Privacy Policy — meta888

Introduction

This Privacy Policy ("Policy") describes how meta888 ("meta888", "we", "us", "our"), the operator of the platform at https://meta888.cam ("Platform"), processes personal data relating to individuals who visit, register with, or otherwise use the Platform ("User", "you", "your").

meta888 is an English-language gaming information platform designed for Malaysian adults. We recognise that privacy matters and that Malaysian users have legitimate expectations regarding the responsible handling of their personal information. This Policy is published in English and the English version governs in all circumstances.

By registering an Account or continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood its contents. If you do not accept any provision of this Policy, please cease using the Platform and contact support to request Account closure.

This Policy should be read together with the meta888 Terms & Conditions, which govern the overall relationship between you and meta888.

Definitions

The following terms carry the meanings set out below throughout this Policy.

• "Personal Data" means any information that identifies or could reasonably identify a living individual, directly or in combination with other data.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure or destruction.
• "Data Controller" means meta888, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of meta888 under documented instructions.
• "Consent" means a freely given, specific, informed and unambiguous indication of agreement to the processing of Personal Data for a stated purpose.
• "KYC" means Know Your Customer — the identity and address verification procedures applied to Account holders.
• "PDPA" refers to the Personal Data Protection Act 2010 (Malaysia), the primary data-protection legislation applicable to the processing of personal data in commercial transactions in Malaysia.
• "Platform" means the website, mobile interface and all associated digital services operating under the meta888 brand at https://meta888.cam.

Data We Collect

meta888 collects Personal Data in several categories depending on how you interact with the Platform. The table below summarises the main categories, examples and the primary reason for collection.

How We Use Your Data

meta888 processes Personal Data for the following documented purposes. No purpose outside this list is pursued without additional notice and, where required, your consent.

• Account administration: Creating, maintaining, verifying and closing Accounts; enforcing the Terms & Conditions; communicating service-related updates.
• Payment processing: Facilitating deposits and withdrawals via supported Malaysian payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX and direct bank transfer; verifying payment instrument ownership.
• KYC and age verification: Confirming that users meet the 21+ minimum age requirement; verifying identity and address to comply with applicable anti-money-laundering and counter-terrorism-financing obligations.
• Fraud and security: Detecting, investigating and preventing fraudulent transactions, account takeovers and other security incidents; maintaining Platform integrity.
• Responsible gambling: Monitoring account activity to identify patterns associated with problem gambling; applying deposit limits, loss limits, session reminders and self-exclusion tools as required or requested.
• Customer support: Responding to enquiries, complaints and disputes; improving support quality through anonymised analysis of case records.
• Legal compliance: Meeting obligations under applicable law including the PDPA (Malaysia), anti-money-laundering regulations and any licensing conditions; responding to lawful requests from competent authorities.
• Platform improvement: Analysing aggregated usage patterns to improve content, payment flows and user experience. Analysis at this level uses anonymised or pseudonymised data wherever possible.

Legal Bases for Processing

meta888 processes Personal Data under one or more of the following legal bases, depending on the activity.

• Contractual necessity: Processing required to deliver the services you have requested as an Account holder — including payment processing, KYC verification and game access — is necessary for the performance of the contract between you and meta888.
• Legal obligation: Certain processing — including identity verification, AML record-keeping and responses to regulatory requests — is required by applicable law and carried out accordingly.
• Legitimate interests: Security monitoring, fraud prevention, Platform performance analysis and responsible-gambling oversight are conducted on the basis of meta888's legitimate interests, subject to those interests not overriding your fundamental rights.
• Consent: Where processing is not required for contractual or legal reasons, and where not covered by legitimate interests, meta888 will seek your explicit consent. You may withdraw consent at any time by contacting support, although withdrawal will not affect processing carried out before the withdrawal.

Data Sharing & Disclosure

meta888 does not sell, rent or trade Personal Data to third parties. Data may be shared in the following circumstances only.

• Payment processors: Financial data is shared with payment partners — including Malaysian e-wallet operators, FPX network participants, Maybank, CIMB, Public Bank, Hong Leong and approved cryptocurrency settlement providers — solely to facilitate account transactions.
• KYC and identity verification providers: Identity and verification documents are transmitted to authorised verification service providers under documented data-processing agreements. These providers are prohibited from using your data for any purpose other than verification on meta888's behalf.
• Legal and regulatory authorities: Personal Data may be disclosed to law enforcement, regulatory bodies or courts where required by a valid legal process, court order or statutory obligation. meta888 will, where legally permitted, notify you of any such disclosure.
• Group companies and service partners: Where meta888 operates through or alongside affiliated entities or contracted technology service providers, data may be shared on a need-to-know basis under appropriate data-protection agreements.
• Business transfers: In the event of a merger, acquisition or sale of assets, Personal Data may be transferred to the successor entity. Users will be notified before Personal Data becomes subject to a materially different privacy policy as a result.

Cookies & Tracking Technologies

The Platform may use cookies and similar client-side storage technologies to support session management, security, authentication and performance analysis. The following categories may be in use.

