meha888 takes the privacy of its users seriously. This Privacy Policy explains precisely what personal data we collect, how we use it, who we share it with, how long we keep it, and what rights you have over your own information. Please read it carefully before using our platform.
This Privacy Policy ("Policy") is issued by meha888 ("we", "us", "our", "Platform"), the operator of the online casino and sports betting platform accessible at meha888.cam. This Policy governs the collection, storage, processing, use, and disclosure of personal data submitted by or collected from users ("you", "User", "Player") who access or register on the Platform.
meha888 is committed to handling personal data responsibly, transparently, and in accordance with the principles set out in its international licensing obligations and broadly accepted data protection standards. While meha888 primarily serves users in Malaysia, it operates as an internationally licenced platform and applies data handling practices consistent with international frameworks.
By registering an Account on meha888, making a deposit, or otherwise using the Platform's services, you acknowledge that you have read, understood, and agreed to the data practices described in this Policy. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact our support team to arrange Account closure.
Our commitment: meha888 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Your data is used solely in connection with operating a safe, compliant, and functional gaming platform for you.
For the purposes of this Privacy Policy, the following definitions apply:
meha888 collects Personal Data across several categories, depending on your level of engagement with the Platform. The categories below describe the data we may hold about you:
meha888 collects Personal Data through the following channels:
The table below summarises the primary purposes for which meha888 processes your Personal Data:
| Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account registration and management | Registration data, identity data | Contract performance |
| KYC age and identity verification | KYC documents, identity data | Legal obligation; contract |
| Processing deposits and withdrawals in MYR | Financial data, payment identifiers | Contract performance |
| Fraud prevention and AML compliance | Financial data, technical data, KYC data | Legal obligation |
| Game provision and platform operation | Gaming data, technical data | Contract performance |
| Customer support and complaint resolution | Communications data, account data | Contract; legitimate interest |
| Responsible gambling monitoring and tools | Gaming data, account data, behavioural data | Legal obligation; legitimate interest |
| Platform analytics and service improvement | Technical data, gaming data (aggregated) | Legitimate interest |
| Marketing communications (where consented) | Registration data, preferences | Consent |
| Security monitoring and incident response | Technical data, session logs | Legitimate interest; legal obligation |
meha888 does not use your Personal Data for automated decision-making that produces legal or similarly significant effects, except in the context of fraud detection systems where flagged Accounts may be temporarily suspended pending manual review.
meha888 processes Personal Data under the following legal bases:
meha888 does not sell or rent your Personal Data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual protections:
meha888 operates under an international gaming licence and its infrastructure may involve the transfer of Personal Data to servers or processors located outside Malaysia. Where such transfers occur, meha888 takes appropriate measures to ensure that your Personal Data is protected to a standard consistent with the protections described in this Policy, including through contractual data processing agreements with all third-party processors.
Malaysian users should be aware that Malaysia's Personal Data Protection Act 2010 (PDPA) applies to the processing of personal data in commercial transactions by data processors within Malaysia. While meha888 respects the principles underlying the PDPA and endeavours to apply equivalent standards, as an internationally licenced offshore platform it operates under the jurisdiction of its licensing authority rather than under Malaysian domestic regulatory oversight.
meha888 retains Personal Data for as long as necessary to fulfil the purposes described in this Policy, or for such longer periods as are required by our licensing obligations, anti-money laundering regulations, or other applicable legal requirements. The general retention schedule is as follows:
Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in accordance with our data lifecycle procedures.
meha888 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies deployed are described below:
You may manage cookie preferences through your browser settings. Note that disabling cookies beyond strictly necessary types may affect the performance and functionality of the Platform. meha888 does not operate a separate cookie consent banner at this time; continued use of the Platform constitutes acceptance of the cookie usage described in this section.
As a User of meha888, you have the following rights with respect to your Personal Data. To exercise any of these rights, please contact our support team via live chat or by email at [email protected].
You have the right to request a copy of the Personal Data we hold about you. We will provide this in a portable, readable format within 30 days of a verified request.
