mytown88 Privacy Policy – How We Handle Your Data

1.Who We Are

This Privacy Policy is issued by mytown88 ("mytown88", "we", "us", "our"), the operator of the online gaming platform accessible at mytown88.win. mytown88 provides live casino, slots, and sports betting services to players in Malaysia and other permitted jurisdictions.

For the purposes of applicable data protection law, mytown88 is the data controller responsible for personal data collected through the Platform. Any reference to "the Platform" in this Privacy Policy includes the mytown88 website, mobile-optimised site, and any associated gaming interfaces or customer service channels.

2.Personal Data We Collect

mytown88 collects the following categories of personal data from players and Platform visitors:

2.1 Registration and Identity Data

• Full legal name as per government-issued identification;
• Date of birth (for age verification — mytown88 is strictly 21+ only);
• Email address;
• Malaysian mobile phone number;
• Chosen username;
• Residential address (collected at KYC stage).

2.2 Identity Verification (KYC) Data

• Copy of government-issued photo identification (MyKad, passport, or equivalent);
• Proof of address documentation (utility bill, bank statement, or equivalent);
• Proof of payment method ownership documentation where required.

2.3 Financial Data

• Payment method details (e.g., bank account reference for FPX transactions, eWallet account identifiers for Touch 'n Go / Boost / GrabPay / DuitNow transactions);
• Transaction history, including deposit amounts, dates, and methods;
• Withdrawal requests, amounts, and processing status;
• mytown88 wallet balance history.

2.4 Gaming Activity Data

• Game session history, including games played, bet amounts, outcomes, and session duration;
• Sportsbook bet history, including markets selected, stake amounts, and settlement outcomes;
• Bonus and promotional offer redemption history;
• VIP tier status and loyalty point accumulation records.

2.5 Technical and Device Data

• IP address at time of registration and each subsequent login;
• Device type, operating system, and browser version;
• Geolocation data (where permitted by your device settings) used for fraud detection and jurisdictional compliance;
• Session timestamps and Platform navigation activity logs.

2.6 Communications Data

• Records of customer support interactions (live chat transcripts, email correspondence);
• Responsible gaming tool preferences and self-exclusion records;
• Marketing communication preferences and consent records.

3.How We Collect Your Data

mytown88 collects personal data through the following means:

3.1 Directly from You. The majority of personal data held by mytown88 is provided directly by you during account registration, KYC verification, payment transactions, customer support interactions, and when you update your account profile or responsible gaming settings.

3.2 Automatically. When you visit the Platform, mytown88 and its technology partners automatically collect technical data including IP address, device identifiers, browser characteristics, and navigation behaviour through server logs, cookies, and similar tracking technologies. This data is collected for security, performance, fraud detection, and service improvement purposes. Please see Section 9 (Cookies & Tracking) for more detail.

3.3 Third Parties. mytown88 may receive personal data from third-party sources including:

• Payment processors, for the purpose of confirming transaction status and payment method ownership;
• Identity verification service providers, for the purpose of KYC compliance;
• Fraud detection and AML screening services, which may cross-reference your data against watchlists or adverse records in accordance with applicable law;
• Game software providers, who may share game session data with mytown88 for settlement and dispute resolution purposes.

4.How We Use Your Personal Data

mytown88 uses personal data for the following specific purposes:

• Account management — creating, maintaining, and administering your mytown88 player account;
• Identity and age verification — confirming you are who you say you are and that you are at least 21 years of age;
• Payment processing — executing deposits, withdrawals, and wallet management on your behalf;
• Game provision and settlement — recording wagers, calculating outcomes, and crediting winnings;
• Customer support — responding to queries, resolving disputes, and providing account assistance;
• Fraud prevention and security — detecting and preventing unauthorised account access, payment fraud, multi-accounting, and bonus abuse;
• Anti-money laundering compliance — conducting AML screening, source-of-funds verification, and statutory reporting as required by applicable law;
• Responsible gaming — monitoring gaming behaviour for indicators of problem gambling, applying self-exclusion and limit settings, and providing relevant support resources;
• Legal and regulatory compliance — meeting obligations imposed by applicable gaming regulations, financial regulations, and data protection law;
• Platform improvement — analysing aggregated, anonymised usage data to improve the Platform's performance, game selection, and user experience;
• Marketing communications — sending promotional offers, bonus notifications, and event invitations where you have provided consent to receive such communications.

mytown88 does not use personal data for automated individual decision-making or profiling that produces legal or similarly significant effects on players, except as expressly required by AML or responsible gaming obligations.

5.Legal Basis for Processing

Where applicable data protection law requires mytown88 to identify a legal basis for processing personal data, we rely on the following bases:

• Performance of a contract — processing necessary to open and administer your mytown88 account, process payments, provide gaming services, and settle bets;
• Legal obligation — processing required to comply with AML obligations, gaming licensing conditions, age verification requirements, and statutory reporting duties;
• Legitimate interests — fraud prevention, information security, responsible gaming monitoring, and analytics for Platform improvement, where those interests are not overridden by your rights;
• Consent — marketing communications, where you have provided explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6.Sharing Your Personal Data

mytown88 does not sell, rent, or trade personal data. We share personal data only with the following categories of recipients, and only to the extent necessary:

6.1 Service Providers. mytown88 engages third-party service providers who process data on our behalf under contractual data processing agreements. These include payment processors, cloud infrastructure providers, identity verification providers, fraud detection services, and customer support platform operators. All such providers are contractually prohibited from using your data for any purpose other than providing services to mytown88.

6.2 Game Software Providers. Live casino and RNG game providers receive session data necessary for game operation and dispute resolution. These providers are licensed by recognised international gaming regulatory bodies.

