Privacy Policy – How meta888 Protects Your Data

1. Introduction

This Privacy Policy ("Policy") describes how meta888 ("we", "us", "our", "the Company") collects, processes, stores, and protects personal data provided by or generated by users ("you", "the Player") of the meta888 platform accessible at meta888.one (the "Platform").

meta888 is committed to handling personal data responsibly and in accordance with internationally recognised data protection principles. By registering an account or continuing to use the meta888 Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read alongside the meta888 Terms & Conditions and Responsible Gaming Policy, each of which forms part of the overall framework governing your relationship with meta888.

2. Personal Data We Collect

meta888 collects only the personal data that is necessary and proportionate to the provision of our services. The categories of personal data we collect include:

2.1 Identity Data

• Full legal name as it appears on your identity document;
• Date of birth (for age verification — you must be 21 years of age or above);
• National identity card number, passport number, or equivalent government-issued identifier;
• Nationality and country of residence.

2.2 Contact Data

• Email address;
• Malaysian mobile phone number;
• Residential address (required for KYC at withdrawal stage).

2.3 Financial Data

• Payment method details (e-wallet identifiers, bank account numbers for FPX transactions, or USDT wallet addresses);
• Deposit and withdrawal transaction history;
• Account balance information.

2.4 Technical & Usage Data

• IP address and approximate geographic location;
• Device type, operating system, and browser type;
• Session duration and login timestamps;
• Pages visited, games played, bets placed, and interaction patterns on the Platform.

2.5 Communications Data

• Records of live chat communications with meta888 support agents;
• Email correspondence with meta888;
• Responses to surveys or promotional communications (where you have opted in).

3. How We Collect Your Data

meta888 collects personal data through the following channels:

• Direct registration: Information you provide when creating a meta888 account, completing KYC verification, or updating account settings;
• Platform activity: Automated collection of technical and usage data as you interact with the Platform;
• Payment processors: Transaction confirmation data from Touch 'n Go eWallet, Boost, DuitNow, FPX, GrabPay, and USDT payment infrastructure;
• Cookies and similar technologies: As described in Section 9 below;
• Customer support interactions: Information provided to meta888 support staff through live chat or email.

4. How We Use Your Personal Data

meta888 processes your personal data for the following purposes:

• Account management: Creating, maintaining, and administering your meta888 account;
• Service delivery: Processing deposits, withdrawals, bets, and game sessions;
• Identity verification: Conducting KYC checks to verify age (21+), identity, and source of funds in accordance with our international licensing obligations;
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, and unauthorised account access;
• Responsible gaming: Monitoring for signs of problem gambling and applying self-exclusion, deposit limits, or cooling-off periods at the Player's request or as required by our licensing framework;
• Legal compliance: Fulfilling obligations under applicable international gaming licensing requirements, including record-keeping and reporting to licensing authorities;
• Platform improvement: Analysing aggregated usage data to improve Platform performance, game selection, and user experience;
• Marketing communications: Sending promotional offers and bonuses — only where you have explicitly opted in to receive such communications. You may opt out at any time.

meta888 does not use personal data for automated decision-making that produces legal or similarly significant effects on Players, except where explicitly required for fraud detection and prevention purposes.

5. Legal Basis for Processing

meta888 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil the agreement between you and meta888 when you register an account and use our services;
• Legal obligation: Processing required to comply with meta888's obligations under international gaming licensing regulations, including anti-money laundering (AML) and know-your-customer (KYC) requirements;
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights;
• Consent: Processing for direct marketing communications, where you have provided explicit prior consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6. Data Sharing and Disclosure

meta888 does not sell, rent, or trade your personal data to third parties for their marketing purposes. We may share personal data with the following categories of recipients only to the extent necessary:

• Payment service providers: Touch 'n Go, Boost, DuitNow, FPX network participants, GrabPay, and USDT infrastructure providers — to process your deposits and withdrawals;
• Game studio providers: Limited technical data (session tokens, bet data) shared with licensed game providers including Evolution Gaming, Pragmatic Play, PG Soft, and others — to enable game delivery;
• KYC and fraud verification partners: Identity verification service providers engaged to conduct document authentication and AML screening;
• Licensing authorities: Regulatory reporting as required under meta888's international gaming licence;
• Law enforcement: Where required by a valid legal order, court order, or applicable law.

