Privacy Policy

This Privacy Policy ("Policy") sets out how mytown88 ("we", "us", "our"), the operator of the online gaming platform accessible at https://mytown88.cam, collects, processes, stores, and protects personal data relating to individuals who visit, register on, or interact with the mytown88 platform ("you", "the Player", "the User").

This Policy is issued in compliance with applicable international data protection standards and forms an integral part of the mytown88 Terms & Conditions. By creating a mytown88 account or continuing to use the platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

We are committed to handling personal data responsibly, transparently, and in accordance with the principles of purpose limitation, data minimisation, storage limitation, and integrity. If you have any questions about this Policy, please contact us via live chat or at the email address provided in Section 14.

• "Personal Data" — any information that identifies or could reasonably be used to identify a living natural person, directly or indirectly, including name, email address, identification number, financial data, IP address, and device identifiers.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — mytown88, the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" — a third party engaged by mytown88 to process Personal Data on our behalf and under our documented instructions.
• "Sensitive Personal Data" — a subset of Personal Data warranting heightened protection, including health information, identity document numbers, and financial account details.
• "Cookies" — small text files placed on your device by the mytown88 platform to facilitate session management, security, and analytics functions.
• "KYC Data" — identity and address verification documents submitted by a Player in connection with the Know Your Customer verification process.

mytown88 collects Personal Data in the following categories, depending on how you interact with the platform:

We process your Personal Data for the following defined purposes only:

• Account creation and management — to register, verify, and maintain your mytown88 player account.
• Payment processing — to facilitate deposits and withdrawals through your chosen payment method, including Malaysian bank transfers (Maybank, CIMB, Public Bank, Hong Leong) and e-wallets (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX).
• Identity verification and fraud prevention — to comply with KYC obligations and to detect, investigate, and prevent fraudulent activity on the platform.
• Game and betting operations — to record wagers, compute results, and maintain accurate account balances in Malaysian Ringgit (MYR).
• Customer support — to respond to enquiries, resolve disputes, and manage support interactions via live chat and email.
• Regulatory compliance — to fulfil obligations under our international gaming licence, including anti-money laundering (AML) record-keeping requirements.
• Responsible gambling management — to implement and honour self-exclusion requests, deposit limits, and loss limits set by players.
• Platform security and technical operations — to monitor for suspicious activity, protect against cyberattacks, and maintain system integrity.
• Service improvement and analytics — to analyse aggregated, anonymised usage patterns to improve platform features and user experience.
• Direct communications — to send you account notifications, transaction confirmations, and, where you have opted in, promotional communications.

We do not process your data for purposes incompatible with those listed above without first notifying you and, where required, obtaining your consent.

mytown88 relies on the following legal bases when processing your Personal Data:

• Contractual necessity — processing required to perform the contract between you and mytown88, including account management, payment processing, and game operations.
• Legal obligation — processing necessary to comply with applicable regulatory requirements including KYC/AML obligations imposed by our licensing framework.
• Legitimate interests — processing conducted to pursue our legitimate business interests in fraud prevention, platform security, and service improvement, provided such interests are not overridden by your data protection rights.
• Consent — processing for optional purposes such as marketing communications, where we will seek your explicit opt-in consent and you may withdraw that consent at any time.

mytown88 does not sell, rent, or trade your Personal Data to any third party for marketing or commercial purposes. We may share your data only in the following strictly defined circumstances:

• Payment processors and banking partners — your financial data is shared with the relevant payment provider (e.g., FPX gateway, DuitNow operator, or your nominated Malaysian bank) solely to execute your requested transaction.
• Identity verification providers — KYC documentation may be shared with licensed third-party identity verification services engaged to verify your identity on our behalf.
• Game studio technology providers — anonymised session and game result data may be transmitted to our licensed game studio partners to facilitate game mechanics and result verification.
• Fraud and security service providers — technical data including IP addresses may be analysed by third-party fraud prevention systems operating under strict data processing agreements with mytown88.
• Regulatory and law enforcement authorities — we will disclose Personal Data to competent regulatory authorities, law enforcement bodies, or courts where we are legally required or compelled to do so.
• Corporate transactions — in the event of a merger, acquisition, or sale of assets involving mytown88, your data may be transferred to the acquiring entity, which will be required to honour the commitments set out in this Policy.

All third-party Data Processors engaged by mytown88 are bound by written data processing agreements requiring them to process your data only on our documented instructions and in accordance with applicable data protection standards.

mytown88 uses cookies and similar tracking technologies on the platform for the following purposes:

mytown88 does not use third-party advertising cookies, retargeting pixels, or cross-site tracking technologies. Strictly necessary cookies cannot be disabled as they are essential to platform operation. You may manage functional and analytics cookies through your browser settings; however, disabling functional cookies may affect your experience on the platform.

mytown88 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory or legal obligations. The following retention periods apply as a general guide:

• Account registration data — retained for the duration of the account relationship and for a period of five (5) years following account closure, to comply with AML record-keeping requirements.
• KYC verification documents — retained for a minimum of five (5) years following account closure or the date of the last relevant transaction, in accordance with international licensing obligations.
• Financial transaction records — retained for seven (7) years from the date of each transaction.
• Communications and support records — retained for a period of three (3) years from the date of the communication.
• Technical and session data — retained for up to twelve (12) months from collection.
• Responsible gambling settings and self-exclusion records — retained for the full duration of the exclusion period and for three (3) years thereafter.

Upon expiry of the applicable retention period, data is either securely deleted using industry-standard erasure methods or irreversibly anonymised for aggregate analytical purposes.

mytown88 implements a layered security architecture to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security measures include without limitation:

• 256-bit TLS encryption for all data transmitted between your device and the mytown88 platform.
• AES-256 encryption for Personal Data and financial data stored at rest on our servers.
• Role-based access controls ensuring that only authorised personnel with a defined operational need can access specific categories of Personal Data.
• Multi-factor authentication (MFA) requirements for administrative access to production systems.
• Continuous intrusion detection monitoring and automated alerting for anomalous access patterns.
• Regular independent penetration testing of platform infrastructure.
• Segregated storage of player funds, separate from operational accounts, to protect your balance.

Notwithstanding these measures, no internet transmission or electronic storage system is entirely immune to security risk. In the event of a data breach that is likely to result in significant risk to your rights, we will notify affected players and the relevant authorities within the timeframes required under our licensing obligations.

mytown88 operates under international online gaming licensing and may process or store Personal Data on servers located outside Malaysia. When Personal Data is transferred to third countries, we ensure that appropriate safeguards are in place — including standard contractual clauses in our agreements with Data Processors — to provide a level of protection equivalent to the standards described in this Policy.

By using the mytown88 platform, you acknowledge that your Personal Data may be transferred to, stored in, and processed in jurisdictions outside your country of residence. We take all reasonable steps to ensure such transfers comply with applicable data protection requirements.

Subject to applicable law and the terms of our licensing obligations, you have the following rights with respect to your Personal Data held by mytown88: