menu888 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") sets out how menu888 ("the Company", "we", "us", "our") collects, uses, discloses, and safeguards personal information relating to individuals ("Players", "you", "your") who register for and use the menu888 platform accessible at menu888.org.

menu888 operates under international gaming authority licensing. As a condition of that licensing, we are required to implement and maintain a data protection framework that meets specific standards for player privacy. This Policy reflects those requirements and our broader commitment to responsible data stewardship.

By registering a menu888 account or continuing to use the Platform, you acknowledge that you have read this Policy and consent to the collection and use of your personal information as described herein. Where consent is the legal basis for a processing activity, you may withdraw that consent at any time — see Section 11 (Your Rights) for details.

2. Data Controller

menu888 is the data controller in respect of personal information collected through the Platform. As data controller, menu888 determines the purposes and means of processing your personal data and bears responsibility for ensuring that processing is carried out lawfully, fairly, and transparently.

Questions, requests, or complaints regarding data protection matters should be directed to our Data Protection contact at: [email protected]. We aim to acknowledge all data-related inquiries within 3 business days and to resolve them within 30 days.

3. Personal Data We Collect

menu888 collects personal data from you directly (when you register, deposit, or contact support), automatically (through your use of the Platform), and from third parties (such as identity verification services and payment processors). The categories of personal data we may collect include:

menu888 does not collect special category data (such as health data, racial or ethnic origin, or religious beliefs) unless specifically required by our responsible gaming obligations in relation to problem gambling disclosures.

4. Legal Basis for Processing

menu888 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to perform the contract between you and menu888 — including operating your account, processing deposits and withdrawals, and delivering gaming services.
• Legal Obligation: Processing required to comply with our licensing obligations, anti-money laundering (AML) requirements, and KYC verification duties — including identity verification and transaction monitoring.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and improving Platform functionality, where our legitimate interests are not overridden by your rights.
• Consent: Processing for direct marketing communications, non-essential cookies, and certain analytics activities — where you have provided explicit, freely given, and informed consent. You may withdraw consent at any time without detriment to your account.

5. How We Use Your Personal Data

menu888 uses your personal data for the following purposes:

• Registering and maintaining your account, including account verification and authentication.
• Processing deposits and withdrawals via your chosen Malaysian payment methods, including Touch n Go eWallet, Boost, FPX, and bank transfers.
• Conducting KYC identity verification as required by our licensing authority.
• Detecting, investigating, and preventing fraud, money laundering, bonus abuse, and other prohibited conduct.
• Monitoring gameplay patterns to identify responsible gaming concerns and to apply appropriate account interventions where necessary.
• Providing customer support — including responding to live chat inquiries, email support, and dispute resolution.
• Sending transactional communications — account confirmations, withdrawal notifications, security alerts, and policy updates.
• Sending promotional communications where you have opted in to receive them.
• Improving the Platform through usage analytics and technical performance monitoring.
• Complying with reporting obligations to our licensing authority and applicable law enforcement authorities where required.

6. Disclosure & Data Sharing

6.1 Service Providers

menu888 shares personal data with carefully selected third-party service providers who assist us in operating the Platform. These include payment processing partners (for FPX, e-wallet, and banking transactions), identity verification providers, fraud detection services, cloud infrastructure providers, and customer support tooling vendors. All such providers are contractually required to process data only for the specific purposes we have authorised and to maintain appropriate security standards.

6.2 Licensing Authority

menu888 may be required to disclose player data — including identity information, transaction records, and account history — to our licensing authority as part of regulatory compliance, audit processes, or in connection with a specific investigation.

6.3 Law Enforcement

menu888 will disclose personal data to law enforcement, regulatory bodies, or other authorities where required by applicable law or court order. We will use reasonable efforts to notify affected players of such disclosure where permitted by law.

6.4 No Sale of Data

menu888 does not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes. Your Malaysian IC details, payment information, and betting history are never disclosed to advertising networks or data brokers.

7. Cookies & Tracking Technologies

menu888 uses cookies and similar tracking technologies on the Platform. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: Required for the Platform to function — including session authentication, login state management, and security features. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings and login persistence ("Remember me"). These improve your experience but are not essential.
• Analytics Cookies: Collect aggregated, anonymised information about how Players use the Platform — pages visited, time on site, error events. This data helps us improve the product. These are only set with your consent.

