Privacy Policy a88 –
Your Data, Our Responsibility

Welcome to the a88 Privacy Policy page. We understand that your trust is the most valuable asset we safeguard. As an online gaming platform operating exclusively for the Malaysian market, a88 is fully committed to protecting the privacy and data security of every player who registers and uses our services.

This Privacy Policy explains in detail how a88 collects, processes, stores, protects, and occasionally discloses your personal information when you use our platform — whether through the website, mobile app, or customer support channels. This document also outlines your rights as a data subject and how you may exercise them.

This policy is formulated in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection standards. We do not take this responsibility lightly — every decision relating to the handling of your data is made with your security and privacy as the top priority.

This policy covers all users of the a88 platform regardless of how you access our services — via a web browser on a laptop, smartphone, tablet, or the a88 app available for download on App page us.

A88 collects your personal information through several means — directly when you register an account, while you use our services, and automatically through tracking technologies designed to improve the user experience. Below is a detailed breakdown of the types of information we collect:

Account Registration Information:

• Full name as shown on your official Malaysian identification document.
• Date of birth for age verification (minimum 18 years old).
• Active email address for account communications and promotions.
• Mobile phone number registered under your name.
• Username and password encrypted using bcrypt.
• Current residential address in Malaysia.

Identity Verification Information (KYC):

• A copy of your MyKad national ID or valid passport.
• Latest three months' bank statements for source-of-funds verification.
• A selfie with your identification document for live identity verification.
• Proof of residential address such as a utility bill or bank statement.

Financial & Transaction Information:

• Malaysian bank account number for deposit and withdrawal purposes.
• Deposit, withdrawal, and game transaction history.
• E-wallet information such as Touch 'n Go or GrabPay (passwords are never stored).

Technical & Behavioral Information:

• IP address and general geolocation data for regional verification.
• Device type, operating system, and web browser version.
• Activity log data for gameplay and platform interactions.
• Cookies and similar tracking technologies.

Every piece of information we collect is used for a specific and legitimate purpose. a88 does not use your data for any other purpose without first obtaining your consent. Below is a summary table of our data usage:

You may withdraw consent to receive marketing communications at any time by contacting our support team. Withdrawal of consent will not affect any processing carried out prior to withdrawal based on consent previously given.

A88 processes your personal data based on one or more valid legal grounds under Malaysia's Personal Data Protection Act 2010 (PDPA). We do not process your data without solid legal justification.

• Contract Fulfilment: Processing required to provide the gaming services you have requested, including account management and financial transaction processing.
• Legal Obligation: Processing mandated by Malaysian law, including anti-money laundering (AML) and know your customer (KYC) requirements.
• Legitimate Interest: Processing to prevent fraud, enhance platform security, and improve the user experience.
• Your Consent: Processing for marketing, promotions, and non-essential communications that requires your explicit consent.

A88 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. This is a core principle we uphold without exception. However, there are limited situations in which we may share your information:

Trusted Service Providers:

• Payment processors and banking gateways (FPX, local Malaysian banks) to facilitate transactions.
• KYC and identity verification service providers that hold industry-recognised certifications.
• Cloud computing service providers with enterprise-grade security.
• Game software providers (slot providers, live casino) that require player IDs for game logs.

Legal Requirements & Enforcement:

• Disclosure to Malaysian authorities when required by court order or applicable law.
• Reporting to Malaysia's Financial Intelligence Unit (FIED) for suspicious transactions as required under AMLA 2001.
• Cooperation with law enforcement agencies in lawful investigations.

The security of your personal data is an absolute priority for a88. We continuously invest in industry-grade security infrastructure to ensure your information is always protected against cyber threats, unauthorized access, and data breaches.

• 256-bit SSL Encryption: All data transmitted between your device and the a88 servers is encrypted using the latest TLS 1.3 protocol.
• Stored Data Encryption: Sensitive information such as bank details and KYC documents is stored in AES-256 encrypted format on secured servers.
• Two-Factor Authentication (2FA): An additional security layer for account login using an OTP code sent to your registered phone number.
• 24/7 Monitoring: Our cybersecurity team continuously monitors systems to detect and prevent any suspicious activity.
• Periodic Audits: Independent security audits are conducted periodically by certified third-party cybersecurity firms.
• Strict Access Control: Only staff who require access to your data are permitted to do so, and all access is logged and monitored.

A88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They help us recognise you on subsequent visits and provide a more personalised experience.

Types of Cookies We Use:

• Essential Cookies: Required for core platform functions such as login sessions and security. Cannot be disabled.
• Performance Cookies: Collecting anonymized analytics data to help us understand how users interact with the platform for improvement purposes.
• Functional Cookies: Saving your preferences such as language, theme, and display settings for your convenience.
• Marketing Cookies: Used to display relevant promotions to you. Requires your consent and can be disabled.

You can manage or delete cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality of some parts of our platform. For guidance on managing cookies, refer to your web browser's help documentation.

In addition to cookies, we also use technologies such as web beacons, tracking pixels, and local storage (localStorage) for analytics and user experience improvement purposes, all operated within the scope of this Privacy Policy.

A88 does not retain your personal data longer than necessary for the purpose for which it was collected. Retention periods are determined based on legal requirements, legitimate business purposes, and your security interests.

Upon expiry of the retention period, your data will be securely deleted or anonymised in a form that cannot be used to identify you. Our deletion process employs methods that comply with industry data security standards.

Under Malaysia's Personal Data Protection Act 2010 and international data protection principles, you have the following rights regarding your personal data held by a88:

• Right of Access: You have the right to request a copy of all personal data we hold about you in a readable format.
• Right to Rectification: If any of your information is inaccurate or outdated, you have the right to request an immediate correction.
• Right to Erasure: You may request the deletion of your personal data, subject to applicable legal retention obligations.
• Right to Restrict Processing: You may request that we restrict the processing of your data under certain circumstances, such as when you are disputing the accuracy of the data.
• Right to Data Portability: You may request your data in a structured format for transfer to another service provider.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: If processing is based on your consent, you may withdraw that consent at any time without affecting the validity of prior processing.

A88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. Any changes made will take effect immediately upon publication on this page.

When we make significant changes to this Privacy Policy, we will notify you via:

• A prominent notice on the a88 platform homepage for a minimum of 14 days.
• A notification email will be sent to the email address registered to your account.
• In-app notification via the a88 app if you are using our mobile application.

The "Updated" date at the top of this page will always reflect the date of the latest version of this Privacy Policy. We encourage you to review this page periodically so you remain informed of how we protect your information. Continued use of the a88 platform after any changes are published constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, you may contact the a88 Data Protection Officer through the following channels:

• Official Email: [email protected] – for privacy and data rights enquiries.
• General Support: [email protected] – for account issues and general enquiries.
• Response Time: Within 3 business days for general enquiries; 30 business days for formal data rights requests.

We accept inquiries in both Malay and English. Our team is ready to help you understand your rights and ensure your personal information is handled correctly and transparently at all times.