Matahari88 Privacy Policy – Malaysia Personal Data Protection

Matahari88 is an online casino platform operating to serve players in Malaysia. In the course of providing our services to you, we collect and process various types of personal data necessary to ensure the service operates safely, efficiently, and in a manner suited to your needs.

This Privacy Policy applies to all individuals who use the matahari88 platform – whether as a casual visitor, a prospective member in the process of registering, or an active registered member. It covers all data collected through the matahari88.best website, the matahari88 mobile app, and any official communication channels including email and live chat.

Matahari88 acts as a Data Processor and takes full responsibility for the personal data it holds. We do not process your personal data outside Malaysia except in the specific circumstances set out in this policy, with appropriate safeguards in place.

Matahari88 only collects personal data that is strictly necessary to deliver our services properly, meet legal obligations and ensure the security of the platform and all its members. Below are the categories of data we collect and the purposes for which they are collected.

Matahari88 never collects sensitive data such as medical information, religious beliefs, political views or sexual orientation. The financial data we collect is limited strictly to what is needed to process transactions — we do not store full credit or debit card numbers under any circumstances.

Every piece of data we collect has a clear and lawful purpose. matahari88 does not process your personal data for any purpose beyond those stated below without first obtaining your consent.

• Registration & Account Management: Your identity and contact data is used to create and manage your matahari88 account, enable you to log in, update account settings and communicate with our support team.
• Transaction Processing: Financial data is used to process deposits and withdrawals via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u and CIMB Clicks — securely and accurately, in accordance with your instructions.
• KYC Identity Verification: The identity documents you submit are used to verify your identity in compliance with our Anti-Money Laundering (AML) obligations and Know Your Customer (KYC) procedures.
• Platform Security: Technical and usage data is analysed to detect suspicious activity, prevent unauthorised access, identify potential fraud and maintain the integrity of the matahari88 platform for all members.
• Legal Compliance: matahari88 uses personal data to fulfil its legal reporting obligations, including the reporting of suspicious transactions to the relevant authorities in Malaysia.
• Customer Support: Communication records with our support team are retained to help resolve disputes, track outstanding issues, and ensure consistency in the service provided to you.
• Responsible Gaming: Gaming activity data is used to monitor patterns that may indicate signs of problem gambling, enabling matahari88 to take appropriate protective action in line with our responsible gaming commitment.
• Marketing (with Consent): If you have agreed to receive marketing communications, we use your contact details to send you information about matahari88's latest promotions, bonuses, and offers that may be of interest to you.

Under Malaysia's Personal Data Protection Act (PDPA) 2010, matahari88 processes your personal data on a valid legal basis. Understanding these bases helps you know the rights you hold in relation to each type of processing.

• Contractual Fulfilment: The majority of matahari88's data processing is necessary to fulfil the service contract between us and you — that is, to provide your account, process transactions, and grant access to games and platform services.
• Legal Obligation: Some data processing is required to fulfil matahari88's legal obligations in Malaysia, including KYC/AML requirements and reporting to the relevant authorities.
• Legitimate Interest: Technical and usage data is processed on the basis of matahari88's legitimate interests in ensuring platform security, preventing fraud, and improving our services — provided this does not override your privacy rights.
• Consent: For optional processing such as marketing communications, matahari88 will request your explicit consent. You may withdraw that consent at any time without affecting the core services of your account.

Matahari88 does not sell, rent or trade its members' personal data to any third party for commercial purposes. This is a commitment we uphold without exception. However, in the course of delivering our services, there are situations where data must be shared with specific parties directly involved in providing those services.

• Payment Service Providers: To process deposits and withdrawals via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and FPX, the required transaction data is shared with the respective payment service providers. All providers are bound by strict data processing agreements and industry security standards.
• Game Software Providers: Third-party game providers may receive data necessary to deliver a seamless gaming experience. This data is limited to the required technical information and does not include complete personal identity details.
• Malaysian Legal Authorities: matahari88 will disclose personal data to Malaysian authorities when required to do so by a valid court order, regulatory directive or other legal obligation. In such situations, matahari88 will endeavour to notify you in advance where permitted to do so.
• Security & Fraud Prevention Services: To protect the platform and all its members, matahari88 works with specialised third-party services to detect and prevent fraud, money laundering and other unlawful activity. Any data shared is strictly limited to what is necessary for these purposes.

Matahari88 continuously invests in robust security infrastructure to protect the personal data of all its members. Our approach to data security is comprehensive — encompassing multiple layers of technical, procedural, and physical protection.

