Privacy Policy Metta88 — Your Data, Our Protections

Information We Collect

Metta88 collects two main categories of data: data you provide directly and data collected automatically when you use the platform.

Data you provide directly:

• Identity Information: Full name, date of birth, identity card or passport number, gender and nationality — collected during registration and the KYC process.
• Contact Information: Email address, phone number, and residential address — for account communications and identity verification.
• Financial Information: Bank account numbers, digital wallet numbers and transaction records — required for processing deposits and withdrawals.
• Verification Documents: A copy of your identity card, utility bill, or bank statement as proof of address during the KYC process.

Automatically collected data:

• Technical Data: IP address, browser type, operating system, device type, and screen resolution.
• Usage Data: Games played, session duration, total bets, login frequency, and navigation patterns within the platform.
• Location Data: Approximate geographic location based on IP address for security and compliance purposes.
• Cookie Data: Session information, user preferences and analytics data collected through cookies and similar technologies.

How We Collect Data

Personal data is collected through several channels within the metta88 platform:

• Registration Form: Information you enter when registering a new account.
• KYC Process: Documents you upload for identity and address verification.
• Financial Transactions: Information submitted when making a deposit or withdrawal.
• Support Communications: Information you share when contacting the metta88 support team.
• Platform Usage: Data collected automatically via cookies, tracking pixels, and server logs while you use the platform.
• Third Parties: Information received from payment providers, identity verification services or public sources for compliance purposes.

Purpose of Personal Data Use

Collected data is used solely for the following purposes:

We do not use your personal data for purposes other than those stated above without first obtaining your renewed consent.

Data Sharing with Third Parties

Metta88 does not sell personal data to any party. However, in certain situations, we need to share data with the following parties for operational and compliance purposes:

• Payment Providers: DuitNow, FPX, Touch 'n Go, GrabPay, and other payment providers that process your financial transactions — only the data required for those transactions is shared.
• Game Providers: Licensed game providers such as Pragmatic Play, PG Soft and Evolution Gaming — for running games and resolving technical disputes.
• KYC Verification Services: A third-party identity verification platform used to securely and efficiently verify player documents.
• Statutory Authorities: Regulatory bodies, law enforcement agencies, or courts when required by applicable law in Malaysia.
• Technical Service Providers: Cloud infrastructure, analytics and security service providers that help operate the platform — bound by strict confidentiality agreements.

Data Storage and Security

Your personal data is stored on servers located in certified data centres with comprehensive physical and digital security measures. The protective measures we implement include:

• Data Encryption at Rest: All data stored in our database is protected with AES-256 encryption.
• Data Encryption in Transit: All communications between your device and our platform use TLS 1.3 protocol.
• Strict Access Controls: Only specifically authorised staff may access player personal data, and every access is logged for audit purposes.
• Data Segregation: Player funds and financial data are stored in systems separate from the company's operational data.
• Regular Security Audits: The system undergoes independent penetration testing and security audits at least twice a year.
• Incident Response Plan: A clearly defined data breach response procedure that is regularly tested to ensure a swift and effective response.

Retention Period: Personal data is retained for as long as your account remains active. After account closure, data is kept for 7 years for anti-money laundering (AML) compliance purposes before being securely deleted.

Cookies and Tracking Technologies

Metta88 uses cookies and similar technologies to enhance your experience on the platform. The following are the types of cookies we use:

• Necessary Cookies (Required): Used for core platform functions such as login verification and session management. Cannot be disabled without affecting platform functionality.
• Performance Cookies: Collects information on how players use the platform to help us identify technical issues and improve performance.
• Functional Cookies: Stores your preferences such as language, theme and display settings to deliver a more personalised experience.
• Analytics Cookies: Helps us understand aggregated, anonymised usage patterns for product improvement purposes.

You can manage your cookie preferences through your browser settings at any time. However, disabling essential cookies may affect your ability to log in or use certain platform features.

Your Rights as a Data Owner

As a metta88 player, you have the following rights regarding your personal data under Malaysia's Personal Data Protection Act 2010:

Children's Privacy

The metta88 platform is exclusively for users aged 18 and above. We do not knowingly collect any personal information from individuals under the age of 18.

If we find that personal data has been collected from children under 18 without appropriate age verification, we will take immediate steps to delete that data and close the account in question. If you believe a child has registered an account on our platform, please contact us immediately.

Cross-Border Data Transfers

In certain circumstances, your personal data may be transferred to and stored on servers located outside Malaysia — particularly in connection with international game providers or technical infrastructure.

When this occurs, metta88 ensures that:

• Transfers are made only to countries or organisations that provide a level of data protection equivalent to or higher than Malaysia's PDPA requirements.
• Legally binding data transfer agreements are established with all overseas data recipients.
• Appropriate technical security measures are applied to protect data both in transit and at rest.

Changes to This Privacy Policy

Metta88 reserves the right to amend this privacy policy from time to time to reflect changes in business practices, legal requirements or new technologies. When material changes are made:

• The "Updated" date at the top of this document will be revised to reflect the date of the latest amendment.
• Active players will be notified via in-platform notifications or email for significant changes.
• Continued use of the platform after amendments take effect is deemed acceptance of the amended policy.

We encourage you to review this page regularly to stay informed about how we protect your privacy.

How to Contact Us About Privacy

For any inquiries, concerns, or requests regarding your privacy and personal data, you may reach us via:

• Privacy Email: [email protected] — for data rights requests, privacy complaints, and PDPA-related inquiries.
• General Support Email: [email protected] — for other general inquiries regarding your account and the platform.
• Live Chat: Available 24/7 within the metta88 platform for immediate assistance.

For formal privacy complaints that cannot be resolved internally, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia if necessary.

Our team is committed to treating every privacy enquiry seriously and providing a meaningful response within the timeframe required by law.