888casino Malaysia Privacy Policy – User Data Protection

888casino understands that privacy is more than a legal requirement — it is part of the trust users place in us when they choose to play on this platform. Every time you log in to play live casino, place a bet on EPL or Liga Super Malaysia football, spin the slots or play poker at 888casino, you are entrusting us with your personal information. We do not take that trust lightly.

This Privacy Policy applies to all users of the 888casino platform accessible via 888casino.express, covering all services we provide — online casino, Sports Betting, poker, lottery and all other products within the 888casino ecosystem.

This Policy was developed in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and international best practices in data protection. If you have any questions about how we handle your data, our team is available at support@888casino.express.

888casino collects various categories of data depending on how you interact with our platform. Generally, the data we collect can be grouped into the following categories:

We do not collect sensitive data categories such as health information, religious beliefs, political views, or biometric data, unless specifically stated and your explicit consent has been obtained beforehand.

888casino collects personal data through various channels as you interact with our platform:

• Account Registration: When you complete the registration form, you provide your identity and contact data directly to us.
• Platform Usage: When you play, make deposits or withdrawals, interact with customer support, or use any platform feature — our systems log that activity.
• Identity Verification (KYC): When you submit identity documents for account verification or large withdrawal purposes, we retain copies of those documents in a secure system.
• Cookies & Tracking Technologies: When you browse the 888casino website, cookies and similar technologies automatically collect technical data about your session.
• Third-Party Sources: In certain situations, we may receive your data from payment service providers such as Touch 'n Go eWallet, GrabPay, DuitNow, or FPX during transaction processing.

All data collection is carried out on the basis of legitimate service requirements, compliance with legal obligations, or with your explicit consent.

Data collected by 888casino is used for the following purposes:

• Account Management: Creating and managing your account, verifying your identity at login, and processing any account settings changes you request.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, and processing winnings withdrawals to the same payment methods.
• Service Delivery: Ensuring the platform operates correctly, providing access to all games and features you use, and maintaining your gaming history.
• Security & Fraud Prevention: Detecting and preventing unauthorised access, financial fraud, money laundering and violations of our terms of use.
• Responsible Gaming: Monitoring gaming patterns to identify signs of problem gambling and providing appropriate tools when needed.
• Legal Compliance: To fulfil our compliance obligations under applicable Malaysian law, including the Personal Data Protection Act 2010 and related legislation.
• Service Communications: Sending important notices regarding your account, changes to terms, security alerts, and transaction information.
• Platform Improvement: Analysing usage patterns to improve the user experience, fix bugs, and develop better new features.

888casino does not use your data to make automated decisions that significantly affect you without appropriate human oversight.

888casino takes a very strict approach to the sharing of user data. We does not sell your personal data to any third party for marketing or commercial purposes. Your data is only shared in limited situations and under strict controls:

• Payment Service Providers: Required transaction data is shared with providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and banks via FPX solely for the purpose of processing your deposits and withdrawals.
• Game Providers: Limited account information is shared with third-party game providers integrated into the 888casino platform (such as Pragmatic Play and Evolution) to enable you to play their games. These providers are bound by strict confidentiality agreements.
• Identity Verification Provider: During the KYC process, identity data may be verified through approved third-party verification services.
• Legal Authorities: Where required by Malaysian law or a valid court order, 888casino will disclose the necessary data to the relevant authorities.
• Business Transfer: Should 888casino be involved in a merger, acquisition or asset transfer, user data may be transferred as part of that transaction, with reasonable prior notice given to users.

888casino continuously invests in the security of user data. The technical and organisational measures we have put in place include:

• 256-bit SSL Encryption: All data transmitted between your device and our servers is encrypted using TLS 1.3 with 256-bit encryption — the highest standard used in the financial industry.
• Data-at-Rest Encryption: Sensitive data stored in our databases, such as identification card numbers and payment information, is separately encrypted using AES-256 encryption.
• Two-Factor Authentication (2FA): Two-factor authentication is available for all user accounts and is mandatory for high-risk operations such as large withdrawals.
• Internal Access Controls: Access to user data within our organisation is restricted to staff who genuinely require it to perform their duties, based on the principle of least privilege.
• 24/7 Security Monitoring: An automated monitoring system continuously tracks all platform activity to detect unauthorised access attempts or suspicious behaviour.
• Regular Penetration Testing: 888casino conducts regular security testing, including penetration testing by independent third parties, to identify and address security vulnerabilities before they can be exploited.