You may manage your cookie preferences through your browser settings at any time. Disabling functional or analytics cookies will not affect your ability to access your account or use the Platform's core features.

8. Data Retention

menu888 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods driven by legal and licensing requirements:

• Account and Identity Data: Retained for a minimum of 5 years following account closure, as required by anti-money laundering regulations applicable under our licensing framework.
• Transaction Records: Retained for a minimum of 5 years from the date of the transaction.
• KYC Documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Support Communications: Retained for 3 years from the date of the interaction.
• Analytics and Technical Data: Typically retained for 13 months on a rolling basis.

Where retention beyond these periods is required by law or legitimate interest (such as ongoing litigation), data will be retained for the duration of that requirement and then securely deleted.

9. Data Security

menu888 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the menu888 Platform.
• Encryption at rest for sensitive data including identity documents and financial records.
• Role-based access controls ensuring staff can only access personal data necessary for their specific job function.
• Regular internal and third-party security assessments and penetration testing.
• Two-factor authentication available for all Player accounts and mandatory for staff systems.
• Incident response procedures — in the event of a data breach affecting Player rights, affected individuals will be notified promptly in accordance with our licensing obligations.

While menu888 takes all reasonable precautions, no data transmission over the internet or storage system can be guaranteed as 100% secure. You play a role in maintaining your account security by keeping your login credentials confidential and enabling two-factor authentication.

10. International Data Transfers

The menu888 Platform and its supporting infrastructure may involve the transfer of personal data to servers or service providers located outside Malaysia. Where such transfers occur, menu888 takes steps to ensure that your data receives an equivalent level of protection to that available under our licensing jurisdiction's data protection framework, including through the use of standard contractual clauses or equivalent safeguard mechanisms with receiving parties.

11. Your Rights

Subject to applicable law and our licensing obligations, you have the following rights in respect of your personal data held by menu888:

• Right of Access: You may request a copy of the personal data menu888 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data in certain circumstances. Note that retention obligations under AML and licensing regulations may limit this right.
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances while a dispute or rectification request is being resolved.
• Right to Portability: You may request your personal data in a structured, machine-readable format where processing is based on consent or contract.
• Right to Object: You may object to processing based on legitimate interests, including profiling for responsible gaming purposes, subject to menu888's overriding legitimate grounds.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing emails, analytics cookies), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at: [email protected]. We will verify your identity before actioning any request. We aim to respond within 30 days.

12. Marketing Communications

12.1 menu888 will only send promotional communications — including bonus offers, casino promotions, sports betting previews, and platform news — to Players who have explicitly opted in to receive such communications at registration or through their account settings.

12.2 You may opt out of marketing communications at any time by updating your communication preferences within your account settings or by contacting support. Opting out of marketing will not affect transactional communications (account notifications, withdrawal confirmations, security alerts) which are sent regardless of marketing preference.

12.3 menu888 does not use your personal data to serve targeted advertising through third-party advertising platforms.

13. Children & Minors

The menu888 Platform is strictly for adults aged 21 and over. menu888 does not knowingly collect personal data from individuals under the age of 21. If we become aware that a minor has registered an account, we will immediately close the account, delete associated personal data to the extent permissible by law, and report the matter to our licensing authority where required. If you believe a minor has registered on the Platform, please notify us at [email protected] immediately.

14. Changes to This Privacy Policy

menu888 may update this Privacy Policy from time to time to reflect changes in our data processing activities, new legal requirements, or improvements to our privacy practices. The effective date of the most recent revision is displayed at the top of this page. Where changes are material, we will notify registered Players by email at least 7 days before the changes take effect. Your continued use of the Platform following notification constitutes your acknowledgement of the updated Policy.

15. Contact Us

For any questions, requests, or complaints relating to this Privacy Policy or menu888's handling of your personal data, please contact us through the following channel:

If you are dissatisfied with our response to a data protection complaint, you may escalate the matter to the dispute resolution mechanism available under our international gaming authority licensing framework.