Privacy Policy a88 — Player Personal Data Protection

This Privacy Policy describes the personal data management practices of a88 ("we", "Platform" or "a88") when you use the a88.bar website and all services contained within it. This document is drafted to meet transparency requirements and to respect the privacy rights of every one of our players.

A88 takes our responsibilities as a data controller seriously. We do not treat your personal information as mere data — it is a trust you place in us, and we are committed to protecting it to the best of our ability. This policy applies to all individuals who register an account, browse the platform, or interact with our services in any capacity.

If you disagree with any part of this policy, please stop using the platform and contact us to discuss your concerns further. We are always open to listening and clarifying.

A88 collects your personal information through several means, including during registration, daily platform use, and the identity verification (KYC) process. Below is a summary of the types of data we collect:

We also collect information you voluntarily provide when contacting customer support, completing feedback forms, or participating in certain promotions. All data collection is carried out lawfully and with a clear purpose.

Every use of your personal data by a88 has a clear and lawful purpose. We do not use your data for any other purpose without obtaining your consent first. The following are the primary purposes:

• Account Management: Creating, verifying and managing your account so you can access all platform features seamlessly.
• Transaction Processing: Verifying and processing deposits, withdrawals and any other financial transactions you make on the platform.
• Identity Verification (KYC): Ensuring you meet the minimum age requirement and verifying your identity to prevent fraud and money laundering.
• Customer Support: Processing and responding to enquiries, complaints or support requests you submit to our team.
• Platform Security: Detecting and preventing fraudulent activity, unauthorized access, bonus abuse and other security threats.
• Responsible Gaming: Monitoring usage patterns to identify players who may need support or early intervention.
• Internal Marketing: Sending you promotional offers and relevant information — only if you have opted in to receive them.
• Legal Compliance: Meeting reporting and compliance obligations required by applicable Malaysian laws.

You may withdraw consent for any non-mandatory use of your data, such as marketing communications, at any time by contacting our support team.

A88 does not sell, rent, or commercialize your personal information to any party for marketing or third-party business purposes. However, there are limited circumstances where data sharing is necessary to operate the platform:

• Payment Providers: Transaction information required is shared with banks and e-wallet providers partnered with a88 to process your deposits and withdrawals.
• Game Software Providers: Minimal technical data is shared with game providers to ensure a smooth and fair gaming experience.
• Identity Verification Services: KYC documents may be processed through recognised third-party verification platforms and are subject to strict confidentiality agreements.
• Authority: We will disclose information to legal or regulatory authorities when required by law or a valid court order.
• Business Transfers: If a88 is involved in a merger or acquisition, your information may be transferred as part of the business assets, subject to prior notification to you.

Protecting your personal information from unauthorized access, loss or misuse is our most important technical and operational commitment. a88 implements comprehensive security layers covering:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser and a88 servers is protected with industry-standard encryption. You can verify this via the padlock icon in your browser's address bar.
• Stored Data Encryption: Sensitive data such as financial information and identity documents is encrypted at rest in our database, not only during transmission.
• Strict Access Controls: Only authorised personnel with a clear work-related need may access member personal data. All access is logged and monitored.
• Two-Factor Authentication: Our internal systems are protected with multi-factor authentication to prevent unauthorized access even if login credentials are compromised.
• Regular Security Audits: Our platform undergoes periodic security audits by independent third parties to identify and patch vulnerabilities before they can be exploited.
• Incident Response Plan: We have clear procedures in place to respond to any data breach, including prompt notification to affected members.

While we implement all reasonable security measures, no system can guarantee 100% absolute security. You also play an important role in protecting your account by using a strong password and not sharing your login credentials.

A88 uses cookies and similar tracking technologies to enhance your experience on the platform, understand how players interact with our services, and ensure the security of your session. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session management and security. These cookies cannot be disabled.
• Preference Cookies: Saving your personal settings such as preferred language and display layout for a smoother repeat experience.
• Analytics Cookies: Helping us understand how players use the platform — which pages are visited most, time spent and navigation patterns — for continuous improvement purposes.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect your account.

You can manage or disable non-essential cookies through your browser settings. However, disabling certain cookies may affect the functionality of some platform features. Data collected through analytics cookies is not directly linked to your personal identity.

You have certain rights regarding the personal data we hold about you. a88 fully respects and supports the exercise of these rights:

To exercise any of the above rights, contact our support team via live chat or email. We will process your request within 30 business days. For complex requests, this period may be extended up to 60 days with prior notification.

A88 does not retain your personal data longer than necessary for the purposes stated in this policy. General retention periods are as follows:

• Active Account Data: Retained for the duration your account is active and for a reasonable period after account closure to allow recovery if needed.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian legal requirements relating to financial reporting and anti-money laundering.
• KYC Documents: Retained for 5 years after account closure or for the period required by the relevant regulatory authority.
• Support Communication Logs: Retained for 2 years for quality control and the resolution of any disputes that may arise.
• Technical Data and Security Logs: Retained for 1 year for fraud detection and security incident analysis purposes.

When data is no longer needed and the mandatory retention period has ended, we will securely delete or anonymise it in accordance with established procedures.

A88 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. When significant changes are made, we will:

• Displaying prominent notices on the platform's home page at least 14 days before changes take effect
• Sending email notifications to all registered members
• Updating the "Last Updated" date at the top of this document
• Keeping previous versions of the Privacy Policy that members may request for reference

Continued use of the platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

If you have any questions, requests, or concerns about how we handle your personal data, we encourage you to reach out to us directly. Our privacy team is ready to help:

• Email: [email protected]
• Live Chat: Available 24/7 via the chat icon on the platform
• Response Time: Privacy-related enquiries are typically answered within 5 business days

For official requests relating to data rights (access, correction, deletion), please clearly state the type of request and include sufficient identity verification information so we can process it securely and accurately.