Privacy Policy —
How mtown888 Protects Your Data
Your privacy is fundamental to how mtown888 operates. This Privacy Policy explains what personal data we collect, why we collect it, how it is processed and stored, who it is shared with, and what rights you have as a data subject. We are committed to handling your information with transparency and care.
Our Privacy Commitments
What We Pledge to Every mtown888 Player
Six core privacy principles that govern everything we do with your data.
Data Collected Only as Needed
mtown888 applies a data-minimisation principle. We collect only the personal information that is genuinely necessary for the purposes described in this policy — no more. We do not harvest data speculatively or for future undisclosed uses.
We Never Sell Your Data
Your personal data is not sold, rented, or traded to third-party advertisers, data brokers, or marketing companies. Full stop. Any sharing with third parties is limited to operational service providers operating under binding confidentiality obligations.
Industry-Standard Encryption
All data transmissions between your device and mtown888 are protected by TLS 1.3 encryption. Stored personal data — including identity documents, financial records, and account credentials — is encrypted at rest using AES-256 standard encryption.
Your Rights Are Respected
You have meaningful rights over your personal data, including the right to access, correct, restrict processing, and request erasure of your information (subject to legal retention obligations). We honour all valid data subject requests within the timelines described in this policy.
Defined Retention Periods
We do not retain personal data indefinitely. Each category of data has a defined retention period aligned to its purpose and our legal obligations. When data is no longer required, it is securely deleted or anonymised in line with our data retention schedule.
Transparent Policy Updates
If we make material changes to this Privacy Policy, we will notify you via the email address on your account or through a prominent in-platform notice before the changes take effect. Continued use of mtown888 after notification constitutes acceptance of the updated policy.
1 Introduction
This Privacy Policy ("Policy") is issued by mtown888 ("we", "us", "our", or "the Platform"), the online casino and sports betting platform operated at mtown888.cam. It describes how we collect, use, store, share, and protect personal data in connection with the services we provide to players and visitors in Malaysia and other jurisdictions where access is permitted.
By registering an account on mtown888, making a deposit, placing a wager, or simply browsing the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent to this Policy, you must discontinue use of the Platform immediately.
This Policy applies to all personal data collected through mtown888.cam, our customer support channels (including live chat and email), and any direct communications between you and mtown888. It does not apply to third-party websites, payment processors, or services that are accessible via links from the Platform.
Plain-language summary: This Policy tells you exactly what data we collect, why we need it, and how we keep it safe. We recommend reading it alongside our Terms & Conditions. If you have questions at any point, our support team is available 24/7 via live chat in English, Bahasa Melayu, and Mandarin.
2 Definitions
For the purposes of this Privacy Policy, the following terms carry the meanings defined below:
| Term | Meaning |
|---|---|
| Personal Data | Any information that relates to an identified or identifiable living individual, directly or indirectly, including name, identification number, location data, and online identifiers. |
| Processing | Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, restriction, or deletion. |
| Data Subject | The identifiable individual to whom Personal Data relates — in most cases, you as a registered Player or visitor to the Platform. |
| Data Controller | mtown888 — the entity that determines the purposes and means of processing Personal Data collected through the Platform. |
| Data Processor | A third-party service provider that processes Personal Data on behalf of mtown888, under binding contractual and confidentiality obligations. |
| Consent | A freely given, specific, informed, and unambiguous indication of the Data Subject's agreement to the processing of their Personal Data for specified purposes. |
| KYC | Know Your Customer — the identity and address verification process conducted prior to withdrawal and as otherwise required for compliance purposes. |
| Cookies | Small text files placed on your device by the Platform's web server that store session and preference information to enhance your user experience. |
3 Data We Collect
mtown888 collects Personal Data through three primary channels: data you provide directly, data generated automatically through your use of the Platform, and data received from third-party verification services. The categories and specific data points collected are described below.
3.1 Data You Provide Directly
- Registration data: Full name, date of birth, nationality, email address, mobile phone number, and chosen username and password.
- KYC documents: Copy of Malaysian National Identity Card (MyKad / NRIC), Driver's Licence, or Passport; proof of residential address (utility bill or bank statement); and a selfie photograph holding your identity document.
