mcd888 Privacy Policy

mcd888 collects personal data from you directly when you register an account, make a deposit, contact support, or otherwise interact with the Platform. We also collect data automatically through your use of the Platform. The categories of personal data we may collect include:

1.1 Identity & Contact Data

• Full legal name as per national identity card or passport.
• Date of birth (for age verification as required under our 21+ policy).
• Residential address, including postcode and state within Malaysia (e.g., Kuala Lumpur, Penang, Johor Bahru, Selangor).
• Email address and mobile phone number registered to the mcd888 account.
• Government-issued identification documents (MyKad, passport) where KYC verification is required.

1.2 Financial Data

• Deposit and withdrawal transaction records, including amounts, dates, and payment methods used (e.g., Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX).
• Bank account or e-wallet identifiers used for withdrawal processing, to the extent necessary for payment verification.
• Account balance history and bonus transaction records.

1.3 Gaming Activity Data

• Bet history, game session records, wager amounts, and gaming product preferences across the mcd888 sportsbook, live dealer casino, and slot lobby.
• Responsible gaming tool settings, including deposit limits, loss limits, and self-exclusion status, where applicable.

1.4 Technical & Usage Data

• IP address, browser type and version, device type, operating system, and screen resolution.
• Session logs, page views, navigation patterns, and feature interactions on the mcd888 Platform.
• Cookies and similar tracking technologies as described in Section 5 of this Policy.

1.5 Communications Data

• Records of correspondence with the mcd888 customer support team, including live chat transcripts, email exchanges, and support ticket content.
• Responses to surveys, promotions, or feedback requests where you voluntarily participate.

mcd888 processes Member personal data only for defined, lawful purposes. The primary purposes for which we use your data are as follows:

• Account management: To create, maintain, and administer your mcd888 account, verify your identity, and process the mcd888 login authentication process.
• Service delivery: To enable your access to and use of all mcd888 Platform products — sportsbook, live dealer casino, and slot games — and to process transactions in MYR accurately.
• Age and identity verification: To confirm you meet the mcd888 minimum age requirement of 21 years and to comply with Know Your Customer (KYC) obligations under our gaming authority licence.
• Payment processing: To process deposits and withdrawals via your chosen Malaysian payment method and to maintain financial transaction records as required by law.
• Regulatory compliance: To meet our legal obligations under applicable gaming authority licence conditions, including anti-money laundering (AML) and counter-terrorism financing (CTF) requirements.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, and any misuse of the mcd888 Platform.
• Responsible gaming: To monitor gaming behaviour for indicators of problematic play and, where appropriate, to implement or offer responsible gaming tools within your mcd888 account.
• Customer support: To respond to your queries, resolve disputes, and provide assistance related to your mcd888 account and gaming activity.
• Platform improvement: To analyse aggregated usage data to improve the design, functionality, and content of the mcd888 Platform.
• Direct marketing: To send you promotional communications about mcd888 offers, bonuses, and new features, where you have provided consent or where such communications are permitted under applicable law. You may opt out at any time by contacting support.

mcd888 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the mcd888 Terms & Conditions, including account provision, payment processing, and bet settlement.
• Legal obligation: Processing required to comply with gaming authority licence conditions, AML/CTF regulations, KYC requirements, and any applicable Malaysian law.
• Legitimate interests: Processing carried out to pursue mcd888's legitimate interests in fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights.
• Consent: Processing based on your explicit consent, including marketing communications and non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

mcd888 does not sell, rent, or otherwise commercially transfer your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly limited to what is necessary for the stated purpose:

• Payment service providers: Malaysian financial institutions and e-wallet operators (including those facilitating Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX transactions) for the purpose of processing deposits and withdrawals.
• Gaming software providers: Third-party game studios and live dealer platform operators integrated with mcd888, to the extent necessary to deliver gaming services.
• Identity verification providers: Third-party KYC and age verification service providers who assist mcd888 in meeting its regulatory obligations.
• Regulatory and law enforcement authorities: Where mcd888 is legally required to disclose personal data to comply with gaming authority requirements, court orders, or lawful requests from government authorities.
• IT and infrastructure service providers: Cloud hosting, data security, and analytics providers engaged by mcd888 to support the technical operation of the Platform, subject to data processing agreements.

