Mahkota888 Privacy Policy – Our Commitment to Protecting Malaysian Players' Data

Mahkota888 Privacy Policy

Last updated: January 2026

This Privacy Policy document transparently explains how mahkota888 (mahkota888.click) collect, use, store, disclose, and protect your personal information when you use our platform. By registering an account or using any mahkota888 service, you fully agree to the terms of this privacy policy.

Mahkota888 takes data protection seriously. We understand that your trust is our most valuable asset — and that trust is built through transparency about how we handle your personal information. This policy is written in plain language, not confusing legal jargon, so you truly know your rights and what we do with your data.

1. Information We Collect

Mahkota888 collects information from you through several different means. Below are the categories of data we collect and why they are needed:

a) Information You Provide Directly

• Full name as per your identification card, for identity verification and withdrawal processing purposes.
• An active Malaysian phone number (for account verification and important account-related communications).
• Email address (for transaction notifications, service communications, and password recovery).
• Your chosen password (stored in an encrypted hash format — mahkota888 cannot read your password in its original form).
• Payment method details you have registered — such as your Touch 'n Go eWallet account name, GrabPay, Boost, ShopeePay, DuitNow, or your FPX Maybank2u or CIMB Clicks bank account number (stored securely in accordance with payment industry standards).
• Identity verification documents such as a copy of your MyKad or passport, if requested during the KYC process.

b) Automatically Collected Information

• Your device's IP address when accessing mahkota888 (used for fraud detection and account security).
• Device type, operating system, and browser version, to optimise your platform experience.
• In-platform activity history, including betting logs, deposit and withdrawal records, and session times and duration (for accountability, dispute resolution, and service improvement purposes).
• General location data based on IP address (not precise GPS location) for compliance and fraud detection purposes.
• Cookie data and similar tracking technologies — full details in the Cookies section below.

2. How mahkota888 Uses Your Data

The data we collect is used solely for the purposes listed below. mahkota888 will not use your data for any purpose not stated here without first obtaining your consent:

Mahkota888 uses your betting activity data in aggregate (anonymised) form to understand platform usage patterns and make improvements that benefit all members. Your individual data is never shared in this analysis — our product team only sees overall trends.

When you contact mahkota888 support, we retain records of that communication for team training, service improvement, and reference purposes should the same issue arise again. These records are stored securely and are only accessible to authorised staff.

3. Sharing Information with Third Parties

Mahkota888 does not sell or share your personal data with outside parties for marketing purposes. However, there are limited circumstances in which we need to share certain information with trusted third parties to keep the platform running:

• Payment Providers: Required transaction information is shared with your chosen payment provider — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or your bank via FPX — solely to process your deposits and withdrawals. These providers maintain their own privacy and security policies that comply with industry payment standards.
• Sports Data & Odds Providers: To provide accurate sports odds and results for the Malaysia Super League, EPL, IPL cricket, badminton, and other sports, mahkota888 uses data from third-party providers. These providers do not receive any member personal information in the process.
• Fraud Detection Services: mahkota888 may engage third-party services that specialise in detecting fraudulent activity and money laundering. Only the minimum information necessary is shared for this purpose, and it is subject to strict confidentiality agreements.
• Legal Authorities: mahkota888 will disclose information to the relevant authorities if required by a court order, regulatory directive, or applicable law in Malaysia. In such cases, we will provide only the minimum information required by law and will notify you of the disclosure to the extent permitted by law.

4. Data Security & Information Protection

Mahkota888 continually invests in security infrastructure to ensure your data is fully protected. The key security measures we employ are as follows:

• Encryption in Transit: All communications between your browser or app and mahkota888's servers are encrypted using TLS 1.3 protocol with a 256-bit SSL certificate. This ensures that no third party can read your data as it travels across the internet.
• Encryption at Rest: Your password is stored in a hashed format that cannot be reversed — meaning even the mahkota888 team itself cannot view your password. Other sensitive information, such as payment details, is stored in encrypted format in accordance with PCI-DSS standards.
• 24-Hour Monitoring: mahkota888's security systems continuously monitor account activity to detect any suspicious patterns — such as repeated login attempts from unfamiliar locations, unusual changes to account information, or betting activity that is inconsistent with your normal behaviour.
• Two-Factor Authentication (2FA): mahkota888 supports two-factor authentication for login and withdrawals as an added layer of security. You are encouraged to enable this feature in your account settings.
• Internal Access Controls: Only authorised mahkota888 staff with a legitimate business need are permitted to access member data. All access is logged and audited on a regular basis.
• Regular Security Audits: mahkota888 conducts regular internal and external security audits to identify and address any vulnerabilities in our systems before they can be exploited.

