MGclub8 Privacy Policy

MGclub8 ("MGclub8", "we", "us", or "our") operates the online gaming platform accessible at https://mgclub8.cam and any associated subdomains or mobile-optimised interfaces thereof (collectively, the "Platform"). MGclub8 is committed to protecting the privacy and security of all personal data belonging to the players, visitors, and other individuals ("you" or "Data Subject") who interact with the Platform.

This Privacy Policy ("Policy") describes in clear and structured terms: what categories of personal data MGclub8 collects; the purposes and legal bases for which that data is processed; with whom that data may be shared; how long we retain it; the security measures we apply; and the rights available to you as a Data Subject.

This Policy applies to all personal data processed by MGclub8 in connection with your use of the Platform, including data collected during account registration, identity verification (KYC), deposits and withdrawals, gameplay activity, customer support interactions, and marketing communications where consent has been obtained.

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, location data, online identifiers, email address, financial information, and any data that, alone or in combination, can identify an individual.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, transfer, erasure, and destruction.
• "Controller" means MGclub8, the entity that determines the purposes and means of processing your Personal Data.
• "Processor" means any third party that processes Personal Data on behalf of MGclub8 pursuant to a written data processing agreement.
• "KYC" means the Know Your Customer identity verification process applied to all registered players.
• "Cookies" means small text files placed on your device by the Platform to collect standard internet log information and visitor behaviour data.
• "PDPA" means the Personal Data Protection Act 2010 of Malaysia (Act 709), the primary data protection legislation applicable to the processing of personal data in Malaysia.

MGclub8 collects the following categories of personal data, depending on your interaction with the Platform:

We do not intentionally collect sensitive personal data as defined under applicable law (such as racial or ethnic origin, religious beliefs, health data, or biometric data beyond what is necessary for identity verification) unless explicitly required for legal compliance purposes.

MGclub8 collects personal data through the following channels:

You provide personal data directly when you: register an account on the Platform; complete the KYC identity verification process; make a deposit or withdrawal request; contact our customer support team; respond to a survey or promotional activity; or update your account profile settings.

When you access the Platform, we automatically collect Technical Data via cookies, server logs, and similar technologies. This includes your IP address, device identifiers, browser configuration, referring URL, and session behaviour data. See Section 8 (Cookies & Tracking) for further details.

We may receive personal data from third parties in specific circumstances, including: payment service providers (such as Maybank, CIMB, Public Bank, DuitNow, FPX, Touch 'n Go eWallet, and Boost) when processing transactions; identity verification service providers during KYC; fraud prevention and anti-money laundering screening agencies; and publicly available regulatory watchlists.

MGclub8 processes your personal data on the following legal bases as applicable under the Personal Data Protection Act 2010 (Malaysia) and aligned international standards:

• Contractual Necessity: Processing is necessary to enter into and perform the contract between you and MGclub8 — including account creation, transaction processing, and gameplay facilitation.
• Legal Obligation: Processing is necessary to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) laws, KYC requirements, financial record-keeping obligations, and responses to lawful requests from regulatory authorities.
• Legitimate Interests: Processing is necessary for MGclub8's legitimate interests in operating a secure and commercially viable gaming platform — including fraud detection, platform security, responsible gambling monitoring, and service improvement analytics — where such interests are not overridden by your fundamental rights.
• Consent: Where we rely on your consent (for example, for marketing communications), you retain the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

MGclub8 uses your personal data for the following purposes:

• To create, verify, and manage your player account on the Platform;
• To process deposits and withdrawals in Malaysian Ringgit (MYR) via your chosen payment method;
• To conduct KYC identity verification and ongoing due diligence as required by law;
• To detect, investigate, and prevent fraudulent transactions, money laundering, and other prohibited conduct;
• To deliver the gaming services you request, including live dealer games, slots, and sports betting markets;
• To administer bonus offers and promotional campaigns for which you are eligible;
• To operate and improve our responsible gambling tools, including deposit limits, session controls, and self-exclusion;
• To communicate with you regarding your account, transactions, and any changes to our policies;
• To send marketing communications where you have provided valid consent and have not subsequently opted out;
• To analyse platform usage patterns for the purpose of service improvement and technical optimisation;
• To comply with our legal and regulatory obligations;
• To enforce our Terms & Conditions and protect the rights of MGclub8 and other players.

MGclub8 does not sell, rent, or commercially trade your personal data to third parties. We may share your personal data only in the following limited circumstances:

We engage third-party service providers who process personal data on our behalf under written data processing agreements that impose obligations equivalent to those under this Policy. Categories of such providers include: payment processing partners (including Malaysian banking institutions and e-wallet operators such as Touch 'n Go eWallet, Boost, and GrabPay); identity verification and KYC service providers; IT infrastructure and cloud hosting providers; fraud prevention and AML screening agencies; and customer support platform operators.

MGclub8 may disclose personal data to competent authorities, regulators, law enforcement agencies, or courts where required or permitted by applicable law — for example, in response to a lawful court order, regulatory investigation, or legal process. We will, wherever legally permissible, notify you of such a request before complying.

In the event of a merger, acquisition, restructuring, or sale of all or part of the MGclub8 business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to data processing practices that result.

