Privacy Policy Mitos88 – Malaysian Member Data Protection

Welcome to the mitos88 Privacy Policy page. This document explains in detail how mitos88 ("we", "the platform") manages your personal information ("member", "you") when you use the mitos88 website, mobile app, or any services provided by mitos88 in Malaysia.

This mitos88 privacy policy has been drafted in accordance with the provisions of Malaysia's Personal Data Protection Act (PDPA) 2010, the primary legislation governing the processing of personal data in the context of commercial transactions in Malaysia. We take this responsibility seriously and ensure that every aspect of our data handling complies with the seven fundamental principles of the PDPA.

This mitos88 privacy policy applies to all information collected through the mitos88.my website, the mitos88 mobile app, email and SMS communications, and any interaction you have with our customer support staff. It does not apply to third-party websites or services that may be linked from our platform.

Mitos88 collects various categories of personal information to ensure the platform operates smoothly, securely, and in compliance with regulatory requirements. Below are the categories of data we collect and their respective purposes:

We also collect data you provide voluntarily, such as information submitted through feedback forms, customer satisfaction surveys, or direct communications with the mitos88 support team. In all cases, we only request data that is strictly necessary for the stated purpose.

Personal data collected by mitos88 is used solely for legitimate and transparent purposes. We do not use your data for any purpose not stated in this privacy policy without first obtaining your consent. The following are the primary purposes for which data is used:

• Account Management: Creating, verifying, and maintaining your mitos88 member account, including the KYC process and age verification.
• Transaction Processing: Processing deposits and withdrawals via Malaysian payment methods such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX (Maybank2u, CIMB Clicks), and recording all financial activity.
• Platform Security: To detect and prevent fraud, money laundering, account misuse, unauthorised access, and any other unlawful activity on the mitos88 platform.
• Service Communications: Sending important notifications regarding your account, terms changes, bonus promotions you have opted in to receive, and security updates.
• Customer Support: Processing and resolving enquiries, complaints, and support requests submitted to the mitos88 team.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and activating appropriate protection tools.
• Legal Compliance: To fulfil applicable legal and regulatory obligations, including requirements under PDPA 2010 and anti-money laundering (AML) regulations.
• Platform Improvements: Analysing usage data in aggregated and anonymised form to improve the performance, usability, and overall experience of the mitos88 platform.

Mitos88 processes your personal data on valid legal grounds under Malaysia's PDPA 2010. Depending on the type of processing involved, the legal bases we rely on are as follows:

• Consent: For non-mandatory data processing — such as marketing communications and experience personalisation — we rely on the explicit consent you provide during registration or through your account settings.
• Contract Performance: Data processing required to fulfil our contractual obligations to you as a mitos88 member, including processing deposits and withdrawals and managing your account.
• Legal Obligation: Processing required to comply with Malaysian law, including KYC requirements, AML reporting to the Financial Intelligence and Enforcement Department (FIED), and applicable tax obligations.
• Legitimate Interest: For security, fraud prevention, and platform improvement purposes, where mitos88's legitimate interests do not override your fundamental rights.

Mitos88 is committed to ensuring every data processing activity has a solid and defensible legal basis. If you have questions about the specific legal basis for any data processing, please contact our Data Protection Officer at privacy@mitos88.my.

Mitos88 does not sell, rent, or disclose members' personal data to third parties for their own marketing or commercial purposes. However, in the course of operating the platform, there are limited situations where we need to share data with certain parties:

• Payment Providers: Transaction information that must be shared with Malaysian payment processors such as FPX providers, DuitNow, Touch 'n Go eWallet and GrabPay to process your deposits and withdrawals.
• Game Providers: The minimum data required by live casino and slots software providers to allow you to play on the mitos88 platform. All such providers are bound by strict confidentiality agreements.
• Regulatory Authority: Information legally required to be disclosed to Malaysian government agencies, the police, or courts when lawfully ordered.
• KYC Verification Services: Identity information that must be verified through a licensed digital identity verification service to ensure compliance with AML requirements.
• Technical Infrastructure Providers: Cloud hosting and cybersecurity service providers that support the technical operations of the mitos88 platform, subject to strict data processing agreements.