You may request correction of any Personal Data that is inaccurate or incomplete. For identity and KYC data, rectification may require submission of updated supporting documents.
You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent. This right is subject to our legal retention obligations — data required for AML compliance cannot be erased ahead of schedule.
You may request that we restrict processing of your data in certain circumstances — for example, while a rectification request is under review, or where you have objected to processing and a determination is pending.
Where processing is based on consent or contract, you may request your data in a structured, commonly used, machine-readable format to transfer to another service provider.
You may object to processing carried out on the basis of legitimate interests, including any profiling for marketing purposes. Upon receiving an objection, we will cease that processing unless we can demonstrate a compelling legitimate ground that overrides your rights.
Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.
We will respond to all verified rights requests within 30 calendar days. For complex requests, we may extend this period by a further 30 days with notification. There is no charge for submitting a rights request.
meha888 is strictly prohibited to individuals under the age of 21. We do not knowingly collect Personal Data from anyone under 21 years of age. Mandatory KYC age verification is applied to every Account registration to enforce this requirement.
If we become aware that Personal Data has been collected from a person under the age of 21, we will immediately suspend the relevant Account, delete all associated Personal Data to the extent permitted by our legal obligations, and refund any deposits made by that individual.
21+ only. If you believe a minor has registered on meha888, please contact our support team immediately via live chat so we can investigate and act promptly.
meha888 implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, loss, alteration, disclosure, or destruction. These measures include:
Notwithstanding the above, no internet transmission or electronic storage system can be guaranteed to be 100% secure. meha888 cannot guarantee absolute security and accepts no liability for breaches caused by events outside our reasonable control. You are responsible for maintaining the confidentiality of your Account credentials and for notifying us immediately if you suspect unauthorised access.
The meha888 Platform does not include links to third-party websites unrelated to gaming services. However, the Platform integrates with third-party payment gateways and identity verification systems as described in Section 7. When you interact with these services (for example, completing a payment transaction via your Maybank2u or Touch 'n Go eWallet interface), you are temporarily engaging with that third party's own platform and privacy practices.
meha888 is not responsible for the privacy practices or content of third-party service providers. We encourage you to review the privacy policies of your chosen payment provider before completing transactions.
meha888 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or the services we offer. Material changes to this Policy will be communicated to registered Users via the email address associated with their Account, with a minimum of seven (7) days' advance notice before the revised Policy takes effect.
The "Last Updated" date displayed at the top of this page reflects the effective date of the current version. We recommend reviewing this Policy periodically. Your continued use of the Platform after the effective date of any update constitutes acceptance of the revised Policy.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the meha888 support team through the following channels:
When submitting a data rights request or privacy-related complaint, please include your registered Account username, a clear description of your request, and any relevant reference numbers. Our team will acknowledge receipt within 24 hours and provide a substantive response within 30 calendar days.
A summary of the most important privacy commitments we make to every meha888 player.
All data transmitted between your device and meha888 servers is protected by 256-bit SSL/TLS encryption. Your financial details, credentials, and personal information travel securely at every step.
meha888 does not sell, rent, or trade your personal data to third parties for marketing purposes. Your data is used solely to operate and improve the Platform — nothing more.
You have the right to access, correct, delete, or export your personal data. Submit a request via live chat or email and we'll respond within 30 days — at no charge.
We don't hold your data indefinitely. Clear retention schedules apply to every data category — from 12 months for technical logs to 5 years for AML-required records. Data is securely deleted or anonymised at the end of each period.
Personal data is only shared with third parties where strictly necessary — payment processors like DuitNow and FPX operators, KYC verification providers, and legal authorities where required by law. All processors are contractually bound.
We only send promotional communications where you have explicitly opted in. You can withdraw marketing consent at any time through your Account settings or by contacting support — with immediate effect.
Our support team is available 24/7 via live chat and ready to assist with any data rights requests, privacy queries, or Account-related concerns. You can also review our full Terms & Conditions or visit our homepage.