All third-party service providers engaged by meta888 are contractually required to process personal data solely for the defined purpose, maintain appropriate security standards, and not disclose it to further parties without authorisation.

7. Data Retention

meta888 retains personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal and licensing obligations. Specifically:

• Active account data is retained for the duration of the account's existence;
• Following account closure, identity, financial, and transaction data is retained for a minimum period of five (5) years in accordance with standard AML record-keeping requirements;
• Marketing preference data is retained until you withdraw consent or for a maximum of 2 years of inactivity, whichever occurs first;
• Technical log data is retained for up to 12 months for security and fraud investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an individual.

8. Security Measures

meta888 implements a range of technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all Platform pages and API endpoints, including the login and deposit pages;
• Encryption of sensitive data fields (including passwords and payment details) at rest using industry-standard algorithms;
• Role-based access controls limiting employee access to personal data to only those with a legitimate operational need;
• Regular penetration testing and security audits of Platform infrastructure;
• Two-factor authentication available for all Player accounts (strongly recommended to enable from Account Settings);
• Incident response procedures in place for managing data security events, including notification obligations.

Notwithstanding these measures, no data transmission over the internet is completely secure. meta888 cannot guarantee the absolute security of data transmitted to the Platform. You use the Platform at your own risk and are responsible for maintaining the security of your own device and login credentials.

9. Cookies and Tracking Technologies

meta888 uses cookies and similar technologies (including local storage and session storage) to operate the Platform, maintain session state after login, and analyse usage patterns. The categories of cookies used are:

• Strictly necessary cookies: Required for the Platform to function, including maintaining your authenticated session after meta888 login. These cannot be disabled.
• Performance cookies: Collect anonymised data on how visitors interact with the Platform (pages visited, error messages, session durations) to support platform improvements. No personally identifiable information is collected by these cookies.
• Functional cookies: Remember your preferences such as language, game display settings, and favourite markets to personalise your experience.

You may disable non-essential cookies through your browser settings. Disabling performance or functional cookies will not prevent Platform access but may reduce functionality. Disabling strictly necessary cookies will prevent Platform login and operation.

10. Your Data Rights

Subject to applicable law and our licensing obligations, you have the following rights in relation to your personal data held by meta888:

• Right of access: You may request a copy of the personal data meta888 holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data, subject to our legal retention obligations (see Section 7);
• Right to restriction: You may request that we restrict processing of your personal data in certain circumstances;
• Right to data portability: You may request that we provide your data in a structured, machine-readable format for transfer to another controller;
• Right to object: You may object to processing based on legitimate interests, including direct marketing. Marketing opt-outs take effect immediately upon request.

To exercise any of these rights, please contact meta888 support via live chat or email at [email protected]. We will respond to requests within 30 days. Identity verification will be required before processing any data rights request.

11. Protection of Minors

meta888 does not knowingly collect personal data from persons under the age of 21 years. Access to the Platform is strictly prohibited for minors. If meta888 discovers that an account has been registered by or on behalf of a person under 21, the account will be immediately suspended, all associated data reviewed, and the account permanently closed in accordance with our Terms & Conditions.

Parents and guardians are encouraged to use available parental control software to prevent minors from accessing online gambling platforms.

12. Third-Party Links and Services

The meta888 Platform does not contain links to external third-party websites. Game content delivered within the Platform by third-party providers (e.g., Evolution Gaming, Pragmatic Play) is subject to those providers' own privacy practices as they relate to game session data. meta888 remains the data controller for your account and profile information at all times.

13. Changes to This Policy

meta888 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered Players via email or Platform notification at least 14 days before they take effect. The "Last Updated" date at the top of this page will reflect the date of the most recent revision. Continued use of the Platform after the effective date of any revised Policy constitutes acceptance of the updated terms.

14. Contact Us

For any questions, requests, or concerns relating to this Privacy Policy or meta888's personal data handling practices, please contact us:

Email: [email protected]
Live Chat: Available 24/7 on all pages of the meta888 Platform
Response time: Within 2 business days for data rights requests; within 30 days for formal data subject access requests.