Privacy Policy 88gasia – Malaysia Player Data Protection Commitment

This Privacy Policy describes how 88gasia — operating under the domain 88gasia.im — collecting, using, storing, protecting, and disclosing your personal information when you use our platform. We understand that your trust is the most valuable asset in the relationship between 88gasia and our players, and that trust can only be built through full transparency about how we handle your data.

This Privacy Policy applies to all players who register an account with 88gasia, including those who use the platform for Sports Betting (Malaysia Super League football, EPL, BWF badminton, and other leagues), live casino, poker, slots, e-sports, or any other services offered by 88gasia. It also applies to website visitors who have not yet registered an account.

By registering an account or using 88gasia's services, you consent to the collection and use of your data as described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us at support@88gasia.im for assistance with closing your account.

88gasia only collects data necessary to provide and improve our services to you. The following are the categories of data we collect:

Account Registration Data:

• Full name as stated on your MyKad or passport
• Date of birth (for 18+ age verification)
• Active email address
• An active Malaysian mobile number
• Your chosen username
• Encrypted password (88gasia does not store passwords in plain text)

Identity Verification Data (KYC):

• A valid copy of your MyKad or Malaysian passport
• Payment method verification documents if required (for example, an e-wallet screenshot showing the account holder's name)
• A selfie with your identity document if requested for high-risk cases

Financial Transaction Data:

• Deposit and withdrawal records including amount, date, time, and payment method
• The account name of the e-wallet used (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow) or FPX bank account details (Maybank2u, CIMB Clicks)
• Records of bonuses and promotions received, along with their usage status

Platform Activity Data:

• Betting records – bet type, match, league, market, stake amount, and outcome
• Live casino, slots, and poker game records
• Login and logout timestamps, IP address, and device type
• Communication history with the customer support team

Technical Data (collected automatically):

• IP address while using the platform
• Web browser type and version
• Device operating system
• Cookie data and session identifiers
• Pages visited and time spent in each section of the platform

Every piece of data that 88gasia collected has a clear and lawful purpose. We do not use your data in ways you would not reasonably expect. The following are the primary purposes for which data is used:

• Account Management: Registration data is used to create and manage your account, verify your identity, and allow you to log in securely.
• Transaction Processing: Financial data is used to process deposits via Touch 'n Go, GrabPay, DuitNow, and other methods, as well as to process withdrawals to the same account.
• Fraud Prevention: Activity and technical data is used to detect and prevent fraudulent activity, multi-account usage, money laundering, and other security threats.
• Legal Compliance: 88gasia may be required to retain and disclose certain data to the relevant authorities in accordance with applicable laws and regulations in Malaysia.
• Service Improvement: Platform usage data is analyzed in aggregate (not individually) to understand how players use the platform and to drive improvements to the interface and new features.
• Service Communications: Email or SMS for transaction verification, account security notices, policy updates, and responses to customer support enquiries.
• Marketing Communications (with consent): If you have given your consent, 88gasia may send you promotional information, new bonuses, or special offers via email or platform notifications. You may withdraw this consent at any time.
• Responsible Gambling: Betting pattern data is used to identify players who may need responsible gambling support and to ensure that player-defined limit settings are fully observed.

88gasia does not sell or rent your personal data to anyone. However, there are limited circumstances in which we need to share data with specific parties in order to operate the platform properly:

• Payment Service Providers: Minimum necessary transaction data is shared with payment processors – such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX-participating banks – solely to facilitate the processing of your deposits and withdrawals. These providers are bound by strict confidentiality agreements.
• Game Software Providers: For live casino, slots, and poker games, minimum session data must be shared with the relevant game software providers for game settlement purposes. These providers are also bound by strict data security standards.
• Relevant Authorities: 88gasia will disclose personal data to law enforcement authorities or regulatory bodies where required to do so by applicable law, court order, or official investigation. We will notify you of any such disclosure unless we are legally prohibited from doing so.
• Technical Services: Cloud hosting providers, security analytics, and technical support partners who assist us in operating the platform may have limited access to data solely to fulfil their technical functions — not for marketing or any other purposes.

All third parties that receive data from 88gasia are required to comply with appropriate data protection standards and are not permitted to use that data for any purpose other than what is specified in their service agreement with us.

88gasia invests seriously in security infrastructure to protect your data. The following are the layers of protection we have in place:

• 256-bit SSL Encryption: All communications between your browser or app and 88gasia's servers are encrypted using TLS protocol with a 256-bit key length — the same standard adopted by major financial institutions.
• Password Hashing: Your password is never stored in plain text. It is processed through a robust cryptographic hashing algorithm, meaning that even if our database were accessed without authorisation, your password would remain unreadable.
• 24/7 Monitoring: Our security monitoring system operates around the clock to detect and respond to security threats, suspicious login activity, and intrusion attempts.
• Two-Factor Authentication (2FA): We offer 2FA as an additional layer of security for your account. We encourage all players to enable this feature in their account settings.
• Internal Access Controls: Only 88gasia staff who require access to specific data in order to carry out their authorized duties are permitted to access it. All internal access is logged and reviewed on a regular basis.
• Secure Servers: Your data is stored in data centres protected by physical access controls and multi-layered software security.

