🔒 Updated: January 2026

Privacy Policy mahkota888 — Our Commitment to Protecting Your Data

At mahkota888, your privacy is not a minor matter — it is a responsibility we take seriously every single day. This document clearly explains what data we collect, how it is used, and the rights you hold as a member. We are in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Data Encryption
SSL 256-bit
Legal Compliance
Malaysia PDPA
Data Controls
Your Full Rights
No Data Sales
Privacy Assured
PDPA Compliant
SSL 256-bit
No Data Sales
Right to Access Data
Right to Erasure
24/7 Privacy Support
Our Privacy Commitment
6 Ways mahkota888 Protects Your Personal Data

Privacy isn't a slogan for us — these are six real practices we carry out every day to safeguard your information.

SSL 256-bit Encryption

All data transmitted between your device and mahkota888's servers is encrypted using 256-bit SSL technology — the same security standard used by financial institutions and major banks in Malaysia. This means that even if someone were to attempt to intercept your communications, they would be unable to read any meaningful information.

Secure Data Storage

Your personal data is stored on secure servers with multiple layers of protection — firewalls, role-based access controls, 24/7 monitoring, and regular backups. Only specifically authorised mahkota888 staff may access members' personal data, and every access is logged for audit purposes.

No Data Sales to Third Parties

Mahkota888 has never sold, rented, or shared your personal data with third parties for marketing or any other commercial purpose, and never will — not without your explicit consent. Your data belongs to you; we use it solely to provide the services you have requested from us.

Full PDPA Malaysia Compliance

All of mahkota888's data handling practices are designed and carried out in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA). This covers all seven PDPA principles: the general principle, the notice and choice principle, the disclosure principle, the security principle, the integrity principle, the access principle, and the accountability principle.

Full Control in Your Hands

You have the right to access, correct, delete, and object to the processing of your personal data. Such requests can be submitted to the mahkota888 support team and will be processed within the timeframe stipulated by law. You may also withdraw your marketing consent at any time through your account settings.

Marketing Communication Controls

Mahkota888 will not send unsolicited marketing communications. All promotional emails, offer notifications, and marketing messages are sent only to members who have explicitly consented during registration or through their account settings. You can unsubscribe from marketing communications at any time with a single click.

Data Transparency
What Data mahkota888 Collects & Why

We believe you deserve to know exactly what data we collect and the purpose for which it is used.

Data Type Sample Information Purpose of Collection Shared?
Identity Data Full name, IC/passport number, date of birth Age & identity verification (KYC), AML compliance No
Contact Data Malaysian phone number, email address Account communications, security notifications, customer support No
Financial Data E-wallet numbers (TnG, GrabPay, DuitNow), MYR transaction records Deposit & withdrawal processing, AML compliance No
Platform Usage Data Game history, bets placed, login times Responsible gaming monitoring, dispute resolution, service improvement No
Technical Data IP address, device type, browser, session cookies Account security, fraud detection, and platform performance optimisation No
Customer Support Data Support conversation records, emails, complaints Issue resolution, quality training, service improvement No
Marketing Communications Data Promotional preferences, consent records Delivery of relevant promotions to consenting members only No

Note: "Shared" refers to sharing with third parties without your consent for purposes other than delivering mahkota888 services. Where required by Malaysian law, mahkota888 may be obligated to disclose data to the relevant authorities.

1Introduction & Scope of This Privacy Policy

This Privacy Policy ("Policy") is published by the operator of the mahkota888 and applies to all members, visitors, and users of the mahkota888.best website and all related services. This policy explains how mahkota888 collect, use, store, protect, and disclose your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

By registering an account or using the services of mahkota888, you agree to the data collection and processing practices described in this Policy. If you do not agree, please do not register or continue using our platform. This Policy should be read together with Terms & Conditions mahkota888.

Quick Summary: mahkota888 collects only the data necessary to provide you with our services. We do not sell your data. You may request access to, correction of, or deletion of your data at any time. We are fully compliant with Malaysia's PDPA.


2Personal Data We Collect

mahkota888 collects various types of personal data depending on how you interact with our platform. The following are the main categories of data we collect:

a) Data You Provide Directly

  • Registration information: full name, Malaysian phone number, email address, and password.
  • Identity verification information (KYC): Malaysian IC number or passport, date of birth, current residential address.
  • Financial information: e-wallet account details (Touch 'n Go eWallet, GrabPay, DuitNow, ShopeePay, Boost) or FPX information for processing transactions in MYR.
  • Communications with the mahkota888 support team: emails, live chat records, complaints, and feedback.

b) Automatically Collected Data

  • Technical data: IP address, browser type and version, operating system, device identifier.
  • Usage data: pages visited, time of visit, navigation patterns within the platform.
  • Gaming data: betting history, games played, session duration, total wins and losses.
  • Cookie data: session cookies, preference cookies, and analytics cookies that help us understand how the platform is used.

