Privacy Policy Asia888 – Your Data Protection Is Our Priority

1 Introduction to Asia888's Privacy Policy

Asia888 is an online betting and casino entertainment platform serving Malaysian users. In the course of our operations, Asia888 collects and processes various types of players' personal data for legitimate and necessary purposes. We understand that privacy is a fundamental right, and we take this responsibility very seriously.

This Privacy Policy is written in clear, plain language because we believe Malaysian players deserve to know exactly how their data is handled — not just through lengthy, confusing legal text. If you have any questions after reading this document, our team is available via live chat or email.

2 Types of Personal Data Asia888 Collects

Asia888 only collects data that is genuinely necessary to provide a safe, legal and quality service. Below are the categories of data we collect and their sources:

2.1 Data You Provide Directly to Us

• Registration Information: Full name, MyKad identification number, date of birth, gender, Malaysian mobile number, email address and residential address.
• Identity Verification Documents (KYC): A copy of your MyKad, a recent Malaysian bank statement or utility bill to verify your identity and address in compliance with anti-money laundering (AML) requirements.
• Financial Information: E-wallet account details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay) or bank account information for deposit and withdrawal purposes. Asia888 does not store full credit card details — card transactions are processed through PCI DSS-certified payment gateways.
• Communications with Support: Records of live chat conversations, emails, and WhatsApp messages you have sent to the Asia888 support team.

2.2 Automatically Collected Data

• Technical Data: IP address, device type, operating system, web browser type and version, screen resolution and other relevant technical data.
• Usage Data: Login history, session duration, games played, full betting records (including amounts, game types, timestamps and outcomes), financial transaction history and promotional usage records.
• Cookie Data: Session cookies, user preference cookies, and analytics cookies. Further information on cookie usage can be found in Section 6.

2.3 Summary Table of Data Collected

3 How Asia888 Uses Your Data

Asia888 uses players' personal data solely for legitimate and necessary purposes. We do not process your data beyond what is required to operate the platform safely and effectively. The specific purposes for which data is used are as follows:

• Service Provision: Managing your account, processing deposits and withdrawals via Malaysian payment methods (Touch 'n Go eWallet, GrabPay, DuitNow, FPX), crediting winnings, and processing bonus requests.
• Identity Verification (KYC): Verifying your identity to meet anti-money laundering (AML) legal requirements and to prevent identity fraud.
• Platform Security: Detecting and preventing fraud, bonus abuse, multiple account ownership, game collusion, and other activities that violate Asia888's Terms & Conditions.
• Customer Support: Answering questions, resolving disputes, and assisting you with any account or game-related issues.
• Responsible Gambling: Monitoring gameplay patterns to identify players who may be experiencing gambling-related issues and providing appropriate support.
• Marketing (with consent): Sending information about promotions, bonuses and Asia888 platform updates — only to players who have given explicit consent to receive marketing communications.
• Platform Improvements: Analysing usage data in aggregate (not at an individual level) to understand how players use the platform and identify areas for improvement.
• Legal Compliance: Fulfilling the reporting and record-keeping obligations required by applicable laws and regulatory authorities.

4 Legal Basis for Data Processing

Asia888 processes your personal data on the basis of one or more of the following valid legal grounds:

• Contract Performance: Processing required to fulfil the agreement between you and Asia888 — including account management, transaction processing, and the provision of gaming services.
• Legal Obligations: Processing required to comply with applicable laws, including AML identity verification requirements and financial record retention.
• Legitimate Interests: Processing based on Asia888's legitimate interests that do not override your rights and interests — such as fraud prevention, platform security, and service improvement.
• Consent: For marketing activities and promotional communications, Asia888 relies on the explicit consent you have provided. You may withdraw this consent at any time via your account settings or by contacting us.

5 Data Sharing with Third Parties

Asia888 does not sell players' personal data. We only share data under the limited circumstances outlined below, and only where necessary:

5.1 Third-Party Service Providers

Asia888 works with carefully selected third-party service providers to assist in platform operations. These providers are only permitted to use your data for the specific purposes we direct and are bound by strict confidentiality agreements:

• Payment Gateway Providers: To process transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX. These providers maintain their own privacy policies and are PCI DSS certified.
• Game Software Providers: Gaming data required to operate casino and slots games from licensed providers — limited to the technical data necessary for game operations.
• Identity Verification Services: Third-party KYC providers that assist with verifying player identity documents.
• Analytics Services: Analytics tools that help us understand platform performance — this data is processed in aggregate and does not identify individuals.

