Privacy Policy – 888 Poker Malaysia

1Introduction & Scope of This Policy

Platform 888 poker takes the privacy and personal data protection of all its Malaysian members seriously. This Privacy Policy has been prepared in accordance with the requirements of the Malaysian Personal Data Protection Act 2010 (PDPA) and its related regulations.

This policy explains in detail how 888 poker collect, record, store, use, disclose and protect your personal data when you use our Sports Betting, Live Casino, e-sports and virtual sports platform. This covers all your interactions with our platform — from account registration and daily betting activity to financial transactions and communications with our customer support team.

We are committed to ensuring your personal data is processed lawfully, fairly and transparently. If you have any questions about this policy, please contact our Data Protection Officer via email at privacy@888poker-khelo.net.

2Types of Personal Data We Collect

888 poker collect various types of personal data depending on the nature of your interactions with our platform. Below is a detailed breakdown of the data we collect:

We only collect data that is strictly necessary for the stated purposes. 888 poker does not collect sensitive data such as medical information, religious beliefs, or the political views of members.

3How We Use Your Data

888 poker uses collected personal data solely for lawful, clearly stated purposes. These purposes are as follows:

• Account Management: Creating, managing and maintaining your member account, including the identity verification process
• Transaction Processing: Processing deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX, as well as your withdrawal of winnings
• Service Provision: Enables you to access and use all 888 poker products, including Malaysia Super League football betting, esports, live casino, and virtual sports
• Legal Compliance: Fulfilling AML and KYC obligations and reporting to relevant authorities in accordance with Malaysian law
• Platform Security: Detecting and preventing fraud, hacking, account abuse and other unlawful activities
• Product Improvement: Analysing aggregated usage patterns to improve the overall platform user experience
• Service Communications: Sending important notifications regarding your account, transactions, changes to terms, and security updates
• Marketing (with consent): Sending promotional offers, bonus information and the latest news only to members who have given their consent

All use of data is based on a valid legal basis – whether your consent, performance of a contract, a legal obligation, or our legitimate business interests that do not override your fundamental rights.

4Data Sharing with Third Parties

888 poker do not sell or trade members' personal data to any party. However, under certain circumstances, we may share your data with the following parties:

• Payment Service Providers: DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and FPX (Maybank2u, CIMB Clicks) providers for the secure processing of your financial transactions
• Game Software Provider: Technology partners providing live casino, esports, and virtual sports software – only data necessary for gameplay functionality is shared
• Authorities: Malaysian law enforcement agencies, courts, or regulatory bodies that require data lawfully via court order or warrant
• Auditors & Legal Advisors: Independent auditors and legal advisors who support our business operations, subject to strict confidentiality agreements
• Shareholders / Mergers: In the event of a merger, acquisition or business sale, members will be notified in advance

5Data Security Measures

888 poker implements multiple layers of technical and organisational security measures to protect members' personal data against unauthorised access, loss, misuse or destruction:

• Data Encryption in Transit: All communications are secured with TLS 1.3 / SSL 256-bit
• Data Encryption at Rest: Sensitive data such as passwords and financial information is stored in encrypted format
• Multi-Layered Access Control: Only authorised personnel with a legitimate business need may access members' personal data
• Regular Security Audits: Penetration testing and security audits are conducted periodically by independent third parties
• 24/7 Monitoring: An intrusion detection system (IDS) monitors all suspicious activity in real time
• Data Backup: Data is automatically backed up across multiple geographically distributed data centres

While we take all reasonable precautions, no security system is 100% foolproof. In the event of a data breach that affects you, 888 poker will notify you within 72 hours of a breach being detected, in accordance with applicable legal requirements.

6Data Retention Period

We retain your personal data only for as long as necessary for the purpose it was collected or to fulfil legal obligations. Typical retention periods are as follows:

• Active Account Data: For as long as your account is active and for a period of 6 months following account closure
• Financial Transaction Records: Minimum 7 years in accordance with the Companies Act and Malaysian AML legislation
• KYC Data (Identity Verification): Minimum 5 years after the business relationship ends, as required by applicable law
• Communication Logs (Live Chat, Email): 2 years from the date of communication
• Technical Data (IP Logs, Sessions): 90 days unless required for active security investigations
• Marketing Data: Until you withdraw consent or 3 years of inactivity, whichever comes first

Once the retention period expires, data will be securely deleted or anonymised so that it can no longer be associated with you as an individual. Anonymised data may be retained for analytical purposes without a time limit.

7Cookie & Tracking Technology Usage

Platform 888 poker use cookies and similar tracking technologies to enhance the user experience and analyse platform performance. The following are the types of cookies we use:

You can manage or disable cookies through your web browser settings at any time. Please note that disabling essential cookies may affect the functionality of the platform 888 poker. Third-party cookies from selected analytics providers may also be used, and all are subject to this Privacy Policy.

8Your Rights as a Data Subject

Under Malaysia's PDPA and this Privacy Policy, you as a member 888 poker holds the following data protection rights:

To exercise any of the above rights, please contact our Data Protection Officer at privacy@888poker-khelo.net or via live chat within the 888 poker platform. We will process your request within 14 business days and may require identity verification before processing certain requests.

9Protection of Children's Data

Platform 888 poker is intended exclusively for adults aged 18 and above. We do not knowingly collect, store or process any personal data of individuals under the age of 18.

Should we discover that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete that data, close the associated account, and notify the relevant parties where necessary.

If you are a parent or guardian who believes your child has registered an account on 888 poker, please contact us immediately at privacy@888poker-khelo.net or via live chat for immediate assistance.

10Amendments to the Privacy Policy

888 poker reserve the right to update or amend this Privacy Policy from time to time in line with changes in legislation, business requirements or industry practices. Members will be notified of any significant changes via:

• A prominent notice on the platform's homepage for at least 14 days before the changes take effect
• Email notifications to all registered active members
• In-app notifications on the 888 poker mobile app

The "Last Updated" date at the top of this document will always reflect the date of the latest version. Your continued use of the 888 poker platform after any changes take effect will be considered your acceptance of the amended Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

11Contact Our Data Protection Officer

For any enquiries, complaints or requests relating to your personal data and this Privacy Policy, please contact us through any of the following channels:

We aim to respond to all enquiries within 5 business days. For formal data subject rights requests under the PDPA, the response period is 14 business days from the date the request is received.