Privacy Policy

Section 01

Introduction

menu888 ("we", "us", "our", "the Platform") is committed to protecting the personal data of everyone who interacts with our online gaming services, whether as a registered member, a visitor to menu888.cam, or a user of any related applications or features. This Privacy Policy explains what personal data we collect, why we collect it, how we process and store it, and what rights you have over your own information.

This Policy applies to all personal data collected by menu888 in connection with the provision of online casino, sports betting, live dealer, and instant-game services to users in Malaysia and other jurisdictions where the Service is made available. It should be read alongside our Terms & Conditions, which govern the overall relationship between menu888 and its users.

By registering a menu888 account, depositing funds, or otherwise using the Service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent to these practices, you should not use the Service.

Section 02

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

• Personal Data — any information relating to an identified or identifiable natural person ("data subject"), including name, identification number, contact details, financial data, behavioural data, and any other information that can directly or indirectly identify an individual.
• Processing — any operation or set of operations performed on personal data, including collection, recording, storage, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• Data Controller — menu888, the entity that determines the purposes and means of processing personal data collected via the Service.
• Data Processor — any third party that processes personal data on behalf of menu888 under a contractual data-processing agreement, such as KYC verification providers, payment processors, and cloud infrastructure providers.
• Consent — a freely given, specific, informed, and unambiguous indication by the data subject that they agree to the processing of their personal data for one or more specified purposes.
• Cookies — small text files placed on a user's device by a website to store session state, preferences, and analytical data.
• KYC — Know Your Customer; the identity, age, and source-of-funds verification process required under the Platform's compliance obligations.

Section 03

Data We Collect

menu888 collects personal data that falls into the following categories. We limit collection to what is necessary and proportionate for the purposes described in Section 5.

Section 04

How We Collect Your Data

menu888 collects personal data through the following means:

• Direct submission — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or voluntarily provide information through any platform feature.
• Automated collection — through cookies, web beacons, session tracking technologies, and server logs when you access or use the Service. These technologies collect technical and behavioural data automatically. See Section 8 for details.
• Third-party sources — from KYC verification partners, fraud-prevention service providers, payment processors, and publicly available databases (e.g., sanction screening lists) where necessary to verify your identity or comply with regulatory obligations.
• Payment providers — transaction confirmation data received from payment partners including FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency processing partners, sufficient to confirm deposit and withdrawal status.

Section 05

Purposes of Processing

menu888 processes your personal data for the following specific purposes:

1. Account creation and management — to create, maintain, and administer your registered account, including password management and account security settings.
2. Identity and age verification (KYC) — to verify that you are at least 21 years of age and to confirm your identity in compliance with our licensing and regulatory obligations.
3. Transaction processing — to process deposits via Touch 'n Go, Boost, GrabPay, DuitNow, FPX, bank transfer, and cryptocurrency, and to process withdrawal requests to your nominated payment method.
4. Fraud detection and prevention — to monitor account activity for signs of fraud, money laundering, multi-accounting, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
5. Responsible gambling compliance — to monitor gaming patterns and identify users who may be at risk of problem gambling, and to implement deposit limits, cooling-off periods, and self-exclusion where requested or required.
6. Customer support — to respond to your enquiries, resolve disputes, and provide assistance via live chat, email, or WhatsApp in English, Bahasa Melayu, and Mandarin Chinese.
7. Legal and regulatory compliance — to comply with applicable laws, regulations, licensing requirements, court orders, and requests from competent authorities.
8. Platform improvement and analytics — to analyse aggregated, anonymised usage data to improve the platform's features, performance, and user experience.
9. Marketing communications — to send promotional offers, bonus notifications, and platform updates to users who have provided explicit consent to receive such communications. You may opt out at any time.

Section 06

Legal Basis for Processing

menu888 relies on one or more of the following legal bases when processing your personal data, depending on the specific purpose:

• Contractual necessity — processing required to fulfil our contractual obligations to you under the Terms & Conditions, including account management, transaction processing, and KYC verification.
• Legal obligation — processing required to comply with applicable legal and regulatory requirements, including anti-money-laundering obligations, age verification requirements, and responses to lawful authority requests.
• Legitimate interests — processing conducted for menu888's legitimate business interests, including fraud prevention, platform security, and service improvement, provided that such interests are not overridden by your privacy rights.
• Consent — processing for marketing communications and non-essential cookies, which is carried out only where you have provided clear, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Section 07

Data Sharing & Third Parties

menu888 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with third parties only in the following circumstances:

• Service providers and Data Processors — we engage third-party companies to perform functions on our behalf, including KYC verification providers, payment processors, cloud hosting infrastructure providers, fraud-screening services, and customer support platform operators. These parties are bound by data-processing agreements and may only process your data as instructed by menu888.
• Payment partners — transaction data is shared with payment processors such as FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, and cryptocurrency network processors to the extent required to complete your requested financial transactions.
• Regulatory and legal disclosures — we may disclose personal data to competent regulatory authorities, law enforcement agencies, courts, or other governmental bodies where required or permitted by applicable law, or where we believe disclosure is necessary to protect the rights, property, or safety of menu888, its users, or the public.
• Business transfers — in the event of a merger, acquisition, restructuring, or sale of all or substantially all of menu888's assets, personal data may be transferred to the successor entity, subject to equivalent privacy protections.
• With your explicit consent — for any other purpose not listed above, only where you have provided prior explicit consent.

