Mahkota88 is committed to protecting your personal data. This policy explains what we collect, how we use it, and the rights you hold over your information.
Last Updated: 1 January 2026These cards summarise our core data protection principles. Full details are set out in the policy sections below.
All personal data held by Mahkota88 is stored on encrypted servers protected by 256-bit SSL technology. Access to stored data is restricted on a strict need-to-know basis within our operations team.
Mahkota88 does not sell, lease, or trade your personal information to any third-party organisation for marketing or commercial purposes. Your data belongs to you and is used solely to operate your account and improve your experience.
You have the right to access, correct, restrict, and request deletion of your personal data at any time. Submit a data request to our support team and we will respond within the timeframes set out in this policy.
We use cookies and similar tracking technologies solely for platform functionality, security, and performance analytics. No third-party advertising cookies are placed on your device without your knowledge.
Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected, comply with legal obligations, or resolve disputes. Retention periods for each data category are detailed in Section 6 below.
In the event of a data security breach that poses a risk to your rights and freedoms, Mahkota88 will notify affected players promptly in accordance with applicable data protection law, describing the nature of the breach and the steps taken to address it.
Request a copy of all personal data we hold about you at any time.
Correct any inaccurate or incomplete personal data held in your account record.
Request deletion of your personal data where it is no longer necessary for its original purpose, subject to legal retention obligations.
Ask us to temporarily stop processing your data while a dispute or correction request is being resolved.
Receive your personal data in a structured, machine-readable format for transfer to another service provider.
Object to the processing of your personal data for direct marketing purposes at any time, effective immediately.
This Privacy Policy ("Policy") describes how Mahkota88 ("Company", "Platform", "we", "us", "our") collects, uses, stores, discloses, and protects personal data belonging to users ("Player", "User", "you") of the website located at mahkota88.cam and all associated services, features, and content accessible through it.
Mahkota88 is committed to handling your personal data with care, transparency, and in compliance with applicable data protection legislation. This Policy applies to all personal data collected through account registration, platform usage, customer support interactions, and any other means by which you provide data to us.
By registering an account on Mahkota88 or continuing to use the Platform, you acknowledge that you have read, understood, and consented to the data practices described in this Policy. If you do not agree with any provision of this Policy, you must discontinue use of the Platform immediately and may request account closure in accordance with our Terms & Conditions.
Note: This Policy should be read alongside our Terms & Conditions. In the event of any conflict between this Policy and the Terms & Conditions regarding data-related matters, this Policy takes precedence.
For the purposes of this Policy, the following terms carry the meanings defined below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, location data, and online identifiers. |
| "Processing" | Any operation performed on personal data, including collection, storage, organisation, use, disclosure, transfer, or deletion. |
| "Data Controller" | Mahkota88, as the entity that determines the purposes and means of processing personal data collected through the Platform. |
| "Data Processor" | Any third-party service provider that processes personal data on behalf of Mahkota88, subject to a data processing agreement. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their personal data. |
| "Cookies" | Small text files placed on your device by the Platform or third-party services to store session information, preferences, and usage data. |
| "KYC" | Know Your Customer — identity and age verification documentation collected to comply with anti-money laundering and responsible gambling obligations. |
Mahkota88 collects the following categories of personal data in connection with account registration, platform use, and regulatory compliance:
| Category | Examples |
|---|---|
| Identity Data | Full legal name, date of birth, nationality, Malaysian MyKad or passport number, photographs submitted for KYC verification. |
| Contact Data | Email address, mobile phone number, residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam). |
| Financial Data | Bank account details, e-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay), cryptocurrency wallet addresses, transaction history, deposit and withdrawal records. |
| Technical Data | IP address, device type and model, browser type and version, operating system, session timestamps, geolocation data (where permitted). |
| Usage Data | Pages visited, games played, betting history, session duration, promotional offers claimed, support interactions. |
| Communications Data | Live chat transcripts, email correspondence, customer support ticket content. |
| Responsible Gambling Data | Self-exclusion requests, deposit limit settings, loss limit configurations, session time preferences. |
Mahkota88 collects personal data through the following channels:
Mahkota88 processes your personal data for the following purposes and on the corresponding legal bases:
| Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of contract |
| Processing deposits, withdrawals, and transaction records | Performance of contract |
| KYC identity and age verification | Legal obligation; legitimate interests |
| Anti-money laundering (AML) and fraud screening | Legal obligation; legitimate interests |
| Responsible gambling monitoring and interventions | Legal obligation; legitimate interests |
| Customer support and dispute resolution | Performance of contract; legitimate interests |
| Platform security and technical troubleshooting | Legitimate interests |
| Sending promotional communications (with opt-in) | Consent |
| Analytics and platform performance improvement | Legitimate interests |
| Compliance with regulatory or court orders | Legal obligation |
Mahkota88 does not use your personal data for automated decision-making processes that produce legal or similarly significant effects without human review, except where required by AML or fraud prevention obligations.
