Privacy Policy Betting 888 — Personal Data Protection for Malaysian Players

This Privacy Policy ("Policy") is published by Betting 888, which operates the online betting platform accessible at betting888.app. Throughout this document, references to "Betting 888", "we", "us", or "the platform" refer to the entity operating that platform.

Betting 888 is the data controller responsible for the collection, processing, and storage of your personal information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international privacy standards.

This Privacy Policy applies to all users of the Betting 888 platform – whether you are browsing our website, registering as a new member, making a deposit via Touch 'n Go eWallet or DuitNow, playing slots or live casino games, or contacting our support team.

By registering for or using Betting 888's services, you consent to the collection and processing of your personal data as described in this Policy. If you do not agree, please refrain from using our platform.

Betting 888 collects various types of data depending on how you interact with our platform. The main categories of data we collect are as follows:

Betting 888 collects your personal data through several methods:

• Directly from you – during account registration, the KYC (identity verification) process, support enquiries, or when you complete a form on our platform.
• Automatically – when you use the Betting 888 platform, our systems automatically record technical data such as your IP address, device type, and in-platform activity.
• Via cookies and tracking technologies – to enhance user experience and platform security. See Section 7 for details.
• From payment providers — when you make a deposit or withdrawal via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, the respective provider may share transaction information necessary to verify your payment.
• From authorised third parties – such as third-party identity verification agents we use for the KYC process, or analytics service providers.

Betting 888 uses the data it collects for the following purposes, each with a valid legal basis:

Betting 888 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. This is a commitment we have never compromised on.

However, in certain limited circumstances, Betting 888 may share your data with:

• Payment providers: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX (Maybank2u, CIMB Clicks, RHB) – only the information necessary to process your transactions.
• Game providers: Evolution, Pragmatic Play, PG Soft, and other providers that supply games on our platform – only player ID and game session data are required.
• KYC service providers: Third-party identity verification agents that assist with document verification processes.
• Statutory authorities: Law enforcement agencies, courts, or regulatory bodies when required by Malaysian law or court order.
• Technology infrastructure provider: Cloud service and hosting providers that help operate our platform, subject to strict data protection agreements.

All third parties that receive data from Betting 888 are required to comply with a Privacy Policy that is equivalent to or stricter than this Policy. They are only permitted to use your data for the specific purposes related to the services they provide to Betting 888.

The security of your personal data and financial information is Betting 888's highest priority. We implement multiple layers of technical and organisational protection:

• 256-bit SSL Encryption: All data transmitted between your device and Betting 888's servers is encrypted using the 256-bit SSL standard — the same standard adopted by Malaysia's leading banking institutions.
• Sensitive data segregation: Financial information and passwords are stored separately with additional encryption (hashing), ensuring that even if our servers were accessed without authorisation, the information would remain unreadable.
• 24/7 security monitoring: Our automated monitoring system detects and blocks suspicious access attempts in real time.
• Two-factor authentication (2FA): We encourage all members to enable 2FA for an added layer of protection on their accounts.
• Regular security audits: The Betting 888 platform undergoes security audits by independent third parties to identify and address any vulnerabilities.
• Internal access controls: Only Betting 888 staff with a specific operational need are permitted to access user data, and all access is strictly logged and monitored.

While we take all reasonable steps to protect your data, no security system in the world can guarantee 100% absolute security. You also play an important role — keep your password strong, never share it with anyone, and log out of your account after every session, especially on public devices.

Betting 888 uses cookies and similar tracking technologies to enhance the user experience, maintain platform security, and understand how players use our platform. The following are the types of cookies we use:

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by Betting 888:

Betting 888 retains your personal data only for as long as necessary for the purposes stated in this Policy or as required by Malaysian law:

• Active account data: For as long as your account remains active on the Betting 888 platform.
• Financial transaction data: A minimum of 7 years from the transaction date, in accordance with Malaysia's financial and tax legal requirements.
• KYC records (identity verification): 5 years after account closure, in accordance with AML (Anti-Money Laundering) requirements.
• Security logs: 2 years for fraud investigation and prevention purposes.
• Customer support data: 3 years from the date of last interaction.
• Cookies data: Depending on the cookie type – from the current session (session cookies) to a maximum of 2 years (persistent cookies).

Once the retention period expires, your data will be securely deleted or anonymised (rendered unidentifiable) in accordance with established security procedures.

Betting 888 is a platform that intended for individuals aged 18 and above only. We do not intentionally collect or process personal data of children under the age of 18.

If we find that a person under the age of 18 has registered an account or provided us with personal data, the account will be closed immediately and all associated data will be deleted as soon as possible.

If you are a parent or guardian and believe your child has registered an account with Betting 888, please contact us immediately at support@betting888.app so we can take immediate action.

Betting 888 may update this Privacy Policy from time to time to reflect changes in law, technology, or how we handle data. Each new version will be published on this page with an updated "Last Updated" date.

For significant changes that affect your privacy rights, Betting 888 will provide advance notice via email or an in-platform notification at least 14 days before the changes take effect.

Continued use of the Betting 888 platform after an updated Privacy Policy takes effect will be considered your acceptance of the new version.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how Betting 888 handles your personal data, please contact us:

• Privacy Officer Email: privacy@betting888.app
• General Support Email: support@betting888.app
• Live Chat: Available 24/7 on the Betting 888 platform
• WhatsApp: Available for further enquiries

We are committed to responding to all privacy-related enquiries within 5 business days. For requests involving data rights (access, correction, deletion), processing time is up to 30 business days.