Privacy Policy — mko888

This Privacy Policy ("Policy") sets out the practices of mko888 ("we", "us", "our", or "the Platform") with respect to the collection, use, storage, disclosure, and protection of personal data belonging to users ("you", "your", or "the Player") of the mko888 online gaming platform accessible at mko888.cam.

mko888 is committed to handling your personal data with transparency, integrity, and in compliance with applicable international data protection standards. We collect and process personal data strictly to the extent necessary to operate a safe, compliant, and high-quality online gaming service for Malaysian players and other eligible users.

By registering an account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Platform.

This Policy was last updated and came into effect on 1 January 2026. We encourage you to review it periodically as we may update it from time to time.

For the purposes of this Policy, the following terms have the meanings set out below:

• "Personal Data" — any information that relates to an identified or identifiable natural person, including name, identification number, location data, email address, phone number, financial account details, and online identifiers.
• "Processing" — any operation or set of operations performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — mko888, the entity that determines the purposes and means by which Personal Data is processed.
• "Data Subject" — the identified or identifiable individual whose Personal Data is being processed. In the context of this Policy, the Data Subject is you, the Player.
• "Third Party" — any natural or legal person, public authority, or body other than mko888 and the Data Subject.
• "KYC" — Know Your Customer; the identity and address verification process required of all Players to comply with anti-money laundering and responsible gambling obligations.
• "Cookies" — small data files stored by a web browser on a user's device that record information about browsing behaviour and preferences on a website.
• "Consent" — a freely given, specific, informed, and unambiguous indication by the Data Subject of agreement to the processing of their Personal Data.

mko888 collects the following categories of Personal Data, depending on your interactions with the Platform:

When you create an Account, we collect: full name, date of birth, email address, mobile phone number, preferred username, and country of residence. This information is required to establish and maintain your Account.

To comply with our licensing obligations and anti-money laundering (AML) requirements, we collect: a copy of your government-issued photo identity document (Malaysian MyKad, passport, or driver's licence), proof of residential address (utility bill or bank statement dated within three months), and a selfie photograph holding your identity document.

We collect transaction records relating to deposits and withdrawals processed through payment methods including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong Bank. We do not store full bank account numbers or full payment card details — these are handled by our certified payment processing partners.

We record your game play history, wagering activity, bonus claim history, win and loss records, session duration, and VIP tier progression. This data is used for account management, dispute resolution, responsible gambling monitoring, and regulatory compliance.

We automatically collect IP address, device type and operating system, browser type and version, session timestamps, login history, and referring URL. This data is used for security monitoring, fraud detection, and Platform optimisation.

Records of your communications with our support team via live chat and email, including the content of messages, timestamps, and resolution notes, are stored for quality assurance and dispute resolution purposes.

Where you interact with our responsible gambling tools — including setting deposit limits, activating cooling-off periods, or requesting self-exclusion — we record these interactions to ensure they are properly implemented and maintained.

mko888 collects Personal Data through the following channels:

• Directly from you — when you complete the registration form, submit KYC documents, make deposits or withdrawals, contact customer support, or respond to any surveys or feedback requests;
• Automatically from your device — through cookies, session tracking, log files, and device fingerprinting technologies as you use the Platform;
• From third-party service providers — including payment processors, identity verification providers, fraud detection services, and our licensed game providers, to the extent necessary for the delivery of services;
• From publicly available sources — including sanctions screening databases and publicly accessible regulatory watchlists, as part of our AML compliance obligations.

The following table sets out the specific purposes for which mko888 processes your Personal Data and the legal basis on which each processing activity is carried out:

mko888 does not sell, rent, or trade your Personal Data to any third party for their commercial purposes. We share your Personal Data only in the following strictly limited circumstances:

We engage vetted third-party service providers to perform functions on our behalf, including: payment processing (e.g., operators of DuitNow, FPX, Touch 'n Go eWallet infrastructure), identity verification and KYC processing, cloud hosting and data storage, fraud detection services, customer support platform providers, and analytics services. These providers are contractually bound to process your data solely for the purpose of providing their services to mko888 and are prohibited from using it for any other purpose.

We may disclose your Personal Data to regulatory authorities, law enforcement agencies, courts, or other governmental bodies where we are legally required to do so, or where disclosure is necessary to comply with a valid legal process such as a court order, subpoena, or regulatory investigation.

We may share transaction data and KYC information with licensed fraud prevention and financial intelligence services as required by applicable AML regulations and our licensing obligations. Such disclosures are strictly limited to what is necessary for compliance purposes.

In the event that mko888 undergoes a merger, acquisition, asset sale, or corporate restructuring, your Personal Data may be transferred to the acquiring entity as part of that transaction. We will notify registered Players of any such transfer and ensure that appropriate data protection commitments are maintained by the acquiring entity.

We may share your data with third parties in any other circumstances where you have provided explicit, informed, and revocable consent to such sharing.

mko888 operates as an internationally licensed gaming platform, and some of our service providers and infrastructure partners are located outside Malaysia. As a result, your Personal Data may be transferred to, stored in, and processed in countries other than Malaysia.