- Financial information: Payment method details provided during deposit and withdrawal processes — including FPX bank account identifiers, DuitNow registered numbers, e-wallet account references (Touch 'n Go, Boost, GrabPay), and cryptocurrency wallet addresses.
- Support communications: The content of messages and attachments you send to our support team via live chat, email, or WhatsApp.
- Responsible gambling preferences: Deposit limit settings, session time preferences, cooling-off periods, and self-exclusion requests you submit through your account settings.
3.2 Data Collected Automatically
- Device and technical data: IP address, device type and model, operating system version, browser type and version, screen resolution, and language settings.
- Usage and activity data: Pages visited on the Platform, games played, bets placed (including stake amounts, markets selected, and outcomes), session duration, login timestamps, and navigation patterns.
- Transaction logs: Complete records of all deposit and withdrawal transactions, including amounts in MYR, payment method used, timestamps, and processing status.
- Cookie and tracking data: Session cookies, preference cookies, analytics identifiers, and fraud prevention signals. See Section 10 for full cookie details.
3.3 Data Received from Third Parties
- Identity verification providers: Results of automated document verification checks, facial recognition matching scores, and database screening outcomes (including sanction lists and politically exposed person checks).
- Payment processors: Transaction confirmation data returned by FPX, DuitNow, Maybank, CIMB, Public Bank, and other payment service providers confirming successful fund transfers.
- Fraud and risk intelligence services: Device fingerprint data, velocity signals, and risk scores provided by fraud detection technology partners.
4 How We Use Your Data
The table below summarises the primary purposes for which mtown888 processes Personal Data and the data categories involved in each use case.
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Registration data, device data, login activity |
| Identity verification (KYC) | Identity documents, selfie, third-party verification results |
| Payment processing — deposits and withdrawals | Financial information, transaction logs, payment processor data |
| Fraud detection and prevention | IP address, device data, transaction logs, fraud intelligence data |
| Responsible gambling monitoring and tools | Usage data, transaction history, responsible gambling preferences |
| Customer support and dispute resolution | Support communications, account data, transaction logs |
| Regulatory compliance and AML obligations | KYC documents, transaction logs, screening results |
| Platform analytics and service improvement | Usage data, cookie data, device data (aggregated/anonymised where possible) |
| Promotional communications (where consented) | Email address, name, game preferences, transaction history |
| Legal obligations and law enforcement responses | Any data required by lawful authority request |
mtown888 does not process Personal Data for automated decision-making that produces significant legal effects without human review, except in the context of automated fraud detection flags — which are always followed by a manual review before any account action is taken.
5 Legal Basis for Processing
mtown888 processes Personal Data on the following legal bases as applicable to each processing activity:
- Contractual necessity: Processing required to perform the contract we have with you — namely, the provision of online casino and sports betting services under our Terms & Conditions. This covers account management, payment processing, and core game operations.
- Legal obligation: Processing necessary to comply with applicable law, including anti-money laundering obligations, KYC requirements, and lawful authority requests. mtown888 is obligated to retain certain transaction records and identity documentation for mandated periods regardless of any deletion request.
- Legitimate interests: Processing for purposes that serve mtown888's legitimate business interests in a manner that is proportionate and does not override your fundamental rights. This includes fraud detection, security monitoring, and platform analytics.
- Consent: For processing activities where we rely on your consent — primarily the sending of promotional communications and the use of non-essential cookies — you may withdraw consent at any time by adjusting your account settings or contacting our support team. Withdrawal of consent will not affect the lawfulness of processing carried out prior to withdrawal.
6 Data Sharing & Disclosure
mtown888 does not sell, rent, or trade your Personal Data. We share data only in the following limited and necessary circumstances:
6.1 Service Providers (Data Processors)
We engage trusted third-party service providers to assist in operating the Platform. These providers include payment processors (FPX, DuitNow, Maybank, CIMB, Public Bank, Touch 'n Go eWallet, Boost, GrabPay), identity verification technology providers, cloud hosting and infrastructure providers, and customer support software vendors. All service providers are bound by written data processing agreements that prohibit them from using your data for any purpose other than providing the contracted service to mtown888.
6.2 Game Content Providers
Some game titles available on mtown888 are supplied by third-party software studios. These providers may receive anonymised or pseudonymised session data for the purpose of game performance monitoring, RTP verification, and regulatory compliance. They do not receive your full name, identity documents, or financial account details.
