E88 Privacy Policy – Data Protection for Malaysian Users

1e88 Privacy Introduction & Commitment

E88 ("we", "Platform", "e88") is a trusted online betting platform operating to serve the needs of members in Malaysia. We understand that privacy is more than a legal requirement — it is the foundation of trust between us and every member who uses this platform.

This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection. This document explains in detail how we handle your personal information from the moment you register an account through every transaction you make on the e88 platform.

We do not sell, rent, or disclose your personal data to third parties for marketing purposes without your explicit consent. Every piece of data we collect has a clear purpose, and we only retain it for as long as necessary to fulfil that purpose.

2Information We Collect

We collect various types of information depending on how you interact with the e88 platform. This information is categorised as follows:

Information You Provide Directly

• Full name as shown on your identity document.
• Email address and mobile phone number.
• Date of birth (for age verification).
• Current residential address.
• Bank account or e-wallet details (Touch 'n Go, Boost, etc.) for payment processing.
• KYC document copies: MyKad, bank statements, or utility bills.

Automatically Collected Information

• IP address and approximate geographic location.
• Device type, operating system, and web browser version.
• Session data: login time, session duration, pages visited.
• Betting activity and financial transaction logs within the platform.
• Cookie and similar tracking technology data (see Section 8).

Information from Third Parties

In certain situations, we may receive information about you from legitimate third-party sources, including identity verification service providers, payment providers, and fraud prevention agencies. All such information is used solely for security and account verification purposes.

3Data Collection & Processing Purposes

E88 only processes your personal data for legitimate and specified purposes. We will not use your data for any other purpose without informing you in advance. The following are the primary purposes of our data processing:

1. Account Management: Creating, verifying, and maintaining your member account, including the KYC identity verification process required by law.
2. Transaction Processing: Processing all deposits, withdrawals, and other financial transactions securely and accurately.
3. Platform Security: Detecting and preventing fraud, money laundering, unauthorised access, and other illegal activities that could harm the platform or other members.
4. Regulatory Compliance: Fulfilling legal obligations under Malaysia's PDPA and regulations related to the online gambling industry.
5. Customer Support: Processing enquiries, complaints, and providing technical assistance to members.
6. Service Communications: Sending important notifications related to your account, promotions, and platform updates (with your consent).
7. Responsible Gaming: Monitoring betting patterns to identify signs of problem gambling and offer appropriate support.
8. Platform Enhancements: Analysing usage data to improve the performance, usability, and overall experience of the e88 platform.

4Legal Basis for Data Processing

Under Malaysia's Personal Data Protection Act 2010 (PDPA), e88 processes your personal data on one or more of the following valid legal bases:

• Consent: You have provided explicit consent to the processing of your data during account registration and through this Privacy Policy.
• Contract Performance: Processing is required to fulfill the service agreement between you and e88, including payment processing and account management.
• Legal Obligation: Processing is required to comply with legal obligations applicable to e88, including KYC requirements and anti-money laundering (AML) reporting.
• Legitimate Interest: Processing is necessary for the legitimate interests of e88 and our members, such as fraud prevention and platform security, provided those interests do not override your fundamental rights and freedoms.

You have the right to withdraw your consent at any time. However, withdrawal of consent does not affect the validity of any processing carried out prior to the withdrawal.

5Data Sharing & Disclosure

E88 does not sell or rent your personal data to any third party. However, we may share your data with the following categories of third parties under limited and controlled circumstances:

Trusted Service Providers

We work with selected third-party service providers to help operate the e88 platform, including:

• Payment gateway and financial transaction processing providers.
• Identity verification and KYC service providers.
• Cloud service providers for data storage and processing.
• Gaming software and live casino providers.
• Customer support and communications service providers.

All these service providers are bound by strict confidentiality agreements and are only permitted to process your data under e88's instructions and for specified purposes only.