When we transfer Personal Data internationally, we ensure that appropriate safeguards are in place to protect your data to a standard at least equivalent to that afforded under this Policy. These safeguards may include: contractual clauses that impose equivalent data protection obligations on the recipient, encryption of data in transit and at rest, access controls restricting who within the recipient organisation can access your data, and periodic security audits of third-party infrastructure providers.

By using the Platform, you acknowledge that your Personal Data may be transferred internationally as described in this section. If you wish to understand more about the countries in which your data may be processed, please contact our support team.

mko888 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

The following general retention periods apply:

• Account and Registration Data: Retained for the duration of your Account plus a minimum of five (5) years following Account closure, in accordance with AML regulatory requirements;
• KYC Documents: Retained for a minimum of five (5) years following the end of the business relationship, as required by applicable anti-money laundering regulations;
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction;
• Communications Data: Retained for up to three (3) years from the date of each interaction for quality assurance and dispute resolution purposes;
• Technical and Device Data: Retained for up to twelve (12) months for security and fraud prevention purposes;
• Responsible Gambling Data: Self-exclusion records are retained indefinitely to prevent re-registration during active exclusion periods; other responsible gambling interactions are retained for five (5) years.

Once Personal Data is no longer required for any of the above purposes, it will be securely deleted or anonymised in accordance with our data disposal procedures.

mko888 implements a comprehensive suite of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the Platform;
• Encryption at rest for all stored Personal Data, including KYC documents and financial records;
• Role-based access controls ensuring that only authorised personnel with a legitimate operational need can access your data;
• Multi-factor authentication for all internal system access by mko888 staff;
• Regular penetration testing and vulnerability assessments conducted by qualified third-party security professionals;
• 24/7 security monitoring of our infrastructure with automated alerts for suspicious access patterns;
• Staff training on data protection obligations, phishing awareness, and incident response procedures.

Cookies are small text files stored on your browser or device when you visit a website. They serve a range of functions, from keeping you logged in to your Account, to helping us understand how players navigate the Platform so we can improve it.

• Strictly Necessary Cookies: Essential for the Platform to function. These enable core functionality such as session authentication, security, and payment flow. The Platform cannot operate without these cookies. No consent is required for strictly necessary cookies.
• Performance & Analytics Cookies: These cookies collect anonymised, aggregated data about how Players use the Platform — such as which pages are visited most frequently and how long sessions last. This data helps us improve the Platform's performance and user experience.
• Preference Cookies: These store your Platform preferences (such as language or display settings) so that you do not need to reset them each visit.

mko888 does not use advertising or behavioural targeting cookies. We do not participate in cross-site tracking or share cookie data with advertising networks.

You may adjust your cookie preferences at any time through your browser settings. Disabling strictly necessary cookies will impair or prevent the Platform from functioning. Disabling analytics or preference cookies will not affect core Platform functionality but may limit certain personalisation features.

Subject to applicable data protection law, you hold the following rights in relation to your Personal Data held by mko888. To exercise any of these rights, please contact our Data Protection contact via the details provided in Section 15.

Please note that certain rights may be limited or overridden by our legal obligations — for example, we cannot erase KYC or transaction data that we are required to retain under applicable AML regulations, even if you request deletion of your Account.

The mko888 Platform is strictly intended for individuals aged 21 years or above. We do not knowingly collect, store, or process Personal Data relating to any person under the age of 21. All registrations are subject to mandatory age verification as part of the KYC process.

If mko888 discovers or has reasonable grounds to believe that Personal Data has been submitted by a person under the age of 21, we will immediately suspend the relevant Account, initiate a review, and securely delete the Personal Data of the underage individual as soon as practicable, except to the extent that retention is required by applicable law for regulatory or fraud investigation purposes.

Parents and guardians are encouraged to use internet access filtering and parental control tools to prevent minors from accessing gambling platforms. If you believe a minor has accessed the Platform using your details or any other means, please contact our support team immediately via live chat.

The Platform may contain links to third-party websites or services, including game provider interfaces and payment gateway portals. This Privacy Policy applies exclusively to Personal Data processed by mko888 and does not govern the data practices of any third-party website, service, or application that may be accessible from or referenced within the Platform.

mko888 is not responsible for the privacy practices, content, or security standards of any third-party site or service. We encourage you to review the privacy policy of any third-party service before providing them with your personal information.

mko888 reserves the right to update, amend, or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, our services, or other operational requirements. The most current version of this Policy will always be available on this page, together with its effective date.

For material changes — meaning changes that significantly affect your rights or how we process your data — mko888 will provide advance notice via email to your registered address and/or via a prominent notice on the Platform, with a minimum notice period of fourteen (14) days before the change takes effect.

Your continued use of the Platform following the effective date of any update constitutes your acceptance of the revised Policy. If you do not accept the changes, you should cease using the Platform and contact our support team to close your Account and request deletion of your data where applicable.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way mko888 handles your Personal Data, please contact us through any of the following channels:

mko888 will acknowledge receipt of all data-related queries within five (5) business days and will endeavour to provide a substantive response within thirty (30) calendar days. Where a request is particularly complex or numerous, we will notify you within the initial thirty-day period and provide an extended timeline.

If you are dissatisfied with our response to any privacy-related complaint or request, you have the right to escalate the matter to the data protection supervisory authority in the jurisdiction in which mko888 holds its operating licence.