888bet Malaysia Privacy Policy – Protecting Your Personal Data Is Our Priority

888bet is an online Sports Betting and casino platform operating in Malaysia, serving local players with a wide range of products including Malaysia Super League and EPL football betting, IPL cricket, Live Casino baccarat, blackjack, roulette and other table games. As a platform that handles financial transactions and users' personal identification information, we understand that players' trust in the security of their data is the foundation of our entire relationship with you.

This Privacy Policy applies to all personal information collected by 888bet across all channels, including the 888bet.express website, mobile app, email communications, customer support interactions and any other digital medium used to deliver our services to players in Malaysia. It also applies to data you share during the registration process, identity verification, deposit transaction processing via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay or FPX, and all other activities on the 888bet platform.

This Privacy Policy forms part of 888bet's overall data protection framework and should be read together with the Terms & Conditions our platform. In the event of any conflict between this Privacy Policy and any other document, this Privacy Policy shall take precedence in matters relating to the processing of personal data.

888bet only collects information necessary to provide the services you request and to fulfil our legal obligations. The information we collect falls into several categories:

Personal Identification Information (collected during registration):

• Full name as shown on your Malaysian identification document (MyKad or passport)
• National Identity Card (IC) number or passport number
• Date of birth – to verify that you are 18 years of age or older
• Active email address
• Malaysian mobile phone number
• Current residential address in Malaysia

Financial Information (collected during transactions):

• Malaysian bank account details used for withdrawals (bank name, account number)
• Digital wallet ID such as Touch 'n Go eWallet, GrabPay, Boost, or ShopeePay registered in your name
• Deposit and withdrawal transaction records, including date, time, amount in MYR and payment method
• FPX payment information via Maybank2u or CIMB Clicks

Usage & Technical Information (collected automatically):

• IP address of the device used to access 888bet
• Web browser type and device operating system
• Login records including date, time and estimated geographic location
• Betting activity data including game type, bet amounts, and outcome records
• Session data including duration of use and platform features accessed
• Cookie data and similar tracking technologies (further details in Section 9)

888bet uses the personal information we collect solely for lawful and transparent purposes. Below is a complete list of how we use your data:

• Account management: Creating, maintaining and managing your 888bet account, including secure login with two-factor authentication (2FA).
• Transaction processing: Processes deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and FPX, as well as withdrawals to your Malaysian bank account within 15–60 minutes.
• Identity verification (KYC): Verifies your identity to meet legal requirements related to anti-money laundering (AML) and financial fraud prevention.
• Service provision: Gives you access to all features on the 888bet platform, including Sports Betting, Live Casino, baccarat, blackjack, roulette and other table games.
• Service communications: Sending important notifications related to your account, transaction confirmations, security updates and changes to the terms of service.
• Marketing communications: With your consent, to send you information about relevant 888bet promotions, bonuses, and special offers – you may withdraw this consent at any time.
• Fraud prevention: Detecting and preventing fraudulent activity, bot usage, system manipulation and any behaviour that violates 888bet's Terms & Conditions.
• Analytics & improvement: Understanding how users interact with our platform so we can continuously improve the playing experience for Malaysian players.
• Legal compliance: To fulfil all legal and regulatory obligations applicable to the operation of the 888bet platform in Malaysia.
• Customer support: Enables the 888bet support team to assist you more effectively via live chat or email at support@888bet.express.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), 888bet processes your personal data on the following legal bases, depending on the purpose of processing:

• Your consent: For marketing communications, non-essential cookies, and any processing not required for the delivery of core services, you may withdraw your consent at any time without affecting your eligibility to continue using the 888bet platform.
• Contract fulfilment: For processing necessary to carry out the service agreement between you and 888bet – including deposit and withdrawal transaction processing, account management, and providing access to games.
• Legitimate interests: For fraud prevention, platform security, internal analytics and service improvement purposes, where 888bet's legitimate interests do not override your fundamental privacy rights.
• Legal obligation: To meet the legal requirements applicable to 888bet, including anti-money laundering (AML) requirements, identity verification obligations, and any other reporting requirements.

For every processing activity carried out by 888bet, we always assess whether a valid and sufficient legal basis exists before processing your data. If you would like to know the specific legal basis for any particular processing activity, please contact our Privacy Officer by email at support@888bet.express.

888bet does not sell, rent or disclose your personal information to third parties for marketing purposes or any commercial purpose unrelated to our services. Your personal data is shared only in the following limited circumstances:

• Payment service providers: Required transaction details are shared with the payment gateway providers that process your DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and FPX transactions. All these providers are bound by strict data protection agreements and may only use your data for transaction processing purposes.
• Game software providers: Required session data is shared with 888bet's live casino and table game software providers to ensure gameplay functions correctly. No unnecessary personal identifying information is shared.
• Legal authorities: 888bet will disclose personal information when required to do so by Malaysian law, court order or direction from a relevant authority. We will notify you of any such disclosure where we are legally permitted to do so.
• Fraud protection: Where there is reasonable suspicion of fraudulent activity or serious financial crime, 888bet reserves the right to share the necessary information with the relevant authorities in order to protect the interests of all platform members.
• Professional advisors: Required information may be shared with 888bet's legal advisors, accountants, or auditors, who are bound by strict professional confidentiality obligations.

In all cases where data is shared with third parties, 888bet ensures that adequate protections are in place through legally binding data processing agreements that require those third parties to meet security standards equivalent to 888bet's own practices.

