Privacy Policy

MSK88 ("MSK88", "we", "us", "our") operates the online gaming and sports betting platform accessible at https://msk88.cam. We are committed to protecting the privacy and personal data of all individuals who interact with our platform, including registered players, visitors, and prospective members ("you", "your", "Data Subject").

This Privacy Policy ("Policy") describes the categories of personal data we collect, the purposes for which we process that data, the legal bases on which processing is conducted, the circumstances under which data may be disclosed to third parties, the security measures we employ to protect your information, and the rights you hold in relation to your personal data.

By registering an account on the MSK88 platform, accessing any part of our website, or otherwise engaging with our services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gambling Policy.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" — Any information that identifies or can reasonably be used to identify a natural person, directly or indirectly. This includes but is not limited to name, identification number, contact details, IP address, device identifiers, and financial account information.
• "Processing" — Any operation performed on personal data, including collection, recording, storage, use, disclosure, transmission, alteration, or deletion.
• "Data Controller" — The entity that determines the purposes and means of processing personal data. For the purposes of this Policy, MSK88 is the Data Controller in respect of personal data collected through the Platform.
• "Data Processor" — A third party that processes personal data on behalf of the Data Controller under contractual obligation and in accordance with the Controller's instructions.
• "Sensitive Personal Data" — A subset of personal data warranting heightened protection, including financial information, identity document data, and any data that could be used to commit identity fraud.
• "Cookies" — Small data files stored on your device by a website visit, used to remember preferences, session information, and usage patterns for functional or analytical purposes.
• "Platform" — The MSK88 website at https://msk88.cam and all associated pages, sub-domains, mobile interfaces, and services.

MSK88 collects personal data through several channels in the course of providing its services. The categories of data collected are described below.

3.1 Data Provided Directly by You

When you register an account, complete KYC verification, contact our support team, or interact with promotional features, you may provide the following categories of personal data:

3.2 Data Collected Automatically

When you access or use the MSK88 Platform, we automatically collect certain technical and behavioural data:

• Device & Technical Data: IP address, device type and model, operating system, browser type and version, screen resolution, and device identifiers
• Usage Data: Pages visited, game sessions played, betting history, session duration, click patterns, and navigation paths within the Platform
• Geolocation Data: Approximate geographic location derived from IP address (used for jurisdiction verification and fraud prevention — we do not collect precise GPS location)
• Log Data: Server access logs, error logs, and transaction logs maintained for security, fraud prevention, and regulatory compliance purposes
• Cookie and Tracking Data: Session cookies, preference cookies, and analytical cookies as described in Section 9 of this Policy

MSK88 processes your personal data for the following specific purposes:

4.1 Account Management and Service Delivery

We use your identity, contact, and account data to create and maintain your MSK88 account, authenticate your identity upon login, process deposits and withdrawals, deliver game access, administer promotional offers, and provide all core Platform services.

4.2 Identity Verification and KYC Compliance

Identity document data, financial data, and identity data are used to verify your identity, confirm your age (21+), verify ownership of payment methods, and fulfil our obligations under applicable anti-money laundering (AML) and counter-terrorism financing (CTF) regulations. KYC data is handled with the highest level of security and access controls.

4.3 Fraud Prevention and Security

Technical data, geolocation data, usage data, and transaction data are used to detect and prevent fraudulent activity, identify duplicate account creation, investigate suspicious transactions, enforce our Terms and Conditions, and maintain the security and integrity of the Platform and our player community.

4.4 Customer Support

Support communication data and account data are used to respond to your enquiries, resolve disputes, process complaints, and improve the quality of our support services. Support interactions may be recorded and retained for quality assurance and training purposes.

4.5 Responsible Gambling Management

Usage data, gaming behaviour data, and account data are used to administer responsible gambling tools including deposit limits, loss limits, self-exclusion, and cooling-off periods. This data is also used to identify patterns that may indicate problem gambling behaviour, enabling our team to proactively reach out with support information where appropriate.

4.6 Legal and Regulatory Compliance

Personal data across all categories may be processed to the extent required to comply with applicable laws, regulations, court orders, and lawful requests from competent regulatory authorities. This includes retention of transaction records and account data for the periods required under applicable financial regulations.

