Privacy Policy

Privacy Policy menu88 — We Take Care of Your Data

At menu88, your privacy is more than a legal obligation — it is a responsibility we take seriously every day. This document explains in detail how we collect, use, store, and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010.

Last Updated: 1 January 2026  |  Version 2.4
Our Protection Commitment
Full 256-bit SSL encryption
Data is not sold to third parties
Malaysia PDPA 2010 Compliance
Strict data access controls
User data access rights and deletion
Regular security audits
256-bit
Active SSL Encryption
0%
Data Sold to Third Parties
24/7
Security Monitoring
PDPA
Full Malaysia Compliance

How menu88 Protects Your Information

We apply multiple layers of security to ensure your personal data remains safe and protected at all times.

End-to-End Encryption

All data transmitted between your device and menu88 servers is protected using TLS 1.3 encryption with 256-bit keys. This means your information cannot be read by any unauthorised party, including during transmission over public networks.

Secure & Protected Servers

Your data is stored in high-grade data centres with strict physical and digital access controls. Our servers are protected by multi-layer firewalls, intrusion detection systems, and round-the-clock real-time threat monitoring.

Strict Access Controls

Only staff with specific authorisation may access user data, and every access is automatically recorded in an immutable audit log. The "minimum access rights" principle ensures staff can only view the data necessary for their specific duties.

Data Retention Policy

Menu88 only retains your data for as long as it is needed for the stated purposes or as required by law. Data that is no longer needed will be securely deleted using methods that ensure it cannot be recovered.

Regular Security Audits

Our internal security team and independent security experts conduct regular penetration testing and security audits to identify and close any vulnerabilities before they can be exploited. This is part of our proactive security culture.

Data Breach Notification

In the event of any security incident involving your data, menu88 is committed to notifying affected users within 72 hours in line with industry best practices. We will explain what happened, what data was involved, and the steps we have taken to address it.

1Introduction and Scope of This Policy

Welcome to the menu88 Privacy Policy. This document clearly explains how menu88 ("we", "our platform") collects, processes, stores, shares, and protects your personal data when you use our website at menu88.win, our mobile app, and all related services we offer.

This policy applies to all registered users, website visitors, and anyone who interacts with the menu88 platform in any way. By using our services, you agree to the collection and use of information as described in this policy. If you disagree with any part of this policy, please discontinue use of our platform.

Menu88 acts as the data controller for the personal information you provide to us. This means we are responsible for ensuring your data is processed lawfully, fairly, and transparently in accordance with the Personal Data Protection Act (PDPA) 2010 of Malaysia and its regulations.

This Privacy Policy may be updated from time to time. Any significant changes will be communicated to active users via an in-platform notice or email at least 7 days before the changes take effect.

2Information We Collect

2.1 Information You Provide Directly

When you register an account, submit identity verification documents, or contact our support team, you provide personal information directly to us. This includes:

  • Full name as stated on your identity card or passport
  • Date of birth and national identity card or passport number
  • Email address and mobile number
  • Current residential address
  • Bank account or e-wallet details for deposit and withdrawal purposes
  • KYC documents including copies of MyKad, passport, and bank statements
  • Communications with our customer support team

2.2 Information Collected Automatically

When you use the menu88 platform, our systems automatically collect certain technical data needed to keep the platform running smoothly and securely:

  • IP address and network information
  • Device type, operating system and web browser version
  • Session data including pages visited, session duration, and in-platform actions
  • General geolocation data based on IP address
  • Gaming activity and financial transaction logs
  • Cookies and similar tracking technologies
Data Categories Example Primary Purpose
Identity Name, IC, date of birth KYC Verification & Security
Contact Email, phone, address Communication & support
Financial Bank account, transaction records Payment processing
Technical IP, device, browser Security & fraud detection
Games Betting history, wins Responsible gaming & compliance

3How We Use Your Data

Menu88 only uses your personal data for lawful and necessary purposes. We will not process your data for any other purpose without obtaining your consent first. The following are the primary purposes for which your data is used:

3.1 Account Management and Services

Your data is used to create and manage your account, verify your identity through the KYC process, process deposits and withdrawals, and provide effective customer support. Without this information, we are unable to deliver our services to you.

3.2 Security and Fraud Prevention

We analyse usage patterns and transaction data to detect and prevent fraudulent activity, money laundering, unauthorised access and platform abuse. This is our legitimate interest in protecting all users and the integrity of the platform.

3.3 Legal Compliance

Some of your data is stored and processed solely to fulfil our legal obligations under PDPA 2010, anti-money laundering (AML) requirements, and directives from relevant regulatory bodies.

3.4 Marketing and Communications

With your consent, we use your contact information to send promotional notifications, personalised bonus offers, and relevant platform updates. You may withdraw this consent at any time through your account settings.

Our Guarantee: menu88 will not sell, rent, or trade your personal data to any third party for their own marketing purposes. This is our unconditional commitment to your privacy.

4Data Sharing with Third Parties

Menu88 understands that your trust is our most valuable asset. We only share your data in limited situations and with strict controls in place:

4.1 Service Providers

We share necessary data with carefully selected third-party service providers to help us deliver our services, including trusted payment processors such as DuitNow and FPX, KYC service providers, server hosting companies and analytics providers. All these providers are bound by strict confidentiality agreements and may only use your data for the specified purposes.

4.2 Legal Obligations

Menu88 may disclose your data to competent authorities when required by law, court order, or directive from a regulatory body. This includes cooperating with law enforcement agencies in legitimate investigations related to fraud or financial crime.

4.3 Protection of Rights and Safety

In exceptional circumstances, we may share information when we genuinely believe that disclosure is necessary to protect the safety of our users, prevent fraud, or protect the rights and property of menu88.