Any third party with whom mcd888 shares personal data is required to handle such data in accordance with applicable data protection law and is not permitted to use it for any purpose other than the specific purpose for which it was shared.

mcd888 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function correctly, including maintaining your mcd888 login session and enabling core features. These cannot be disabled without impacting Platform functionality.
• Performance cookies: Used to collect aggregated, anonymised data about how Members use the Platform, enabling mcd888 to identify and improve areas of poor performance.
• Functional cookies: Enable the Platform to remember your preferences, such as language settings and display options, to provide a more personalised experience.
• Analytics cookies: Used by mcd888 to understand usage patterns, page performance, and feature adoption across the Platform.

You may control non-essential cookies through your browser settings. Note that disabling certain cookies may affect your experience on the mcd888 Platform, including the ability to maintain an authenticated mcd888 login session across page loads.

mcd888 retains Member personal data only for as long as necessary to fulfil the purposes described in this Policy, unless a longer retention period is required or permitted by law. In practice, this means:

• Account data and gaming activity records are retained for the duration of your active mcd888 membership and for a minimum period of five (5) years following account closure, as required by applicable gaming authority licence conditions and AML/CTF regulations.
• Financial transaction records are retained for a minimum of seven (7) years following the date of the transaction, in compliance with Malaysian financial record-keeping requirements.
• KYC and identity verification documents are retained for the period required under gaming authority licence obligations, which may extend beyond account closure.
• Customer support communications are retained for a minimum of three (3) years following the date of the interaction.

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised.

mcd888 implements a range of technical and organisational security measures to protect Member personal data against unauthorised access, loss, destruction, or alteration. These measures include, but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and the mcd888 Platform servers.
• Encryption of sensitive personal data and financial records at rest.
• Access controls restricting internal access to personal data to authorised personnel only, on a need-to-know basis.
• Regular security assessments and penetration testing of Platform infrastructure.
• Multi-factor authentication options for mcd888 account login on new or unrecognised devices.

Subject to applicable law and our legal obligations (including gaming authority licence requirements and AML/CTF regulations), you have the following rights with respect to your personal data held by mcd888:

• Right of access: You may request confirmation of whether mcd888 holds personal data about you and, if so, a copy of that data.
• Right to rectification: You may request correction of inaccurate or incomplete personal data held in your mcd888 account.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to restrict processing: You may request restriction of processing of your personal data in certain circumstances, such as where you contest the accuracy of the data.
• Right to data portability: Where technically feasible and legally permissible, you may request a copy of your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact the mcd888 support team via the live chat channel available on the Platform. mcd888 will respond to valid data rights requests within a reasonable timeframe consistent with applicable law. We may require you to verify your identity before processing a data rights request.

The mcd888 Platform is strictly restricted to persons aged 21 years and above. mcd888 does not knowingly collect personal data from individuals under the age of 21. If mcd888 becomes aware that personal data has been collected from a person who does not meet the minimum age requirement, such data will be deleted promptly and the associated account closed. If you believe mcd888 has inadvertently collected data from an underage individual, please contact our support team immediately.

mcd888 may transfer Member personal data to servers or service providers located outside of Malaysia. Where such transfers occur, mcd888 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under applicable Malaysian and international data protection law. This may include contractual safeguards, such as data processing agreements incorporating standard contractual clauses, or reliance on adequacy decisions where applicable. By using the mcd888 Platform, you consent to the transfer of your personal data as described in this section.

The mcd888 Platform may contain references or links to third-party services, including payment processors and gaming software providers. This Privacy Policy applies solely to personal data processed by mcd888 and does not extend to any third-party services you access in connection with the Platform. mcd888 is not responsible for the privacy practices of third parties. Members are encouraged to review the privacy policies of any third-party service they interact with.

mcd888 reserves the right to amend this Privacy Policy at any time. Any material changes will be notified to Members via a notice on the Platform or by email to the registered mcd888 account address. The amended Policy will be published on this page with an updated effective date. Continued use of the mcd888 Platform following the publication of an amended Privacy Policy constitutes acceptance of the revised terms. Members are encouraged to review this page periodically to stay informed of how their personal data is handled.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by mcd888, please contact the mcd888 Data Protection team via the 24/7 live chat support available on the Platform. You may also write to us at the official contact email: [email protected].

mcd888 will acknowledge receipt of all privacy-related enquiries promptly and will endeavour to resolve them in a timely manner. Where you believe your data protection rights have not been adequately addressed, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.