6.3 Legal and Regulatory Authorities
mtown888 will disclose Personal Data to law enforcement agencies, regulatory bodies, or other governmental authorities where required to do so by applicable law, court order, or regulatory direction. We will endeavour to notify the affected Player of any such disclosure where legally permitted to do so.
6.4 Business Transfers
In the event of a merger, acquisition, asset sale, or restructuring of the mtown888 business, Personal Data held by mtown888 may be transferred to the acquiring entity as part of that transaction. Affected Players will be notified of any change in data controller identity as part of any such transition.
What we never do: We never sell your data to advertisers. We never share your full identity documents with game studios. We never provide your payment account details to any party beyond the payment processor required to execute your specific transaction.
7 International Data Transfers
Some of mtown888's service providers operate data centres or support functions in jurisdictions outside Malaysia. Where Personal Data is transferred internationally, mtown888 ensures appropriate safeguards are in place, including contractual clauses that require the recipient to apply data protection standards equivalent to those described in this Policy.
Personal Data transferred internationally remains subject to all applicable rights and protections described in this Policy regardless of where it is physically stored or processed. If you have concerns about international data transfers, please contact us via the details in Section 15.
8 Data Retention
mtown888 retains Personal Data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention principles apply:
- Active account data: Retained for the duration of your registered account plus a minimum period following account closure, as required for dispute resolution and legal compliance purposes.
- KYC and identity documents: Retained for a minimum of five (5) years following account closure, in line with anti-money laundering regulatory requirements applicable to online gaming operators.
- Transaction and financial records: Retained for a minimum of five (5) years following each transaction, consistent with financial record-keeping obligations.
- Support communications: Retained for a period of three (3) years following the resolution of the relevant support matter, unless the communication relates to a formal dispute which extends the retention period accordingly.
- Marketing preferences and consents: Retained until you withdraw consent or for a period not exceeding three (3) years from the last interaction, whichever comes first.
- Cookie and analytics data: Retained in accordance with the specific retention period for each cookie category, as detailed in Section 10.
Upon expiry of the applicable retention period, Personal Data is securely deleted from mtown888's active systems and, where applicable, anonymised for aggregated reporting purposes that do not identify any individual.
9 Data Security
mtown888 implements technical and organisational security measures designed to protect Personal Data against unauthorised access, disclosure, alteration, loss, and destruction. These measures include, but are not limited to:
- TLS 1.3 encryption for all data in transit between your device and mtown888 servers.
- AES-256 encryption for sensitive data stored at rest, including identity documents and financial records.
- Two-factor authentication (2FA) available for all Player accounts.
- Strict access controls limiting data access to authorised personnel on a need-to-know basis.
- Regular security audits, vulnerability assessments, and penetration testing conducted by independent security professionals.
- 24/7 security monitoring and automated anomaly detection systems.
- Formal incident response procedures with defined escalation paths and notification obligations.
In the event of a data security incident that is likely to result in a high risk to your rights and freedoms, mtown888 will notify affected individuals promptly following discovery of the incident, in accordance with applicable notification requirements.
Your security responsibilities: While mtown888 maintains robust security infrastructure, you are responsible for keeping your account credentials confidential. Do not share your password or OTP codes with anyone — including individuals claiming to be mtown888 staff. Our support agents will never ask for your password.
10 Cookies & Tracking Technologies
mtown888 uses cookies and similar tracking technologies (including web beacons and local storage) to operate the Platform, enhance your experience, and support analytics and security functions. The categories of cookies we use are described below:
- Strictly necessary cookies: These cookies are essential for the Platform to function. They manage user sessions, remember login state, maintain shopping cart equivalents, and enable security features such as CSRF protection. These cookies cannot be disabled without rendering the Platform non-functional.
- Functional cookies: These cookies remember your preferences — such as language settings, odds format selection, and display options — to personalise your Platform experience. They persist for the duration of your session or up to 12 months where preference persistence is required.
- Analytics cookies: These cookies help us understand how players navigate and use the Platform so we can improve it. Analytics data is aggregated and anonymised where possible. Retention: up to 24 months.
- Fraud prevention cookies: These cookies support our fraud detection system by creating a device fingerprint that helps identify unusual account activity patterns. They are considered a security necessity and cannot be disabled.
