security Audits

M88 capital conducts comprehensive periodic security audits carried out by qualified, independent cybersecurity firms. These audits cover penetration testing, source code review, system vulnerability assessments, and compliance checks against the ISO 27001 standard.

6.4 Segregation of Funds and Data

As a security best practice, member funds are held in accounts entirely separate from the company's operational funds. Similarly, members' personal data is stored in systems separate from operational data and governed by distinct access control policies.

6.5 Security Incident Response

M88 Capital has a comprehensive security incident response plan in place. In the event of any data security breach that may affect your personal data, we will notify you and the relevant authorities within the timeframe prescribed by applicable law. You will also be provided with guidance on the steps you should take to protect yourself.

Your Role in Account Security: While m88 capital takes all necessary security measures, the safety of your account also depends on your own actions. Make sure you use a strong, unique password, never share your login credentials, and report any suspicious activity to our support team immediately.

7

Cookies, Tracking Technologies & Your Choices

The M88 Capital website and app use cookies and similar tracking technologies to enhance the user experience and gather analytical information. This section explains what cookies are, the types of cookies we use, and how you can manage them.

7.1 What Are Cookies?

Cookies are small text files stored in your web browser or device when you visit a website. They help the site remember information about your visit — such as your language settings and preferences — and help us understand how users interact with our platform.

7.2 Types of Cookies We Use

  • Essential Cookies: Cookies required for the basic operation of the platform, such as login session authentication and betting cart functionality. These cookies cannot be disabled without affecting core platform functions.
  • Performance Cookies: Cookies that collect information about how users interact with our platform, such as the most frequently visited pages and errors encountered. This data is used to improve platform performance.
  • Functional Cookies: Cookies that allow the platform to remember your preferences — such as language, display settings, and account configurations — to deliver a more personalised experience.
  • Analytics Cookies: Used to analyse usage patterns and help us understand how users interact with the platform. This data is used in aggregate form and does not identify any individual personally.

7.3 Managing Your Cookies

You can manage and delete cookies through your web browser settings. Most modern browsers allow you to view stored cookies, delete individual or all cookies, and block cookies from specific or all websites. Please note that disabling certain cookies may affect platform functionality and your overall user experience.

8

Data Retention – How Long We Keep Your Information

M88 Capital retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable law.

8.1 Active Account Data

For as long as your account remains active, M88 Capital retains all your personal data and transaction history. This is necessary to provide services to you and to maintain the integrity of financial records.

8.2 Data After Account Closure

When you close your M88 Capital account, or your account is terminated by us, your personal data will be retained for the following periods:

  • Financial Transaction Records: Retained for seven (7) years after account closure, in accordance with Malaysian accounting and financial legal requirements.
  • Communication Log: Communication records with the support team are retained for three (3) years for dispute resolution and reference purposes.
  • Identity Verification Data: Retained for five (5) years after account closure to meet AML/KYC compliance requirements.
  • Technical Log Data: Retained for six (6) months and then automatically deleted.

8.3 Data Deletion

Once the designated retention period has elapsed, your personal data will be securely deleted from all M88 Capital systems using irreversible data deletion methods. You may also submit an early data deletion request through the rights outlined in Section 9 of this document, subject to any legal obligations that may prevent immediate deletion.

9

Your Rights as an M88 Capital Member

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and our commitment to user privacy, you as an M88 Capital member have the following rights regarding your personal data:

9.1 Right of Access

You have the right to request a copy of the personal data we hold about you. m88 capital will provide this information in a readable format within 14 business days of receiving your request.

9.2 Right to Rectification

If you believe the personal data we hold about you is inaccurate, incomplete, or out of date, you have the right to request a correction. Many profile details can be updated directly through your account settings. For changes that require additional verification, please contact our support team.

9.3 Right to Erasure

In certain circumstances, you have the right to request the deletion of your personal data (the "right to be forgotten"). However, this right is not absolute and may be limited by our legal obligation to retain certain data (such as financial transaction records) for periods prescribed by law.

