Can I view my own personal data?

Yes, you have the right to request and view the personal data we hold about you. Contact us at support@m98.lat and we will respond in accordance with applicable law.

m98 Privacy Policy

Read this page for full details on how your personal data is collected, stored, used, and protected.

Introduction

Overview and Purpose

m98 is an online casino platform built for players in Myanmar, and we take your personal data seriously. This Privacy Policy ("Policy") explains how we handle your information when you use the m98.lat website and its related services.

This Policy covers all interactions with us, including browsing our website, registering an account, making deposits and withdrawals, playing games, and using customer support. By continuing to use our services, you agree to the terms set out in this Policy.

Last updated: 30 October 2026

Section 1

Types of Data We Collect

We may collect and store the following types of data from you—

1.1 Information you provide directly

Your name, date of birth, and contact email address
The username and password you create when registering an account
Financial information required to process deposits and withdrawals
Information related to communications and service requests
National Registration Card (NRC) reference number provided for the KYC (Know Your Customer) process

1.2 Automatically collected information

IP address, browser type and operating system
Pages visited, games played, and click patterns
Data collected from cookies and web beacons
Play duration, transaction amounts, and win/loss records
Device identifier (Device ID)

1.3 Information received from third-party sources

Financial verification from payment gateways (KBZPay, Wave Money, AYA Pay, CB Pay)
Identity verification services used to confirm who you are
Data that helps prevent underage gambling and financial misconduct

Section 2

How We Use Your Information

We use the information we collect only for the following purposes—

Account registration, verification and management
Processing deposits and withdrawals securely
Delivering games smoothly and providing technical support
Customer service and support via Live Chat
Preventing fraudulent financial activity and scams
Carrying out legally required KYC (Know Your Customer) procedures
Monitoring and improving our services
Fulfilling legal, regulatory and ethical obligations

We will not share your personal information with advertising agencies, and we will not use it for any purpose beyond what is stated in this policy.

Section 3

Cookies and Tracking

Our website uses cookies to improve your browsing experience. Cookies are small files stored in your browser's memory.

Types of cookies

Strictly Necessary Cookies: Cookies that are essential for logging in, maintaining your session, and security functions
Analytics Cookies: Cookies that help us understand how the website is used so we can improve our service
Functional Cookies: Cookies that remember your preferences, such as language selection and game settings

You can refuse cookies through your browser settings. However, please note that disabling strictly necessary cookies may affect how some parts of the service work.

Section 4

Data Sharing and Third Parties

m98 will not sell your personal information to third parties, and will only share it under the following limited circumstances—

Payment Processors: KBZPay, Wave Money, AYA Pay, and CB Pay receive only the information strictly necessary to process financial transactions
Game Providers: Only the technical data required to deliver game software services is shared
KYC Service Providers: Identity verification partners used to confirm age and identity
Legal Requests: When responding lawfully to official requests from legal authorities
Business Changes: In the event of a company merger or sale, we will act in accordance with the law and will notify you in advance in all cases

Our partner agreements require all partner companies to maintain data protection policies consistent with this policy.

Section 5

Data Security Measures

To protect your personal information, we have put in place the following technical and administrative measures—

SSL/TLS Encryption — the entire website is protected with HTTPS
Database Encryption — sensitive personal data is hashed so it cannot be retrieved directly
Access Control — staff can only access data relevant to their specific role
Server protection through Firewall and Intrusion Detection System
Our staff regularly attend privacy protection training
A monitoring system that checks for suspicious access 24 hours a day

If a data breach occurs that requires notification, we will inform you and the relevant authorities in accordance with the law without delay.

Section 6

Data Retention Period

We will only retain your personal data for the following periods—

Account data: For as long as the account is active and for the legally required period after closure
Financial records: For the period required under financial regulations
KYC records: For the period required under compliance obligations
Customer service records: 2 years after the issue is resolved
Cookie data: From session end up to 1 year, depending on the cookie type and purpose

Once the purpose has been fulfilled, data will be securely deleted or anonymized so it can no longer be identified.

Section 7

Your Rights

Regarding personal data protection, you have the following rights—

7.1 Right of Access

You may request to view the personal data we hold about you.

7.2 Right of Rectification

You may notify us of any inaccurate or incomplete personal data and request that we correct it.

7.3 Right of Erasure

You may request deletion of data where legal and compliance obligations have been met. Data subject to legal obligations, such as financial records, cannot be deleted; we will explain this clearly if it applies.

7.4 Right to Object

You may object to data processing that is based on our specific legitimate interests. We will review and respond to such requests.

7.5 Data Portability

You may request that data you have provided be sent to you in a readable format.

To exercise any of the rights above, contact us at [email protected]. We will respond to your request in accordance with the law after receiving it.

Section 8

Protection of Minors

m98 services are intended for players aged 21+ only. We do not intend to collect personal data from anyone under 21, and if we become aware that we have inadvertently received such data, we will delete it immediately.

If you are a parent or guardian and become aware that your child is accessing our website, please notify us immediately at [email protected].

Section 9

International Data Transfers

Our data servers and service partners may be located outside Myanmar. When such transfers occur, we will not reduce the level of protection for your personal data below that set out in this policy, and we have technical agreements in place to ensure security and protection.

Section 10

Policy Updates

We may update this privacy policy from time to time to reflect changes in law, technology, or our services. After any changes, the "Last updated" date on this page will be revised, and your continued use of our services will be taken as acceptance of the updated policy.

For significant updates, we may post a notice on the website and notify you at the contact address you have provided.

Section 11

Contact Us

If you have any questions, personal data requests, or complaints regarding this privacy policy—

Email: [email protected]
Live Chat: Contact us in Myanmar language 24/7 via Live Chat on the website

Our customer service team will respond to privacy-related requests in accordance with the law and handle them promptly.

Last updated: 30 October 2026

What You Should Know About Personal Data Protection

m98 collects the name, date of birth, email, and financial information you provide when registering an account. When you visit the site, technical data such as your IP address, browser type, and gameplay patterns are also collected automatically. All of this data is used solely for service delivery and security purposes.

We will not sell your personal data to any advertising company. Data is shared only with payment services such as KBZPay and Wave Money that process your transactions, KYC verification services, and when required by law — and only the specific data needed in each case.

Retention periods depend on the type of data. Account data is kept for as long as your account remains open, and financial records are retained in line with legal requirements. Customer service records are kept for 2 years after a case is resolved, and data that is no longer needed is securely deleted.

Yes, you can request deletion of data that is not subject to legal retention obligations. Data that must be kept under financial law — such as transaction records — cannot be deleted, and we will explain this clearly when it applies. Contact us at [email protected].

You can block cookies from your browser settings. However, if essential cookies (session cookies) are blocked, logging in and completing payments may not work properly. We recommend keeping essential cookies enabled so you can use our services without issues.

Yes, you have the right to request and view the personal data we hold about you. Contact us at [email protected] and we will respond in accordance with applicable law.

Every time we update this policy, the "Last updated" date on this page will be revised. For significant changes, an announcement may also be posted on the website. Continuing to use our services after any update means you accept the revised policy.