Legal Requirements

E88 may disclose your personal data to the relevant authorities if required by law, court order, or other valid legal process. This includes disclosure to law enforcement agencies in the context of financial crime or fraud investigations.

6Data Security Measures

Your data security is e88's top priority. We implement multiple layers of technical and organisational security to protect your personal information from unauthorised access, loss, destruction, or accidental disclosure.

Technical Security

• 256-bit SSL Encryption: All data transmitted between your device and e88's servers is protected with industry-standard 256-bit SSL/TLS encryption.
• Data-at-Rest Encryption: Sensitive information such as passwords and payment details is stored in encrypted format using the latest encryption algorithms.
• Two-Factor Authentication (2FA): Members can enable 2FA for an additional layer of security during login.
• 24/7 Monitoring: A continuous threat monitoring system that detects and responds to suspicious activity in real time.
• Regular Penetration Testing: Security audits and penetration testing are conducted periodically by independent security experts.

Access Control

Access to members' personal data within e88's internal systems is restricted to staff who genuinely require it to perform their duties. All access is logged and monitored, and staff are bound by strict confidentiality agreements.

7Data Retention Period

E88 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law. The following are general guidelines for our data retention periods:

• Active account data: Retained for the duration your account is active and for 5 years after account closure for legal compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian legal requirements for financial and tax records.
• Security and activity logs: Retained for 2 years for security incident investigation purposes.
• KYC documents: Retained for the duration of the active account period plus 5 years after account closure.
• Support communication data: Retained for 3 years from the date of last interaction.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to you personally.

8Cookies & Tracking Technologies

The e88 platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and understand how members use our platform.

Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login session authentication and security. These cookies cannot be disabled.
• User Preference Cookies: Saving your preferences such as language settings, display theme, and betting limits you have set.
• Analytics Cookies: Helping us understand how members use the platform so we can make improvements. This data is collected in aggregate and does not identify individuals.
• Security Cookies: Used to detect and prevent fraudulent activity and to ensure the integrity of user sessions.

You can manage your cookie settings through your web browser at any time. Please note, however, that disabling essential cookies may affect the functionality of the e88 platform.

9Your Privacy Rights

Under Malaysia's PDPA and e88's Privacy Policy, you have several rights regarding your personal data. We fully respect these rights and make it easy for you to exercise them:

• Right to Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You may request that we correct any data that is inaccurate or incomplete.
• Right to Erasure: In certain circumstances, you may request that we delete your personal data (subject to legal data retention obligations).
• Right to Restrict Processing: You may request that we restrict how we process your data in certain circumstances.
• Right to Object: You have the right to object to the processing of your data for specific purposes such as direct marketing.
• Right to Data Portability: You may request a copy of the data you have provided to us in a machine-readable format.

To exercise any of the above rights, please contact the e88 privacy team via email at [email protected] or via live chat within the platform. We will process your request within 30 days of receipt.

10International Data Transfers

In operating the e88 platform, some of your personal data may be transferred to and processed on servers located outside Malaysia. When such transfers occur, e88 ensures that protections equivalent to Malaysia's PDPA are applied through the following mechanisms:

• Contractually binding data processing agreements with overseas service providers.
• Use of cloud service providers that comply with internationally recognised data protection standards.
• Regular assessments of the privacy practices of all international service partners.

E88 prioritises the use of servers located in the Asia-Pacific region to minimise latency and ensure that Malaysian members' data remains within a jurisdiction supported by a robust legal framework.

11Privacy Policy Amendments

E88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform enhancements. Any material changes will be communicated to you via:

• Notifications within the e88 platform upon your next login.
• A notification email will be sent to your registered email address at least 14 days before the changes take effect.
• Updates the "Last updated" date at the top of this page.

Continued use of the e88 platform after the effective date of any changes constitutes acceptance of the amended Privacy Policy. If you do not agree with any changes, you have the right to close your account in accordance with the procedures outlined in Terms and Conditions us.