Privacy Policy — How Poker88 Protects Your Data

01 Introduction

This Privacy Policy ("Policy") describes the data practices of Poker88 ("the Platform", "we", "us", "our"), the online casino and sports betting platform accessible at https://poker88.cam. It explains how we collect, use, store, share, and protect the personal information of users ("you", "Player", "User") who access or register on our platform.

Poker88 serves players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam. We recognise our responsibilities under applicable data protection principles and are committed to handling your personal data with transparency, fairness, and security.

By registering an account on Poker88, accessing the platform, or otherwise providing us with personal data, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the platform.

02 Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, and online identifiers.
• "Processing" — any operation performed on personal data, including collection, recording, storage, use, transmission, disclosure, or deletion.
• "Data Controller" — Poker88, the entity that determines the purposes and means of processing personal data.
• "Data Processor" — a third party that processes personal data on behalf of Poker88 under a contractual data processing agreement.
• "KYC" — Know Your Customer; the identity and document verification process required for account compliance.
• "Cookie" — a small text file stored on your device by a website to record browsing preferences, session data, and analytics information.
• "Sensitive Data" — a subset of personal data including government identification numbers, financial account details, and biometric identifiers, which attract heightened protection obligations.

03 Data We Collect

Poker88 collects the following categories of personal data. The specific data points collected depend on how you interact with the platform:

04 How We Collect Your Data

4.1 Direct Collection

The majority of personal data we hold is provided directly by you during the account registration process, KYC submission, deposit and withdrawal requests, live chat and email support interactions, and when you update your account settings or profile.

4.2 Automated Collection

Certain technical and usage data is collected automatically when you access the Poker88 platform. This includes IP addresses, device identifiers, browser characteristics, and session activity data collected through server logs and cookies. This automated data collection occurs regardless of whether you are logged into an account.

4.3 Third-Party Sources

In limited circumstances, Poker88 may receive personal data from third parties, including:

• Identity verification and KYC service providers who cross-reference your submitted documents against national databases
• Payment processors including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency network validators, who confirm transaction status
• Fraud prevention and AML screening services that flag high-risk transaction patterns
• Analytics providers who aggregate anonymised behavioural data to help us improve platform performance

05 Lawful Basis for Processing

Poker88 processes your personal data on the following lawful bases:

• Contractual Necessity — processing required to perform our obligations under the Terms and Conditions, including account management, game provision, deposits, withdrawals, and customer support.
• Legal Obligation — processing required to comply with applicable laws, including anti-money laundering (AML) regulations, identity verification mandates, and regulatory reporting obligations.
• Legitimate Interests — processing undertaken in our legitimate interests or those of third parties, including fraud prevention, platform security, responsible gambling monitoring, and service improvement — provided such interests are not overridden by your rights.
• Consent — where you have given explicit consent to specific processing activities, such as receiving marketing communications, promotional emails, or personalised offers. You may withdraw consent at any time without affecting the lawfulness of prior processing.

06 How We Use Your Data

Poker88 uses your personal data for the following purposes:

6.1 Account Operations

To create, manage, and maintain your Poker88 account; verify your identity and age eligibility (21+); process deposits and withdrawals via Malaysian payment methods; communicate account-related updates; and respond to support queries and disputes.

6.2 Regulatory Compliance

To fulfil our obligations under applicable gaming regulations and AML legislation, including performing KYC checks, conducting transaction monitoring, filing regulatory reports where required, and cooperating with lawful requests from regulatory or law enforcement authorities.

6.3 Fraud Prevention & Security

To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and unauthorised account access. This includes automated monitoring of transaction patterns, IP addresses, device fingerprints, and gameplay behaviour.

6.4 Responsible Gambling

To monitor player behaviour for indicators of problem gambling; to enforce self-exclusion, deposit limits, and session time controls; and to fulfil our duty of care obligations toward players exhibiting signs of gambling harm. This processing is conducted in the legitimate interests of player protection.

6.5 Service Improvement

To analyse platform usage, game performance, and user experience data in order to improve the Poker88 platform, optimise mobile performance for Malaysian users, and develop new features based on player behaviour and preferences.

6.6 Marketing Communications

Where you have provided consent, to send promotional emails, bonus notifications, VIP programme updates, and personalised offers. You may opt out of marketing communications at any time by updating your preferences in your account settings or by contacting our support team. Opting out of marketing will not affect your ability to use the platform.

07 Data Sharing & Disclosure

7.1 Service Providers

Poker88 shares personal data with carefully selected third-party service providers who assist us in operating the platform. These include payment processors (including DuitNow, FPX, Touch 'n Go, Boost, and GrabPay operators), KYC and identity verification providers, fraud screening services, customer support software providers, and data analytics platforms. All service providers are bound by contractual data processing agreements that restrict how they may use your data.

7.2 Legal & Regulatory Disclosure

Poker88 may disclose personal data to government authorities, regulators, law enforcement agencies, or courts where we are legally obligated to do so, or where disclosure is necessary to prevent fraud, protect the safety of users, or defend legal claims. We will notify you of any such disclosure to the extent permitted by law.

