Mytown88 Privacy Policy – Malaysian Member Data Protection

Mytown88 is an online Sports Betting and casino platform serving the Malaysian market. We understand that member trust is our most valuable asset — and that trust begins with responsible, transparent management of personal data.

This mytown88 Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA), which governs how organisations in Malaysia may collect, process and store individuals' personal data. Every mytown88 member has the right to know what data we hold about them, how it is used and what options are available to manage that data.

On the mytown88 platform, personal data is collected during the registration process, whenever you make a deposit or withdrawal via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, when you use Sports Betting, live casino, virtual sports, or e-sports features, and when you interact with our customer support team. We only collect data that is strictly necessary for the purposes described in this document.

Mytown88 collects various types of personal data from registered members, depending on the level of platform usage and the relevant verification requirements. The following are the categories of data we may collect:

Registration & Identity Data:

• Full name as per Malaysian identity card (MyKad)
• National Identity Card (IC) number — for age and identity verification purposes
• An active Malaysian mobile phone number
• Email address (if provided)
• Date of birth — to verify compliance with the minimum age requirement of 18 years
• The username you chose during registration

Financial & Transaction Data:

• A full record of all deposits and withdrawals, including date, time, and amount in MYR (RM)
• Payment method details — including your Touch 'n Go account number, GrabPay ID, DuitNow information, or FPX account — are stored in encrypted format.
• Complete transaction history for periods specified under compliance requirements

Platform Activity Data:

• A complete record of all bets placed — including match, amount, odds, and outcome
• Live casino, Blackjack, virtual sports, and e-sports game history
• Login and logout timestamps
• Account preferences and settings you have configured

Technical Data:

• IP address of the device used to access mytown88
• Device type, operating system and browser version
• Cookie data collected to enhance the user experience — see Section 8
• General geolocation data (state/city) for security purposes — not precise GPS location

Mytown88 only uses member personal data for legitimate and necessary purposes. We will not use your data for any purpose not stated here without first obtaining your consent.

• Account Operations & Verification: Identity data is used to create and manage your mytown88 account, verify age eligibility, and ensure each individual holds only one active account.
• Payment Processing: Financial data is required to process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX, as well as withdrawals to the same payment methods. It also allows us to verify that all transactions are legitimate and free from fraudulent activity.
• Security & Fraud Prevention: Activity and technical data are used to detect and prevent unauthorised account access, identify suspicious betting patterns, and protect the integrity of the mytown88 platform.
• Legal Compliance: mytown88 may be required to retain and disclose certain data to the relevant Malaysian authorities if directed by law or a valid court order.
• Service Improvement: Platform usage data is analysed in aggregate — not at the individual level — to understand general usage patterns and improve the experience for all mytown88 members.
• Service Communications: Your phone number and email are used to send verification OTPs, transaction notifications, account security alerts and important policy updates. You can opt out of non-essential marketing communications through your account settings.
• Responsible Gaming: Betting activity records are used to monitor patterns that may indicate problem gambling, and to enforce self-imposed limits set by members themselves.

Mytown88 does not sell, rent or disclose members' personal data to any third party for marketing or commercial purposes. This is an unwavering policy with no exceptions. That said, there are a limited number of situations where mytown88 may share data with specific parties, and all such situations are transparently described below.

• Technical Service Providers: mytown88 works with trusted third-party service providers for technical infrastructure, including payment gateways that process Touch 'n Go, GrabPay, DuitNow and FPX transactions. These providers only receive the data necessary for their specific functions and are bound by strict confidentiality agreements with mytown88.
• Legal Requirements: mytown88 will disclose personal data where legally required by a court, tribunal or Malaysian government authority with valid jurisdiction. In such cases, mytown88 will endeavour to notify the affected member in advance where permitted by law.
• Fraud Prevention: Where there is strong evidence of fraud or illegal activity, mytown88 may share relevant information with Malaysian law enforcement authorities for investigation purposes.
• Business Transfers: Should mytown88 be involved in any future merger, acquisition or asset transfer, member data may be transferred as part of the business assets. Members will be notified in advance via in-platform notification and email before any such transfer takes place.

Mytown88 implements a range of technical and organisational security measures to protect members' personal data from unauthorised access, disclosure, alteration or destruction. Below is a summary of the key measures we have in place:

• 256-bit SSL Encryption: All data transmitted between your device and mytown88 servers is encrypted using 256-bit TLS/SSL protocol — the same standard used by Malaysia's leading banking institutions. This means your data remains unreadable even if intercepted in transit.
• Stored Data Encryption: Sensitive data stored in mytown88's databases — including payment account information and personal identification numbers — is encrypted at rest using industry-standard practices.
• Two-Factor Authentication (2FA): mytown88 offers 2FA via SMS OTP for account login. Members are strongly encouraged to enable this feature for an added layer of security.
• 24/7 Security Monitoring: mytown88's automated monitoring system runs around the clock to detect suspicious access patterns, repeated failed login attempts, and unusual account activity.
• Internal Access Controls: Only mytown88 staff with a legitimate business need are permitted to access member personal data. All such access is logged and audited on a regular basis.
• Regular Security Audits: mytown88 conducts regular independent security audits to identify and address any vulnerabilities in our infrastructure.

