This Privacy Policy ("Policy") sets out how mcd888 collects, uses, stores, discloses, and protects personal data in connection with your use of the mcd888 platform at mcd888.co. mcd888 is committed to handling your personal data responsibly and in accordance with applicable data protection legislation. By registering for or using the mcd888 platform, you acknowledge that you have read and understood this Policy.
Six principles that govern every data practice at mcd888 — summarised here for quick reference. The full legal detail is in the sections below.
mcd888 collects only the personal data that is strictly necessary for the purposes described in this Policy. We do not collect personal data speculatively or beyond what is required to operate the platform, meet regulatory obligations, and protect player interests.
mcd888 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Data is shared only where necessary for platform operations or where required by applicable law — never for third-party profit.
All personal data held by mcd888 is protected by 256-bit SSL encryption in transit and AES-256 encryption at rest. Access to personal data is restricted to authorised personnel on a need-to-know basis and subject to confidentiality obligations.
mcd888 respects your rights to access, correct, restrict, and request deletion of your personal data, subject to applicable legal and regulatory retention obligations. Rights requests are handled within 30 days of receipt via the contact channels below.
This Policy is written in plain, accessible English. mcd888 does not bury data practices in unreadable legal fine print. Any material change to how we use your personal data is communicated before it takes effect, not after.
Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable anti-money laundering, tax, and gaming regulations. After retention periods expire, data is securely deleted or anonymised.
mcd888 is an online casino and sports betting platform operating at mcd888.co, serving players primarily based in Malaysia. References to "mcd888", "we", "us", or "our" in this Policy refer to the mcd888 operating entity responsible for the personal data described herein. mcd888 acts as the data controller in respect of personal data collected and processed through the mcd888 platform. For all data-related enquiries, please use the contact details provided in Section 16.
This Policy applies to all personal data collected and processed by mcd888 in connection with:
This Policy does not extend to third-party websites, applications, or services linked from or integrated into the mcd888 platform (such as payment processors or game providers operating under their own privacy frameworks). You should review the privacy practices of any third party whose services you access in connection with mcd888.
The categories of personal data mcd888 may collect include:
| Category | Examples |
|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, government-issued ID number (MyKad / passport number), selfie or photograph for KYC matching |
| Contact Data | Email address, Malaysian mobile number, residential address |
| Account Data | Username, hashed password, Account creation date, login timestamps, session activity logs |
| Financial Data | Deposit and withdrawal transaction records, MYR balances, payment method identifiers (e.g., Touch n Go account reference, bank account suffix), transaction timestamps |
| Gameplay Data | Game history, wagering records, bet amounts, game results, session duration, product usage patterns |
| Device & Technical Data | IP address, device type, browser type and version, operating system, screen resolution, referring URL, access timestamps |
| Communication Data | Live Chat transcripts, email correspondence, support ticket history |
| Responsible Gaming Data | Self-imposed limits, self-exclusion requests, session reminder configurations, responsible gaming tool usage history |
mcd888 does not collect full payment card numbers. Payment processing is handled by regulated third-party payment service providers who maintain their own PCI-DSS compliance standards.
mcd888 collects personal data through the following means:
mcd888 processes personal data on the following legal bases:
mcd888 uses the personal data it collects for the following purposes:
Marketing: mcd888 does not share your data with third parties for their own marketing purposes. If you have consented to receive mcd888 promotional communications, you may opt out at any time by updating your Account notification settings or contacting support.
mcd888 does not sell your personal data. We share personal data only in the following limited circumstances:
All third-party service providers who access personal data on behalf of mcd888 are required to maintain appropriate data security standards and are prohibited from using your data for any purpose other than the specific service they provide to mcd888.
mcd888 is a platform serving Malaysian players. In the course of operating the platform, personal data may be transferred to and processed in jurisdictions outside Malaysia — for example, by cloud infrastructure providers, game studio providers, or KYC verification services whose servers are located internationally. Where such transfers occur, mcd888 ensures that appropriate safeguards are in place to protect personal data to a standard equivalent to applicable Malaysian data protection requirements, including through contractual data processing agreements with third-party recipients.