5Cookies and Tracking Technologies

The menu88 platform uses cookies and similar technologies such as web beacons and pixels to enhance user experience, maintain session security, and understand how users interact with our platform.

5.1 Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
  • Performance Cookies: Collects anonymous data on how users interact with the platform to help us improve the user experience.
  • Functional Cookies: Saves your preferences such as language and display settings to provide a more personalised experience.
  • Analytics Cookies: Helps us understand platform traffic and usage patterns for continuous improvement purposes.

You can manage your cookie settings through your web browser settings. However, disabling essential cookies may affect platform functionality.

6Your Rights as a User

Under Malaysia's Personal Data Protection Act 2010, you have certain rights regarding the personal data we hold about you. menu88 is committed to making it easy for you to exercise these rights:

Right to Access

You have the right to request a copy of the personal data we hold about you. We will process your access request within 21 working days.

Right to Rectification

If any of your personal data is inaccurate or outdated, you have the right to request a correction through your account settings or by contacting our support team.

Right to Erasure

Under certain circumstances, you may request the deletion of your personal data. Please note that we may need to retain certain data for legal compliance even after your account is closed.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time without providing a reason. Such requests will be processed within 10 working days.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format and to request its transfer to another data controller where technically feasible.

To exercise any of the above rights, contact our Data Protection Officer by email at [email protected] or via 24/7 Live Chat on the platform.

7Data Retention Period

Menu88 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by Malaysian law. The following are our general data retention guidelines:

  • Active account data: For the duration of your active account plus the mandatory retention period
  • Financial transaction records: Minimum 7 years in line with Malaysia's financial legal requirements
  • KYC documents: Minimum 5 years after the business relationship ends
  • Support communication logs: 2 years from the date of communication
  • Technical log data: 12 months from the date of creation
  • Marketing data: Until you withdraw consent or request deletion

Once the retention period expires, data will be securely deleted or anonymised using approved procedures so that it can no longer be linked to any individual.

8International Data Transfers

As part of its global operations, menu88 may transfer your personal data to other countries or regions for processing and storage purposes. When we do so, we ensure that every transfer is safeguarded by appropriate protection mechanisms:

  • Approved standard contractual clauses to ensure an equivalent level of protection
  • Comprehensive assessment of data protection laws in recipient countries
  • Data processing agreements with all international partners
  • Additional technical measures such as data encryption during transmission

We will not transfer your data to countries that do not have an adequate level of data protection without first putting appropriate additional safeguards in place.

9Data Security and Incident Response

Menu88 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, use, disclosure, alteration, or destruction. These measures include:

  • Data encryption in transit (TLS 1.3) and at rest (AES-256)
  • Two-factor authentication (2FA) for all staff access to systems containing user data
  • Real-time security monitoring and intrusion detection systems
  • Penetration testing and vulnerability assessments conducted by independent experts on a quarterly basis
  • Mandatory security awareness training for all menu88 staff
  • Tested and verified incident response procedures

While we take all reasonable measures, no system is completely breach-proof. In the event of a security incident involving your data, we are committed to notifying you promptly and taking appropriate corrective action.

10Contact Us Regarding Privacy

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer (DPO). We are committed to responding to every inquiry thoroughly and within a reasonable timeframe.

You may also contact us to exercise your rights under PDPA 2010, or if you wish to withdraw any consent you have previously given for a specific processing purpose. Our team is available 24 hours a day, 7 days a week via in-platform Live Chat or by email at [email protected].

If you are not satisfied with our response, you have the right to file a complaint with the Personal Data Protection Commissioner of Malaysia appointed under PDPA 2010.

We aim to respond to all privacy-related inquiries within 5 working days. Data access or deletion requests are processed within 21 working days in accordance with PDPA requirements.

FAQ — Privacy Policy

Answers to the most frequently asked questions about privacy and data protection at menu88.

Not at all. menu88 has never and will never sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Your data is only shared with essential service providers who help us deliver our services, and they are bound by strict confidentiality agreements.

You can submit a data access request by contacting the menu88 support team via the in-platform 24/7 Live Chat or by email. Please include your account identification details to speed up the process. We will process your request and deliver a data report within 21 working days.

Yes, you can request deletion of your personal data in most situations. However, please note that we may be required by law to retain certain data such as financial transaction records for a minimum of 7 years even after account closure. We will clearly inform you of what data can be deleted and what must be retained for compliance purposes.

When you close your account, data that is no longer required will be deleted or anonymised within 90 days. However, certain records such as KYC documents and financial transaction records will be retained for the period required by Malaysian law (typically 5 to 7 years) before being permanently deleted.

All your financial information is protected with AES-256 encryption at rest and TLS 1.3 in transit. We do not directly store your credit card numbers or e-wallet passwords — payment information is processed through trusted, certified payment gateways that meet the highest industry security standards.

Yes, you can stop receiving marketing communications at any time. You can do this through the notification settings in your account, by clicking the unsubscribe link in any of our promotional emails, or by contacting our customer support directly. Please note that you will still receive important account-related emails such as transaction confirmations and security notices.
Compliance & Certification
Malaysia PDPA 2010
SSL/TLS 1.3 Verified
Full AML Compliance
KYC Verified
Privacy Questions?

Our team is available to assist you 24/7. Contact us now.

Contact Support

Join menu88 with Confidence — Your Data Is Always Safe

Enjoy Malaysia's best online gaming experience with the peace of mind that your personal information is protected by the latest encryption technology and a transparent privacy policy. Register today and feel the difference.

256-bit SSL Protected  ·  100% Secure Data  ·  PDPA Compliance

Bahasa Melayu