Section 08

Cookies & Tracking Technologies

menu888 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain session security, and understand how users interact with the Service. Cookies are small text files stored on your device when you visit the platform.

We use the following categories of cookies:

• Strictly Necessary Cookies — essential for the platform to function. These cookies enable session management, login authentication, and security features. They cannot be disabled without preventing you from using the Service.
• Functional Cookies — remember your preferences such as language selection, preferred game categories, and display settings to provide a more personalised experience.
• Analytical Cookies — collect anonymised data about how users interact with the platform (e.g., pages visited, time spent, errors encountered) to help us improve performance and usability.
• Security Cookies — used for fraud detection, device fingerprinting, and identifying suspicious login attempts or unusual account activity patterns.

You may control cookie settings through your browser preferences. However, disabling strictly necessary cookies may impair or entirely prevent your ability to use the Service. menu888 does not use third-party advertising cookies or cross-site tracking for behavioural advertising purposes.

Section 09

Data Retention

menu888 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention guidelines apply:

• Active account data — retained for the duration of the account relationship and for a minimum of five (5) years following account closure, to satisfy anti-money-laundering record-keeping requirements.
• KYC documentation — retained for a minimum of five (5) years from the date of verification, in accordance with applicable financial crime compliance standards.
• Transaction records — retained for a minimum of five (5) years from the date of each transaction, as required for financial audit and regulatory reporting purposes.
• Customer support records — retained for three (3) years from the date of the relevant interaction, to support dispute resolution and quality management.
• Marketing consent records — retained for the duration of the consent period and for two (2) years following withdrawal of consent, as evidence of the consent obtained.

Where personal data is no longer required for any active purpose and retention is not mandated by law, menu888 will securely delete or anonymise the data so that it can no longer be attributed to an identified individual.

Section 10

Data Security

menu888 implements a layered security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our technical and organisational security measures include:

• TLS 1.3 encryption for all data transmitted between your device and our servers;
• AES-256 encryption for personal data stored at rest on our infrastructure;
• Role-based access controls ensuring that only authorised personnel can access personal data, on a strict need-to-know basis;
• Two-factor authentication (2FA) options for registered user accounts;
• Regular penetration testing and security audits of the platform infrastructure;
• Automated monitoring for suspicious access patterns and anomalous account behaviour;
• Staff training on data protection and information security practices.

Notwithstanding these measures, no method of internet transmission or digital storage is entirely immune to risk. menu888 cannot guarantee absolute security and is not responsible for security breaches caused by factors outside our reasonable control, including user negligence in protecting login credentials.

In the event of a personal data breach that poses a risk to your rights and freedoms, menu888 will notify affected users and relevant authorities in accordance with applicable data protection obligations and within the timeframes prescribed by law.

Section 11

Your Rights

Subject to applicable law and certain limited exceptions (such as where processing is required for legal compliance or fraud prevention), you have the following rights in respect of your personal data held by menu888:

To exercise any of these rights, contact our support team via Live Chat or email at [email protected] (plain text — not a clickable link). We will respond to verified requests within thirty (30) days. We may request proof of identity before processing any data rights request to protect against unauthorised access to personal data.

Section 12

Children's Privacy

The menu888 platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. Our registration process includes mandatory age verification, and we conduct KYC checks to confirm that all users meet this minimum age requirement.

If we discover or are notified that personal data has been collected from a person who does not meet our minimum age requirement, we will immediately suspend the associated account, delete the data in question, and take appropriate action in accordance with our Terms & Conditions. If you believe a minor has registered on the platform, please contact us immediately via Live Chat.

Section 13

International Data Transfers

menu888 operates globally and may store or process your personal data on servers located outside of Malaysia. In such cases, we take appropriate safeguards to ensure that your personal data receives the same level of protection as it would under applicable Malaysian and international data protection standards.

Safeguards applied to international data transfers include:

• Contractual data-processing agreements with all third-party processors that impose obligations equivalent to those in this Privacy Policy;
• Restriction of data transfers to countries or entities that provide an adequate level of data protection, assessed on a case-by-case basis;
• Technical controls including end-to-end encryption of data in transit and at rest, regardless of geographic location of processing.

By using the Service, you acknowledge and consent to the transfer of your personal data to processing locations outside Malaysia where this is necessary to provide the Service, subject to the safeguards described above.

Section 14

Policy Amendments

menu888 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered users by email to their registered address and publish a prominent notice on the platform at least seven (7) days before the changes take effect, except where an immediate change is required to comply with applicable law.

The "Last Updated" date at the top of this page reflects the most recent revision. Your continued use of the Service following the effective date of any amendment constitutes your acceptance of the updated Policy. If you do not agree to the revised terms, you must cease using the Service and may request account closure by contacting our support team.

We encourage you to review this page periodically. Previous versions of this Privacy Policy may be obtained on request by contacting support.

Section 15

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by menu888, please contact our support team using the details below. All privacy-related enquiries are handled by our dedicated data protection team.

• Live Chat: Available 24 hours a day, 7 days a week via the platform. This is the fastest way to reach our team — average response time under 5 minutes.
• Email: [email protected] (plain text only — not a clickable link). We respond to privacy-related email enquiries between 9 AM and 11 PM MYT (UTC+8).
• Subject line for data rights requests: When emailing regarding a data rights request (access, correction, deletion, etc.), please use the subject line "Privacy — Data Rights Request" to ensure prompt routing to the correct team.
• Response time: We will acknowledge receipt of all written privacy requests within two (2) business days and provide a substantive response within thirty (30) calendar days.