5.2 Legally Required Disclosures

Asia888 may disclose player data to government authorities, law enforcement bodies or courts when lawfully required to do so under Malaysian law or a valid court order. We will notify you of any such disclosure unless prohibited by law.

6 Cookies & Tracking Technologies

Asia888 uses cookies and similar tracking technologies to enhance your experience on the platform. The following are the types of cookies we use:

• Essential Cookies: Required for the platform's core operations — including maintaining your login session, remembering language preferences and ensuring security features function correctly. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information on how players use the Asia888 platform — including the most frequently visited pages, time spent in each section, and error messages encountered. All such information is collected anonymously for platform improvement purposes.
• Functional Cookies: Allowing the platform to remember your preferences — such as your username, language selection, and display settings — to deliver a more personalised experience.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect your account from unauthorised access.

You can manage cookie settings through your web browser preferences. However, disabling certain cookies may affect the functionality and user experience of the Asia888 platform. Note: Disabling security cookies is not recommended, as this may compromise your account's protection.

7 Data Retention & Deletion Period

Asia888 retains players' personal data only for as long as necessary for the purposes set out in this Privacy Policy, or as required by applicable law. Our data retention guidelines are as follows:

• Active Account Data: Retained for as long as your account remains active and for a reasonable period following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian financial and tax legal requirements.
• KYC Documents: Retained for the period stipulated by AML compliance requirements — typically 5 to 7 years after the business relationship ends.
• Customer Support Records: Retained for 3 years from the date of last interaction.
• Security Log Data: Retained for 12 months for fraud detection and security incident investigation purposes.

Once the relevant retention period has expired, your data will be securely deleted or anonymised so that it can no longer be personally linked to you.

8 Your Rights as a Data Subject

As an Asia888 player and data subject, you have the following rights regarding the personal data we hold about you. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of the rights above, submit a written request to privacy@asia888.best stating the right you wish to invoke and sufficient information for us to verify your identity. Asia888 will process your request within 30 calendar days. For complex or multiple requests, we may extend this period by an additional 60 days, and we will notify you in advance.

9 Asia888 Data Security

Asia888 invests seriously in security infrastructure and practices to protect players' personal data from unauthorised access, disclosure, alteration or loss. The key technical and organisational security measures we have in place include:

• Data-in-Transit Encryption: All data communications between a player's device and Asia888's servers are protected with 256-bit SSL/TLS encryption.
• Encryption of Data at Rest: Sensitive data stored in our database — including KYC information and financial details — is encrypted using AES-256 encryption.
• Two-Factor Authentication: Asia888 supports and encourages players to enable two-factor authentication (2FA) on their accounts as an additional layer of security.
• Round-the-Clock Security Monitoring: An automated monitoring system operates 24/7 to detect and address security threats promptly.
• Regular Penetration Testing: Asia888 conducts regular security audits carried out by independent cybersecurity experts to identify and address system vulnerabilities before they can be exploited.
• Staff Training: All Asia888 staff who handle player data undergo regular security awareness and privacy training.

While we take all reasonable steps to protect your data, no system can guarantee absolute 100% security. In the event of a data breach that affects your rights and freedoms, Asia888 will notify you and the relevant authorities within the timeframe prescribed by applicable law.

10 Children's Privacy

The Asia888 platform is intended exclusively for individuals aged 18 years and above. We do not knowingly collect or process personal data from minors. Asia888's registration system is designed to verify players' ages through a rigorous KYC process.

11 Amendments to the Privacy Policy

Asia888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, applicable laws, or technological developments. When we make material changes to this Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this document.
• Notifying registered players via email or in-platform notification at least 14 days before the changes take effect.
• In cases where significant changes require fresh consent, we will request your explicit consent before continuing to process your data under the new terms.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of the Asia888 platform after any changes take effect will be considered acceptance of the updated Privacy Policy.

12 Contact Asia888's Privacy Officer

For any enquiries, concerns, or requests relating to this Privacy Policy or the protection of your personal data, please contact Asia888's Privacy Officer via:

• Privacy Email: privacy@asia888.best — dedicated to data protection enquiries and data subject rights requests.
• General Support: support@asia888.best or via 24/7 live chat within the Asia888 platform.

Asia888 is committed to responding to all privacy-related enquiries within 5 business days. For formal data subject rights requests, please include "Data Subject Rights Request" in your email subject line to help us process it faster.