Privacy Policy miso88 — Data Protection & Personal Information

Miso88 takes its responsibility to protect your privacy very seriously. This Privacy Policy is designed to transparently explain how we collect, use, store and disclose your personal information when you use the miso88 platform, including our website at miso88.ml and related mobile applications.

By registering for or using any miso88 service, you are deemed to have read and agreed to this Privacy Policy. If you do not agree with any part of this policy, we recommend that you discontinue use of our platform.

This Privacy Policy applies to all registered players, website visitors, and any party interacting with the miso88 platform in any capacity. We use the terms "personal data" and "personal information" interchangeably throughout this document; both refer to any information that can be used to identify an individual directly or indirectly.

Miso88 collects various types of information depending on how you interact with our platform. The information we collect can be divided into two main categories:

Information you provide directly:

• Full name as stated on your Malaysian identity card or passport.
• Identity card number (MyKad) or passport number for KYC verification purposes.
• Date of birth to verify that you meet the minimum age requirement of 21 years.
• An active email address for communication and account verification purposes.
• Mobile phone number registered in Malaysia.
• Bank account or e-wallet details for deposit and withdrawal purposes.
• Current residential address including postcode and state.
• A selfie and a copy of your identification document for the KYC process.

Information collected automatically:

• Your IP address and network information when accessing the platform.
• Device type, operating system, and web browser version used.
• Session data including pages visited, time spent, and gaming activity.
• Approximate location information based on IP address (country and state only).
• History of deposit transactions, wagering and withdrawals on the platform.
• Logs of communications with our customer support team.

Miso88 collects your personal information through several different channels. Understanding how data is collected helps you make more informed decisions about the information you share with us.

All data collection methods above are carried out with your implied or explicit consent. You may choose not to provide certain information, though this may limit your access to some features on the miso88 platform.

Miso88 uses collected personal information solely for legitimate purposes necessary to deliver the best service to you. We do not process your data for purposes not stated in this policy without first obtaining your additional consent.

The primary purposes for using your personal data are as follows:

• Account Management: Creating, verifying, and maintaining your player account, including secure login and profile management.
• Identity Verification (KYC): Verifying that you meet the age and identity eligibility requirements before allowing your first withdrawal.
• Transaction Processing: Processing deposits, withdrawals, and any financial transactions made on the platform.
• Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, and unauthorised access to your account.
• Service Communications: Sending important notifications related to your account, transactions, security updates, and policy changes.
• Marketing Communications: Sending promotional information, bonuses, and exclusive offers — only if you have consented to receive them.
• Customer Support: Assisting in resolving complaints, enquiries, and technical issues you report to our team.
• Responsible Gaming: Monitoring gameplay patterns to identify players who may need assistance or self-exclusion support.
• Legal Compliance: Fulfilling the reporting and compliance obligations required under applicable Malaysian law.

Miso88 does not sell, rent or disclose your personal information to third parties for commercial purposes. However, in certain limited situations, we may share your information with the following parties:

• Payment Service Providers: Payment gateways and e-wallet providers that process your transactions require basic information to complete those transactions. All such providers are bound by strict confidentiality agreements.
• Game Providers: Third-party game providers receive only the minimum game data required to operate the games. They do not receive your full personal identification information.
• KYC Verification Service: Trusted third-party identity verification service providers are used to securely verify your identification documents.
• Legal Authority: miso88 will disclose required information to government authorities, law enforcement bodies or courts when legally obligated to do so under Malaysian law.
• Professional Advisors: Lawyers, accountants, and auditors bound by professional confidentiality obligations may access certain data in carrying out their duties on behalf of miso88.

In all data-sharing cases above, we share only the minimum necessary information. All third parties receiving your data are required to comply with data protection standards equivalent to or higher than our own.

Miso88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They help us recognise your browser and remember your preferences.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as secure login, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: Remembering your preferences such as language, display settings, and game choices to provide a more personalised experience.
• Analytics Cookies: Helping us understand how players use the platform, the most frequently visited pages, and navigation paths for continuous improvement.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect your account from unauthorized access.

You can manage cookie settings through your web browser settings. However, disabling essential cookies may cause some platform features to not function properly. For the best experience, we recommend allowing all cookies from the miso88.ml domain.

Under Malaysia's PDPA and miso88's internal commitments, you have the following rights regarding your personal data that we hold:

Miso88 continually invests in the latest security infrastructure to ensure your personal data is always protected. The technical and organisational security measures we implement include:

• Data in Transit Encryption: All communications between your device and miso88's servers use TLS 1.3 protocol with 256-bit encryption — making interception virtually impossible without the correct encryption key.
• Data at Rest Encryption: Sensitive data stored in our databases is encrypted using AES-256 algorithms, ensuring it remains unreadable even in the event of unauthorized physical access.
• Two-Factor Authentication (2FA): miso88 internal admin accounts are protected with mandatory multi-factor authentication, preventing unauthorized access even if passwords are compromised.
• Web Application Firewall (WAF): An industry-grade WAF protects the platform against common cyber threats such as SQL injection, XSS and DDoS attacks.
• Periodic Security Imaging: Penetration testing is conducted by independent security specialists at least twice a year to identify and address system vulnerabilities.
• Staff Training: All miso88 staff undergo regular data security awareness training and are bound by legally enforceable confidentiality agreements.

While no security system can guarantee 100% protection against all cyber threats, miso88 continuously applies the best available industry measures to minimise risk to your data. In the event of a security incident involving your personal data, we will notify you within the timeframe required by applicable law.

Miso88 retains your personal data only for as long as necessary for the purposes stated in this policy or as required by Malaysian law. Our data retention policy is as follows:

Once the defined retention period expires, your personal data will be securely deleted or permanently anonymised using industry-standard methods. Anonymised data can no longer be linked to your identity and may be used for internal analytics purposes.

Miso88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements or new technologies we adopt. Any changes take effect immediately upon publication on this platform.

When we make significant changes to this Privacy Policy, we will take reasonable steps to notify you, including:

• Displaying a prominent notice on the miso88 platform home page.
• Sending email notifications to all registered players when changes are material in nature.
• Updating the "Last Updated" date at the top of this page.

It is your responsibility to review this Privacy Policy periodically. By continuing to use the miso88 platform after any changes are published, you are deemed to have read and agreed to the latest version of the Privacy Policy in effect at that time.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how miso88 handles your personal data, we encourage you to contact us. The miso88 Privacy Team is available to assist you 24 hours a day, 7 days a week.

You can reach us via:

• Live Chat: Log in to your account and use the live chat feature on the platform for the fastest response.
• Privacy Email: [email protected] — we aim to respond within 48 business hours.
• FAQ Page: Check FAQ page for answers to the most frequently asked privacy questions.

For complaints related to data processing under Malaysia's PDPA, you also have the right to submit a complaint directly to the Department of Personal Data Protection Malaysia if you are not satisfied with how we have handled your issue.