The security of your personal data is 888bet's highest technical priority. We implement multiple layers of security measures to protect your information from unauthorised access, disclosure, alteration or destruction:

• 256-bit SSL Encryption: All data transmitted between your device and 888bet's servers is encrypted using 256-bit SSL/TLS — the same standard used by major Malaysian banks.
• Data-at-rest encryption: Personal data stored in 888bet's databases is also encrypted using strong encryption algorithms to protect against unauthorized access, even in the event of a physical breach.
• Role-based access control: Access to player personal data within 888bet's systems is restricted to staff with a legitimate operational need only, based on the principle of least privilege.
• Two-factor authentication (2FA): 888bet encourages all members to enable 2FA on their accounts, adding an extra layer of security beyond just a password.
• 24/7 security monitoring: An automated threat detection system operates around the clock to identify and address suspicious activity in real time before it can cause harm.
• Regular security audits: 888bet conducts regular third-party security audits to assess and strengthen our data protection framework in line with the latest cybersecurity threats.
• Staff training: All 888bet staff with access to player personal data undergo regular privacy and data security training.

While 888bet takes all reasonable steps to protect your data, no security system can guarantee absolute 100% protection. In the event of a security breach affecting your data, 888bet will notify you within the timeframe required by Malaysia's PDPA and take immediate steps to contain the impact of the breach.

888bet retains your personal data only for as long as necessary to fulfil the original purpose of collection or as required by Malaysian law. Our data retention policy is as follows:

Once the relevant retention period has ended, your personal data will be securely deleted or anonymised in accordance with 888bet's data deletion procedures, which comply with industry standards. Anonymised data — where an individual can no longer be identified — may be retained for longer for statistical analysis purposes without affecting your privacy.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal information held by 888bet:

To exercise any of the rights above, please contact the 888bet Privacy Officer by email at support@888bet.express, stating the right you wish to exercise and providing sufficient details for us to identify your account. 888bet will acknowledge your request within 3 business days and resolve it within the timeframe prescribed by Malaysia's PDPA.

888bet uses cookies and similar tracking technologies to keep the platform running properly, enhance the user experience, and understand how Malaysian players interact with our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core 888bet platform functions such as login verification, session management, and transaction security. These cookies cannot be disabled without affecting platform functionality. No consent is required as they are a technical necessity.
• Analytics Cookies: Helps 888bet understand how players use the platform – which pages are visited most, how long play sessions last, and which features are most popular. This information is used in aggregate and without individual identification to improve the platform.
• Functional Cookies: Saves your preferences such as language, display settings and "remember me" login details to make using the 888bet platform more convenient on future visits.
• Security Cookies: Helps detect suspicious activity, prevent fraud, and protect your account from unauthorized access. These cookies are part of 888bet's multi-layered security system.

You can manage your cookie settings through your web browser's settings. Please note that disabling certain cookies may affect the functionality of some features on the 888bet platform. For more information on managing cookies in your browser, please refer to the support documentation for the browser you are using.

In operating an international betting platform, 888bet may need to transfer some of your personal data to servers or service providers located outside Malaysia — for example, live casino software providers with studios in other countries, or cloud infrastructure providers that store data across multiple data centres to ensure optimal platform availability and performance.

Where cross-border data transfers occur, 888bet ensures your data is adequately protected through the following mechanisms:

• Binding data processing agreements with overseas providers that require them to meet data protection standards equivalent to Malaysia's PDPA.
• We only select vendors that operate in countries with recognized and adequate data protection laws.
• Use of internationally recognised standard contractual clauses to safeguard your rights even when data is held outside Malaysia.

You have the right to obtain further information about cross-border data transfers involving your data by contacting the 888bet Privacy Officer. We are committed to full transparency on this matter and will provide the information you request within a reasonable timeframe.

The 888bet platform is strictly for users aged 18 and above. 888bet does not knowingly collect, process, or store personal information from individuals under the age of 18. The 888bet registration process requires age verification, and we take reasonable steps to ensure that only adults use our platform.

Should 888bet discover that personal information belonging to an individual under 18 has been collected inadvertently, we will take immediate steps to delete that information and close the account in question. If you believe that a minor has registered on 888bet or that we may hold information about a child, please contact us immediately at support@888bet.express so we can take the appropriate action.

888bet reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law or platform improvements that affect how data is collected and used. You will be notified of any material amendments through:

• A prominent notice on the 888bet platform homepage at least 14 days before the amendments take effect
• Notification via email to the address registered with your 888bet account
• Update the "Updated" date displayed at the top of this Privacy Policy page

Your continued use of the 888bet platform after any amendment takes effect will be considered acceptance of the revised Privacy Policy. If you do not agree with the changes made, you have the right to close your account and request deletion of your personal data in accordance with the procedure set out in Section 8. We encourage you to review this Privacy Policy page periodically to stay informed of 888bet's latest privacy practices.

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact the 888bet Privacy Officer through the following channels:

• Privacy Officer Email: support@888bet.express – include "Privacy Policy Enquiry" in your email subject line to ensure it is promptly routed to the right team.
• Live Chat: Available directly on the 888bet platform, 24 hours a day, 7 days a week, in both Bahasa Melayu and English. For straightforward privacy queries, live chat is the quickest way to get an answer.

888bet is committed to responding to all privacy-related enquiries within 3 business days. For formal requests under Malaysia's PDPA, such as data access or data deletion requests, the full process will be completed within the timeframe stipulated by law – generally no more than 21 business days from the date the request is received and verified.

If you are not satisfied with how 888bet has handled your privacy request, you have the right to lodge a complaint with the Malaysian Personal Data Protection Commissioner in accordance with the procedures set out under the PDPA. 888bet will cooperate fully with the relevant authorities in any privacy-related investigation.