casino88 Privacy Policy for Malaysian Players

Definitions and Scope

For this Privacy Policy, “personal information” means information that identifies an individual or can reasonably be connected with an identifiable individual. “Processing” includes collecting, recording, organising, storing, reviewing, using, sharing, restricting or deleting information.

“Account data” means information connected to a casino88 account. “KYC data” means information used to verify identity, age, address, payment ownership or source of funds. “Technical data” includes device, browser, network and website interaction information.

This policy covers information processed through casino88 and direct communications concerning the website. It does not alter separate obligations imposed by payment providers or banks when they process information under their own procedures.

Information We Collect

casino88 may collect information that you provide directly, information generated through website use and information received from authorised service providers. The data collected depends on the features you use and the checks reasonably required.

Registration and account information

• Full name, date of birth, gender and nationality where relevant.
• Residential address, email address and mobile number.
• Username, encrypted credentials and account preferences.
• Communication history and support request details.

Verification and compliance information

• Identity document details, photographs and proof of address.
• Age verification results and document validity information.
• Payment ownership evidence and source-of-funds information where required.
• Fraud, risk, self-exclusion and responsible gambling review records.

Transaction information

casino88 may record deposit and withdrawal amounts, MYR currency values, payment method, transaction reference, status and limited account identifiers. This can include details connected to Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX or Malaysian banks. casino88 does not need to display full payment credentials in ordinary account records.

How Information Is Collected

Information may be collected when you register, update a casino88 profile, submit KYC material, request support, make a payment, use a responsible gambling control or communicate about a complaint. You are responsible for ensuring that the information you submit is accurate and belongs to you.

casino88 may also collect technical information automatically when a browser or device accesses the website. This may include an IP address, browser type, operating system, language setting, approximate location, referring page, session duration and interaction events.

Authorised payment, identity verification, security or fraud-prevention providers may supply information needed to confirm a transaction or evaluate account risk. casino88 will use such information only for relevant and legitimate purposes.

Purposes of Data Processing

casino88 may process personal information for the following purposes:

• Creating, maintaining and securing a casino88 account.
• Confirming identity, age, residential details and payment ownership.
• Administering deposits, withdrawals, refunds and transaction reviews.
• Providing support and responding to questions or complaints.
• Detecting account takeover, fraud, collusion and prohibited activity.
• Applying deposit limits, cooling-off periods or self-exclusion controls.
• Operating, testing and improving website performance.
• Providing service notices and eligible marketing communications.
• Meeting record-keeping, security and lawful compliance requirements.

casino88 will not use information for a materially incompatible purpose without providing an appropriate notice or obtaining consent where consent is required.

Grounds for Processing

Depending on the activity and applicable requirements, casino88 may process information because it is needed to provide an account service, complete a requested transaction, comply with a legal obligation, protect legitimate security interests or act with your consent.

Legitimate interests may include preventing fraud, securing casino88 systems, maintaining accurate records, responding to disputes and improving website usability. casino88 considers whether these interests are proportionate and whether a user’s rights require additional safeguards.

Where processing relies on consent, you may withdraw that consent for future activity. Withdrawal does not invalidate processing completed before the request and does not prevent casino88 from retaining information required on another lawful basis.

KYC and Age Verification

casino88 is intended only for users aged 21 and above. Age and identity checks may be required before account access, bonus use or withdrawal approval. KYC helps casino88 protect users, prevent duplicate accounts and reduce payment misuse.

Verification may involve comparing account details with identity documents, proof of address or information supplied by an authorised verification provider. Additional evidence may be requested if names do not match, documents have expired or a transaction creates a reasonable security concern.

Never send KYC documents through an unverified channel. casino88 users should confirm that a request relates to the official account process and should not disclose passwords or full security codes with identity material.

Payment and Financial Information

Payment information allows casino88 to administer MYR deposits and withdrawals, reconcile transaction records, investigate reversals and confirm that a payment method belongs to the verified account holder. A transaction record may include the method, amount, time, reference and processing status.

Malaysian payment routes can involve Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank or Hong Leong. Payment providers and financial institutions may process information separately under their own obligations. casino88 receives only the details reasonably required for the applicable transaction and security review.

You should check recipient details before sending funds and avoid sharing screenshots that display unnecessary balances, card numbers or unrelated transactions. Where proof of payment is requested, provide only the relevant portion unless further evidence is reasonably necessary.

Cookies and Technical Data

casino88 may use cookies, local storage or similar technologies to maintain sessions, remember settings, support navigation, detect suspicious activity and measure website performance. Essential technologies may be required for secure account functions.

Analytics information can show how pages are used without requiring casino88 to treat every event as a direct personal identifier. Browser controls may allow you to remove or block certain cookies, although doing so can affect login persistence, preferences or other website functions.

Technical logs may record login attempts, IP addresses, device characteristics and security events. These records help casino88 investigate account compromise and maintain service stability for users in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam and elsewhere.

Disclosure of Information

casino88 does not disclose personal information merely because it may be commercially useful. Information may be shared with carefully selected providers only where reasonably necessary for payment processing, identity verification, fraud prevention, hosting, security, support or professional advice.

Providers should receive only the information required for their role and should be subject to appropriate confidentiality, security and processing obligations. casino88 may also disclose information when required by a valid legal process, to protect users or systems, or to investigate suspected unlawful conduct.

If business ownership or operational responsibility changes, relevant information may transfer as part of that transaction, subject to suitable confidentiality and continued protection requirements.

International Data Transfers

Some casino88 service providers or technical systems may operate outside Malaysia. Where information is transferred across borders, casino88 seeks appropriate contractual, organisational or legal safeguards consistent with the sensitivity of the information and applicable requirements.

Different jurisdictions may provide different privacy protections. A transfer does not remove the obligation to limit access, maintain security and use information only for the authorised purpose.

Data Retention

casino88 retains personal information for as long as reasonably necessary to provide services, complete transactions, manage disputes, prevent fraud and satisfy applicable record-keeping requirements. Retention periods vary according to the data category and purpose.

Closing a casino88 account does not require immediate deletion of every record. KYC, payment, self-exclusion, complaint and security information may need to remain available for a justified period. When information is no longer required, casino88 may securely delete, destroy or anonymise it.

Retention decisions consider legal requirements, limitation periods, transaction history, security risk and whether the information remains necessary to protect a self-excluded user.

Information Security

casino88 applies reasonable technical and organisational safeguards designed to protect personal information. Measures may include access controls, encrypted transmission, credential protection, monitoring, record separation, staff confidentiality procedures and incident response practices.

No online system can be guaranteed completely secure. Users also play an important role by choosing a strong unique password, protecting one-time codes, keeping devices updated and reporting unfamiliar casino88 activity promptly.

If a security incident creates a material risk, casino88 will investigate, contain the issue and provide notifications where required. Users should treat unexpected requests for documents, passwords or payment transfers with caution.