Mstar88 Privacy Policy – Personal Data Protection for Malaysian Players

1. Introduction

Mstar88 values the privacy of every member who entrusts us with their personal data. This Privacy Policy clearly explains how mstar88 — the platform operator under the domain mstar88.best — collects, stores, uses, and protects your personal information when you use our services.

This document is written in clear, plain language because we believe every Malaysian member deserves to fully understand what happens with their data — not just in theory, but with genuine confidence. Too many privacy policies are written in dense legal language that is hard to follow, and that is not how mstar88 operates.

By registering and using the mstar88 platform, you agree to the collection and use of your data as described in this document. If you do not agree with any part of this Privacy Policy, please discontinue use of the platform and contact us to explore alternative options that may be available.

2. Personal Data We Collect

Mstar88 follows a data minimisation principle — we only collect data that is strictly necessary to provide our services to you. Below are the categories of data we collect and the reasons for collecting them:

We do not collect sensitive data such as medical information, religious beliefs, or political affiliations. Should there be any need to collect additional data beyond the categories listed above, we will obtain your explicit consent before any such collection takes place.

3. How mstar88 Uses Your Data

Personal data collected by mstar88 is used solely for purposes directly related to providing services to you. The following are the specific purposes for which data is used:

1. Account Management — creating, verifying, and managing your mstar88 account, including password recovery and two-factor authentication.
2. Financial Transaction Processing — processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, CIMB Clicks, and bank transfers, as well as processing your winnings withdrawals in Malaysian Ringgit (MYR).
3. Betting Services Provision — giving you access to all mstar88 services, including Sports Betting (Malaysia Super League football, badminton, cricket, e-sports MPL), Live Casino, and slots.
4. Security & Fraud Prevention — detects and prevents suspicious activity, duplicate accounts, and platform abuse that could compromise the security of you and other members.
5. Customer Support — providing effective support via live chat and email in Bahasa Melayu, including the resolution of any technical issues or disputes you encounter.
6. Responsible Gaming — monitors usage patterns to identify signs of problem gambling and enables self-management tools to function effectively in safeguarding your wellbeing.
7. Service Communications — sending important notifications about your account, policy changes, relevant promotions, and security-related information.
8. Platform Improvements — analysing usage patterns in aggregate (not individually) to improve the mstar88 user experience for all members in Malaysia.
9. Legal Compliance — fulfilling compliance obligations under the Personal Data Protection Act 2010 (PDPA), financial regulations, and requests from lawful authorities under Malaysian law.

4. Data Sharing With Third Parties

Mstar88 does not sell, rent, or share your personal data with third parties for their own marketing or business purposes. This is a core principle we do not compromise on. However, there are limited situations where sharing data with certain parties is necessary in order to provide services to you:

• Payment Processors — when you make a deposit or withdrawal via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, or CIMB Clicks, the required transaction information is shared with the relevant processor solely to complete that transaction. These processors are bound by their own privacy policies and security standards and are not permitted to use your data for any other purpose.
• Technology Service Providers — mstar88 uses a number of technology infrastructure and cloud service providers who may process your data in the course of delivering services to us. All such providers are bound by strict data processing agreements and are only permitted to process your data in accordance with our instructions.
• Lawful Authorities — mstar88 may disclose personal data to government authorities, law enforcement, or regulatory bodies when required or mandated by Malaysian law, or when there is an urgent need to protect public safety.
• Business Transition — in the event of a merger, acquisition, or sale of company assets, user data may be transferred to the new entity. In such cases, you will be notified in advance and the new entity will be bound by this Privacy Policy or an equivalent policy.

In all of the data sharing situations described above, mstar88 ensures that data recipients are bound by strict confidentiality obligations and only process data for permitted purposes. We conduct thorough due diligence on all third-party partners regarding their data protection practices before any sharing takes place.

5. Data Security

The security of your personal data is an operational priority for mstar88 every single day. We invest seriously in our security infrastructure because we understand that the data you entrust to us — including financial information such as e-wallet account numbers and transaction records in MYR — demands uncompromising protection.

The technical and organisational security measures we implement include:

• 256-bit SSL/TLS Encryption — all communications between your device and mstar88's servers are encrypted using the same protocol adopted by Malaysia's major banking institutions.
• Stored Data Encryption — sensitive data stored in our databases is encrypted using AES-256 encryption, meaning the data cannot be read even in the event of an unexpected breach.
• Internal Access Controls — only mstar88 staff with a legitimate business need are permitted to access member personal data, and every access is logged and monitored.
• Firewall & Intrusion Monitoring — a real-time security monitoring system that operates 24/7 to detect and block any unauthorised access attempts.
• Two-Factor Authentication (2FA) — available to all member accounts as an additional layer of security beyond passwords.
• Regular Security Audits — mstar88 conducts regular internal and external security audits to identify and address any vulnerabilities before they can be exploited.
• Secure Password Management — member passwords are stored using a one-way cryptographic hash function with salt — meaning even mstar88 staff cannot view your password in its original form.