7.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of all or substantially all of Poker88's assets, your personal data may be transferred to the acquiring or successor entity. We will provide reasonable notice of any such transfer and ensure that the recipient is bound by privacy obligations no less protective than those set out in this Policy.

7.4 No Sale of Data

Poker88 does not and will not sell, rent, lease, or trade your personal data to third parties for their own commercial or marketing purposes. This commitment applies regardless of compensation or consideration offered.

08 Cookies & Tracking Technologies

8.1 What We Use

Poker88 uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your experience on the platform, maintain session authentication, and collect anonymised analytics data. Cookies are small text files stored on your device that allow the platform to recognise your browser across sessions.

8.2 Types of Cookies

• Strictly Necessary Cookies — essential for the platform to function. These include session authentication tokens and security cookies. They cannot be disabled without impairing platform functionality.
• Functional Cookies — remember your preferences such as language settings, display options, and game lobby filters to personalise your experience.
• Analytics Cookies — collect anonymised data on how users navigate the platform, which pages are most visited, and where technical errors occur. This data helps us improve platform performance.
• Security Cookies — used by our fraud detection systems to identify unusual access patterns, detect bot activity, and protect against account takeover attacks.

8.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to view, delete, and block cookies. Please note that blocking strictly necessary cookies will prevent you from logging into or using key features of the Poker88 platform. Instructions for managing cookies are available in your browser's help documentation.

09 Data Security

Poker88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers
• AES-256 encryption for sensitive personal and financial data stored in our databases
• Role-based access controls ensuring only authorised personnel can access personal data
• Multi-factor authentication for all internal administrative access to player data systems
• Regular penetration testing and vulnerability assessments conducted by independent security firms
• Automated intrusion detection and real-time security monitoring systems operating 24/7
• Secure data centre facilities with physical access controls and redundant infrastructure
• Regular staff training on data protection responsibilities and incident response procedures

Despite these measures, no system is completely immune to security incidents. In the event of a data breach that poses a risk to your rights and freedoms, Poker88 will notify affected users and relevant authorities in accordance with applicable data breach notification obligations.

10 Data Retention

Poker88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. Specific retention periods are set out below:

• Account and identity data — retained for the duration of the account relationship, plus a minimum of five (5) years following account closure to meet AML and regulatory record-keeping requirements.
• Transaction and financial records — retained for a minimum of seven (7) years in accordance with financial record-keeping obligations.
• KYC documents — retained for the duration of the account relationship plus five (5) years after closure.
• Support communications — retained for three (3) years following resolution of the support interaction.
• Technical and usage logs — retained for up to twelve (12) months, after which they are anonymised or deleted.
• Marketing preference data — retained until you withdraw consent or request deletion, whichever occurs first.

Following the expiry of applicable retention periods, personal data is securely deleted using industry-standard data destruction methods, or anonymised such that it can no longer be linked to any individual.

11 Your Rights

As a data subject, you have the following rights with respect to your personal data held by Poker88. To exercise any of these rights, please submit a request through your account dashboard or contact our support team. We will respond to valid requests within a reasonable timeframe and in accordance with applicable law.

12 Children's Privacy

Poker88 is strictly an adult platform. We do not knowingly collect personal data from any individual under the age of 21. Our registration process includes mandatory age verification steps, and all accounts are subject to KYC review before withdrawals are processed.

If we become aware that personal data has been submitted by or on behalf of a person under the age of 21, we will immediately suspend the relevant account, delete all associated personal data, and return any deposited funds to the originating payment method where technically possible.

If you believe that a minor has registered an account on Poker88, please contact us immediately at [email protected] so that we may investigate and take appropriate action.

13 International Data Transfers

Poker88 may transfer your personal data to, or store it on, servers located outside of Malaysia — for example, where our hosting infrastructure, KYC verification providers, or analytics platforms operate internationally. Where such transfers occur, we take steps to ensure that your data receives an equivalent level of protection to that which it would receive in Malaysia.

These safeguards include contractual clauses, data processing agreements, and — where applicable — adequacy decisions. If you would like further information about the specific safeguards applicable to international transfers of your personal data, please contact us.

14 Third-Party Links

The Poker88 platform may contain references to third-party payment providers (such as Touch 'n Go, DuitNow, Maybank2u, CIMB Clicks, and Public Bank) and other services. This Privacy Policy applies solely to data processed by Poker88 directly. We are not responsible for the privacy practices of third-party services, and we encourage you to review the privacy policies of any third-party platforms you interact with in connection with your use of Poker88.

15 Changes to This Policy

Poker88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. Material changes will be communicated to registered players via email to the address on file, and a revised "Last Updated" date will be displayed at the top of this page.

Your continued use of the Poker88 platform following notification of any amendment constitutes your acceptance of the revised Policy. We recommend reviewing this page periodically to remain informed of how we handle your personal data. If you object to any change, you should cease using the platform and may request account closure in accordance with the Terms and Conditions.

16 Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the Poker88 Data Protection team through the channels below. Our support team operates 24 hours a day, 7 days a week, every day of the year.

When submitting a data request, please include your registered Poker88 username, the email address associated with your account, and a clear description of your request. We will verify your identity before processing any access, rectification, or erasure request.