While we take all reasonable steps to protect your data, no system can guarantee absolute 100% security. We encourage you to play your part in keeping your account secure by using a strong password and never sharing your login details with anyone.

888casino retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or for as long as required under applicable Malaysian law.

General data retention guidelines we follow:

• Active Account Data: Retained for as long as your account remains active, and for any additional period required by law following account closure.
• Financial Transaction Data: Transaction records are retained for a minimum of 7 years as required by Malaysian financial and anti-money laundering legislation.
• Support Communication Records: Retained for 2 years from the date of communication for reference and dispute resolution purposes.
• Technical Log Data: System and security logs are retained for 90 days as a general rule, unless an ongoing investigation requires a longer retention period.
• KYC Documents: Retained for a minimum of 5 years after the business relationship ends, in accordance with anti-money laundering compliance requirements.

Upon expiry of the retention period, data will be securely deleted or anonymised using methods that ensure it cannot be recovered.

The 888casino website uses cookies and similar tracking technologies to enhance user experience and ensure optimal platform performance. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions — login, session management and security. These cookies cannot be disabled as they are essential for the platform to operate.
• Performance Cookies: Collects information on how users interact with the platform, the most frequently visited pages, and any error messages encountered. All data is collected in aggregate form without identifying individual users.
• Functional Cookies: Saves your preferences such as language, display settings and login information (if you select "Remember Me") to deliver a more personalised experience.
• Analytics Cookies: Helps us understand overall usage patterns to improve the platform. Analytics data is collected in a format that does not identify individual users.

You can control and manage cookies through your web browser settings. Disabling certain cookies may affect the functionality of the 888casino platform. For more information on managing cookies in popular browsers such as Chrome, Firefox, or Safari, refer to the respective browser's help documentation.

Under Malaysia's Personal Data Protection Act 2010 and this Privacy Policy, you have the following rights regarding your personal data at 888casino:

To exercise any of the rights above, contact our privacy team at support@888casino.express, stating the right you wish to exercise along with your account information for identity verification. We will respond within 14 business days.

The 888casino platform is restricted to users aged 18 and above only. We do not knowingly collect or process personal data from individuals under the age of 18.

Steps we take to ensure this:

• Date of birth verification is mandatory during the registration process
• KYC process requiring valid identity documents
• Regular reviews of accounts showing signs of underage users

Should we discover that personal data belonging to a minor has been collected inadvertently, we will take immediate steps to delete that data and close the account in question. If you believe that someone under the age of 18 has registered for or used this platform, please contact us immediately at support@888casino.express.

888casino reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or relevant technological developments. Whenever the Privacy Policy is updated, the "Updated" date at the top of the document will be revised accordingly.

For significant changes that affect how we use your personal data, we will notify you via:

• An email to your registered address at least 14 days before the changes take effect
• Prominent notice displayed on the platform upon login
• Announcement on the website homepage

Continued use of the 888casino platform after a change notice is considered acceptance of the updated Privacy Policy. If you disagree with any changes, you have the right to close your account and request deletion of your data.

If you have any questions, concerns or complaints regarding this Privacy Policy or the way 888casino handles your personal data, we encourage you to reach out to us directly:

• Privacy Email: support@888casino.express — include "Privacy Enquiry" in your email subject line to expedite handling
• Live Chat: Available 24 hours a day, 7 days a week through the 888casino platform — for general privacy enquiries requiring an immediate response

All privacy inquiries are handled by our qualified team and treated with full confidentiality. We are committed to responding to all privacy inquiries within 5 business days, and for more complex cases, within 14 business days.

This Privacy Policy is governed by the applicable laws of Malaysia, in particular the Personal Data Protection Act 2010. Any privacy dispute that cannot be resolved directly with us may be referred to the Personal Data Protection Commissioner of Malaysia.