3How We Use Your Personal Data

mahkota888 uses your personal data solely for the following purposes:

  • Service provision: create and manage your account, process deposits and withdrawals in MYR via Malaysian payment methods, and settle bets and gaming transactions.
  • Identity verification: verifies that you meet the minimum age requirement of 18 years and confirms your identity for KYC and AML compliance purposes.
  • Account security: detect and prevent unauthorised access, fraudulent activity, and abuse of the mahkota888 platform.
  • Responsible gaming: monitors gameplay patterns to identify signs of problem gambling and provide early support to members who may need it.
  • Customer support: answers enquiries, resolves complaints, and provides technical assistance to mahkota888 members.
  • Legal compliance: fulfil reporting obligations to Malaysian authorities in relation to AML requirements and other applicable legal obligations.
  • Platform improvement: analyses usage patterns on an aggregate basis (not at an individual level) to improve the user experience and develop new mahkota888 features.
  • Marketing communications: sends promotional offers, bonus information, and the latest updates to members who have opted in to receive such communications — you may unsubscribe at any time.

Principle of Data Minimisation: mahkota888 only processes your personal data to the extent necessary to fulfil the stated purposes. We do not process your data for purposes that are inconsistent with the original reason for collection without first obtaining your consent.


4Legal Basis for Data Processing

mahkota888 processes your personal data on valid legal bases under Malaysia's PDPA, including:

  • Consent: you provided explicit consent during account registration, or additional consent for specific purposes such as marketing communications.
  • Contract performance: processing is necessary to fulfil the service agreement between you and mahkota888, including the processing of financial transactions.
  • Legal obligations: processing is necessary to fulfil mahkota888's legal obligations, including AML compliance and KYC requirements.
  • Legitimate interests: processing is necessary for mahkota888's legitimate interests, such as fraud prevention, platform security, and service improvement, provided these interests do not override your privacy rights.

5Data Sharing & Disclosure

mahkota888 does not sell, rent, or disclose your personal data to third parties for marketing purposes. However, there are limited situations in which we may need to share data with certain parties:

  • Service providers: third parties who assist us in providing our services, such as Malaysian e-wallet payment processors (Touch 'n Go, GrabPay, DuitNow), technical infrastructure providers, and KYC service providers. All these vendors are bound by strict data protection agreements and may only use your data for the purposes we specify.
  • Legal authorities: when required by Malaysian law, a court order, or a legitimate request from a relevant law enforcement agency.
  • Protection of mahkota888's rights: in cases of fraud, breach of terms, or legal action involving misuse of our platform.

In all of the above cases, mahkota888 ensures that only the minimum necessary data is disclosed, and that all disclosures are made in accordance with legal requirements and appropriate security safeguards.


6Data Storage & Security

mahkota888 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, alteration, or disclosure:

  • 256-bit SSL encryption for all data transfers between your device and our servers.
  • At-rest encryption for all sensitive data stored in our databases.
  • Role-based access controls — only specifically authorised mahkota888 staff may access members' personal data, and every access is logged.
  • Continuous 24/7 security monitoring and intrusion detection systems.
  • Regular security assessments and independent penetration testing.
  • A clear security incident response plan in the event of a data breach.

Your personal data is retained for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Typically, active account data is kept for the duration the account remains active plus 7 years for financial record-keeping and AML compliance purposes. After this period, data will be securely deleted or anonymised.

Data Breach: In the event of a data breach that affects your privacy rights, mahkota888 will notify you and the relevant authorities within the timeframe prescribed by Malaysian law, and will take immediate action to contain and remediate the situation.


7Cookies & Tracking Technologies

mahkota888 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

  • Essential Cookies: required for core platform functions such as login verification, session security, and language preferences. These cookies cannot be disabled as they are essential for the platform to operate.
  • Analytics Cookies: helps us understand how members use mahkota888 — which pages are most visited, how long sessions last, and where technical issues occur. This data is used in aggregate form for platform improvements.
  • Preference Cookies: stores your personal preferences — such as your preferred language and display settings — so you don't have to reconfigure them every time you log in.

You can manage cookies through your browser settings. However, disabling essential cookies may affect the functionality of the platform. mahkota888. For more information on managing cookies, refer to your browser's help documentation.


