miga8888 Privacy Policy

This Privacy Policy ("Policy") describes how miga8888 ("we", "us", "our", "the Company") collects, processes, stores, shares, and protects personal data relating to individuals ("you", "the Player", "the User") who access or use the miga8888 platform, including the website at https://miga8888.cam and all associated services.

miga8888 is committed to handling personal data responsibly and in compliance with applicable data protection legislation. We process personal data only where we have a legitimate legal basis to do so, and we implement appropriate technical and organisational measures to safeguard the personal data entrusted to us.

By registering an account, depositing funds, or otherwise using the miga8888 Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact our support team to request account closure.

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to names, identification numbers, location data, online identifiers, and factors specific to the physical, economic, cultural, or social identity of that person.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, alignment, restriction, erasure, or destruction.
• "Data Controller" means miga8888, being the entity that determines the purposes and means of the processing of personal data.
• "Data Processor" means any third party that processes personal data on behalf of miga8888 pursuant to a written data processing agreement.
• "KYC" (Know Your Customer) means the identity verification and due diligence process conducted to confirm a Player's identity, age, and eligibility to use the Platform.
• "Sensitive Data" means personal data revealing racial or ethnic origin, political opinions, religious beliefs, health data, biometric data, or criminal record data, which we process only where strictly required for legal compliance purposes.
• "Platform" means the miga8888 website, mobile interfaces, application software, and all related services accessible under the miga8888 brand.

miga8888 collects personal data through several channels. The categories of personal data we collect, and the typical source of each, are set out in the table below:

We do not intentionally collect sensitive personal data such as health information, racial or ethnic origin, religious beliefs, or political opinions, except where required to fulfil specific legal obligations (for example, processing a self-exclusion request linked to a problem gambling declaration).

miga8888 uses the personal data it collects for the following purposes:

• Account Management: To create and maintain your Player Account, verify your identity and age, process your login and security credentials, and manage account settings and preferences.
• Transaction Processing: To process deposits, withdrawals, and internal account transfers; to record and reconcile financial activity denominated in MYR; and to facilitate communication with payment providers including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, and USDT TRC20 networks.
• Legal and Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering (AML), counter-financing of terrorism (CFT), and know-your-customer (KYC) regulations; to respond to lawful requests from regulatory bodies or law enforcement; and to maintain records as required by applicable laws.
• Platform Security and Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, account takeover attempts, cheating, collusion, and other prohibited activities; to monitor compliance with our Terms and Conditions; and to protect the integrity of the Platform and the interests of all players.
• Customer Support: To respond to enquiries, handle complaints, process self-exclusion and responsible gambling requests, and maintain records of support interactions for quality assurance purposes.
• Service Improvement: To analyse aggregate usage patterns, game performance, and platform behaviour in order to improve the functionality, reliability, and user experience of the miga8888 Platform.
• Promotional Communications: To send you information about promotions, bonuses, new games, and other offers relevant to your account, where you have provided consent or where we have a legitimate interest to do so. You may opt out of promotional communications at any time through your account settings or by contacting our support team.
• Responsible Gambling: To monitor account activity for indicators of problem gambling; to enforce self-exclusion periods and cooling-off requests; and to comply with responsible gambling obligations.

miga8888 processes personal data only where a valid legal basis exists. The primary legal bases on which we rely are as follows:

• Contractual Necessity: Processing required to perform the contract between you and miga8888 — specifically, the operation of your Player Account, processing of deposits and withdrawals, and delivery of the gaming and sports betting services you have registered to use.
• Legal Obligation: Processing required for compliance with applicable AML, KYC, CFT, and responsible gambling regulatory requirements, as well as the retention of financial records as required by relevant laws.
• Legitimate Interests: Processing carried out for purposes where miga8888 has a legitimate business interest that is not overridden by your privacy rights — including fraud detection, platform security, service improvement, and the prevention of prohibited conduct.
• Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent — primarily for direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing based on consent before withdrawal.

miga8888 does not sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes. We may share personal data with third parties in the following circumstances only:

• Payment Service Providers: We share necessary financial and identity data with payment processors — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, and USDT TRC20 network operators — to facilitate deposits and withdrawals. These providers process data under their own privacy policies and pursuant to contractual obligations with miga8888.
• Identity Verification Providers: We engage third-party KYC and AML screening services to verify the identity and age of Players and to conduct ongoing transaction monitoring. These providers receive only the data necessary to perform their verification function.
• Game Software Providers: Game developers and live dealer studios that supply games available on the Platform may receive anonymised session data and game outcome data for the purposes of game audit, RNG certification, and RTP verification. They do not receive personally identifiable information unless required for a specific compliance audit.
• IT and Infrastructure Providers: Cloud hosting, database management, and cybersecurity service providers who support the operation of the Platform infrastructure under strict confidentiality and data processing agreements.
• Regulatory and Law Enforcement Authorities: We will disclose personal data to regulatory bodies, law enforcement agencies, or courts of competent jurisdiction where required to do so by applicable law, regulation, or lawful order. We will endeavour to notify the affected Player of any such disclosure where legally permissible to do so.
• Professional Advisers: Lawyers, accountants, and other professional advisers engaged by miga8888 who require access to personal data in the course of providing professional services, subject to binding duties of confidentiality.

miga8888 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve any disputes or enforce our agreements.