4.7 Platform Improvement and Analytics

Aggregated and anonymised usage data is used to analyse Platform performance, improve user experience, optimise game selection, and develop new features. Where data is anonymised to a degree that individuals cannot be re-identified, it falls outside the scope of this Privacy Policy.

4.8 Marketing Communications

Where you have provided explicit consent or where we have a legitimate interest, we may use your contact data to send promotional communications about MSK88 offers, bonuses, and platform updates. You may withdraw consent to marketing communications at any time by contacting our support team or by following the unsubscribe instructions included in any marketing email.

MSK88 processes personal data on the basis of one or more of the following legal grounds:

• Contractual Necessity: Processing necessary to perform the contract between MSK88 and the Player — including account management, payment processing, game access, and support services.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML/CTF obligations, age verification requirements, and regulatory reporting duties.
• Legitimate Interests: Processing conducted in the legitimate interests of MSK88 or our player community, where those interests are not overridden by your fundamental rights. This includes fraud prevention, Platform security, and analytical activities.
• Consent: Processing based on your freely given, specific, and informed consent, primarily in the context of marketing communications and non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

MSK88 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data with third parties only in the following circumstances:

6.1 Payment Service Providers

We share necessary transaction data with payment processing partners including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, FPX, and cryptocurrency network processors, solely for the purpose of processing your deposits and withdrawals. These providers act as independent data controllers or as our data processors under contractual data processing agreements.

6.2 Identity Verification Providers

KYC and identity verification may be facilitated by third-party identity verification service providers. These providers are contractually bound to process your identity data solely for verification purposes and to maintain security standards equivalent to those described in this Policy.

6.3 Regulatory and Law Enforcement Authorities

MSK88 may disclose personal data to regulatory authorities, law enforcement agencies, or other government bodies where required by applicable law, court order, or lawful regulatory request. Such disclosures will be limited to the information specifically required and will be subject to applicable legal protections.

6.4 Technology and Infrastructure Providers

We engage technology service providers including cloud hosting infrastructure, cybersecurity monitoring services, and customer support platform providers who may process certain personal data on our behalf as processors. All such providers are subject to contractual data processing agreements that restrict their use of personal data to purposes specified by MSK88 and require maintenance of appropriate security standards.

6.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of MSK88's business assets, personal data held by MSK88 may be transferred to the relevant acquiring entity. In such circumstances, MSK88 will notify affected players prior to the transfer and the acquiring entity will be required to honour the terms of this Privacy Policy or provide a materially equivalent level of protection.

MSK88 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the following retention principles:

• Active Account Data: Personal data associated with an active MSK88 account is retained for the duration of the account relationship and for a period of five (5) years following permanent account closure.
• Transaction and Financial Records: Transaction histories, deposit and withdrawal records, and financial account data are retained for a minimum of five (5) years from the date of each transaction to satisfy applicable financial regulatory obligations.
• KYC and Identity Documents: Identity verification documents are retained for five (5) years following account closure or the conclusion of the relevant regulatory retention obligation, whichever is later.
• Support Communications: Customer support records, chat transcripts, and correspondence are retained for a period of three (3) years from the date of the interaction.
• Technical and Log Data: Server logs, access logs, and security logs are retained for a period of twelve (12) months, after which they are securely deleted or irreversibly anonymised.
• Marketing Consent Records: Records of consent and withdrawal of consent for marketing communications are retained for the duration of the account relationship plus three (3) years to demonstrate compliance.

Where legal, regulatory, or judicial proceedings require retention beyond these standard periods, data will be retained for the duration of such proceedings and for a reasonable period thereafter.