8Your Rights Under Malaysia's PDPA

As a data subject under Malaysia's PDPA, you have the following rights regarding your personal data held by mahkota888:

  • Right of Access: you have the right to request a copy of the personal data we hold about you.
  • Right to Rectification: you have the right to request the correction of any personal data that is inaccurate or incomplete.
  • Right to Restriction of Processing: under certain circumstances, you may request that we restrict the way we process your data.
  • Right to Object: You can object to the processing of your personal data for direct marketing purposes at any time.
  • Right to Withdraw Consent: where processing is based on your consent, you may withdraw that consent at any time without affecting the validity of any processing carried out prior to the withdrawal.
  • Right to Complain: you have the right to lodge a complaint with Malaysia's data protection authority if you believe your privacy rights have been violated.

To exercise any of the above rights, please contact us at support@mahkota888.best with a clear description of your request. mahkota888 will respond within 21 working days. In some cases, we may need to verify your identity before processing the request to ensure the security of your data.


9Children's Data Protection

mahkota888 is a platform intended for adults aged 18 and above only. We do not knowingly collect personal data from individuals under the age of 18. If you are a parent or guardian and believe your underage child has provided personal data to our platform, please contact us immediately at support@mahkota888.best.

Upon receiving such notification, mahkota888 will take immediate steps to verify and delete the relevant data if confirmed to belong to a minor, and will close the account in accordance with our internal procedures.

Child Protection: mahkota888 employs multiple mechanisms to prevent underage registration, including Malaysian phone number verification, the KYC process, and active monitoring. If you suspect any misuse, please contact us immediately.


10Amendments to This Privacy Policy

mahkota888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the technologies we use. Any material amendments will be communicated to members via an in-platform notice or email at least 14 days before the changes take effect, unless an amendment is required immediately for security or legal reasons.

The "Updated" date at the top of this page indicates when this Policy was last revised. Continued use of the platform mahkota888 after any amendments take effect constitutes your acceptance of the latest version of this Policy. We encourage you to review this page periodically.


11Contact Us About Privacy

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by mahkota888, please get in touch with our team:

  • Email: support@mahkota888.best (please state "Privacy Enquiry" in the subject line)
  • Live Chat: Available 24/7 directly from the mahkota888 platform
  • Response Time: We aim to respond within 5 business days for general privacy enquiries and within 21 business days for formal data subject rights requests.

This Privacy Policy should be read together with Terms & Conditions and page Responsible Gaming mahkota888, all of which together form the complete agreement between you and our platform.

Your Rights
Your Privacy Rights as a mahkota888 Member

Under Malaysia's PDPA, you have clearly defined rights regarding your personal data. mahkota888 respects and facilitates the exercise of all these rights.

Right of Access

Request a copy of all personal data mahkota888 holds about you. We will provide a full report in a readable format within 21 business days of your request.

Right to Rectification

If the data we hold about you in our systems is inaccurate or out of date, you have the right to request a correction. Some information can be updated directly by you through your account settings.

Right to Erasure

Under certain circumstances, you may request that mahkota888 delete your personal data. This right is subject to legal record-keeping obligations, such as the 7-year AML retention requirement.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time, without providing a reason. mahkota888 will action this request immediately.

Right to Withdraw Consent

If data processing is based on your consent, you may withdraw that consent at any time through your mahkota888 account settings or by contacting our support team.

Right to Complain

If you believe mahkota888 has not handled your data in accordance with the PDPA, you have the right to lodge a formal complaint with Malaysia's Personal Data Protection Commissioner.

Security & Trust
Technical Safeguards That Protect Your Data at mahkota888

The security technologies and practices we have in place to keep your data safe at all times.

SSL 256-bit Transit Encryption
Encryption At-Rest Retained Data
PDPA Compliant MY Law
Active Firewall Network Protection
No Data Sales Privacy Assured
Access Control Minimum Access

Mahkota888 Privacy Policy — What It Means for You as a Malaysia Member

When you register an account on any online platform, you automatically entrust a portion of your personal information to them. At mahkota888, we do not take this trust lightly. This Privacy Policy is more than a legal document to be complied with — it is an honest account of what we do with your data and why. We have written it in plain language that anyone can understand, free from confusing legal jargon.

Imagine when you register an account mahkota888 — you provide your name, Malaysian phone number, and email address. When you make your first deposit via Touch 'n Go eWallet or GrabPay, we record that transaction information. When you play live baccarat or place a bet on a Malaysia Super League match, our system logs your gaming activity. All of this data serves a purpose — managing your account, processing MYR transactions, meeting AML legal requirements, and monitoring for any suspicious activity in your account.

The question most users are concerned about is: "Does mahkota888 sell my data to advertising companies?" The answer is no — never has, never will. This is not just a marketing statement; it is an operational policy enforced across all our staff and service providers. Your Malaysian phone number will never be sold to third-party companies for marketing purposes. Your email will not be shared with competitors or any other companies. Your financial transaction data in MYR is among the most protected information in our systems.

