Privacy Policy

mild88 ("we", "us", "our", "the Platform") operates the online casino and sports betting platform accessible at https://mild88.lat. This Privacy Policy ("Policy") describes how mild88 collects, uses, stores, discloses, and protects the personal data of individuals who access or use our Platform, including all registered account holders ("Players", "you", "your").

We take data privacy seriously. Our practices are designed to be transparent, proportionate, and consistent with internationally recognised data protection principles. By registering an account or otherwise using the mild88 Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read together with our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference. Where there is any conflict between this Policy and our Terms & Conditions, the Terms & Conditions shall prevail in respect of matters not specifically addressed herein.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or can reasonably identify a natural person, directly or indirectly — including name, identification number, location data, email address, phone number, or online identifier.
• "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transfer, or deletion.
• "Data Controller" means mild88, the entity that determines the purposes and means by which personal data is processed.
• "Data Processor" means a third party that processes personal data on behalf of mild88 under a data processing agreement.
• "KYC Data" means identity and address verification documentation collected as part of mild88's Know Your Customer compliance programme.
• "Cookies" means small text files placed on your device by our Platform for the purposes described in Section 9 of this Policy.
• "Sensitive Personal Data" means personal data revealing racial or ethnic origin, political opinions, religious beliefs, health data, biometric data, or financial data beyond basic transaction records.

mild88 collects personal data that is necessary to provide our services, ensure platform security, comply with regulatory obligations, and deliver a personalised experience. The categories of personal data we collect include:

mild88 does not intentionally collect Sensitive Personal Data beyond what is strictly required for identity verification and regulatory compliance purposes. We do not collect biometric data, health data, or political/religious affiliation data.

mild88 collects personal data through the following channels and methods:

• Direct Provision: Data you actively provide during account registration, KYC verification, form submissions, live chat interactions, or when contacting our support team.
• Automated Technologies: Data collected automatically when you access or use the Platform, including via cookies, web beacons, server logs, and similar tracking technologies.
• Payment Processors: Transaction-related data shared with mild88 by our payment service partners — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and major Malaysian banks such as Maybank, CIMB, Public Bank, and Hong Leong — as part of processing your deposits and withdrawals.
• Third-Party Verification Services: Identity and fraud screening data obtained through our KYC and Anti-Money Laundering (AML) compliance service providers.
• Responsible Gambling Tools: Data generated when you interact with our self-exclusion, deposit limit, or session limit tools.

mild88 processes your personal data solely for legitimate purposes directly connected to providing and improving our services, maintaining security, and complying with our legal and regulatory obligations. Specifically, we process your data for the following purposes:

• Account Management: Creating, maintaining, and securing your mild88 account, processing login authentication, and managing account settings and preferences.
• Service Delivery: Enabling you to place bets, access games, participate in promotions, and use all features of the Platform.
• Financial Transactions: Processing deposits and withdrawals through your chosen Malaysian payment method, including reconciliation and reporting of transactions in MYR.
• Identity & Age Verification: Confirming that all Players are aged 21 and above, as required by our responsible gambling policy and our operating licence obligations.
• Fraud Prevention & AML Compliance: Detecting, investigating, and preventing fraudulent activity, money laundering, and other financial crimes in accordance with applicable regulations.
• Responsible Gambling Monitoring: Analysing your betting and transaction activity to identify potential indicators of problem gambling and facilitate appropriate interventions where warranted.
• Customer Support: Responding to your enquiries, resolving disputes, and providing assistance through our 24/7 live chat and email support channels.
• Marketing Communications: Sending promotional offers, bonuses, and platform updates where you have provided consent. You may withdraw consent at any time by contacting our support team.
• Platform Analytics: Analysing usage patterns, game performance, and platform traffic to improve the mild88 user experience.
• Legal Compliance: Meeting our obligations under applicable laws, regulatory requirements, and any lawful requests from competent authorities.

mild88 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to perform our obligations under our Terms & Conditions with you — including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML/CFT requirements, identity verification obligations, and regulatory reporting.
• Legitimate Interests: Processing undertaken for our legitimate business interests — including fraud detection, platform security, responsible gambling monitoring, and service improvement — where such interests are not overridden by your rights and interests.
• Consent: Processing undertaken based on your explicit and informed consent — principally for marketing communications and certain cookie categories. You retain the right to withdraw consent at any time without prejudice to the lawfulness of prior processing.

mild88 does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. We may share your personal data with the following categories of recipients strictly on a need-to-know basis and subject to appropriate contractual safeguards:

• Payment Service Providers: Malaysian payment processors and financial institutions (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, and Public Bank) as necessary to process your financial transactions.
• KYC & AML Compliance Providers: Third-party identity verification and fraud screening service providers engaged to assist with our regulatory compliance obligations.
• Game Content Providers: Game studio technology platforms that supply the games available on mild88, where necessary for game delivery and fairness certification.
• IT & Cloud Infrastructure Providers: Technology service providers who host and maintain the mild88 Platform infrastructure, subject to strict data processing agreements.
• Regulatory & Law Enforcement Authorities: Competent regulatory bodies, law enforcement agencies, or courts where disclosure is required by law, court order, or regulatory obligation.
• Professional Advisers: Lawyers, auditors, and accountants where necessary for the conduct of mild88's legitimate business activities, subject to professional confidentiality obligations.

mild88 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law or regulatory obligation.