MSK88 implements a layered approach to data security, employing technical, organisational, and procedural controls proportionate to the sensitivity of the personal data processed. Our security measures include, but are not limited to:

8.1 Technical Security Controls

• 256-bit SSL/TLS encryption for all data in transit between your device and MSK88 servers
• AES-256 encryption for sensitive personal data stored at rest in our databases
• Two-factor authentication (2FA) available to all account holders and mandatory for administrative staff
• Bcrypt or equivalent cryptographic hashing for stored account passwords — plain-text passwords are never stored
• Firewall protection, intrusion detection systems, and continuous security monitoring
• Regular vulnerability assessments and penetration testing by qualified security professionals

8.2 Organisational Security Controls

• Access to personal data is restricted to authorised personnel on a strict need-to-know basis
• All staff with access to personal data are required to complete data protection training
• Third-party vendors with access to personal data are subject to contractual data processing agreements and security audits
• A documented data breach response procedure is maintained, including notification protocols where required

MSK88 uses cookies and similar tracking technologies to operate and improve the Platform, maintain your session state, and understand how players interact with our services. The following categories of cookies are used:

You may manage cookie preferences through your browser settings. Blocking all cookies may affect Platform functionality. For browsers on mobile devices used to access MSK88 from Kuala Lumpur, Penang, or other Malaysian cities, the process for managing cookies is generally found under the browser's "Privacy" or "Site settings" menu.

Subject to applicable law and our legitimate operational requirements, you hold the following rights in relation to your personal data held by MSK88:

To exercise any of the above rights, please contact our support team at [email protected] or via live chat, stating clearly the right you wish to exercise and the specific data concerned. We will respond to all verified requests within 30 days. In complex cases, we may extend this period by a further 30 days with notice to you.

We may request proof of identity before processing a data rights request to ensure that personal data is not disclosed to, or actioned by, unauthorised parties.

The MSK88 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Registration of an account by a minor is prohibited under our Terms and Conditions.

Age verification procedures — including documentary KYC checks — are conducted to prevent minors from accessing the Platform. Where MSK88 discovers that personal data has been collected from an individual who is under 21 years of age, we will immediately suspend the relevant account, delete the associated personal data, and return any deposited funds to the source payment method where operationally possible.

If you have reason to believe that a minor has registered an account on MSK88, please contact our support team immediately at [email protected] so that we may investigate and take appropriate action.

MSK88 may transfer personal data to third-party service providers or infrastructure partners located outside of Malaysia in the course of providing its services. Such transfers may include cloud infrastructure hosting, payment processing partner operations, and technical support services.

Where personal data is transferred internationally, MSK88 takes appropriate steps to ensure that the transferred data is afforded a level of protection equivalent to that described in this Privacy Policy. These steps may include contractual data protection clauses, adherence to recognised international data transfer frameworks, or reliance on the adequacy of the recipient jurisdiction's data protection laws.

MSK88 does not transfer personal data to jurisdictions with demonstrably inadequate data protection standards without implementing appropriate contractual safeguards.

The MSK88 Platform may contain references to or integrations with third-party services, including payment processing interfaces provided by Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, and other Malaysian financial institutions. These third-party services operate under their own privacy policies and data practices, which are independent of MSK88.

When you interact with a third-party payment interface — including when you are redirected to your bank's online banking portal for an FPX transaction or authenticate through a third-party e-wallet — any data you provide to that third party is governed by their applicable privacy policy. MSK88 is not responsible for the privacy practices, data handling, or content of any third-party service.

We encourage you to review the privacy policies of any third-party services with which you interact in connection with your use of the MSK88 Platform.

MSK88 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or operational circumstances. Where amendments are material — meaning they substantially affect your rights or our obligations — MSK88 will provide advance notice through a prominent notification on the Platform and, where contact details are available, by email to registered account holders.

The revised Policy will take effect from the date specified in the notification, or from the date of publication where no specific effective date is stated. The version bearing the most recent "Last Updated" date at the top of this Policy shall supersede all prior versions.

Your continued use of the MSK88 Platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy. If you do not agree to any amendment, you should cease using the Platform and may request voluntary account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or to MSK88's handling of your personal data, please contact us through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the MSK88 Platform — average first response time of 3–5 minutes
• Email: [email protected] — formal data rights requests, privacy complaints, or correspondence requiring a written response
• WhatsApp: Available 24/7 for general privacy queries and account-level concerns

When submitting a formal data rights request, please include your registered email address, a clear description of your request, and the specific right you wish to exercise. You may be asked to provide proof of identity to allow us to process your request securely.

MSK88 is committed to resolving all privacy-related enquiries in a timely, transparent, and respectful manner. We aim to acknowledge all formal requests within 2 business days and to provide a substantive response within 30 days of receipt of complete request information.