6.3 Legal and Regulatory Authorities. mytown88 may disclose personal data to law enforcement agencies, financial intelligence units, gaming regulators, or other governmental bodies where required by applicable law, court order, or regulatory requirement. Where legally permitted, mytown88 will notify affected players of such disclosures.

6.4 Business Transfers. In the event of a merger, acquisition, or sale of substantially all of mytown88's assets, personal data may be transferred to the successor entity, subject to equivalent privacy protections. Affected players will be notified of any such transfer.

7.International Data Transfers

mytown88 may transfer personal data to and process it in countries outside Malaysia for the purposes of cloud hosting, payment processing, and game provision. Where such transfers occur, mytown88 ensures that appropriate safeguards are in place to protect your personal data, including contractual protections equivalent to those required under applicable data protection law.

By using the mytown88 Platform, you acknowledge that your data may be processed outside Malaysia in jurisdictions that may have different data protection laws to those in Malaysia. mytown88 ensures that such transfers are made only to service providers who maintain appropriate data security standards.

8.Data Retention

mytown88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following specific retention considerations:

• Active accounts — data is retained throughout the lifetime of your mytown88 account and for a minimum of five (5) years following account closure, in accordance with AML and gaming licence record-keeping requirements;
• KYC documentation — retained for a minimum of five (5) years from the date of verification, or longer if required by applicable law;
• Transaction records — retained for a minimum of five (5) years from the date of each transaction;
• Customer support communications — retained for three (3) years from the date of each interaction, or longer if the communication relates to an unresolved dispute;
• Marketing consent records — retained for the duration of the consent period plus sufficient time to demonstrate compliance.

When retention periods expire, mytown88 securely deletes or anonymises personal data. Anonymised, aggregated data may be retained indefinitely for statistical and Platform improvement purposes.

9.Cookies & Tracking Technologies

mytown88 uses cookies and similar tracking technologies on the Platform for the following purposes:

9.1 Essential Cookies. Necessary for the Platform to function correctly. These include session authentication cookies (maintaining your mytown88 login state), security tokens, and load balancing cookies. Essential cookies cannot be disabled without impairing Platform functionality.

9.2 Performance and Analytics Cookies. Collect aggregated, anonymised data about how players navigate the Platform — which pages are visited, how long sessions last, and where errors occur. This data is used to improve Platform performance and user experience. No personally identifiable information is collected through analytics cookies.

9.3 Functional Cookies. Remember your Platform preferences, such as language settings, display preferences, and responsible gaming tool configurations, so that you do not need to re-enter them on every visit.

9.4 Security and Fraud Detection. mytown88 uses device fingerprinting and behavioural analysis technologies to detect fraud, bot activity, and multi-accounting. These technologies process device characteristics and navigation patterns to identify anomalous behaviour.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the Platform but may affect some functional preferences. Essential cookies and security technologies cannot be disabled.

10.Your Rights Over Your Personal Data

Subject to applicable law and mytown88's legal obligations (including AML record-keeping requirements), you have the following rights with respect to your personal data held by mytown88:

• Right of Access — the right to request a copy of the personal data mytown88 holds about you;
• Right of Rectification — the right to request correction of inaccurate or incomplete personal data;
• Right to Erasure — the right to request deletion of personal data where retention is no longer necessary and no legal obligation to retain it exists;
• Right to Restrict Processing — the right to request that mytown88 restricts processing of your data in certain circumstances (for example, while a data accuracy dispute is resolved);
• Right to Data Portability — the right to receive a structured, machine-readable copy of data you have provided to mytown88 where processing is based on consent or contract;
• Right to Object — the right to object to processing based on legitimate interests, including direct marketing;
• Right to Withdraw Consent — where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact the mytown88 data protection contact at support at mytown88.win with the subject line "Data Rights Request". mytown88 will respond within 30 days of receipt. We may request identity verification before processing data rights requests.

11.Data Security

mytown88 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• TLS 1.3 encryption for all data in transit between your device and mytown88 servers;
• AES-256 encryption for personal data at rest in mytown88 databases;
• Access controls limiting internal access to personal data to authorised personnel with a legitimate operational need;
• Multi-factor authentication for internal system access;
• Regular security assessments and penetration testing by qualified third-party security firms;
• Incident response procedures for detecting, reporting, and responding to personal data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, mytown88 will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach.

You also have a role in protecting your mytown88 account data. Keep your login credentials confidential, enable two-factor authentication, and notify mytown88 support immediately if you suspect unauthorised access to your account.

12.Children's Privacy

mytown88 services are strictly for persons aged 21 years and above. mytown88 does not knowingly collect personal data from anyone under the age of 21. Age verification is conducted during the account registration process, and mytown88 reserves the right to request proof of age documentation from any player at any time.

If mytown88 becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately closed, any funds will be handled in accordance with the mytown88 Terms & Conditions, and the relevant personal data will be deleted or retained only to the extent required by law.

13.Changes to This Privacy Policy

mytown88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform features. Material changes will be communicated to registered players via the email address on file, with reasonable advance notice where practicable.

The "Last Updated" date at the top of this page reflects when the most recent revision was made. Your continued use of the mytown88 Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept a revised Privacy Policy, you should cease using the Platform and contact support to close your account.

We encourage you to review this Privacy Policy periodically to stay informed about how mytown88 protects your personal data.

14.Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or mytown88's data protection practices, please contact us through the following channels:

• Live Chat: Available 24/7 through the mytown88 Platform — identify your query as a Privacy / Data Protection matter
• Email: support at mytown88.win — use the subject line "Privacy Policy Enquiry" or "Data Rights Request" as appropriate

mytown88 aims to acknowledge all privacy-related enquiries within 2 business days and to provide a substantive response within 30 days. Complex requests, particularly data rights requests requiring extensive retrieval, may take up to 60 days; you will be notified if an extension is required.