88gasia uses cookies and similar tracking technologies to enhance your experience on our platform. Below are the types of cookies we use:

• Essential Session Cookies: These cookies are necessary for the platform to function properly — they store your login session information so you do not need to log in again each time you navigate between pages. These cookies cannot be disabled without affecting core platform functionality.
• Preference Cookies: Saving your preferences — such as your chosen language, display layout, and other personal settings — so you do not need to reconfigure them each time you visit.
• Analytics Cookies: Helps us understand how players use the platform in aggregate – the most visited pages, time spent, and navigation flows – which we use to improve the platform. This data is not linked to your individual identity.
• Security Cookies: Used to detect suspicious activity and protect your account from unauthorized login attempts.

You can manage or disable cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the 88gasia platform — particularly session cookies required for persistent login.

88gasia retains your personal data only for as long as necessary for the purposes set out in this Privacy Policy, or as required by law. The following are general guidelines for data retention periods:

• Active Account Data: For as long as your account remains active, all account data, transaction records, and betting records are retained for account management and customer support purposes.
• After Account Closure: Once an account is closed at your request, 88gasia retains the minimum data required for legal and compliance purposes – typically 7 years in line with financial record-keeping requirements – before securely deleting it.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with applicable Malaysian financial legislation.
• Support Communication Logs: Live chat conversation records and support emails are retained for 2 years for quality control purposes and reference in the event of a dispute.
• Technical Data (IP Logs, Sessions): Retained for 90 days for security and fraud detection purposes before being automatically deleted.

Once the retention period ends, data is deleted or anonymised in a manner that ensures it can no longer be linked to your identity.

Under the Personal Data Protection Act 2010 (PDPA) Malaysia and the international privacy principles we adhere to, you have the following rights regarding your personal data held by 88gasia:

• Right of Access: You have the right to request a copy of the personal data we hold about you. Submit your request by email to support@88gasia.im and we will respond within 14 business days.
• Right to Rectification: If you find that any data we hold about you is inaccurate or outdated, you have the right to request a correction. For basic details such as your phone number and email address, you can update these directly in your account settings.
• Right to Erasure: In certain circumstances, you have the right to request that 88gasia delete your personal data. Please note that this right may be limited where we have a legal obligation to retain such data.
• Right to Restrict Processing: You may ask us to limit how we use your data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: You may request your data in a machine-readable format for transfer to another platform should you wish to do so.
• Right to Object to Marketing: You may withdraw consent to receive marketing communications at any time through your account settings or via the unsubscribe link in our marketing emails.

To exercise any of the above rights, send us a written request by email at support@88gasia.im with the subject line "Privacy Rights Request", including your account username for identity verification. 88gasia will respond within 14 business days.

88gasia takes child protection extremely seriously. Our platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data of children under the age of 18.

If we discover that we have inadvertently collected personal data from an individual under the age of 18, we will take immediate steps to delete that data and close the account in question. If you are a parent or guardian and believe that your minor child has registered an account with 88gasia, please contact us immediately at support@88gasia.im so we can take the appropriate action.

All 88gasia registration processes are designed to verify the minimum age requirement — including a date of birth field during registration and KYC verification via MyKad or passport where required.

Platform 88gasia may contain links to external websites or services not operated by us — for example, sports news sites or official sports body websites such as FAM or BWF. This Privacy Policy applies solely to the 88gasia platform and does not cover the privacy practices of those external websites.

We encourage you to read the Privacy Policy of every website you visit, especially before providing any personal information. 88gasia is not responsible for the content or privacy practices of external websites linked from our platform.

88gasia reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new technologies, updated legal requirements, or other relevant factors.

When we make material changes to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this document
• Display a prominent notice on the 88gasia platform regarding the changes made
• Sending a notice via email to your registered address where changes are significant and require your action or consent

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. The latest version of the 88gasia Privacy Policy is always available on this page. Continued use of the platform following any amendments constitutes acceptance of the updated terms.

This Privacy Policy was last updated on 1 January 2026.

If you have any questions, concerns, or requests relating to this Privacy Policy or how 88gasia handles your personal data, please contact us through the following channels:

• Email: support@88gasia.im – for privacy enquiries, please use the subject line "Privacy Policy Enquiry" or "Privacy Rights Request"
• Live Chat: Available 24/7 within the 88gasia platform – for urgent privacy and account security enquiries

The 88gasia team handling privacy matters will respond to all enquiries within 14 business days. For urgent requests such as a potential security breach or unauthorised access to your account, please use Live Chat for a faster response.