While mytown88 takes all reasonable steps to protect your data, no security system is entirely impenetrable. In the unlikely event of a data breach affecting members, mytown88 is committed to notifying affected members within a reasonable timeframe in accordance with Malaysia's PDPA requirements.

Mytown88 retains member personal data for as long as the account remains active and for the required period following account closure, in line with Malaysian legal requirements and legitimate business needs.

• Active account data is retained for as long as your mytown88 account remains active and in use.
• Financial transaction records — covering all deposits and withdrawals in MYR — are retained for a minimum of 7 years from the transaction date, in compliance with Malaysian legal requirements for financial record-keeping.
• Betting and game activity records are retained for a minimum of 3 years for audit and dispute resolution purposes.
• Technical logs such as IP address records are retained for 12 months for security purposes.
• After voluntary account closure, any personal data not subject to legal retention requirements will be deleted or anonymised within 90 days.

If you would like to know more about the specific retention periods for certain data categories, or wish to request deletion of data not subject to legal retention obligations, please contact the mytown88 support team at support@mytown88.click.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and mytown88's internal policies, you as a member hold the following rights over your personal data. mytown88 is committed to respecting and facilitating the exercise of these rights.

• Right of Access: You have the right to request a copy of all personal data that mytown88 holds about you. Submit your request by email to support@mytown88.click and we will provide the information within 14 business days.
• Right to Rectification: If you find that any personal data we hold about you is inaccurate or outdated, you have the right to request a correction. You can update basic information such as your phone number and email directly through your mytown88 account dashboard, or contact our support team for more complex corrections.
• Right to Erasure: You may request deletion of your personal data upon account closure, subject to applicable legal retention obligations. Data required for financial records or regulatory compliance cannot be removed.
• Right to Object: You have the right to object to the processing of your personal data for specific purposes, particularly for marketing communications. Objections may be submitted via your account settings or by emailing our support team.
• Right to Data Portability: You may request a copy of your personal data in a machine-readable format for the purpose of transferring it to another platform, to the extent that this is relevant and technically feasible.

Mytown88 uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small data files stored on your device when you visit the mytown88 website. They do not directly contain your personal information, but help us recognise your session and personalise your experience.

• Required Session Cookies: These cookies are essential to the core functionality of the mytown88 platform — including maintaining your login session, saving language preferences and ensuring deposit transactions run smoothly. Without them, the platform will not function correctly. These cookies cannot be disabled.
• Functional Cookies: These cookies store your preferences, such as favourite sports teams, frequently used betting limits, and display settings. This allows mytown88 to deliver a more personalised experience for you.
• Analytics Cookies: mytown88 uses aggregated analytics data to understand how members use the platform — which pages are visited most frequently, time spent in each section and the most popular features. This data is used to improve the platform and is not linked to any individual's identity.
• Security Cookies: These cookies help mytown88 distinguish legitimate login sessions from suspicious access attempts. They form part of the platform's overall security system.

You can manage cookie settings through your browser — most browsers allow you to view, delete or block cookies. However, disabling certain cookies may affect the functionality of the mytown88 platform. For guidance on managing cookies in popular browsers such as Chrome, Safari or Firefox, refer to the respective browser's help documentation.

Mytown88 is a betting platform intended solely for individuals aged 18 and above. We take child protection seriously and have a strict age verification process in place during account registration.

Mytown88 does not knowingly collect personal data from individuals under the age of 18. If we discover that personal data of someone under 18 has been collected through deceptive means, we will delete that data immediately and close the associated account.

• Age verification is conducted during registration via MyKad number and a verified phone number.
• Mytown88 reserves the right to request additional age verification documents at any time if there are concerns about a member's age.
• Members who know or suspect that someone under the age of 18 is using the mytown88 platform are encouraged to report this to our support team immediately.

Mytown88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, applicable legislation, or the services we offer to members in Malaysia.

Any amendments made will be reflected on this page with an updated "Last Updated" date. For significant changes — particularly those affecting member rights or how data is used — mytown88 will endeavour to notify members via email or in-platform notification at least 7 days before the changes take effect.

Continued use of the mytown88 platform after any amendment takes effect constitutes your acceptance of the revised policy. If you do not agree with the changes, please contact our support team to discuss your options, including account closure.

If you have any questions, concerns or requests regarding mytown88's Privacy Policy or how we handle your personal data, our support team is ready to help. We take every privacy enquiry seriously and strive to provide clear, thorough responses within a reasonable timeframe.

• Privacy Email: support@mytown88.click – please include "Privacy Enquiry" or "Personal Data" in your email subject line. We aim to respond to all privacy-related enquiries within 2 business days.
• Live Chat: Available directly within the mytown88 platform — log in to your account and click the support icon. Best for immediate or general enquiries.
• Operating Hours: The mytown88 support team operates 24 hours a day, 7 days a week, including Malaysian public holidays.

For formal requests regarding data rights under Malaysia's PDPA, please submit your request in writing via email, stating your full name, mytown88 account number and details of your request. We will verify your identity before processing it.