In the event of a data breach that may affect you, mstar88 is committed to notifying impacted members and the relevant authorities within the timeframe required by applicable law, and to taking immediate remedial action to minimise the impact of the breach.

6. Cookies & Tracking Technologies

The mstar88 platform uses cookies and similar tracking technologies to ensure the platform functions correctly and to provide you with a better experience. Below are the types of cookies used and their respective purposes:

• Essential Cookies — required for core platform functions such as maintaining your login session, saving selections in your betting slip, and ensuring transaction security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies — storing your personal preferences such as chosen language, favourite sports markets, and display settings. These cookies allow the platform to remember your preferences from one session to the next.
• Analytics Cookies — helps us understand how members use the platform in aggregate — for example, which sections are visited most frequently, how much time is spent in the Live Casino versus slots, and where users encounter difficulties. This data is not linked to your personal identity.
• Security Cookies — used to detect suspicious activity such as login attempts from unusual locations or usage patterns that may indicate bot activity or fraud.

You can manage your cookie settings through your web browser or via the privacy settings panel in your mstar88 account. Please note that disabling certain cookies may affect the functionality of parts of the platform — for example, disabling session cookies will require you to log in again each time you open the platform.

Mstar88 does not use third-party cookies for targeted advertising or to sell information about your usage habits to advertising networks.

7. Data Retention Period

Mstar88 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. In general, retention periods are as follows:

• Active Account Data — retained for as long as your account is active, and for a reasonable additional period after the account is closed.
• Financial Transaction Records — retained for a minimum of 7 years after account closure to meet Malaysia's accounting and financial legal requirements.
• Customer Support Records — conversation and complaint records are retained for 3 years for dispute resolution and service improvement purposes.
• Security Logs — technical and security logs are retained for 1–2 years for fraud detection and security audit purposes.
• Aggregated Analytics Data — statistical data that cannot be personally identified may be retained for longer periods for the purposes of long-term trend analysis and platform improvement.

Once the retention period expires, or upon receipt of a valid deletion request, mstar88 will securely delete or anonymise your personal data using industry-recognised procedures. Please note that deletion requests may not be fully executable for data that must be retained to fulfil legal obligations — in such cases, we will inform you of what cannot be deleted and the reasons why.

8. Your Personal Data Rights

As a mstar88 member residing in Malaysia, you have the following rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA) and mstar88's policies:

To exercise any of the above rights, please contact the mstar88 support team via live chat or email at support@mstar88.best. We will process your request within 30 business days of receipt. For complex cases, this period may be extended up to 60 business days, with prior notification.

Mstar88 will not charge a fee for reasonable requests relating to the above rights. However, if a request is repetitive, unreasonable, or excessive, we reserve the right to charge a reasonable administrative fee or decline the request with a clear explanation.

9. Children's Privacy

Mstar88 services are intended for individuals aged 18 and above. mstar88 does not knowingly collect or store personal data from anyone under the age of 18.

Mstar88 uses an automated age verification system during the registration process to prevent underage individuals from accessing the platform. However, we recognise that automated systems are not infallible, and we therefore rely on the cooperation of parents, guardians, and the community to ensure our platform is only accessed by eligible individuals.

10. Changes to the Privacy Policy

Mstar88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or improvements in how we protect your data. Each new version will be identified by a clear version number and effective date at the top of the document.

When material changes are made to this Privacy Policy — particularly changes that may affect how we use your data or your rights — mstar88 will:

• Sending email notifications to all registered members at the email address on their account
• Displaying a prominent notice on the mstar88 platform homepage and within the mobile app
• Maintaining an archive of previous versions of the Privacy Policy that members may request for reference

Continued use of the mstar88 platform after the effective date of any changes will be considered acceptance of the updated policy. If you do not agree with the changes, you have the right to close your account and withdraw your balance before the new policy takes effect — please contact our support team for assistance with this process.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.

11. Contact Us About Privacy

If you have any questions, concerns, or complaints regarding how mstar88 handles your personal data, or if you wish to exercise any of your data rights set out in Section 8, please contact us through the following channels:

• Live Chat: Available on the mstar88 mobile app and website — responses are typically within 2–5 minutes, 24/7, fully in Bahasa Melayu.
• Privacy Email: support@mstar88.best — for formal personal data requests, please include "Privacy Request" in the subject line. We aim to respond within 5 business days.

Mstar88 has a dedicated officer responsible for handling all data privacy enquiries and requests. Every request is taken seriously and processed in accordance with established procedures.