Privacy Policy meta888 — Your Personal Data Protection

1 Introduction

meta888 ("we", "our platform") respects the privacy of every user who accesses and uses our services at meta888.im. This Privacy Policy is designed to transparently explain how we handle your personal data — from the way it is collected, the purposes of its use, the safeguards in place, to your rights as the data owner.

By registering or using the platform meta888, you agree that you have read, understood, and accepted the terms of this Privacy Policy. If you disagree with any part of this policy, please stop using the platform and contact our team to close your account.

This policy applies to all services of meta888 including the website, mobile app, live chat, and any other official communication channels we operate.

2 Personal Data We Collect

We collect your personal data through several methods depending on how you interact with the platform meta888. The types of data we collect are as follows:

3 How We Use Your Data

The personal data we collect is used solely for legitimate purposes directly related to the provision of services by meta888. The following are the primary purposes for which your data is used:

• Account Management: Create, verify, and maintain your user account, including the KYC process to meet legal compliance requirements.
• Transaction Processing: Process deposits, withdrawals, and any other financial transactions you carry out on the platform.
• Platform Security: Detect and prevent fraud, money laundering, unauthorised access, and other suspicious activities that may compromise the security of the platform and other users.
• Customer Support: Provide effective and responsive technical assistance and customer support services.
• Platform Improvement: Analyse usage data in aggregate to understand usage patterns and improve the overall user experience.
• Legal Compliance: Meet the reporting, record-keeping, and compliance obligations set out under applicable Malaysian law.
• Communication: Send important notifications relating to your account, including transaction confirmations, security alerts, and material policy updates.
• Marketing (with consent): Send promotional information and the latest offers — only to users who have given explicit consent to receive marketing communications.

4 Data Sharing & Disclosure

meta888 does not sell, rent, or transfer your personal data to third parties for their own marketing purposes. However, we may share your data with the following parties under limited and controlled circumstances:

• Service Providers: Third parties who help us operate the platform — including payment gateway providers, game software providers, and cloud infrastructure providers — are all bound by strict data protection agreements.
• Regulatory Authority: When required by law, court order, or official investigation by a competent authority in Malaysia.
• Identity Verification: Third-party identity verification services are used to carry out KYC processes, preventing fraud and meeting compliance requirements.
• Business Transfer: In the event of a merger, acquisition, or asset sale, user data may be transferred to the successor entity — with prior notice given to users.

Every third party we share data with is required to handle your data in accordance with data protection standards equal to or higher than our own. We conduct regular reviews of all third-party vendors to ensure ongoing compliance.

5 Cookies & Tracking Technologies

Platform meta888 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions smoothly. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication and session security. Cannot be disabled without affecting platform functionality.
• Performance Cookies: Collect anonymous information about how you use the platform to help us identify areas that need improvement.
• Functional Cookies: Remember your preferences such as language, currency, and display settings to provide a more personalised experience.
• Analytics Cookies: Help us understand platform traffic and usage patterns through trusted analytics services. This data is processed in aggregate and anonymised form.

You can manage or disable cookies through your browser settings. However, disabling essential cookies may affect your ability to log in or use certain platform features. To learn how to manage cookies, refer to your browser's help documentation.

6 Data Security

meta888 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or disclosure. These measures include:

• Data in transit is encrypted using TLS 1.3 and 256-bit SSL protocols.
• At-rest encryption is applied to all sensitive information stored in our database.
• Role-based access control (RBAC) — only staff who require access to specific data to perform their duties are authorised to do so.
• Periodic internal and external security audits conducted by qualified independent parties.
• Active 24/7 intrusion detection and prevention systems (IDS/IPS) to monitor suspicious activity.
• Two-factor authentication (2FA) is mandatory for staff access to data management systems.
• Ongoing cybersecurity awareness training for all staff who handle user data.

7 Your Rights Regarding Personal Data

As a platform user meta888 and as a data subject under Malaysia's PDPA, you have the following rights regarding your personal data:

8 Data Retention

We retain your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law. General retention periods are as follows:

• Active Account Data: For the entire duration that your account remains active on the meta888 platform.
• Financial Transaction Data: Minimum 7 years after a transaction occurs, in line with Malaysia's financial reporting and anti-money laundering legal requirements.
• KYC Records: Minimum 5 years after account closure or after the business relationship ends.
• Security Logs: 12 months for standard access logs; security incident-related logs are retained for 5 years.
• Customer Support Data: 3 years after support ticket closure.

When your data is no longer needed, it will be securely deleted or anonymised using industry-recognised methods to ensure it cannot be recovered.

9 Children's Privacy

Platform meta888 is intended exclusively for individuals aged 18 years and above. We do not intentionally collect or process personal data from children or minors.

Should we discover that personal data of an individual under the age of 18 has been collected without our knowledge, we will immediately take the following steps:

• Terminate the associated account immediately.
• Permanently delete all personal data of the individual from our systems.
• Retain limited records required for security purposes and to prevent re-registration.

10 Privacy Policy Amendments

meta888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or platform improvements. When we make material changes, we will:

• Display a prominent notice on the platform's home page for at least 7 days before the changes take effect.
• Send email notifications to all registered users explaining the key changes made.
• Update the "Last Updated" date at the top of this document.

Continued use of the platform meta888 after the changes take effect will be considered acceptance of the updated Privacy Policy. If you do not agree with any changes, you have the right to close your account before they take effect by contacting our support team.

11 Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer (DPO) through the following channels:

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom right corner of the platform.
• Response Time: We aim to respond to all privacy-related enquiries within 2 working days.

We take every privacy enquiry and complaint seriously. If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Department of Malaysia (JPDP) or the relevant regulatory body.