The mitos88 platform uses cookies and similar tracking technologies to enhance your experience, maintain account security, and analyse platform performance. The following are the types of cookies we use:

You can manage cookie settings through your web browser. Please note that blocking essential cookies may affect the functionality of the mitos88 platform. For more information on managing cookies in popular browsers such as Chrome, Safari, or Firefox, please refer to your browser's help documentation.

In addition to cookies, mitos88 also uses similar technologies such as local storage and session storage to save your session preferences locally on your device. This data is not sent to our servers and remains on your device only.

Mitos88 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our key security measures include:

• Encryption in Transit: All communications between your device and mitos88 servers are protected by TLS 1.3 protocol and 256-bit SSL encryption.
• Storage Encryption: Sensitive data such as bank information and KYC documents is stored in encrypted format (encrypted at rest) using AES-256 standards.
• Access Controls: Access to members' personal data is restricted to staff who require that information to carry out their duties, based on a strict need-to-know basis.
• Two-Factor Authentication (2FA): The mitos88 platform supports 2FA for all member accounts, adding an extra layer of security beyond your password.
• Continuous Monitoring: Intrusion detection systems (IDS) and 24/7 security log monitoring to detect and respond to any threats promptly.
• Regular Security Audits: Penetration testing and security audits conducted periodically by independent cybersecurity firms.
• Staff Training: All mitos88 staff who handle personal data undergo regular data protection and cybersecurity training.

Mitos88 retains your personal data only for as long as necessary to fulfil the purposes stated in this privacy policy, or as required by applicable Malaysian law. Our data retention guidelines are as follows:

• Active Account Data: Retained for as long as your account is active and for 7 years after account closure, in line with Malaysia's accounting and tax legal requirements.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date, in accordance with AML legislation and Malaysian financial regulations.
• KYC Documents: Retained for 6 years after the business relationship ends, in accordance with the Anti-Money Laundering and Anti-Terrorism Financing Act 2001.
• Support Communication Logs: Retained for 3 years for reference and service improvement purposes.
• Cookie & Analytics Data: Automatically purged according to the retention period set for each cookie category (see Section 6).
• Security Logs: Retained for 2 years to support security incident investigations when required.

Once the relevant retention period expires, your personal data will be securely deleted or anonymised using methods that ensure it cannot be recovered or re-linked to you. The data deletion process follows a set schedule and is overseen by our Data Protection Officer.

Under Malaysia's PDPA 2010, you have the following rights in relation to your personal data processed by mitos88:

The mitos88 platform is strictly limited to individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.

Mitos88 uses an automated age verification system integrated into the registration process. We also require identity document verification during the KYC process to confirm that every member meets the minimum age requirement.

Mitos88 reserves the right to update or amend this privacy policy at any time to reflect changes in our business practices, new legal requirements, or data protection improvements. When we make material changes, we will:

• Updating the "Last Updated" date at the top of this page.
• Sending email notifications to all registered mitos88 members regarding important changes.
• Displaying a clear notice on the platform's homepage for a minimum of 30 days after the changes take effect.
• In the case of highly material changes, we may request fresh consent from members before those changes take effect.

We encourage you to review this mitos88 privacy policy page periodically to stay informed about how we protect your personal information. Continued use of the mitos88 platform following notice of any changes will be considered your acceptance of the updated policy.

If you have any questions, concerns, or complaints regarding mitos88's privacy policy or how we handle your personal data, please contact our Data Protection Officer through the following channels:

• Privacy Email: privacy@mitos88.my
• General Support Email: support@mitos88.my
• Response Time: We are committed to responding to all privacy-related enquiries within 3 working days.

For complaints that cannot be resolved directly with us, you have the right to refer the matter to Malaysia's Personal Data Protection Department under the Ministry of Communications and Digital. We are committed to cooperating fully with any official investigation carried out by the relevant authorities.