Privacy Policy

Introduction

88malaysia ("Company", "Platform", "we", "us", "our") is committed to safeguarding the privacy and personal data of every individual who accesses or uses the 88malaysia platform, including its website and associated services (collectively, the "Service"). This Privacy Policy ("Policy") describes in detail the types of personal data we collect, the purposes for which we use that data, the parties with whom we may share it, and the rights available to you as a data subject.

This Policy applies to all users of the 88malaysia platform, whether you are a registered Member, a prospective user browsing our site, or a visitor who has not created an Account. By accessing or using the Service, you acknowledge that you have read, understood, and accepted the practices described in this Policy.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy. In the event of a conflict between this Policy and any other document, this Privacy Policy shall govern with respect to data processing matters.

Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

Data We Collect

We collect personal data across several categories depending on how you interact with the 88malaysia platform. The categories of personal data we may collect include the following:

3.1 Identity & Registration Data

• Full legal name as stated on official identification
• Date of birth (to verify you meet the minimum age requirement of 21years)
• Nationality and country of residence
• Government-issued identification number (e.g., Malaysian MyKad number)
• Username and account credentials (password stored in encrypted form only)

3.2 Contact Data

• Email address
• Mobile phone number
• Residential address (including city and postcode)

3.3 Financial & Payment Data

• Bank account details (account number, bank name such as Maybank, CIMB, Public Bank, Hong Leong)
• E-wallet identifiers (Touch 'n Go eWallet, Boost, GrabPay, DuitNow)
• Transaction history including deposits, withdrawals, and bets placed in MYR
• Payment source verification documents (where required for KYC)

3.4 Technical & Usage Data

• IP address and approximate geographic location
• Device type, operating system, and browser type
• Session data including login and logout times
• Pages visited, game sessions accessed, and features used
• Clickstream data and interaction logs

3.5 Communications Data

• Records of live chat conversations with support agents
• Email correspondence sent to or received from [email protected]
• Survey responses and feedback submitted voluntarily

3.6 KYC Verification Documents

• Scanned or photographed copies of government-issued photo identification
• Selfie photographs submitted for facial verification
• Proof of address documents (e.g., utility bills, bank statements)

How We Collect Data

88malaysia collects personal data through the following channels:

• Direct Submission: Data you provide when registering an Account, completing KYC, contacting support, or participating in promotions.
• Automated Technologies: Data collected automatically when you access the platform, including cookies, server logs, and analytics tools.
• Payment Processors: Transaction-related data received from our integrated payment gateways including FPX, DuitNow, Touch 'n Go, and banking partners.
• Third-Party Verification Services: Identity verification data received from authorised KYC service providers used to confirm your identity and age.
• Fraud Prevention Services: Risk-related signals received from fraud detection service providers to protect our platform and other Members.

Data Processing & Use

88malaysia processes your personal data for the following purposes. We collect only the data that is necessary for each stated purpose and do not use your data for purposes incompatible with those disclosed:

Legal Basis for Processing

88malaysia processes your personal data on the following legal bases, depending on the nature of the processing activity:

• Contractual Necessity: Processing required to perform the contract between you and 88malaysia — including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable law, including anti-money laundering regulations, age verification obligations, and licensing requirements.
• Legitimate Interests: Processing carried out in pursuit of our legitimate business interests — such as fraud detection, platform security, and improving service quality — where such interests are not overridden by your rights and interests.
• Consent: Processing for purposes such as marketing communications, where we rely on your freely given, informed, and specific consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing

88malaysia does not sell, rent, or trade your personal data to any third party. We may, however, share your personal data with the following categories of recipients, strictly for the purposes described in this Policy and subject to appropriate contractual safeguards:

• Payment Service Providers: Financial institutions and payment processors (including FPX, DuitNow, and e-wallet providers) required to process your transactions.
• KYC and Identity Verification Providers: Third-party identity verification services used to confirm your age and identity in compliance with our regulatory obligations.
• Fraud Prevention & Security Partners: Services used to detect and prevent fraudulent activity, money laundering, and other prohibited conduct on the platform.
• Technology Infrastructure Providers: Cloud hosting, data storage, and software providers that process data on our behalf under strict data processing agreements.
• Regulatory Authorities: Competent regulators, law enforcement agencies, or courts of law, where disclosure is required by applicable law or legal process.
• Auditors and Legal Advisers: Professional service providers engaged in connection with legal, compliance, or financial auditing activities, bound by professional confidentiality obligations.

Data Retention

88malaysia retains your personal data for only as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account's active status plus a minimum of five (5) years following Account closure, to meet anti-money laundering and regulatory record-keeping obligations.
• Transaction Records: Retained for a minimum of seven (7) years in accordance with financial record-keeping requirements.
• KYC Documents: Retained for the duration of your Account plus five (5) years following closure, in compliance with identity verification regulations.
• Support Communications: Retained for three (3) years from the date of last interaction, unless a dispute or legal matter requires longer retention.
• Marketing Consent Records: Retained until consent is withdrawn, plus a reasonable period to demonstrate compliance.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised in accordance with our internal data destruction procedures.

Cookies & Tracking Technologies

The 88malaysia platform uses cookies and similar tracking technologies to enhance your browsing experience, maintain your session, and gather analytics data. The following types of cookies may be used:

• Strictly Necessary Cookies: Essential for the operation of the platform, including session authentication and security functions. These cannot be disabled.
• Functional Cookies: Enable enhanced functionality such as remembering your preferred language, display settings, and saved preferences.
• Analytics Cookies: Collect aggregated, anonymised data about how users interact with the platform, helping us improve performance and user experience.
• Security Cookies: Used to detect and prevent fraudulent activity, multiple account creation, and other prohibited conduct.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality and security of the platform. Strictly necessary cookies cannot be disabled without disrupting core service functionality.

Data Security

88malaysia employs industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• 256-bit SSL (Secure Socket Layer) encryption for all data transmitted between your device and our servers
• Encrypted storage of sensitive data at rest, including passwords (stored as salted hashes) and financial information
• Two-factor authentication (2FA) options for Account login and withdrawal confirmation
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Regular security audits, vulnerability assessments, and penetration testing conducted by independent security professionals
• Real-time fraud monitoring and anomaly detection systems operating 24/7

While we take all reasonable steps to protect your data, no digital transmission or storage system is entirely immune to risk. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and any applicable regulatory authority in accordance with our legal obligations.

Your Rights

As a data subject, you hold the following rights in relation to the personal data that88malaysia processes about you. These rights are subject to certain legal limitations and may not be absolute in all circumstances: