Privacy Policy mytown88 — How We Protect Your Personal Data

Mytown88 understands that trusting a platform with your personal information is no small thing — and we do not take that trust lightly. For us, privacy is a fundamental right of every member, not merely a legal obligation to be ticked off on paper.

This Privacy Policy applies to all users of the mytown88 platform, including those browsing our website without registering, registered members, and anyone who contacts us through any support channel. It covers all data collected via mytown88.best, the mobile app (where applicable), email communications, and live chat interactions.

Mytown88's data protection team continuously monitors industry best practices and stands ready to update this Policy as needed to better reflect how we manage your data. Your trust is our most valuable asset — and we intend to keep earning it.

Mytown88 collects several categories of data depending on how you interact with our platform. The following is a comprehensive list of data we may collect:

Registration & Identity Data:

• Full name as shown on your identification card.
• An active Malaysian phone number.
• A valid email address.
• Date of birth — for age verification purposes (18 and above).
• National identity card number (MyKad) — collected during the Know Your Customer (KYC) process for withdrawals that exceed a set threshold.

Financial & Payment Data:

• Details of the payment methods you use — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX.
• Bank account number for withdrawal of winnings (not stored in full — only the last digits are retained for reference).
• Deposit and withdrawal transaction records.
• Betting history and gaming activity.

Technical & Usage Data:

• IP address and estimated geographic location.
• Device type, operating system, and web browser version.
• Session data — login time, session duration, pages visited.
• Cookie and usage analytics data.

Communications Data:

• Live chat conversation records with the support team.
• Emails you send us and our replies.
• Feedback and complaints you submit.

Mytown88 collects data through several primary channels — all lawfully and with your knowledge:

• During account registration: When you complete the mytown88 registration form, you voluntarily provide your name, phone number, email address, and date of birth. This information forms the foundation of your account and is strictly necessary.
• During financial transactions: Each time you make a deposit via Touch 'n Go, GrabPay, or any other method, or request a withdrawal to your bank account, we record the relevant transaction details for accountability and security purposes.
• Through platform usage: When you use mytown88 — placing bets, playing slots, or watching live matches — our systems automatically record these activities to keep the platform running properly and to analyse improvements to your user experience.
• Through cookies and tracking technologies: Like any modern website, mytown88 uses cookies to remember your preferences, keep your login session secure, and analyse how users interact with the platform. See Section 9 for full details.
• Through support communications: When you contact the mytown88 support team via Live Chat, email, or WhatsApp, those conversations may be stored for quality assurance purposes and for reference should the same issue arise again.
• Via authorised third parties: In certain cases, mytown88 may receive data from identity verification providers or payment service providers — solely to fulfil KYC requirements and ensure transaction security.

Mytown88 uses collected data solely for legitimate and reasonable purposes. We do not use your data for anything unrelated to the services you use. Below is a detailed breakdown of our data usage purposes:

• Account management: To create and maintain your account, process logins securely, and ensure all features of the mytown88 platform function correctly.
• Payment processing: Processing your deposits and withdrawals via your chosen Malaysian payment methods — Touch 'n Go, GrabPay, DuitNow, FPX, and others — accurately and securely.
• Identity verification (KYC): To meet legal requirements and industry guidelines, ensuring all members are genuine individuals who satisfy the minimum age requirement and are operating legitimately.
• Fraud prevention: Monitoring account activity to detect and prevent fraud, money laundering, multiple account usage, or any unauthorised activity that may harm other members or the platform.
• Customer support: To provide effective, relevant assistance whenever you contact the mytown88 support team — including referencing prior interaction history for better context.
• Service improvement: Analysing usage patterns in aggregate (not individually) to understand how the mytown88 platform is used and where improvements can be made.
• Important communications: To send account-related notifications, security alerts, changes to terms and conditions, and other important information directly relevant to your use of the platform.
• Marketing (with consent): If you have opted in to receive marketing communications, we may send you information about mytown88's latest promotions, bonuses, and offers. You may unsubscribe at any time.

Mytown88 will not use your data for any purpose beyond those listed above without first obtaining your explicit consent.

Mytown88 does not sell, rent, or trade members' personal data to any third party for their own commercial purposes. Full stop. That said, there are a limited number of situations where we need to share data to enable our services to function or to meet legal obligations:

• Payment service providers: To process your deposits and withdrawals, we are required to share relevant transaction information with providers such as Touch 'n Go, GrabPay, DuitNow, FPX, and the relevant banks. These providers are bound by their own privacy policies and are not permitted to use your data for any other purpose.
• Game software providers: Providers such as Pragmatic Play, Evolution Gaming, PG Soft, and others may receive the minimum game session data required for their services to function. They do not receive your full identity data.
• Identity verification services: For KYC purposes, mytown88 uses licensed third-party verification services. They receive only the data necessary for verification and do not retain it once the process is complete.
• Legal authorities: mytown88 will disclose the required data to Malaysian or international legal authorities when compelled by a valid court order, warrant or legal obligation. We will notify you of any such disclosure where permitted by law.
• Business transfers: In the event of a merger, acquisition, or sale of mytown88 assets, user data may be transferred as part of the business assets. You will be notified in advance and given the option to delete your account if you do not agree to the new terms.

Mytown88 invests seriously in data security infrastructure to ensure your personal and financial information is protected at all times. Our security measures include:

• 256-bit SSL/TLS encryption: All communication between your browser and mytown88's servers is encrypted using the same SSL/TLS standards employed by Malaysia's major banks. Data in transit cannot be read by third parties even if intercepted.
• Secure password storage: Your password is never stored in plain text. We apply a cryptographic hash function with a unique salt for each user — meaning your password cannot be recovered even by the mytown88 team itself.
• Layered access controls: Access to user data within mytown88's internal systems is governed by a "need-to-know" principle — only staff with a legitimate business need may access the relevant data, and all access is logged for audit purposes.
• 24/7 security monitoring: mytown88's cybersecurity team continuously monitors our systems to detect any intrusion attempts, suspicious activity, or anomalies in data access patterns.
• Regular security audits: mytown88 conducts regular penetration testing and security audits to identify and address vulnerabilities before they can be exploited.
• Data segregation: Sensitive financial data is segregated from general profile data within our database infrastructure to minimise risk in the event of a breach.

While mytown88 takes all reasonable security measures, no online system can be guaranteed 100% secure against every threat. We encourage members to play their part in keeping their accounts safe by using strong passwords and never sharing their login credentials with anyone.

Mytown88 does not retain your personal data indefinitely. We follow the principle of minimum retention — data is only kept for as long as it is needed for the stated purpose or as required by law.

• Active account data: Retained for the duration your account is active, plus any required period after closure to fulfil legal obligations.
• Financial transaction records: Retained for a minimum of 7 years after the transaction, in line with Malaysian accounting and tax legal requirements.
• KYC records (identity verification): Retained for a minimum of 5 years after the business relationship ends, in line with anti-money laundering law (AMLA) requirements.
• Support communication logs: Retained for 2 years for reference and quality assurance purposes, then deleted unless there is an open related case.
• Cookie data: Session cookies are deleted when you close your browser. Persistent cookies have varying expiry periods as stated in Section 9.
• After account closure: Once your account is closed at your request, personal data that is not required for legal obligations will be deleted within 90 days. Data required for legal compliance will be retained only for the minimum period mandated by law.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and globally recognised privacy principles, you have the following rights regarding your personal data held by mytown88:

• Right to access: You have the right to request a copy of the personal data we hold about you. Access requests will be processed within 21 business days.
• Right to rectification: If any data we hold is inaccurate or incomplete, you have the right to request a correction. Most profile information can be updated directly in your account settings.
• Right to request erasure: Under certain circumstances, you have the right to request the deletion of your personal data. This right is subject to legal retention obligations that we are required to comply with.
• Right to object to processing: You may object to the use of your data for direct marketing purposes at any time — no reason required.
• Right to withdraw consent: For processing based on your consent (such as marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the validity of any processing that took place prior to withdrawal.
• Right to lodge a complaint: If you believe your data has been processed incorrectly, you have the right to lodge a complaint with mytown88 and, if necessary, with the Personal Data Protection Commissioner of Malaysia.

To exercise any of the above rights, contact us by email at support@mytown88.best with the subject line "Privacy Rights Request", or via the platform's live chat. We will respond within 14 business days.

Mytown88 uses cookies and similar tracking technologies to ensure the platform runs smoothly and to deliver a better experience for you. Below is an explanation of the types of cookies we use:

You can manage your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect platform functionality. For instructions on managing cookies in your browser (Chrome, Safari, Firefox), please refer to the relevant browser's help section.

The mytown88 platform is strictly for individuals aged 18 and above. We do not knowingly collect personal data from anyone under 18. If we discover that data belonging to a minor has been collected without our knowledge, we will take immediate action to:

• Terminating the account in question with immediate effect.
• Permanently deletes all personal data associated with the account.
• Returning any valid balance to its original source.
• Reporting to the relevant authorities where deemed necessary.

Parents or guardians who suspect their child has registered a mytown88 account without permission are encouraged to contact us immediately at support@mytown88.best. We will respond and take action within 24 hours of receiving a valid report.

Mytown88 encourages parents to use parental control software and to have open conversations with their children about the risks of online gambling. Preventive education is more effective than technical controls alone.

Mytown88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable laws, or the way our platform operates. We are committed to full transparency regarding any changes made.

For material changes that affect how we use your data:

• We will send email notifications to all active members at least 7 days before any changes take effect.
• A clear notice will be displayed on the mytown88 homepage for a minimum of 14 days.
• The "Last Updated" date at the top of this page will be updated to reflect the date of the latest amendment.

For minor changes that have no material impact (such as language corrections or added clarification that does not alter any rights or obligations), changes will take effect immediately upon publication without prior notice.

Continued use of the mytown88 platform after any amendments take effect will be deemed acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how mytown88 manages your personal data, our team is ready to assist:

• Privacy email: support@mytown88.best — Use the subject line "Data Privacy Enquiry" to expedite processing. We aim to respond within 2 business days.
• Live Chat: Available 24/7 on the mytown88 platform — for urgent inquiries about your privacy or account security.
• WhatsApp: Number displayed within the platform after login — for issues requiring immediate attention.

All privacy-related inquiries are handled by a dedicated team well-versed in Malaysia's PDPA requirements and data protection principles. We will never ask for your password through any communication channel — if someone claims to be from mytown88 and requests your password, it is a scam. Please report it to us immediately.