While mahkota888 takes all reasonable steps to protect your data, no system can be guaranteed 100% secure. You also play an important role in keeping your account safe — use a strong and unique password, never share your login details, and always log out after each session, especially on shared devices.

5. Use of Cookies & Tracking Technologies

Mahkota888 uses cookies and similar technologies to enhance your experience on the platform and for essential operational purposes. By using mahkota888, you consent to the use of cookies as described below.

Types of Cookies We Use:

• Essential Cookies (Required): These cookies are required for the mahkota888 platform to function properly. They manage your login session, maintain session security, and retain your language preference. Without these cookies, you will not be able to log in or use the platform's core features. These cookies cannot be disabled.
• Performance Cookies (Analytics): These cookies collect data on how members use mahkota888 — which pages are visited most, how long users spend on each page, and where they exit. All data is anonymised and used solely to help us understand how to optimise the platform. You may opt out of these cookies at any time.
• Preference Cookies: These cookies store your personal preferences and settings on the mahkota888 platform — such as your odds display preference, language, and notification settings. Without these cookies, you would need to reconfigure your preferences every time you log in.
• Security Cookies: Specialised cookies that help mahkota888's security systems identify legitimate sessions and detect any abnormal access attempts. These cookies form part of our anti-fraud protection layer.

You can manage cookie settings through your browser preferences. However, disabling essential cookies may significantly affect the functionality of mahkota888's platform. mahkota888 does not use cookies to track your activity on other websites outside our platform.

6. Your Rights Regarding Personal Data

As a mahkota888 member, you have the following rights with respect to your personal data. mahkota888 is committed to making it easy for you to exercise these rights in a simple, hassle-free manner:

• Right to Access: You have the right to request a copy of the personal data we hold about you. mahkota888 will provide this information in a readable format within 30 business days of receiving your request.
• Right to Rectification: If you find that any information in your account is inaccurate or outdated, you have the right to request a correction. You can update basic information yourself through your account settings, or contact support for corrections that require verification.
• Right to Erasure: Under certain circumstances, you have the right to request deletion of your personal data — for example, when the data is no longer needed for the purpose it was collected, or when you withdraw your consent. However, there are limitations — we may need to retain certain data to meet legal obligations or resolve ongoing disputes.
• Right to Object to Marketing: You have the right to object to the use of your data for direct marketing purposes at any time. Once your request is received, mahkota888 will cease all marketing communications to you within 48 hours.

To exercise any of the rights above, contact the mahkota888 support team by email at support@mahkota888.click stating the right you wish to exercise and your account information for identity verification purposes. We will respond within 30 days of receiving your request.

7. Data Retention Period

Mahkota888 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or for as long as required by applicable law. The following are our general data retention guidelines:

• Active account data: retained for as long as your account remains active on mahkota888.
• Financial transaction records: retained for a minimum of 7 years in accordance with financial compliance and anti-money laundering requirements.
• Security and activity logs: retained for 2 years for fraud detection and dispute resolution purposes.
• Customer support communication records: retained for 3 years.
• After voluntary account closure: basic information is retained for 5 years to meet legal requirements before being anonymised or permanently deleted.

When data is no longer required under our retention policy, mahkota888 will securely delete or anonymise it using methods that ensure the data cannot be recovered.

8. Changes to This Privacy Policy

Mahkota888 reserves the right to update this privacy policy at any time to reflect changes in our practices, legal requirements, or service expansions. When significant changes are made, we will:

• Updating the "Last updated" date at the top of this document.
• Displaying a prominent notice on the mahkota888 homepage for at least 14 days after the changes take effect.
• Sending email notifications to all active members for changes deemed material and that directly affect members' privacy rights.

Continued use of the mahkota888 platform after changes take effect will be considered acceptance of the updated privacy policy terms. It is your responsibility to review this page periodically. If you do not agree with the changes, please contact us to discuss your options before continuing to use the platform.

9. Contact mahkota888's Privacy Officer

If you have any questions, concerns, or complaints regarding this privacy policy or how mahkota888 handles your personal data, please reach out to us through the following channels:

Mahkota888 is committed to resolving all privacy-related complaints fairly, transparently, and within a reasonable timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant regulatory authority in Malaysia.