mq88 Privacy Policy

1. Introduction

mq88 ("we", "us", "the Platform") is committed to protecting the privacy and personal data of all individuals who interact with the mq88 Platform at mq88.bio and its associated mobile applications ("Platform"). This Privacy Policy ("Policy") sets out in detail how mq88 collects, uses, stores, discloses, and protects your personal data.

This Policy applies to all registered Players, prospective Players who browse the Platform without registering, and any other individuals whose personal data mq88 processes in connection with Platform operations. By registering an Account or using the mq88 Platform, you confirm that you have read and understood this Policy.

This Policy should be read in conjunction with the mq88 Terms & Conditions and Responsible Gaming Policy.

2. Data Controller

For the purposes of applicable data protection legislation, mq88 acts as the data controller in respect of all personal data collected through the Platform. As data controller, mq88 determines the purposes and means of processing your personal data in accordance with its international gaming authority licence obligations and applicable law.

If you have any questions or concerns regarding the processing of your personal data, you may contact our data protection contact at: [email protected]

3. Personal Data We Collect

mq88 collects personal data through the following means: (a) information you provide directly during registration and account management; (b) information generated automatically through your use of the Platform; and (c) information received from third parties as part of our verification and compliance processes.

3.1 Data You Provide to Us

• Registration data: full name, date of birth, gender, residential address, email address, telephone number, and chosen username.
• Identity verification (KYC) documents: copies of government-issued identity documents (NRIC, passport, or driving licence), proof of address documents, and where required, source of funds documentation.
• Financial data: bank account details, e-wallet identifiers (Touch 'n Go, Boost, GrabPay, DuitNow), and transaction records including deposit amounts and withdrawal requests.
• Communications data: records of your correspondence with mq88 support, including live chat transcripts and email exchanges.

3.2 Data Collected Automatically

• Technical data: IP address, device type, operating system, browser type and version, and screen resolution.
• Usage data: pages visited, games played, session duration, bet history, login timestamps, and navigation paths within the Platform.
• Cookie and tracking data: session identifiers, preference cookies, and analytics data as further described in Section 9.
• Geolocation data: approximate location derived from IP address, used for jurisdictional compliance purposes.

3.3 Data from Third Parties

• Identity and age verification results from third-party KYC service providers.
• Fraud screening and sanctions screening results from compliance service providers.
• Payment confirmation data from payment processors and financial institutions, including Maybank, CIMB, Public Bank, and Malaysian e-wallet providers.

4. How mq88 Uses Your Personal Data

The table below summarises the primary purposes for which mq88 processes your personal data:

5. Legal Basis for Processing

mq88 processes personal data only where a lawful legal basis exists. The principal legal bases mq88 relies upon are:

• Performance of a contract: processing necessary to register your Account, operate your Account, process transactions, and deliver the gaming services you have requested.
• Legal obligation: processing required to comply with applicable laws and regulations, including KYC obligations, AML reporting requirements, and the record-keeping requirements of our international gaming authority licence.
• Legitimate interests: processing necessary for mq88's legitimate interests in operating a secure and compliant gaming platform, preventing fraud, and improving Platform performance — provided such interests are not overridden by your rights and interests.
• Consent: where mq88 relies on consent as a legal basis (for example, for certain marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

mq88 does not sell, rent, or trade your personal data. We share personal data only in the following circumstances:

• Service providers: third-party suppliers engaged to support Platform operations, including KYC and identity verification providers, payment processors, fraud detection services, IT infrastructure providers, and customer support platform operators. All service providers are bound by data processing agreements requiring them to handle your data securely and only as instructed by mq88.
• Game providers: licensed game studios whose content is available on the mq88 Platform may receive limited data (such as a pseudonymous player identifier and session token) necessary to operate their games. Game providers do not receive your full identity details.
• Regulatory and law enforcement authorities: mq88 may disclose personal data to gaming regulators, financial intelligence units, law enforcement agencies, and courts where required to do so by law, court order, or regulatory requirement — including AML and counter-terrorism financing reporting obligations.
• Business transfers: in the event of a merger, acquisition, or sale of all or part of mq88's business, personal data may be transferred to the acquiring entity, subject to the same protections as described in this Policy.

7. International Data Transfers

7.1 mq88 operates internationally and some of the service providers and infrastructure used to deliver the Platform are located outside Malaysia. Your personal data may therefore be transferred to, stored in, and processed in countries other than Malaysia.

