Purpose limitation
m88link processes personal data for clear operational, security, legal and service purposes rather than collecting information without a defined need.
Personal Data and Account Privacy
m88link Privacy Policy for Malaysian Users
This policy explains what personal data m88link may collect, why it may be processed, when it may be shared and how Malaysian users can exercise their privacy rights.
Effective date: 1 January 2026
Introduction
Our commitment to transparent data handling
m88link respects the privacy of every person who visits the website, reviews gambling information or uses an available account service. This Privacy Policy describes how m88link handles information connected with Malaysian users, including users in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya and Shah Alam.
By accessing m88link or voluntarily providing personal data, you acknowledge the practices described in this policy. Where consent is required by applicable law, m88link will seek that consent before carrying out the relevant processing. If you do not agree with this policy, you should discontinue use of the website and avoid providing further personal information.
This policy must be read together with the m88link Terms & Conditions. The Terms govern account eligibility, payments, bonuses, withdrawals and general use, while this policy focuses specifically on personal data and privacy.
Core Privacy Principles
How m88link approaches personal data
These principles summarise the standards m88link seeks to apply throughout the data lifecycle. The detailed clauses below explain each area more fully.
Data minimisation
Information requested by m88link should be relevant and proportionate to identity verification, payment handling, support or platform security.
Security safeguards
Administrative and technical controls are used to reduce unauthorised access, disclosure, alteration, loss or misuse of personal information.
Transparency
m88link aims to explain data practices in direct English so Malaysian users can understand what happens to their information.
Limited retention
m88link keeps data only for as long as reasonably necessary for the stated purpose or a legitimate legal and compliance requirement.
User control
Eligible users may make privacy requests concerning access, correction, consent or deletion, subject to verification and lawful exceptions.
Scope of This Privacy Policy
This Privacy Policy applies to personal data processed through the m88link website and related support, account, payment and security functions. It applies whether a user accesses m88link from a mobile phone, tablet or desktop computer.
The policy does not govern the independent privacy practices of banks, card networks, e-wallet providers or other service providers. For example, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow and FPX may process transaction data under their own terms. m88link receives and uses only the information needed to record, verify or support relevant transactions.
Definitions
The following expressions have the meanings stated below for the purpose of this policy:
- “Personal Data” means information that identifies an individual or can reasonably be linked to an identifiable individual.
- “Processing” includes collecting, recording, organising, storing, consulting, using, sharing, updating, restricting and deleting personal data.
- “User” means a visitor, account holder or other individual interacting with m88link.
- “KYC” means identity and age verification procedures used to confirm account ownership and eligibility.
- “Service Provider” means a party engaged to perform a defined function for m88link, such as hosting, security, payments or customer support.
Personal Data We May Collect
Depending on how a user interacts with m88link, the following categories of data may be collected:
- Identity data: full legal name, date of birth, nationality and copies of identity documents where KYC verification is required.
- Contact data: email address, residential address and other details voluntarily provided when seeking support.
- Account data: username, encrypted password information, account preferences, login records and verification status.
- Financial data: selected payment method, transaction amount, masked account details, payment reference and withdrawal history. m88link does not need users to disclose a complete password or one-time banking code.
- Technical data: IP address, browser type, device type, operating system, timestamps, language preference and approximate location derived from technical records.
- Activity data: pages viewed, games or sports categories accessed, promotion interactions, session duration and responsible gambling settings.
- Communication data: messages sent to m88link support and records reasonably necessary to resolve an enquiry, complaint or transaction issue.
Do not disclose sensitive credentials
m88link support should never require your full password, complete card PIN or one-time banking authorisation code. Users should keep these details private.
How Personal Data Is Obtained
m88link may receive personal data directly from a user during registration, verification, a payment request, a support conversation or the application of an account control. Data may also be generated automatically when a user accesses m88link, including device and security logs.
In limited circumstances, m88link may receive confirmation data from payment providers, identity verification services, fraud prevention systems or lawful authorities. Such data is used only where reasonably connected with security, transaction administration, legal compliance or a legitimate investigation.
How m88link Uses Personal Data
m88link may process personal data for the following purposes:
- Creating, administering and securing a user account.
- Confirming that a user is aged 21 or above and is eligible to access relevant services.
- Completing KYC checks and verifying the ownership of a payment method.
- Recording MYR deposits and withdrawals through supported banks, cards and e-wallets.
- Detecting fraud, duplicate accounts, bonus abuse, unauthorised access and suspicious transactions.
- Responding to questions concerning games, EPL or Liga Super Malaysia betting markets, bonuses, account controls and payment processing.
- Maintaining deposit limits, cooling-off requests and self-exclusion instructions.
- Improving website performance, navigation, accessibility and service reliability.
- Complying with lawful obligations, resolving disputes and enforcing the m88link Terms & Conditions.
Personal data will not be used for a materially incompatible purpose without an appropriate legal basis, further notice or consent where consent is required.