- Marketing cookies: With your consent, we may use cookies to track promotional campaign effectiveness (e.g., which landing page you visited before registering). We do not use marketing cookies to build profiles for sale to third-party advertisers.
You may manage your cookie preferences through your browser settings. Note that disabling certain cookie categories may affect the functionality of the Platform. For more granular control, cookie preference settings are available within your mtown888 account settings panel.
11 Your Data Rights
As a data subject, you have the following rights in relation to the Personal Data mtown888 holds about you. To exercise any of these rights, please contact our support team using the details in Section 15. We will acknowledge your request within three (3) business days and respond substantively within thirty (30) days.
Right of Access
Request a copy of the Personal Data mtown888 holds about you, along with information about how it is being used.
Right to Rectification
Request correction of inaccurate or incomplete Personal Data. Some corrections may require re-verification of identity.
Right to Erasure
Request deletion of your Personal Data where it is no longer necessary, or where you withdraw consent. Subject to legal retention obligations that may override this right.
Right to Restrict Processing
Request that we limit how we use your data in specific circumstances — for example, while the accuracy of data you have disputed is being verified.
Right to Data Portability
Request a machine-readable copy of the Personal Data you have provided to mtown888, where processing is based on consent or contractual necessity.
Right to Object
Object to processing of your Personal Data based on legitimate interests or for direct marketing purposes. Marketing objections are honoured immediately.
Please note that some rights are not absolute and may be limited by our legal obligations — particularly the obligation to retain KYC and transaction records for anti-money laundering compliance. Where a right cannot be fulfilled in full, we will explain the reason clearly in our response.
12 Protection of Minors
mtown888 is strictly an adults-only platform. We do not knowingly collect Personal Data from any individual under the age of 21 years. Our registration process includes age verification questions and our KYC process requires submission of identity documentation confirming date of birth.
If we become aware that Personal Data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account. Any funds deposited to such an account will be returned to the source payment method after verification.
If you believe that a person under 21 has registered on mtown888, please contact us immediately at [email protected] so that we can investigate and act promptly.
13 Third-Party Links
The mtown888 Platform does not include links to third-party websites as part of its standard navigation or content. However, if you access mtown888 through a third-party affiliate or referral link, please be aware that those third-party sites operate under their own privacy policies for which mtown888 accepts no responsibility.
Any payment services accessed during deposit or withdrawal transactions operate under the privacy practices of the respective payment provider (e.g., Touch 'n Go eWallet, Boost, Maybank). mtown888 has no control over and accepts no liability for the privacy practices of those providers. We encourage you to review the privacy policy of any payment service you use.
14 Policy Amendments
mtown888 reserves the right to update this Privacy Policy from time to time to reflect changes in law, regulatory guidance, our business operations, or our data processing practices. When we make material changes, we will notify registered Players via the email address on file or through a prominent in-platform notification, provided at least seven (7) days before the changes take effect.
The "Last Updated" date at the top of this page reflects the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the mtown888 Platform following notification of an update constitutes your acceptance of the revised Policy.
Where any amendment materially and adversely affects your rights as a data subject and you do not wish to accept the amended terms, you may close your account by contacting our support team. Residual obligations relating to data that must be retained by law will continue to apply after account closure.
15 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data by mtown888, please contact us through the following channels. We handle privacy-related correspondence with the same priority as formal support queries.
- Live Chat: Available 24/7 on the Platform with average response under 5 minutes. Agents available in English, Bahasa Melayu, and Mandarin.
- Email: [email protected] — formal data subject requests and privacy inquiries are responded to within 3 business days of acknowledgement, with full substantive response within 30 days.
When submitting a formal data subject rights request, please include your registered account email address or username, the nature of your request, and any relevant details that will help us verify your identity and process the request accurately. We may ask for additional verification before fulfilling certain requests to ensure we do not inadvertently disclose data to an unauthorised party.
mtown888 serves players across Malaysia including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam. Our support team is committed to responding to all data-related queries in a timely, professional, and transparent manner.
Your Data Is Safe with mtown888
We take privacy seriously so you can focus on what matters — enjoying the games, the odds, and the wins. Start your mtown888 journey today.
For players aged 21 and above only. · Responsible Gambling Policy · Terms & Conditions