7.2 Where personal data is transferred outside Malaysia to countries that do not provide an equivalent level of data protection, mq88 takes appropriate safeguards to ensure that your data receives a consistent level of protection. Such safeguards may include contractual clauses requiring the recipient to protect your data to standards equivalent to those required by applicable Malaysian data protection legislation.

8. Data Retention

8.1 mq88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting requirements.

8.2 For active Account holders, mq88 retains account and transaction data for the duration of the Account relationship and for a minimum period of five (5) years following Account closure, in compliance with our international gaming authority licence record-keeping requirements and applicable AML legislation.

8.3 KYC identity documents are retained for a minimum of five (5) years following the end of the business relationship, as required by applicable AML legislation.

8.4 Communications data (live chat transcripts, email correspondence) is retained for a period of three (3) years from the date of the communication.

8.5 Data held solely on the basis of consent will be deleted promptly upon withdrawal of consent, unless retention is required for another lawful purpose.

9. Cookies & Tracking Technologies

9.1 mq88 uses cookies and similar tracking technologies (including local storage and session tokens) to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform.

9.2 The categories of cookies used on the mq88 Platform include:

• Strictly necessary cookies: essential for the Platform to function, including session management cookies that keep you logged in during your visit. These cannot be disabled without rendering the Platform non-functional.
• Performance and analytics cookies: used to collect anonymised information about how Players use the Platform, including pages visited and errors encountered, to help mq88 improve the Platform experience.
• Functional cookies: used to remember your preferences, such as language settings and preferred lobby view, to personalise your experience.

9.3 You can control and manage cookies through your browser settings. Note that disabling certain cookies may affect your ability to use features of the mq88 Platform, including maintaining a logged-in session.

10. Security Measures

10.1 mq88 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• TLS 1.3 encryption for all data in transit between your device and the mq88 Platform.
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial records.
• Role-based access controls limiting staff access to personal data to those with a legitimate operational need.
• Multi-factor authentication requirements for staff access to systems holding personal data.
• Regular independent security assessments and penetration testing of Platform infrastructure.
• Audit logging of access to systems holding sensitive personal data.

10.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, mq88 will notify affected individuals and relevant regulatory authorities in accordance with applicable data protection legislation.

11. Your Data Protection Rights

Subject to applicable data protection legislation and certain exemptions, you have the following rights in respect of your personal data processed by mq88:

• Right of access: you may request a copy of the personal data mq88 holds about you.
• Right to rectification: you may request correction of any inaccurate or incomplete personal data.
• Right to erasure: you may request deletion of your personal data where there is no longer a lawful basis for mq88 to hold it. Note that certain data must be retained to comply with regulatory obligations and cannot be deleted on request.
• Right to restrict processing: you may request that mq88 limit the processing of your personal data in certain circumstances.
• Right to data portability: you may request a copy of the personal data you provided to mq88 in a structured, commonly used, machine-readable format.
• Right to object: you may object to processing of your personal data where mq88 relies on legitimate interests as the legal basis for processing.
• Right to withdraw consent: where processing is based on consent, you may withdraw that consent at any time.

To exercise any of the above rights, please contact mq88 support. We will respond to verified requests within thirty (30) days of receipt. We may need to verify your identity before processing a data rights request.

12. Children's Privacy and Minimum Age

12.1 The mq88 Platform is strictly for adults aged 21 years and above. mq88 does not knowingly collect or process personal data relating to children or individuals under the age of 21. All Account registrations are subject to age verification through the KYC process.

12.2 If mq88 discovers that personal data has been collected from an individual under the age of 21, the associated Account will be immediately closed, all data will be deleted or anonymised as soon as practicable, and any funds deposited will be returned through appropriate channels.

13. Third-Party Links

The mq88 Platform may contain references to or integrations with third-party services (for example, payment processing interfaces). mq88 is not responsible for the privacy practices of third-party services. We recommend that you review the privacy policies of any third-party services you interact with in connection with your mq88 Account.

14. Changes to This Privacy Policy

14.1 mq88 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or operational changes to the Platform. Material changes will be communicated to registered Players by email to the registered address and by notice on the Platform.

14.2 The effective date at the top of this Policy indicates when the current version was last updated. Your continued use of the mq88 Platform following the effective date of any updates constitutes your acknowledgement of the revised Policy.

15. Contact & Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, or wish to raise a concern about mq88's data processing practices, please contact our support team: