1Our Introduction & Commitment

98ms values the privacy of every member using our platform at 98ms.win. This Privacy Policy has been established to provide full transparency regarding our data handling practices, in accordance with international data protection principles and Malaysian legal requirements.

When you register an account, make a deposit, or simply browse our platform, you are entrusting us with your personal information. We do not take this trust lightly. Every data-related decision is made with security, transparency, and full control in your hands as a member.

This Privacy Policy applies to all 98ms services including the main website, mobile app, and all our official communication channels. Please read this document carefully as it outlines important rights you hold.

Our Commitment: 98ms never sells, rents, or trades member personal data to any third party for marketing purposes. Your data belongs to you.

2Types of Data We Collect

We collect only the data strictly necessary to provide you with a safe, efficient, and responsible service. Below is a comprehensive overview of the data categories we manage:

Data Category Example Information Primary Purpose
Identification Data Full name, IC number, date of birth, document photos KYC Verification
Contact Data Email address, phone number, residential address Account Communications
Financial Data Bank account number, bank name, transaction history Payment Processing
Technical Data IP address, device type, web browser, access logs Security
Activity Data Game history, account balance, bonuses applied Platform Analytics
Preference Data Language settings, game preferences, self-imposed limits Personalisation

2.1 Data We Do Not Collect

98ms does not collect credit or debit card information directly — all card transactions are processed through a PCI-DSS certified third-party payment gateway. We also do not store your password in plain text; every password is encrypted using a one-way hashing algorithm that cannot be decrypted.

3How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. We do not use your data for anything outside the scope stated below:

  • Account Management: Creating, maintaining, and protecting your account, including login verification and account recovery
  • Transaction Processing: Verifying and processing deposits and withdrawals securely and in a timely manner
  • KYC/AML Compliance: Meeting legal requirements related to identity verification and anti-money laundering
  • Platform Security: Detecting suspicious activity, preventing fraud, and protecting the integrity of the system
  • Customer Support: Resolving enquiries, complaints, and support requests more effectively
  • Service Improvement: Analyzing usage patterns to enhance the gaming experience and platform usability
  • Account-Related Communications: Sending important notices such as transaction confirmations, security alerts, and policy updates
  • Responsible Gaming: Monitoring play patterns to identify members who may need responsible gaming support

Marketing Note: We will only send you promotional communications if you have given your explicit consent. You may withdraw this consent at any time through your account settings or by contacting our support team.

4Legal Basis for Data Processing

98ms processes your personal data based on one or more valid legal grounds under applicable data protection legislation:

  • Contract Performance: Processing required to fulfil the service agreement between you and 98ms, including deposit and withdrawal processing
  • Legal Obligation: Processing mandated by Malaysian law, including KYC, AML requirements, and reporting to relevant authorities
  • Legitimate Interest: Processing required for platform security purposes, fraud prevention, and service improvement
  • Consent: For marketing activities and promotional communications where you have voluntarily provided consent

5Data Protection & Security

Your data security is the absolute top priority at 98ms. We continuously invest in industry-grade security infrastructure to ensure your information is always protected against cyber threats, unauthorized access, and any form of data breach.

5.1 Technical Measures

  • 256-bit SSL/TLS Encryption: All data transmitted between your device and 98ms servers is encrypted using the latest SSL/TLS protocols, making it unreadable to any unauthorized party.
  • Data-at-Rest Encryption: Sensitive data such as banking information and identification documents are encrypted at rest using AES-256 encryption
  • Two-Factor Authentication (2FA): An additional security layer that requires identity verification via a second device to access your account
  • 24/7 Security Monitoring: Always-on automated monitoring system to detect and respond to suspicious activity in real time
  • Regular Penetration Testing: Regular independent security audits conducted by third-party cybersecurity experts

5.2 Internal Access Controls

Access to member personal data within the 98ms organisation is strictly limited on a need-to-know basis. Only staff who require access to perform their duties are permitted, and all access is logged and monitored. All staff undergo mandatory data protection training and are bound by strict confidentiality agreements.

Security Certifications: 98ms payment infrastructure complies with the PCI-DSS (Payment Card Industry Data Security Standard), ensuring all financial transactions are processed in a secure, audited environment.