• 256-bit SSL Encryption: All data transmitted between your browser and matahari88's servers is encrypted using 256-bit SSL — the same standard used by leading Malaysian banking institutions to secure their online transactions.
• Secure Data Storage: Personal data is stored on protected servers within strictly secured data centres with physical access controls, ventilation systems, and robust safeguards. Database access is restricted to authorised personnel only, based on the principle of least-privilege access.
• Two-Factor Authentication: matahari88 supports and encourages all members to enable two-factor authentication (2FA) on their accounts, adding an extra layer of security that protects your account from unauthorised access even if your password is compromised.
• Continuous Monitoring: matahari88's cybersecurity team monitors platform activity continuously, 24 hours a day, to detect any attempted data breaches, unauthorised access, or suspicious activity, and responds promptly whenever a threat is identified.
• Periodic Security Reviews: matahari88 conducts regular independent security audits by third-party cybersecurity specialists to identify and patch any vulnerabilities in our systems before they can be exploited.

Under Malaysia's Personal Data Protection Act (PDPA) 2010, you have legally guaranteed rights over the personal data held by matahari88. We fully respect and facilitate the exercise of these rights.

• Right of Access

  You have the right to request and receive a copy of all personal data that matahari88 holds about you. Such requests will be processed within 21 working days from the date a complete request is received.

• Right of Rectification

  If you find that the personal data matahari88 holds about you is inaccurate, incomplete or outdated, you have the right to request the appropriate corrections. Some corrections can be made directly from your account settings.

• Right of Erasure

  You may request the deletion of your personal data under certain circumstances — for example, when the data is no longer needed for its original purpose or when you withdraw the consent on which the processing was based. This right is subject to any legal retention obligations that matahari88 is required to comply with.

• Right to Object to Processing

  You have the right to object to the processing of your personal data in certain circumstances, particularly for direct marketing purposes. You may withdraw your consent to marketing communications at any time from your matahari88 account settings or by contacting us.

• Right to Restriction of Processing

  In certain circumstances — such as when you are disputing the accuracy of your data or objecting to its processing — you may request that matahari88 restrict the processing of your data while your dispute or request is being resolved.

• Data Portability Rights

  You have the right to receive your personal data in a machine-readable format, allowing you to transfer it to another service should you wish to do so. This includes your basic account records and transaction history at matahari88.

• Right to Lodge a Complaint

  If you believe matahari88 has processed your personal data in a manner that violates Malaysia's PDPA, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia, which is the relevant regulatory body.

Matahari88 does not retain your personal data for longer than is necessary for the stated purpose or as required under Malaysian law. The following are general guidelines on retention periods for different categories of data.

• Active Account Data: For as long as your account remains active with matahari88, your basic account data is retained to allow you to access the platform's services. This data is reviewed and updated as required.
• Financial Transaction Data: Financial transaction records are retained for a minimum of seven years from the date of the transaction, in accordance with Malaysian financial and accounting legal requirements. This includes deposit history, withdrawals, and any account adjustments.
• KYC Documents: Identity verification documents submitted to us are retained for a minimum of five years from the date of submission or from the date of account closure, whichever is later, as required under Malaysia's AML legislation.
• Communication Records: Live chat conversation records and support emails are retained for two years from the date of communication, for reference purposes and the resolution of any disputes that may arise subsequently.
• After Account Closure: Upon account closure, data no longer required for legal or operational purposes will be securely deleted within 90 days. Data that must be retained to fulfil legal obligations will be kept for the period prescribed by the relevant legislation.

Matahari88 uses cookies and similar tracking technologies to enhance your experience on the platform, analyse usage patterns and ensure the security of your account. Below are the types of cookies we use and their purposes.

You can manage your cookie settings through your web browser settings or via the privacy preferences panel within your matahari88 account. Please note that disabling essential cookies may affect the functionality of the platform.

Matahari88 sends its members various types of communications. Some are account-related and essential for you to receive, while others are marketing in nature and require your consent.

• Transactional Communications (Mandatory): Transaction confirmation emails, account security notifications, withdrawal alerts, and other service-related communications are essential and will always be sent to you for as long as your account remains active, regardless of your marketing preferences.
• Promotional Communications (With Consent): Information about new bonuses, ongoing promotions, tournaments and exclusive matahari88 offers will only be sent if you have opted in to receive them. You can update these preferences in your account settings at any time.
• Unsubscribe: To stop receiving marketing communications, click the "Unsubscribe" link in any marketing email you receive from matahari88, or update your notification preferences directly from your account settings. Requests will be processed within 5 business days.

Matahari88 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements or developments in our services. The date of the most recent update is always displayed at the top of this document.

For material and significant amendments, matahari88 will endeavour to notify members by email or in-account notice at least 14 days before the changes take effect. Your continued use of the matahari88 platform after the changes come into effect will be considered your acceptance of the updated policy.

If you have any questions, concerns or requests relating to the privacy and protection of your personal data at matahari88, you are welcome to contact our Data Protection Officer through the channels below. We are committed to providing a thorough response within a reasonable timeframe.