9.4 Right to Object to Marketing

You have the right, at any time, to object to the use of your personal data for direct marketing purposes. You may withdraw your marketing consent via your account settings or by contacting our support team. Please note that withdrawing this consent does not affect the lawfulness of any processing of your personal data carried out prior to the withdrawal.

9.5 Right to Lodge a Complaint

If you believe that M88 Capital has processed your personal data in a manner that does not comply with Malaysia's PDPA or this Privacy Policy, you have the right to lodge a complaint with our support team or with the Personal Data Protection Commissioner of Malaysia.

9.6 How to Exercise Your Rights

To exercise any of the rights listed above, please reach out to us via:

  • Email: support@m88capital.best (with the subject line "Data Privacy Request")
  • Live Chat: Available 24/7 within the M88 Capital platform

We will process your request within 14 business days. In complex cases, we may extend this period to up to 30 days, and we will notify you accordingly.

10

Children's Privacy

M88 Capital is an adult betting platform open only to individuals aged 18 and above. We strictly do not permit children or minors under the age of 18 to register or use our platform.

M88 Capital does not knowingly collect or process personal data from individuals under the age of 18. If we confirm that personal data belonging to someone under 18 has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian who believes your child has registered an account on M88 Capital without your consent, please contact our support team immediately at support@m88capital.best. We will investigate and take appropriate action without delay.

If you discover a child using an online betting platform, this is a serious matter that needs to be addressed immediately. Please contact us, and also consider enabling parental controls on any devices used by children in your home to prevent access to betting websites.

11

Privacy Policy Amendments & How to Contact Us

11.1 Privacy Policy Amendments

M88 Capital reserves the right to amend this Privacy Policy from time to time to reflect changes in applicable law, updates to our business practices, or improvements to our data protection methods. When we make significant amendments, we will notify you via an in-platform notification or email at least 14 days before the changes take effect.

The "Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed of m88 capital's current privacy practices.

11.2 Related Policy Links

This Privacy Policy should be read together with the other documents that form the complete agreement between you and M88 Capital:

11.3 Contact Our Data Protection Officer

For any questions, concerns, or requests relating to your privacy and personal data protection at m88 capital, please contact us via:

  • Email: support@m88capital.best (subject: "Privacy Enquiry")
  • Live Chat: 24/7 within the M88 Capital platform
  • Response Time: Within 1–3 hours (live chat) or 1–2 business days (email)
M88 capital's Privacy Commitment

Your privacy is your right and our responsibility. m88 capital is committed to continuously improving our data protection practices in line with evolving laws, technology, and user expectations. If you have any suggestions or feedback on how we handle your privacy, we genuinely welcome your input at support@m88capital.best.

Your Rights

Your Five Key Rights as an M88 Capital Member

These rights are guaranteed under Malaysia's Personal Data Protection Act (PDPA) and M88 Capital's own commitments.

Right to Access Data

You may request a copy of all personal data that M88 Capital holds about you at any time. Requests are processed within 14 business days at no charge.

Right to Data Rectification

If any of your personal data is inaccurate or out of date, you have the right to request a correction. Much of this information can be updated directly in your account settings.

Right to Data Erasure

In certain circumstances, you may request that your personal data be deleted. Such requests will be processed subject to any applicable legal obligations regarding data retention.

Right to Object to Marketing

You may opt out of having your data used for M88 Capital's direct marketing purposes at any time through your account settings or by contacting our support team.

Right to Lodge a Complaint

If you are dissatisfied with how M88 Capital handles your data, you may raise a complaint with us or with the Personal Data Protection Commissioner of Malaysia.

Right to Withdraw Consent

Where data processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of any processing carried out prior to the withdrawal.

Data Summary

M88 Capital Data Collection & Usage Summary

A quick reference guide to the data we collect, its purpose, and how long it is retained.

