Privacy Policy

This Privacy Policy (hereinafter "the Policy") issued by miga88 (hereinafter "miga88", "we", "us", or "our") and applies to all personal data collected, processed, stored, and shared in connection with the miga88 online gaming platform accessible at https://miga88.cam (the "Platform") and all related services.

miga88 is committed to protecting the privacy and personal data of every individual who uses our Platform, including registered players from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other regions of Malaysia. We process personal data only for specified, legitimate purposes and in accordance with applicable data protection principles.

The following terms carry the meanings set out below throughout this Policy:

• "Personal Data" — Any information that relates to an identified or identifiable natural person, including but not limited to name, email address, identification number, payment information, device identifiers, and IP addresses.
• "Processing" — Any operation or set of operations performed on personal data, including collection, recording, storage, adaptation, retrieval, disclosure, and deletion.
• "Data Subject" — The natural person (you, the User or Player) whose personal data is being processed.
• "Data Controller" — The entity that determines the purposes and means of processing personal data. For the purposes of this Policy, the Data Controller is miga88.
• "Data Processor" — A third party that processes personal data on behalf of the Data Controller under a contractual agreement.
• "Consent" — A freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their personal data for one or more specified purposes.
• "Cookies" — Small text files placed on a User's device by a web server for the purposes of storing information about User behaviour and preferences.

miga88 acts as the Data Controller in respect of all personal data collected through the Platform. As Data Controller, miga88 is responsible for determining the purposes and means by which your personal data is processed, and for ensuring that such processing is conducted lawfully, fairly, and transparently.

For all data protection enquiries, requests to exercise your rights, or concerns regarding this Policy, please contact our Data Protection team via the contact details set out in Section 16 (Contact Us) of this Policy. We are committed to responding to all legitimate data protection requests promptly and in good faith.

miga88 collects personal data across several categories, depending on how you interact with the Platform. The table below provides an overview of the categories of personal data we may process:

miga88 collects personal data through the following primary means:

• When you complete the account registration form on the Platform.
• When you submit KYC documentation in response to a verification request.
• When you make a deposit or initiate a withdrawal through the cashier.
• When you contact our customer support team via live chat or email.
• When you opt in to promotions, newsletters, or other communications.

• Technical and usage data is collected automatically when you access, navigate, or interact with the miga88 Platform, using cookies, server logs, and similar tracking technologies.
• Device and network information is captured at the point of login and during active sessions for security and fraud detection purposes.

• Identity verification providers engaged for KYC and AML compliance purposes.
• Payment processors and financial institutions (e.g., FPX networks, e-wallet providers such as Touch'n Go and Boost) in connection with the processing of your transactions.
• Fraud prevention and security partners, to the extent necessary to protect the Platform and its users.

miga88 processes your personal data only for legitimate, specified purposes. The table below sets out the primary purposes for which we process personal data and the corresponding lawful basis for each activity:

miga88 processes your personal data one or more of the following legal bases, as applicable to the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between you and miga88 — i.e., the delivery of online gaming services, payment processing, and account administration.
• Legal Obligation: Processing necessary for miga88 to comply with applicable legal and regulatory requirements, including AML/KYC obligations, age verification mandates, and transaction record-keeping.
• Legitimate Interests: Processing carried out in the pursuit of miga88's legitimate business interests — such as fraud prevention, Platform security, and service improvement — where such interests are not overridden by your rights and interests.
• Consent: Where you have given your explicit, informed consent for a specific processing activity, such as receiving marketing communications or the use of non-essential cookies. You may withdraw your consent at any time by contacting our support team or updating your account communication preferences.

miga88 does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. We may share your personal data in the following limited circumstances:

We engage trusted third-party service providers who process data on our behalf under strict contractual data protection obligations. These include:

• Payment processing partners (e.g., FPX gateway operators, Touch 'n Go, Boost, GrabPay integration providers)
• Identity and age verification providers
• Cloud infrastructure and data hosting providers
• Customer support platform providers
• Fraud detection and cybersecurity specialists
• Game content providers and software partners

miga88 may disclose personal data to competent regulatory authorities, law enforcement agencies, courts, or other government bodies where required by applicable law, court order, or regulatory mandate. We will inform you of any such disclosure where we are legally permitted to do so.

In the event of a merger, acquisition, restructuring, or sale of assets involving miga88, your personal data may be transferred to the successor entity, subject to equivalent data protection commitments. You will be notified of any such change in ownership that materially affects the handling of your personal data.

miga88 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention guidelines apply:

• Active Account Data: Retained for the duration of your active account relationship with miga88.
• Transaction Records: Financial transaction records, including deposit and withdrawal histories in MYR and cryptocurrency, are retained for a minimum of five (5) years following the date of the transaction in accordance with standard AML record-keeping requirements.
• KYC Documentation: Identity and verification documents are retained for a minimum of five (5) years following account closure, or longer where required by applicable law.
• Communications: Customer support communications are retained for three (3) years from the date of the interaction.
• Closed Accounts: Upon account closure, personal data is retained for the minimum period required by law before being securely deleted or anonymised.

Where personal data is no longer required for any of the above purposes and there is no legal obligation to retain it, miga88 will securely delete or anonymise it in a manner that prevents any possibility of re-identification.

miga88 implements robust technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes the following measures:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the miga88 Platform.
• Encrypted storage of sensitive personal data and financial information at rest.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their specific function.
• Regular internal security audits and vulnerability assessments of Platform infrastructure.
• Multi-factor authentication options for player accounts.
• Real-time fraud detection and account anomaly monitoring systems.
• Incident response procedures for the prompt identification and management of data security breaches.

miga88 uses cookies and similar tracking technologies (including pixel tags and local storage) to operate and improve the Platform. We use the following categories of cookies:

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair the functionality of the Platform and prevent you from accessing certain features. miga88 does not use cookies to serve third-party advertising on the Platform.

As a data subject, you hold the following rights in respect of the personal data that miga88 processes about you. To exercise any of these rights, please contact our support team via live chat or the support email address set out in Section 16.

miga88 will respond to all verifiable data subject requests within thirty (30) calendar days. In complex cases, this period may be extended by a further sixty (60) days, with notification provided. We may request proof of identity before processing any data subject request.

The miga88 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21.

Where miga88 discovers that personal data has been collected from a person under the minimum age requirement, we will take immediate steps to delete such data and close the associated account. Any winings generated by an underage account will be forfeited in accordance with our Terms & Conditions.

In the course of providing its services, miga88 may transfer your personal data to service providers or infrastructure partners located outside of Malaysia. Where such transfers occur, miga88 ensures that appropriate safeguards are in place to protect your personal data at a standard equivalent to the protections afforded under this Policy.

Safeguards employed for international data transfers may include: contractual data protection clauses with recipients, transfer to jurisdictions with recognised adequate data protection frameworks, and other legally accepted transfer mechanisms. If you have questions about specific international transfers, please contact our data protection team.

miga88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory requirements, or Platform features. The date of the most recent revision is displayed at the top of this page.

Where material changes are made to this Policy, miga88 will provide advance notice to registered users via a notification on the Platform or by email to your registered address, where technically feasible. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by miga88, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly through the miga88 Platform. This is the fastest method for data subject requests and privacy-related queries.
• Support Email (non-clickable): [email protected] — for written data protection requests, please allow up to three (3) business days for an initial acknowledgement and up to thirty (30) calendar days for a substantive response.

When submitting a data subject request, please include your registered account username or email address, a description of your request, and any relevant details that would help us locate and process your data. We may request proof of identity before processing any access, rectification, or deletion request.