Play88 Privacy Policy – Malaysia Member Data Protection

This Privacy Policy explains how Play88 ("we", "platform") collect, use, store and protect your personal information ("data") when you register, browse or use any of the services available on play88.life and all related applications and services.

Play88 is a Sports Betting and online casino platform operating for the Malaysian market. We are committed to protecting every member's privacy in line with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and international industry best practices.

By registering an account or using the platform Play88, you agree to the collection and processing of your personal data as described in this Privacy Policy. This policy should be read together with Play88 Terms & Conditions which forms part of the overall platform usage agreement.

Play88 only collects data that is strictly necessary to provide our services. The following are the categories of data we may collect and store:

Registration & Identity Data:

• Full name as per Malaysian identity card
• National identification number (MyKad) or passport
• Date of birth (for 18+ age verification)
• Email address
• Malaysian mobile phone number
• Username and encrypted password

Financial & Transaction Data:

• Malaysian bank account number for withdrawal purposes
• Deposit records via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX
• Deposit and withdrawal transaction history in Malaysian Ringgit (RM)
• Betting history and gaming activity

Technical & Usage Data:

• Your device's IP address
• Web browser type and operating system version
• Device information (phone model, screen size)
• Access log data and platform usage timestamps
• Cookie and session information (see Section 6)

Data may be collected through the following means: online registration forms, interactions with the platform during gameplay, communications with the customer support team Play88, cookies and website tracking technologies, as well as information you voluntarily provide when claiming bonuses or using account features.

Play88 uses the personal data collected for the following purposes:

Play88 will not use your data for purposes unrelated to the delivery of platform services without first obtaining your consent. If you no longer wish to receive marketing communications from us, you may withdraw that consent at any time via your account settings or by contacting our support team.

Play88 does not sell members' personal data to any party. However, there are limited situations where we may share your data with third parties necessary for the operation of this platform:

• Payment service providers – providers of Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX require transaction information to process your deposits and withdrawals in MYR. This sharing is kept to a minimum and limited strictly to data necessary for the transaction.
• Game software providers – casino game and virtual sports providers may receive non-personally identifiable gameplay activity data for technical purposes and game fairness auditing.
• Legal authorities – Play88 may be required to disclose your data to Malaysian authorities (such as the police or courts) when mandated by a valid court order or legislation.
• Data processing partners – technology infrastructure providers that help operate our servers and security systems Play88, subject to strict confidentiality agreements.

All third parties that receive data from Play88 are bound by contractual agreements to ensure data is used only for permitted purposes and protected to a standard equivalent to our own security practices.

Play88 implements a range of technical and organisational measures to protect members' personal data from unauthorised access, loss, alteration, or disclosure:

• 256-bit SSL Encryption – all communications between your device and Play88's servers are encrypted using the highest industry-standard encryption protocols.
• Password Encryption – member passwords are stored in encrypted hash form using the bcrypt algorithm. We do not store your password in plain text.
• Two-factor authentication (2FA) – members are encouraged to enable 2FA for an added layer of security when logging in to their Play88 account.
• 24/7 system monitoring – Play88's IT security team continuously monitors systems to detect any suspicious activity or unauthorised access attempts.
• Data segregation – financial data and identity data are stored separately with strict access controls to minimise the risk of data breaches.
• Regular security audits – Play88 conducts regular penetration testing and independent security audits to identify and address vulnerabilities.

In the event of a security incident involving member data, Play88 will take immediate action to contain the incident and notify affected members as well as the relevant authorities within the timeframe required by Malaysian law.

Website Play88 uses cookies and similar tracking technologies to enhance your experience. Cookies are small text files stored on your device by your web browser.

Types of cookies used by Play88:

• Session cookies – used to maintain your login session while using the Play88 platform. These cookies are automatically deleted when you close your browser.
• Preference cookies – saves your preferences such as interface language and odds display so you do not have to reconfigure them each time you log in.
• Analytics cookies – helps us understand how members interact with the play88 platform for the purpose of improving the user experience. This data is collected in aggregate form and does not identify individuals.
• Security cookies – used to detect suspicious login attempts and protect your account from unauthorised access.

You can manage or delete cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the platform Play88. Cookies required for login security and session management cannot be disabled without affecting your ability to use your account.

Play88 retains your personal data for as long as your account remains active and for the required period following account closure, based on the following requirements:

• Active account data – retained for as long as your Play88 account remains active.
• Financial transaction records – retained for a minimum of 7 years from the date of the transaction, in line with Malaysian legal requirements on financial records and anti-money laundering (AML).
• Support communication records – retained for 2 years for reference and dispute resolution purposes.
• Technical log data – retained for 90 days for security purposes and technical troubleshooting.
• After account closure – the minimum data required to fulfil legal obligations will be retained for the prescribed period even after an account has been closed.

Once the retention period has expired, Play88 will securely delete or destroy data in accordance with established procedures to ensure it cannot be recovered or accessed by any party.

As a member Play88 and as a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to your personal data:

• Right of Access – you have the right to request a copy of the personal data we hold about you.
• Right to rectification – you have the right to request correction of any inaccurate or incomplete data.
• Right to Erasure – you have the right to request deletion of your personal data in certain circumstances, subject to applicable legal retention obligations.
• Right to restriction of processing – you have the right to request that we restrict the processing of your data in certain situations while a dispute is being resolved.
• Right to Withdraw Consent – for processing based on your consent (such as marketing communications), you have the right to withdraw that consent at any time without affecting your use of the play88 platform.
• Right to Lodge a Complaint – you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia if you believe your privacy rights have been violated.

To exercise any of the above rights, please contact the support team Play88 via email at support@play88.life, stating the type of request you are making. We will process your request within 14 business days.

Play88 is a platform intended exclusively for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18.

Should we discover that data belonging to a person under the age of 18 has been collected without consent, we will:

• Suspending the account immediately while an investigation is carried out.
• Deleting all data associated with the account once verification is complete.
• Taking steps to prevent similar incidents from occurring in the future.

Parents or guardians who are concerned that their underage child may have registered an account at Play88 can reach us immediately at support@play88.life for prompt action.

Play88 reserves the right to amend this Privacy Policy from time to time to reflect changes in legislation, industry practices, or how we handle data. When significant changes are made, we will:

• Updating the "Last Updated" date at the top of this page.
• Sending notifications to all active members via their registered email address.
• Displaying notices within the platform Play88 upon login for a reasonable period after the changes take effect.

Continued use of the platform Play88 after the updated Privacy Policy takes effect will be considered your acceptance of those changes. If you do not agree with the updated policy, you should stop using the platform and request account closure.

If you have any questions, concerns, or requests regarding this Privacy Policy or how Play88 handling your personal data, please contact us through the following channels:

• Privacy Email: support@play88.life – include "Privacy Inquiry" in the subject line of your email.
• Live Chat: Available 24 hours a day, 7 days a week within the play88 platform – Malay-speaking agents are on hand to assist.
• Frequently Asked Questions: Play88 FAQ Page provides answers to the most frequently asked privacy questions.

We aim to respond to all privacy and data enquiries within 24 hours. For more complex data rights requests, processing may take up to 14 business days. Our team will acknowledge receipt of your request and provide updates throughout the process.