Basis for Data Processing
Depending on the context and applicable law, m88link may rely on contractual necessity, legal obligations, legitimate interests or user consent. Contractual processing includes operating an account and responding to a valid withdrawal request. Legitimate interests may include network security, fraud prevention, service improvement and dispute management, provided those interests do not improperly override individual rights.
Where processing depends on consent, the user may withdraw that consent for future processing. Withdrawal does not invalidate processing that lawfully occurred before the request. Certain services may become unavailable if information required for identity verification, security or transaction administration can no longer be processed.
Payment and Identity Verification Data
Financial and identity checks protect both users and m88link. A withdrawal may require proof that the recipient account belongs to the registered user. This may include a masked bank statement, e-wallet confirmation or identity document. m88link seeks to avoid collecting payment information that is not necessary for the review.
Payment records may contain MYR amounts, timestamps and transaction references associated with Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank or Hong Leong. m88link may retain these records to resolve payment questions, identify chargebacks and satisfy record-keeping requirements.
Identity matching
The name used for an m88link account should match the verified name attached to the selected payment method. A mismatch may result in additional checks or transaction delays.
Cookies and Similar Technologies
m88link may use cookies and similar storage technologies to maintain sessions, remember preferences, improve page performance and identify potentially unauthorised activity. Essential cookies are required for core functions such as security and navigation.
Analytics information may be used in aggregated form to understand how visitors move through m88link. Users can adjust browser settings to restrict cookies, although blocking essential cookies may prevent parts of the website from functioning correctly.
When Personal Data May Be Shared
m88link does not sell personal data as a standalone commercial product. Information may be disclosed only where reasonably necessary and subject to suitable controls. Recipients may include hosting providers, security specialists, payment processors, identity verification services, professional advisers and customer support systems.
m88link may also disclose information when required by a valid legal process, to investigate suspected fraud, to protect users or the public, or to establish and defend legal rights. Service providers are expected to process information only for authorised purposes and to maintain appropriate confidentiality.
International Data Transfers
Because online infrastructure and support services may operate across multiple jurisdictions, personal data processed by m88link may be stored or accessed outside Malaysia. Privacy laws in another location may differ from Malaysian requirements.
Where international transfers occur, m88link seeks to apply contractual, technical or organisational safeguards appropriate to the information and the applicable legal framework. These measures may include access limitations, encryption in transit and obligations imposed on the receiving service provider.
Data Retention
m88link retains personal data for the period reasonably required to operate an account, administer transactions, respond to disputes, prevent fraud and satisfy legal or compliance obligations. Retention periods may differ according to the category and purpose of the information.
Closing an account does not always result in immediate deletion. Certain KYC, payment, self-exclusion or dispute records may need to remain restricted and securely retained. When data is no longer required, m88link may delete, anonymise or securely isolate it in accordance with applicable retention procedures.
Data Security
m88link uses proportionate administrative and technical safeguards designed to reduce the risk of accidental loss, unauthorised access, alteration or disclosure. Measures may include encrypted connections, access controls, activity monitoring, staff confidentiality obligations and security reviews.
No website, transmission method or storage environment can guarantee absolute security. Users must also protect their accounts by choosing a strong unique password, signing out on shared devices and reporting suspicious activity promptly.
Shared-device warning
Users accessing m88link from a shared phone or computer should not save login credentials in the browser and should clear the session after use.
Your Privacy Choices
User rights and requests
Subject to applicable law, identity verification and lawful exceptions, users may exercise the following rights concerning personal data held by m88link.
Access
Ask whether m88link processes your personal data and request a reasonable summary or copy of eligible information.
Correction
Request correction of inaccurate or incomplete account information. Supporting documents may be required for identity-related changes.
Deletion
Request deletion where information is no longer required, subject to legal, fraud prevention, payment and responsible gambling retention duties.
Restriction
Ask m88link to limit eligible processing while an accuracy concern, objection or privacy request is being reviewed.
Consent withdrawal
Withdraw consent from future optional processing where consent is the applicable basis, including eligible promotional communication preferences.
Complaint or objection
Raise a concern about how m88link handles personal data or object to eligible processing based on legitimate interests.
Additional Provisions
Marketing, age limits and policy updates
m88link may send service messages required for account security, payment administration or policy changes. Where promotional communication is offered, users may change eligible preferences. Opting out of marketing does not prevent essential operational messages from being sent.
The m88link website and any casino-style services are intended for adults aged 21 and above. m88link does not knowingly seek personal data from children. If information indicates that an underage person has provided data, the account may be restricted while appropriate deletion and safeguarding steps are considered.
This Privacy Policy may be amended when m88link changes a service, adopts new security measures or responds to legal developments. The revised effective date will be displayed on this page. Users should review the policy periodically, especially before providing new information or using a new payment method.
Malaysian users remain responsible for understanding laws that apply to their online activities. This policy explains privacy practices and does not constitute legal advice.
Continue with Confidence
Review the complete m88link player framework
Visit the homepage or read the related m88link Terms & Conditions and Responsible Gambling guidance to understand account rules, payment obligations and safer-play controls.