Privacy Policy mko888 — Malaysia Personal Data Protection

This Privacy Policy ("Policy") is published by mko888 ("we", "the platform" or "mko888"), which operates the website at https://mko888.click. This Policy explains how we collect, use, store, disclose, and protect your personal data when you register an account, use our services, or interact with the mko888 platform in any capacity.

Mko888 takes member privacy very seriously. We believe trust is the foundation of a strong relationship between a platform and its users. That is why we are committed to handling all your personal information with full transparency, and using it only for legitimate purposes that are clearly stated in this Policy.

This Privacy Policy applies to all users of the mko888 platform, including unregistered website visitors, registered members, active players, and former members. By using the mko888 website or services, you agree to the collection and use of your information as described in this Policy.

If you disagree with any aspect of this Privacy Policy, please discontinue use of the mko888 platform and contact our support team to close your account if applicable.

Mko888 collects your personal data through several channels — directly from you during registration and platform use, automatically via tracking technologies, and in certain cases, from legitimate third parties such as payment service providers.

A. Data You Provide Directly:

• Full name, username, and account password
• Malaysian phone number and email address
• Date of birth (for age verification purposes)
• Malaysian residential address
• Malaysian identity card number (MyKad) — for KYC verification when required
• Digital payment account information (Touch 'n Go, GrabPay, DuitNow, etc.) — only the details required to process transactions
• Any information you provide when contacting our support team

B. Automatically Collected Data:

• IP address and approximate geographic location information
• Device type, operating system and web browser used
• Date, time and duration of each platform usage session
• Pages visited, games played, and betting selections made
• Deposit and withdrawal transaction history
• Cookie data and similar tracking technologies (see Section 6)

C. Data from Third Parties:

• Identity verification information from licensed KYC service providers
• Transaction verification data from payment providers such as Touch 'n Go, GrabPay, and DuitNow
• Information relating to fraud activity or risk from third-party fraud prevention services engaged by mko888

Mko888 uses the personal data collected solely for legitimate purposes directly related to the operation of the platform and the improvement of user experience. Below is a detailed breakdown of how your data is used:

Mko888 does not use your personal data for third-party marketing purposes. Any marketing communications you receive from mko888 relate solely to mko888's own services and promotions, and you may opt out of receiving such communications at any time by contacting our support team.

Mko888 respects your privacy and does not disclose your personal data to third parties as a general practice. However, there are specific circumstances where limited disclosure is necessary for the proper operation of the platform and compliance with applicable laws.

Third Parties That May Receive Your Data:

• Payment Providers: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, and relevant Malaysian banks receive only the minimum transaction information required to process your deposits and withdrawals. These providers are governed by their own privacy policies and security standards.
• Game Providers: Companies such as Evolution Gaming, Playtech, Microgaming, and Pragmatic Play may receive limited game session data for technical and game maintenance purposes.
• KYC & Fraud Prevention Services: Licensed third-party identity verification and risk analysis service providers engaged by mko888 to maintain platform security for all members.
• Legal Authorities: mko888 may disclose personal data to law enforcement authorities, regulatory bodies or courts when required by law or a valid court order.
• Technical Service Providers: Cloud infrastructure providers, system monitoring, and technical support services bound by strict confidentiality agreements with mko888.

All third parties working with mko888 are bound by data protection agreements that prohibit them from using your data for any purpose other than those specified by mko888. mko888 remains accountable for the protection of your data even when it is handled by third parties on our behalf.

The security of member personal data is mko888's highest priority. We implement multiple layers of technical and organisational security controls to protect your data from unauthorised access, loss, destruction, or accidental disclosure.

Technical Security Measures:

• Data encryption in transit using TLS 1.3 and 256-bit SSL protocols
• Encryption at rest for all sensitive information
• Multi-layered firewalls and intrusion detection and prevention systems (IDS/IPS) monitoring traffic 24/7
• Two-factor authentication (2FA) for staff access to mko888's internal systems
• Periodic security vulnerability assessments conducted by independent cybersecurity experts
• Encrypted data backup systems that are tested on a regular basis

Organisational Security Measures:

• Role-based access control (RBAC) policy — only staff who require access to specific data for their duties are permitted
• Regular data protection and security awareness training for all mko888 staff
• A clearly defined and tested security incident response procedure
• Binding non-disclosure agreements (NDAs) for all staff and business partners
• Regular internal and external audits of data protection practices

While mko888 takes all reasonable steps to protect your data, no security system can guarantee absolute 100% protection in a digital environment. In the event of a data security breach affecting your information, mko888 will notify you in a timely manner in accordance with applicable legal requirements and take immediate remedial action.

Mko888 uses cookies and similar tracking technologies to enhance your experience on our platform, analyse usage patterns and maintain the security of your login session. This section explains the types of cookies we use and how you can manage them.

Types of Cookies Used by mko888:

• Essential Cookies (Required): Required for core platform functions such as maintaining your login session, remembering language preferences and ensuring session security. These cookies cannot be disabled as they are necessary for the platform to function properly.
• Analytics Cookies (Optional): Helps mko888 understand how users interact with the platform — most frequently visited pages, time spent and navigation paths. This information is used in aggregated, anonymised form to improve the platform.
• Preference Cookies (Optional): Remembering your settings and preferences — such as game preferences, display settings, and language selection — so you don't need to reconfigure them each time you log in.
• Security Cookies: Used to detect and prevent fraudulent activity, flag suspicious login attempts, and protect your account from unauthorised access.

You can manage your cookie settings through your web browser at any time. Please note, however, that disabling essential cookies may affect the functionality of the mko888 platform and you may not be able to use certain features properly. For guidance on managing cookies in popular browsers such as Chrome, Firefox, and Safari, please refer to the respective browser's help documentation.

Mko888 operates primarily for the Malaysian market, and personal data of Malaysian members is stored and processed in accordance with Malaysia's PDPA requirements. However, in the course of platform operations, some data may be processed outside Malaysia — particularly in relation to international game providers such as Evolution Gaming and Playtech, which operate from multiple locations around the world.

Any transfer of personal data outside Malaysia takes place only when:

• The transfer is necessary to fulfil a contract between you and mko888 (e.g. processing live dealer games)
• Data recipients outside Malaysia provide a level of data protection equivalent to, or greater than, that required under Malaysia's PDPA
• Legally binding data transfer agreements have been signed between mko888 and the data recipients
• Transfer required by applicable law

Mko888 ensures that all our international partners comply with data protection standards equivalent to or stricter than Malaysia's PDPA. You may request further information about international data transfers relating to your account by contacting our support team.

Mko888 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable laws and regulations. The following are general guidelines on data retention periods:

• Active Account Data: Retained for the duration of your active membership and for 5 years following account closure, in compliance with applicable anti-money laundering legal requirements in Malaysia.
• Financial Transaction Records: Retained for a minimum of 7 years following the date of a transaction, in accordance with Malaysian legal requirements for financial record-keeping.
• Security & Activity Logs: Retained for 12 months for fraud detection and security incident investigation purposes.
• Customer Support Communications: Retained for 3 years for reference and service improvement purposes.
• Anonymised Analytics Data: May be retained indefinitely as it contains no personally identifiable information.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by mko888. We fully respect these rights and provide clear mechanisms for you to exercise them.

To exercise any of the rights above, please send a written request to support@mko888.click with the subject line "PDPA Privacy Rights Request", along with your username and registered phone number for identity verification purposes. mko888 will respond within 14 working days.

Mko888 strictly prohibits the use of our platform by anyone under the age of 18. Our platform is not designed for minors, and we do not knowingly collect personal data from individuals below that age.

Should we discover that personal data belonging to an individual under the age of 18 has been collected without our knowledge, we will promptly take steps to delete that data and close the account in question. Parents or guardians who become aware that a child under their care has registered an account with mko888 are encouraged to contact us immediately at support@mko888.click.

Mko888 reserves the right to review and update this Privacy Policy at any time to reflect changes in our privacy practices, applicable legislation, or platform enhancements.

Members will be notified of any material changes to this Privacy Policy through:

• A prominent notice on the mko888 platform's main page
• Email notification to the address registered to your account
• Updated "Last Updated" date at the top of this page

Your continued use of the mko888 platform after any amendments are published constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes made, you have the right to close your account and request deletion of your personal data by contacting our support team.

Previous versions of this Privacy Policy are available upon request by contacting the mko888 support team via email.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how mko888 handles your personal data, we encourage you to reach out to us directly. Our privacy team is ready to assist you with any data privacy matters.

If you are dissatisfied with how mko888 has handled your privacy enquiry, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or any other relevant authority with jurisdiction over the matter.

Effective date of this Privacy Policy: 1 January 2026. This version supersedes all previous versions.