One thing many people are unaware of is their rights under Malaysia's PDPA. As a Malaysian citizen or resident, you have the legal right to know what data is held about you, to correct inaccurate data, and in certain circumstances to request its deletion. mahkota888 respects and facilitates the exercise of all these rights. If you'd like to know what data we hold about you, simply email support@mahkota888.best — we will provide a report within the timeframe required by law.

On the topic of cookies — yes, mahkota888 uses cookies, as almost every modern website does. Session cookies are necessary to keep you logged in while you play. Analytics cookies help us understand which parts of the platform are used most frequently and where players encounter issues — all to improve your experience. You can manage cookies through your browser settings, though disabling essential cookies may affect your login and gameplay session functionality.

From a technical security standpoint, mahkota888 implements 256-bit SSL encryption for all data transmitted between your device and our servers — the same standard used by Maybank2u and CIMB Clicks for online banking transactions. Data stored in our databases is also encrypted. Access to member data within our organisation is restricted to staff who require it to perform their duties, and every instance of access is recorded in an audit log. This isn't simply best practice — it is an internal requirement that we enforce rigorously.

Finally, we want to emphasise that this Privacy Policy is a living document — it will be updated whenever there are changes to Malaysian law, the technologies we use, or our practices. Whenever a significant change is made, we will notify you via an in-platform notice or email at least 14 days before it takes effect. mahkota888 believes that transparency is the foundation of trust — and your trust is something we will never put at risk.

Contact Us for Privacy Enquiries

For any enquiries regarding this Privacy Policy or your rights under Malaysia's PDPA, please contact us at support@mahkota888.best. This Policy should be read together with Terms & Conditions and page Responsible Gaming mahkota888.

Frequently Asked Questions
Frequently Asked Questions About Privacy at mahkota888

Straightforward answers to the most frequently asked questions about personal data handling at mahkota888.

No. mahkota888 does not sell, rent, or share your personal data with third parties for marketing or commercial purposes. We only share data with service providers who help us deliver our services — such as Malaysian e-wallet processors (Touch 'n Go, GrabPay, DuitNow) — and only to the extent necessary. These providers are bound by strict data protection agreements. Where required by Malaysian law, we may be obligated to disclose data to the relevant authorities.

To request a copy of your personal data, send an email to support@mahkota888.best with the subject line "Data Access Request", along with your account number and registered Malaysian phone number. We may need to verify your identity before processing the request to ensure the security of your data. Once your identity is confirmed, we will prepare your data report within 21 working days in a readable format.

After an account is closed, mahkota888 is required to retain certain data for a specified period in accordance with Malaysian legal requirements. Financial records and KYC information are generally kept for 7 years for anti-money laundering (AML) compliance purposes — this is a legal obligation we cannot waive. Once the mandatory retention period has elapsed, your data will be securely deleted or anonymised so that it can no longer be linked to your identity.

Absolutely. You can unsubscribe from mahkota888 promotional emails in several ways: click the "Unsubscribe" link found at the bottom of any of our promotional emails, update your communication preferences through your account settings, or contact our support team at support@mahkota888.best with a request to be removed from our marketing list. Requests will be processed within 5 working days. Please note that opting out of marketing will not stop important transactional emails such as deposit confirmations, withdrawal notifications, and account security alerts.

Yes. All financial transaction information at mahkota888 — including deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX Maybank2u, CIMB Clicks, ShopeePay, or Boost — is protected with SSL 256-bit encryption in transit and additional encryption at rest. We do not store full credit card numbers or complete banking details — only the information necessary to process transactions. All payment processors we work with are legitimate Malaysian local providers that meet stringent payment security standards.

In the event of a data breach affecting your personal information, mahkota888 is committed to notifying you and the relevant authorities within the timeframe prescribed by Malaysian law. The notification will detail the type of data involved, the steps we have taken to contain the situation, and the measures you can take to protect yourself. We will also provide assistance to any affected members. While we implement industry-leading security measures, we believe that full transparency with our members in any situation that arises is our responsibility.
256-bit
SSL Encryption
PDPA
Full Compliance
0
Sale of Data to Third Parties
24/7
Security Monitoring
A Platform That Respects Your Privacy

Your Data is Safe at mahkota888 — Register with Confidence

Over 250,000 Malaysian members trust mahkota888 with their personal information. Secure platform, PDPA compliant, 256-bit SSL encryption — your privacy is our priority.

SSL 256-bit · PDPA Compliant · No Data Sales · 24/7 Privacy Support

Bahasa Melayu