As a general guide, mild88's data retention practices are as follows:

• Active Account Data: Retained for the full duration of your account's active status, plus a minimum of five (5) years following account closure, to meet AML/CFT record-keeping obligations.
• KYC Documentation: Retained for a minimum of five (5) years from the date of verification, or such longer period as required by applicable law.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction.
• Communication Records: Customer support interactions are typically retained for three (3) years from the date of the interaction.
• Marketing Consent Records: Retained for as long as you remain opted in to marketing, plus a reasonable period following opt-out to demonstrate compliance with consent obligations.
• Technical & Usage Data: Typically retained for up to twelve (12) months for operational purposes, except where longer retention is required for security or audit purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

mild88 uses cookies and similar tracking technologies to operate and improve the Platform, recognise returning users, and gather analytical information about how our services are used. When you first access mild88, you will be presented with a cookie consent notice.

The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session management, security tokens, and authentication cookies. They cannot be disabled without impacting platform functionality.
• Functional Cookies: Enable personalisation features such as remembering your preferred language, bet slip settings, or game lobby preferences.
• Analytics Cookies: Collect aggregated, anonymised data about how visitors use the Platform (e.g., pages visited, session duration, error events) to help us improve our service. Used only with your consent.
• Security & Fraud Prevention Cookies: Used to detect suspicious activity, protect your account from unauthorised access, and support our fraud prevention systems.

You may manage or withdraw your consent to non-essential cookies at any time through your browser settings or by contacting our support team. Please note that disabling certain cookies may affect the functionality of the Platform.

mild88 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security controls include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and mild88 servers is encrypted using industry-standard 256-bit SSL/TLS encryption.
• Data Encryption at Rest: Sensitive personal data and KYC documentation stored on our systems is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis, with role-based access controls, multi-factor authentication, and audit logging applied to all staff systems.
• Penetration Testing: Our platform and infrastructure undergoes regular security testing and vulnerability assessments by independent security specialists.
• Incident Response: mild88 maintains a documented data breach response procedure. In the event of a material data breach affecting your rights, you will be notified in accordance with applicable legal requirements.

Subject to applicable law, you hold the following rights in relation to your personal data held by mild88. To exercise any of these rights, please contact our support team at [email protected] or via live chat.

• Right of Access: You may request a copy of the personal data we hold about you, together with information about how it is being used. We will respond to verified access requests within 30 days.
• Right to Rectification: You may request that inaccurate or incomplete personal data we hold about you be corrected or updated. Straightforward corrections can typically be made via your account settings or by contacting support.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing), or where processing is unlawful. This right is subject to our legal and regulatory data retention obligations.
• Right to Restriction: You may request that we restrict the processing of your data in certain circumstances — for example, while the accuracy of data is contested, or while a legitimate interest objection is assessed.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your personal data where we rely on legitimate interests as the legal basis, and where you believe your interests override ours. You may also object at any time to the use of your data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

mild88 will respond to all rights requests within 30 calendar days of receipt, subject to verification of your identity. Where a request is complex or numerous, we may extend this period by a further 60 days, with prior notification.

mild88 is strictly an adults-only platform. Registration and use of the Platform is prohibited for any person under the age of 21. We do not knowingly collect personal data from individuals below the age of 21.

All registrants are required to confirm at the point of registration that they are aged 21 or above. mild88 reserves the right to request proof of age documentation (e.g., Malaysian MyKad, passport, or driving licence) at any time, and to suspend or close any Account where satisfactory age evidence cannot be provided.

If mild88 becomes aware or reasonably suspects that an Account holder is under the age of 21, we will immediately suspend the Account, conduct a review, and take such further action as is required — including closing the Account and returning any deposited funds (after deducting any applicable bonuses) to the payment method used for deposit.

The mild88 Platform integrates third-party services for purposes including payment processing, identity verification, game content delivery, and customer support tooling. These third parties process personal data on our behalf pursuant to contractual data processing agreements that impose appropriate security and privacy obligations.

mild88 does not control the privacy practices of third-party payment service providers (such as Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, DuitNow, and FPX). When you interact directly with these payment providers, your data is subject to their own privacy policies. We encourage you to review those policies as applicable.

mild88 is not responsible for the privacy practices of any third-party services accessed independently by you, including any websites linked to from external sources.

mild88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal or regulatory requirements, or Platform functionality. Any amendments will be published on this page with an updated Effective Date.

Where changes to this Policy are material — meaning they significantly alter how we use your personal data or the rights available to you — mild88 will provide reasonable advance notice via email to your registered address or through a prominent in-platform notification. Your continued use of the mild88 Platform following the publication of a revised Policy constitutes acceptance of the revised terms.

We encourage you to periodically review this Policy to stay informed about how we protect your information.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way mild88 handles your personal data, please reach out to us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly within the mild88 Platform. This is the fastest way to reach our support team for routine account-related queries.
• Written Enquiries: For formal privacy-related requests (including rights requests and data breach concerns), please contact us at: [email protected] — displayed as plain text only; this is not a clickable link.

mild88 aims to respond to all privacy-related correspondence within five (5) business days and to formal rights requests within 30 calendar days of receipt and identity verification.

For information on how to gamble responsibly or to access self-exclusion tools, please visit our Responsible Gambling page.