The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active Player Account and for a minimum of five (5) years following account closure, in compliance with applicable AML and financial record-keeping requirements.
• Transaction and Financial Records: Retained for a minimum of seven (7) years from the date of the transaction, in line with financial regulatory obligations.
• KYC Documents: Retained for the period required by applicable regulations, typically five (5) years from the end of the business relationship.
• Support and Communication Records: Retained for three (3) years from the date of the interaction, unless the communication relates to a formal complaint or legal matter, in which case retention periods are extended accordingly.
• Technical and Usage Data: Retained in identifiable form for up to 13 months, after which it is aggregated and anonymised for statistical analysis purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Where complete deletion is not immediately technically feasible, miga8888 will take appropriate steps to restrict further processing until deletion can be completed.

miga8888 implements a layered set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our principal security measures include:

• Encryption: All data transmitted between your device and our Platform is encrypted using 256-bit SSL/TLS protocols. Personal and financial data stored on our servers is encrypted at rest.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Staff members with access to sensitive personal data are subject to confidentiality obligations and regular security training.
• Two-Factor Authentication: Player accounts support two-factor authentication (2FA), which we strongly encourage all players to enable. Internal staff access to data management systems requires mandatory multi-factor authentication.
• Intrusion Detection: Our infrastructure is monitored 24 hours a day by automated intrusion detection and anomaly detection systems. Security incidents trigger immediate escalation protocols.
• Penetration Testing: We conduct regular third-party penetration testing and security audits of our Platform and data infrastructure to identify and address potential vulnerabilities proactively.
• Incident Response: We maintain a documented data breach response procedure. In the event of a security incident affecting personal data, affected Players will be notified promptly in accordance with applicable notification requirements, and appropriate remediation steps will be taken immediately.

Despite these measures, no data transmission over the internet or electronic storage system is entirely risk-free. miga8888 cannot guarantee absolute security, but we are committed to maintaining industry-standard protections and to continuous improvement of our security posture. Players are advised to use strong, unique passwords and to report any suspected unauthorised account access to our support team immediately.

The miga8888 Platform uses cookies and similar tracking technologies to support Platform functionality, maintain session security, and analyse aggregate usage patterns. The categories of cookies we deploy are as follows:

miga8888 does not deploy third-party advertising cookies, retargeting pixels, or behavioural profiling trackers. You may manage cookie settings through your browser's privacy controls. Please note that disabling strictly necessary cookies will impair Platform functionality and may prevent you from accessing your account.

The miga8888 Platform serves players primarily based in Malaysia. In the course of operating the Platform, personal data may be processed by service providers located in jurisdictions outside Malaysia, including cloud infrastructure providers and game software suppliers.

Where personal data is transferred outside Malaysia, miga8888 takes appropriate steps to ensure that such transfers are conducted lawfully and that the receiving party provides an equivalent level of data protection to that required under applicable Malaysian law and the standards set out in this Policy. These steps may include:

• Entering into data processing agreements incorporating appropriate contractual protections for the transfer of personal data;
• Assessing the data protection laws and practices of the destination country to verify that your privacy rights will be effectively protected;
• Applying additional technical safeguards such as end-to-end encryption for data transmitted to international processors.

For further information about the specific safeguards applied to any international data transfer affecting your personal data, please contact our support team.

As a data subject, you hold the following rights in relation to the personal data that miga8888 processes about you. These rights are subject to certain conditions and exceptions as provided under applicable data protection law:

• Right of Access: You have the right to request a copy of the personal data miga8888 holds about you and to receive information about how it is processed.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data. You may update many account details directly through your account settings; for changes to identity or date of birth records, please contact our support team and provide supporting documentation.
• Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where consent has been withdrawn, or where processing is unlawful. This right is subject to overriding legal obligations that require us to retain certain data (for example, AML and financial record-keeping requirements).
• Right to Restriction of Processing: You may request that miga8888 restrict processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests. Where your objection relates to direct marketing communications, we will cease such communications immediately upon receipt of your objection.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of any processing carried out prior to withdrawal.

To exercise any of the above rights, please contact our support team via live chat or email at [email protected]. We will respond to all verified data rights requests within 30 calendar days. In complex cases, this period may be extended by a further two months, and we will notify you of any such extension within the initial 30-day period.

miga8888 strictly prohibits access to and use of the Platform by individuals under the age of 21. We do not knowingly collect, process, or retain personal data belonging to minors. Age verification forms a mandatory part of our account registration and KYC process.

If miga8888 becomes aware or has reason to believe that personal data belonging to an individual under the age of 21 has been collected — whether through a misrepresentation of age at registration or otherwise — we will immediately:

• Suspend the relevant account;
• Delete or securely destroy all personal data associated with the account, subject to any overriding legal retention obligations;
• Reverse any financial transactions where technically possible; and
• Where appropriate, refer the matter to relevant child protection or regulatory authorities.

Parents or guardians who believe that a minor has registered an account on the miga8888 Platform are urged to contact our support team immediately. We will treat all such reports with the utmost urgency and confidentiality.

miga8888 reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. Material changes to this Policy will be communicated to registered Players via in-platform notification and/or email prior to the effective date of the change.

The current version of this Policy is always accessible at https://miga8888.cam/privacy-policy. The "Last Updated" date at the top of the page reflects the date of the most recent revision. We recommend reviewing this Policy periodically to remain informed of how miga8888 protects your personal data.

Your continued use of the Platform following the publication of any amendment constitutes your acceptance of the revised Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way miga8888 processes your personal data, please contact us through any of the following channels:

• Live Chat: Available 24/7 via the miga8888 Platform. Average first response time under 5 minutes.
• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" for routing purposes.

All data rights requests, privacy complaints, and data protection enquiries received by our support team are handled by staff with specific training in data protection obligations. We are committed to addressing all privacy-related concerns promptly, transparently, and in accordance with applicable law.