Data Type Purpose of Collection Shared With Retention Period
Phone Number Account registration & login SMS provider (OTP verification only) Throughout active account + 3 years
KYC information (Name, MyKad) Identity & age verification Third-party KYC providers 5 years after account closure
E-Wallet Information (TnG, GrabPay) Deposit & withdrawal processing Relevant payment provider 7 years (financial records)
Bank Information (FPX) Bank deposit & withdrawal processing Banks and FPX providers 7 years (financial records)
Betting History Audits, disputes, regulatory compliance Game providers (aggregated data) 7 years after account closure
IP Address & Device Data Security & fraud prevention Cybersecurity provider 6 months
Support Communication Logs Complaint resolution & referral Not shared 3 years
Analytics Cookie Data User experience improvement Analytics services (aggregated data) 12 months
Frequently Asked Questions

Frequently Asked Questions About the M88 Capital Privacy Policy

No, M88 Capital has never sold, rented, or transferred your personal data to marketing companies or any third party for their own marketing purposes, and we never will. Your data is only shared with service providers directly involved in delivering M88 Capital's services to you — such as payment providers like Touch 'n Go or DuitNow, and game providers. This is an absolute commitment on our part, with no exceptions.

All payment information transmitted through the M88 Capital platform is protected by 256-bit SSL encryption. Please note that M88 Capital does not store your e-wallet password, PIN, or OTP — we never request or retain these details. When you make a deposit via Touch 'n Go or DuitNow, the transaction is processed directly through the respective payment provider's system using their own security protocols. M88 Capital only receives confirmation that the transaction was successful, not your payment credentials.

Yes, you may submit a data deletion request to us at support@m88capital.best. However, this right to erasure is not absolute — certain data must be retained under Malaysian law, such as financial transaction records, which are required to be kept for seven years. Data not subject to any statutory retention obligation will be permanently deleted within 30 days of the request being received and verified.

Should M88 Capital cease operations, we will provide adequate notice to all members and establish a process for withdrawing all balances. Regarding personal data, it will be securely deleted or transferred to a successor entity (if applicable) with equal or greater protections in place. Under no circumstances will your data be sold or transferred to unrelated parties. Applicable legal obligations for retaining financial records will continue to be upheld by an appointed custodian.

Yes, M88 Capital records and monitors gaming activity on your account as part of normal platform operations. This is standard practice in the online betting industry and is carried out for several legitimate purposes: ensuring game integrity, detecting fraudulent activity, accurately processing bets and payouts, and meeting regulatory requirements. Gaming activity data is protected to the same security standards as all other data and is not shared with third parties except in the circumstances set out in this Privacy Policy.

You can stop receiving promotional emails and marketing notifications from M88 Capital in two simple ways. First, click the "Unsubscribe" link found at the bottom of any promotional email we send you. Second, log in to your M88 Capital account, go to "Account Settings" or "Communication Preferences", and turn off marketing notification options. Changes will take effect within 48 hours. Please note that you will still receive important transactional emails such as deposit confirmations, withdrawal confirmations, and account security alerts — these cannot be disabled as they are essential notifications related to your account security.
Payment Methods

Supported Secure Payment Methods at M88 Capital

All transactions are in Malaysian Ringgit (MYR). Your payment data is protected by 256-bit SSL encryption.

Touch 'n Go eWallet GrabPay Boost ShopeePay DuitNow FPX / Maybank2u CIMB Clicks
Join M88 Capital

Your Privacy Is Protected. Ready to Get Started?

You now know how M88 Capital safeguards your personal data to the highest security standards. Register for free today, make a minimum deposit of RM20 via Touch 'n Go or DuitNow, and claim your welcome bonus of up to RM500 automatically.

SSL 256-bit Data Protection
Malaysia PDPA Compliant
No Data Sales
Officially Licensed
256-bit SSL
PDPA Compliant
24/7 Support
No Data Sales
Mobile Friendly
Bahasa Melayu