6Data Sharing with Third Parties

98ms does not sell or transfer your personal data to third parties for their own marketing purposes. However, there are certain situations where we need to share your information with trusted parties to fulfil our services:

6.1 Trusted Service Providers

  • Payment Processors: Payment gateways and banking institutions that process your deposits and withdrawals — only the data necessary for the relevant transaction is shared
  • Game Providers: Game software companies that supply game content on our platform, which may require certain game session data
  • KYC Verification Services: Third-party identity verification service providers that assist us in authenticating member documents and identities
  • Cloud Infrastructure Provider: Cloud service providers that store and process data under strict data processing agreements

All third parties we work with are bound by data protection agreements that require them to handle your data at the same or higher level of security as our own standards.

6.2 Legally Mandated Disclosures

We may need to disclose your personal data to government authorities, law enforcement bodies, or courts when required by Malaysian law or a valid court order. In all such cases, we will disclose only the minimum information necessary and will notify you if permitted to do so by law.

7Cross-Border Data Transfers

To support global operations and ensure high service availability, some of your data may be stored or processed on servers located outside Malaysia. In all such cases, 98ms ensures that such data transfers are safeguarded by appropriate protection mechanisms, including:

  • Standard data processing agreements compliant with international data protection standards
  • Selection of infrastructure providers operating in jurisdictions with robust data protection laws
  • Data transfer impact assessments conducted prior to any new cross-border transfer

8Data Retention Period

98ms does not retain your personal data longer than necessary for the purpose for which it was collected. Retention periods vary depending on the type of data and applicable legal requirements:

  • Active Account Data: Retained for the duration your account is active, plus the post-closure retention period as specified
  • Transaction Records: Retained for a minimum of 7 years to comply with accounting and AML legal requirements in Malaysia
  • KYC Documents: Retained for a minimum of 5 years after the business relationship ends, in line with legal requirements
  • Security Logs: Retained for 2 years to enable security incident investigations when necessary
  • Communication Data: Customer support records are retained for 3 years for reference and service quality improvement

Once the retention period expires, your data will be securely deleted or anonymised using methods that ensure the data cannot be recovered.

9Your Rights as a Data Subject

As a 98ms member whose personal data we manage, you hold important rights that we are committed to respecting and facilitating:

Right of Access

You have the right to obtain a copy of the personal data we hold about you in a readily understandable format.

Right to Rectification

You may request the correction of any inaccurate or incomplete data we hold about you.

Right to Erasure

Under certain circumstances, you have the right to request the deletion of your personal data, subject to our legal obligations.

Right to Data Portability

You may request your data in a structured, machine-readable format for transfer to another provider.

Right to Restrict Processing

You may request that we restrict the processing of your data under certain circumstances, such as while the accuracy of the data is in dispute.

Right to Object

You may object to the processing of your data for direct marketing purposes at any time without needing to provide a reason.

To exercise any of the above rights, contact our data protection team by email [email protected] or Live Chat. We will process your request within 30 business days from the date of receipt.

10Cookies & Tracking Technologies

98ms uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

10.1 Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as login session management and security. These cookies cannot be disabled
  • Performance Cookies: Helping us understand how members use the platform for continuous improvement purposes
  • Functional Cookies: Remembering your preferences such as language and display settings for a more personalized experience
  • Analytics Cookies: Collecting aggregated and anonymised statistical data on platform usage

You can manage your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect platform functionality.

11Notice to Children

The 98ms platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If we discover that we have collected data from someone below the minimum age requirement, we will take immediate steps to delete that data and close the relevant account.

If you have reason to believe that a minor has registered an account on our platform, please contact us immediately at [email protected].

12Changes to This Privacy Policy

98ms reserves the right to update this Privacy Policy from time to time to reflect changes in our data handling practices, new legal requirements, or platform improvements. You will be notified of any significant changes through:

  • A prominent notice on our main website
  • Email notification sent to the address registered with your account
  • An in-platform pop-up notification during your first login after any changes

The "Updated" date displayed at the top of this document will always reflect the latest version. Continued use of the platform after any changes constitutes your acceptance of the updated terms.

Our Recommendation: Please review this Privacy Policy page periodically, especially if you have been away from the platform for an extended period, to ensure you are always informed of how we handle your data.

13Contact the Data Protection Officer

If you have any questions, concerns, or wish to exercise your data protection rights, our team is ready to assist:

  • Live Chat: Available 24/7 directly from the 98ms website or app for immediate response
  • Email: [email protected] (response within 2 business days for privacy-related matters)
  • FAQ: Visit the FAQ for quick answers related to privacy and account security

For data protection complaints that cannot be resolved internally, you have the right to refer the matter to the relevant data protection authority in Malaysia.