In circumstances not covered by the above, we will share your data with third parties only with your explicit prior consent.

The MGclub8 Platform uses cookies and similar tracking technologies to deliver a functional and personalised experience. The following categories of cookies are used:

These cookies are essential for the Platform to function and cannot be switched off. They are used to maintain your login session, preserve your language and currency preferences, and enable core security functions. No personal data collected via strictly necessary cookies is used for marketing purposes.

These cookies collect anonymised or aggregated data about how visitors use the Platform — such as which pages are visited most frequently and where players experience technical errors. This information is used exclusively to improve Platform performance.

Functional cookies allow the Platform to remember your preferences and personalisation choices, such as saved payment methods (stored tokenised references only — not full card or bank credentials) and notification settings.

You may configure your browser settings to refuse or delete cookies at any time. However, disabling certain cookies may affect the functionality of the Platform. Strictly necessary cookies cannot be disabled without impairing your ability to use the Platform.

MGclub8 retains personal data only for as long as is necessary to fulfil the purposes set out in this Policy, or for the duration required by applicable law, whichever is longer. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised such that it can no longer be attributed to any individual.

MGclub8 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive data fields (including financial data and KYC document stores) at rest;
• Role-based access controls restricting employee access to personal data on a strict need-to-know basis;
• Comprehensive audit logging of all access to personal data systems;
• Regular penetration testing and security vulnerability assessments by qualified third-party specialists;
• Multi-factor authentication requirements for all internal systems that access personal data;
• Vendor security assessments for all third-party processors prior to engagement and on a periodic review basis.

Notwithstanding the above, no method of electronic transmission or storage is completely secure. MGclub8 cannot guarantee absolute security, but we are committed to maintaining industry-leading standards and responding promptly to any identified vulnerabilities.

Some of MGclub8's service providers and infrastructure partners may be located in, or process data in, jurisdictions outside Malaysia. Where personal data is transferred internationally, MGclub8 ensures that adequate safeguards are in place to protect that data to a standard equivalent to that required under Malaysian law and this Policy.

Safeguards for international transfers may include: standard contractual clauses; binding corporate rules; adequacy decisions where applicable; or other lawful transfer mechanisms. You may request details of the specific safeguards applied to international transfers of your data by contacting us as described in Section 16.

As a Data Subject, you hold the following rights in relation to your personal data held by MGclub8. These rights are subject to applicable legal limitations and may vary depending on the specific circumstances of your request.

You have the right to request confirmation of whether MGclub8 processes personal data about you, and if so, to receive a copy of that data along with information about how it is being processed.

You have the right to request correction of any inaccurate or incomplete personal data held about you. You may update many data fields directly through your account settings; for data that cannot be self-corrected, please contact our support team.

You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and no other legal basis for processing exists. Note that this right is subject to override by legal retention obligations (see Section 9).

You have the right to request that MGclub8 restricts the processing of your personal data in certain circumstances, such as while the accuracy of that data is being contested, or while an objection to processing is being assessed.

Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to request its transmission to another data controller where technically feasible.

You have the right to object to processing based on legitimate interests grounds, including profiling. You also have the absolute right to object to your personal data being processed for direct marketing purposes at any time.

To exercise any of these rights, please contact our Data Protection team as described in Section 16. We will acknowledge your request within 3 business days and aim to fulfil verifiable requests within 30 days. We may request proof of identity before processing your request to prevent unauthorised disclosures.

The MGclub8 Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, process, or retain personal data from any person under the age of 21. All account registrations are subject to age verification during the KYC process.

If MGclub8 becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the personal data, and take appropriate steps to prevent recurrence. Parents or guardians who believe their child may have accessed or registered on the Platform should contact us immediately using the details in Section 16.

The Platform may contain references to third-party services, such as game studios or payment providers, where interaction takes place within the MGclub8 environment. MGclub8 is not responsible for the privacy practices of any third-party operator and does not control how those parties process personal data in their own capacity.

We recommend reviewing the privacy policies of any third-party services you interact with independently. This Policy applies solely to personal data processed by MGclub8 in its capacity as Controller.

MGclub8 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or our data processing practices. The effective date at the top of this Policy will be updated each time a new version is published.

Where updates are material — meaning they affect your rights or the way we process your data in a significant way — MGclub8 will notify registered players via email and by displaying a prominent notice on the Platform. Continued use of the Platform following publication of a revised Policy constitutes your acceptance of the updated terms.

You are encouraged to review this Policy periodically. Prior versions may be requested by contacting our support team.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by MGclub8, please contact us through the following channels:

• Live Chat Support (24/7): Available directly from your account dashboard. Average first-response time is 3–5 minutes. Live Chat is the fastest channel for urgent privacy-related queries.
• Email: [email protected] — for non-urgent data rights requests and formal privacy enquiries. Email responses are provided within 24 hours; formal data rights requests are acknowledged within 3 business days and fulfilled within 30 days.

When submitting a data rights request, please include your registered account username and email address, a description of your request (e.g., access, rectification, erasure), and any supporting information that may assist us in verifying your identity and locating the relevant data. We may request additional proof of identity to protect against unauthorised disclosures.

For responsible gambling support, please visit our Responsible Gambling page. For the full terms governing your use of the Platform, please review our Terms & Conditions.