Personal data is retained only for as long as is necessary to fulfil the purposes for which it was collected. The following general retention periods apply:
Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any identified individual.
Mahkota88 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients in the circumstances described:
All third-party data processors engaged by Mahkota88 are bound by data processing agreements requiring them to maintain appropriate technical and organisational security measures and to process personal data only on our documented instructions.
Mahkota88 uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage objects) to deliver, maintain, and improve the Platform. The following categories of cookies are used:
Mahkota88 does not use third-party advertising cookies or cross-site tracking technologies. You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform.
Mahkota88 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:
Notwithstanding the foregoing, no method of electronic transmission or storage is completely secure. While Mahkota88 makes every commercially reasonable effort to protect your data, we cannot guarantee absolute security. In the event of a security breach affecting your personal data, we will notify you as required by applicable law.
Subject to applicable data protection law, you hold the following rights in respect of your personal data held by Mahkota88:
To exercise any of the above rights, please contact our Data Protection team using the contact details provided in Section 14 of this Policy. We will verify your identity before processing any data subject request and will respond within 30 calendar days. Complex requests may require an extension of up to a further 60 days, in which case you will be notified of the delay and the reason for it.
Please note: Certain rights, including the right to erasure, may be limited where Mahkota88 is required to retain data to comply with legal obligations under anti-money laundering legislation, regulatory requirements, or court orders.
Mahkota88 is strictly for individuals aged 21 years and above. We do not knowingly collect or process personal data from individuals below this age threshold. Age verification is a mandatory step in the KYC process and must be completed before a player may make their first withdrawal.
Where Mahkota88 reasonably suspects that an account holder may be under the age of 21, the account will be suspended pending age verification. If verification confirms that the account holder is underage, the account will be permanently closed, all deposits refunded to the original payment method where technically feasible, and any winnings forfeited. The incident may be referred to relevant authorities.
Parents and guardians are encouraged to utilise parental control software and digital access management tools to prevent minors from accessing online gambling platforms. If you believe a minor has registered an account on Mahkota88, please contact our support team immediately.
Mahkota88 operates in an international environment and, as such, your personal data may be transferred to and processed in countries other than Malaysia, including countries where data protection laws may differ from those applicable in your jurisdiction.
When we transfer personal data internationally, we implement appropriate safeguards to ensure that the receiving party maintains a level of data protection consistent with this Policy and applicable law. These safeguards may include contractual protections with data processors, transfer mechanisms recognised under applicable data protection frameworks, or reliance on adequacy decisions where applicable.
By using the Mahkota88 Platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Malaysia as described in this section.
Mahkota88 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or operational requirements. Material changes will be communicated to registered players via their registered email address at least 7 days prior to the changes taking effect, where practicable.
The most current version of this Policy will always be available at mahkota88.cam/privacy-policy. The "Last Updated" date at the top of this document reflects the date of the most recent revision. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated Policy.
If you object to any material changes to this Policy, you must discontinue use of the Platform and may request account closure in accordance with our Terms & Conditions.
If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have a concern about how your personal data is being handled by Mahkota88, please contact us using the following channel:
When submitting a data subject access request or rights exercise request, please include your full name, registered email address, and a description of the request so that we can verify your identity and process your request efficiently. We will acknowledge receipt within 5 business days and provide a substantive response within 30 calendar days.
For concerns relating to responsible gambling data, including self-exclusion records or deposit limit settings, please visit our Responsible Gambling page for additional guidance and support resources.
All data-related communications are handled with strict confidentiality by our Data Protection team. We do not share the contents of data subject requests with any external party other than as required by applicable law.
Now that you understand how we handle your data, explore Malaysia's premier online gaming destination — built on trust, transparency, and over eight years of player-first operations. For players aged 21 and above only.