mcd888 uses cookies and similar tracking technologies (including local storage, session tokens, and device fingerprinting) on the mcd888 website for the following purposes:
mcd888 does not use third-party advertising cookies or tracking technologies for the purpose of delivering targeted advertising on other websites or platforms. You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will affect platform functionality, including your ability to log in to your mcd888 Account.
mcd888 implements a range of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
Security incident: In the event of a data security incident that poses a risk to your rights and freedoms, mcd888 will notify you and any applicable regulatory authority within the timeframes required by applicable law. Please ensure your registered email address remains current so that security communications reach you.
mcd888 retains personal data for the following periods, unless a longer retention period is required by applicable law:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of Account + 7 years after closure | AML regulatory obligation |
| KYC Documentation | Duration of Account + 7 years after closure | AML / gaming authority requirement |
| Transaction Records | 7 years from transaction date | Financial regulatory requirement |
| Gameplay Records | 5 years from session date | Dispute resolution, regulatory audit |
| Support Communications | 3 years from last interaction | Dispute resolution, service improvement |
| Device & Technical Logs | 12 months from collection | Security monitoring, fraud prevention |
After applicable retention periods expire, personal data is securely deleted from mcd888 systems or anonymised such that it can no longer be linked to any identifiable individual. Anonymised data may be retained indefinitely for aggregated statistical purposes.
Subject to applicable data protection legislation and the limitations imposed by mcd888's legal and regulatory obligations, you have the following rights in respect of your personal data:
To exercise any of these rights, please contact mcd888 support via Live Chat or the email address in Section 16. mcd888 will respond to verified rights requests within 30 calendar days. We may request proof of identity before processing a rights request to ensure that personal data is not disclosed to an unauthorised party. Certain rights are subject to exceptions under applicable law — for example, mcd888 cannot delete financial records during a mandatory regulatory retention period.
You can access and update most of your Account information directly in your mcd888 Account Settings without needing to contact support. This includes your contact email, mobile number, communication preferences, and responsible gaming settings.
The mcd888 platform is strictly restricted to adults aged 21 years and above. mcd888 does not knowingly collect personal data from any person under the age of 21. If mcd888 becomes aware that personal data has been collected from a person under 21, that Account will be closed immediately, the data deleted (subject to any applicable legal retention requirements), and any deposited funds returned in accordance with mcd888's standard procedures. If you believe a minor has registered on the mcd888 platform, please contact us immediately via the channels in Section 16.
mcd888 uses certain gameplay and Account data — including session duration, betting frequency, loss patterns, and responsible gaming tool usage — specifically for the purpose of responsible gaming monitoring. This processing is conducted on the basis of mcd888's legitimate interest in identifying and assisting players who may be exhibiting signs of problem gambling, in alignment with international gaming authority responsible gaming standards.
Responsible gaming data is not used for commercial profiling, marketing targeting, or any purpose unrelated to player welfare and platform safety. Self-exclusion data is processed to enforce exclusion requests and is flagged to prevent re-registration during the exclusion period. For full information on the responsible gaming tools available to mcd888 players, please visit the Responsible Gaming page.
mcd888 may update this Privacy Policy from time to time to reflect changes in our data practices, platform operations, or applicable legal requirements. When we make material changes, we will notify registered players by email to the registered address and display a prominent notice on the platform before the revised Policy takes effect. The effective date at the top of this Policy will be updated to reflect the date of the latest revision. We encourage you to review this Policy periodically. Continued use of the mcd888 platform following notification of changes constitutes acceptance of the revised Policy.
For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the mcd888 data team through the following channels:
mcd888 aims to acknowledge formal written privacy enquiries within 3 business days and provide a substantive response within 30 calendar days of receipt.
Our support team is available 24/7 via Live Chat to help with data access requests, account security, or any privacy concern. Log in to your mcd888 account to reach us instantly.
Log In to mcd888 Learn About Us