• Strictly necessary cookies: Required for core Platform functions including login session management, CSRF protection and secure payment flow continuity. These cannot be disabled without impairing basic Platform functionality.
• Performance and analytics cookies: Used to collect aggregated and anonymised data about how users navigate the Platform, allowing the team to identify errors and improve content structure. Individual users are not identifiable from this data.
• Functional cookies: Store user preferences such as language settings, previously selected payment methods and responsible-gambling limit choices to improve convenience across sessions.

Most modern browsers provide controls to view, limit or delete cookies. Adjusting these settings may affect certain Platform features. meta888 does not deploy third-party behavioural advertising cookies.

Data Retention

Personal Data is retained only for as long as required to fulfil the purposes for which it was collected, or to comply with applicable legal obligations, whichever is longer. The following general retention periods apply as a guide.

• Account data: Retained for the duration of the Account and for a period of at least five years following Account closure to satisfy AML record-keeping requirements.
• Transaction records: Deposit, withdrawal and bet records in MYR are retained for a minimum of six years to meet financial record-keeping obligations.
• KYC documents: Identity and verification documents are retained for the period required by applicable KYC and AML regulations, typically five years from the end of the business relationship.
• Support communications: Customer service records are retained for up to three years to support quality assurance and dispute resolution.
• Technical and log data: Server logs and technical session data are retained for up to 12 months for security monitoring and fraud investigation purposes.

When retention periods expire, data is securely deleted or irreversibly anonymised in accordance with meta888's internal data-lifecycle procedures.

Security Measures

meta888 implements technical and organisational security measures proportionate to the sensitivity of the Personal Data processed. Current measures include, but are not limited to, the following.

• HTTPS encryption for all data in transit between your device and the Platform.
• Encryption at rest for sensitive stored data including payment instrument references and identity documents.
• Role-based access controls limiting staff access to Personal Data to those with a documented operational need.
• Regular internal security reviews and vulnerability assessments of Platform infrastructure.
• Incident response procedures for the detection, containment and reporting of data security incidents.

International Data Transfers

meta888 is designed to serve Malaysian users and handles the majority of data processing within regional infrastructure. Where operational necessity requires Personal Data to be processed by service partners located outside Malaysia, meta888 ensures that appropriate safeguards are in place before any transfer occurs. Such safeguards may include contractual data-processing agreements, standard contractual clauses or reliance on jurisdictions that provide an equivalent level of data protection.

Users may request information about the specific safeguards applicable to any international transfer of their Personal Data by contacting support at the address set out in Section 15.

User Rights

Malaysian users and other individuals whose Personal Data is processed by meta888 hold the following rights. Requests may be submitted in writing to [email protected]. meta888 will acknowledge receipt within two business days and respond within 21 calendar days of receiving a valid, verified request.

• Right of access: You may request a copy of the Personal Data meta888 holds about you, together with information about how it is being used.
• Right of correction: You may request that inaccurate or incomplete Personal Data be corrected. For Account details, many fields can be updated directly through the Account settings area.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to erasure: You may request deletion of your Personal Data where it is no longer required for the purposes for which it was collected, subject to meta888's legal retention obligations. Where a legal or contractual obligation requires retention, meta888 will inform you of the applicable reason.
• Right to restrict processing: In certain circumstances, you may request that meta888 restrict the processing of your Personal Data while a correction or objection request is under review.
• Right to data portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request a copy of your data in a commonly used, machine-readable format.
• Right to object: You may object to processing carried out on the basis of meta888's legitimate interests. meta888 will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights.

Children & Minors

The Platform is strictly for users aged 21 years and above. meta888 does not knowingly collect Personal Data from individuals below the minimum age. If we become aware that Personal Data has been collected from a person who does not meet the age requirement, that data will be deleted promptly and the associated Account closed.

If you are a parent or guardian and believe your child has submitted Personal Data to meta888, please contact support immediately at [email protected] so that the matter can be investigated and resolved without delay.

Third-Party Links

The Platform may contain references to third-party payment service providers, including Malaysian financial institutions. Where such references involve navigating away from the Platform — for example, to complete a payment via a bank's own interface — you are subject to that third party's privacy policy and terms for the duration of that interaction. meta888 has no control over and accepts no responsibility for the privacy practices of third-party websites or applications.

This Policy applies exclusively to Personal Data processed by meta888 in connection with the Platform. It does not apply to data processing by payment partners, banks, telecommunications providers or any other third parties, even where their services are used in connection with a meta888 transaction.

Policy Amendments

meta888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, processing practices or Platform functionality. Material amendments will be communicated to registered Users by email to the address held on file, or by a prominent notice on the Platform, at least 14 days before the amendment takes effect where practicable.

The most current version of this Policy is always accessible on this page, with the effective date displayed at the top. Continued use of the Platform following the effective date of an amendment constitutes acceptance of the revised Policy. If you do not accept the amended Policy, please contact support to close your Account before the effective date.

Contact Us

For any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the meta888 data team using the details below. Support is available 24 hours a day, 7 days a week, Malaysia Time.

Email: [email protected] (plain text — this is not a clickable link)

When submitting a privacy request, please include your registered username, a clear description of your request and, where relevant, any transaction or Account reference. Do not include your full password, one-time passcode or complete payment instrument details in any support communication.