Club88 Privacy Policy – Personal Data Protection for Malaysian Members

Club88 is an online entertainment platform built specifically for Malaysian players. We understand that in today's digital age, the privacy and security of personal data are among the most important concerns for every internet user in Malaysia. That is why we have developed a comprehensive, transparent Privacy Policy that is genuinely upheld in every aspect of our daily operations.

This Privacy Policy explains in detail:

• Types of personal data Club88 collects from members
• How and why we use the data we collect
• Who may have access to your data
• How we protect your data from unauthorised access
• How long we retain your data
• Your rights regarding your personal data under Malaysian law
• How to contact us with any privacy-related enquiries or requests

This Privacy Policy applies to all information collected through the Club88 website, mobile applications (where applicable), and all communication channels between you and Club88, including email, live chat, and WhatsApp.

Club88 collects only the personal data necessary to provide our members with a quality and secure service. The following are the main categories of data we collect:

Club88 uses collected personal data for legitimate, clearly stated purposes only. We do not use your data for any purpose unrelated to the provision of our services to you or compliance with legal requirements.

The primary purposes for which Club88 uses your data are:

• Account Management: Creating, managing, and maintaining your Club88 account securely, including processing registration, identity verification, and password management.
• Transaction Processing: Processing deposits and withdrawals via local Malaysian payment methods such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX — efficiently and securely.
• Provision of Gaming Services: Enabling you to access and enjoy all games available on Club88, including slots, Live Casino, and Sports Betting.
• Security & Fraud Prevention: To detect, investigate, and prevent any fraudulent activity, money laundering, or security breaches that could compromise your account or funds.
• Legal Compliance: To fulfil our legal obligations under the Malaysian Personal Data Protection Act 2010 and other applicable legislation.
• Customer Support: To help you resolve any technical issues, account queries, or transaction-related concerns quickly and effectively.
• Account-Related Communications: To send important account notices, updates to our Privacy Policy or Terms & Conditions, and critical security information.
• Marketing (With Consent): Sending you promotional information, bonus offers, and the latest news from Club88 — but only where you have given your consent to receive such communications, and you may withdraw that consent at any time.
• Responsible Gambling: To monitor gameplay patterns in order to identify members who may benefit from responsible gaming support, and to enforce the self-imposed limits you have set.

Club88 will never use your data for any purpose beyond those listed above without first obtaining your fresh consent.

Club88 exercises great care when it comes to sharing members' personal data with external parties. As a core principle, we does not sell, does not rent, and does not share your personal data to any third party for marketing or commercial purposes without your explicit and informed consent.

However, there are limited circumstances in which Club88 may need to share your data with certain third parties for legitimate operational purposes:

• Payment Processors: Approved payment service providers — including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX — receive only the minimum transaction information required to process your deposits and withdrawals. These processors are bound by strict confidentiality agreements.
• Game Software Providers: Game providers such as BGaming, Pragmatic Play, Evolution Gaming, and others may receive game session data necessary to operate their games on the Club88 platform. No personally identifiable information is shared beyond what is required.
• Malaysian Authorities: Club88 may be required under Malaysian law to disclose certain information to authorised authorities such as the Royal Malaysia Police, Bank Negara Malaysia, or relevant regulatory bodies when a valid court order or legal requirement is in place.
• Technical Services: IT service providers who assist in operating the Club88 platform infrastructure may have limited access to data within the scope of their duties, and are all bound by comprehensive confidentiality agreements.

In all data-sharing scenarios above, Club88 ensures that any recipient is bound by data protection obligations no less stringent than the standards we uphold ourselves.

Club88 continually invests in the latest security technologies and procedures to ensure our members' personal data is protected to a standard on par with leading financial institutions in Malaysia. The following are the key security measures we employ:

• SSL 256-bit Encryption: All communications between your device and Club88's servers are encrypted using SSL/TLS protocol with 256-bit keys. This ensures that information you transmit — including login credentials and transaction details — cannot be intercepted or read by unauthorised parties while in transit.
• Multi-Layer Firewall: Club88's server infrastructure is protected by a multi-layer firewall system that filters and blocks suspicious or unauthorised access before it can reach stored data.
• 24/7 Security Monitoring: Club88's cybersecurity team monitors our systems around the clock to promptly detect any unusual activity or potential security threats.
• Layered Internal Access Control: Club88 staff may only access member data that is directly relevant to their specific role. All access is logged and regularly audited to ensure no misuse occurs.
• Two-Factor Authentication (2FA): Club88 encourages the use of two-factor authentication for all member accounts to add an extra layer of protection against unauthorised access.
• Regular Security Testing: We conduct regular penetration testing and security audits carried out by independent third parties to identify and address any vulnerabilities in our systems before they can be exploited.
• Secure Data Storage: All members' personal and financial data is stored on servers secured both physically and digitally, with encrypted backups to ensure data recovery in the event of an emergency.

While Club88 employs all reasonable and up-to-date security measures, no system can guarantee absolute 100% security. We continually work to strengthen our security infrastructure and will notify you promptly should any security incident arise that affects your data.

The Club88 platform uses cookies and similar tracking technologies to enhance your experience while using our platform. Cookies are small text files stored by your web browser when you visit the Club88 website.

Types of cookies used by Club88:

• Essential Cookies: These cookies are required for core Club88 platform functions such as login authentication, session management, and security. Without them, the platform will not function properly. This type of cookie cannot be disabled.
• Performance Cookies: These cookies help us understand how visitors use the Club88 platform — which pages are visited most frequently, average session duration, and where users typically exit. This data is used to continually improve the user experience.
• Functional Cookies: These cookies allow Club88 to remember your preferences and settings — such as your preferred language, currency denomination, and display options — to provide you with a more personalised experience.

You can manage cookie usage through your web browser settings. However, disabling certain cookies may affect the functionality of the Club88 platform. For more information on managing cookies in your browser, please refer to your browser's support documentation.

Club88 retains members' personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable Malaysian law.

In general, data retention periods are as follows:

• Active Account Data: Retained for the duration your Club88 account remains active, plus any additional period that may be required by law following account closure.
• Financial Transaction Records: Retained for a minimum of seven (7) years in accordance with Malaysian accounting legislation and financial compliance requirements.
• Support Communication Records: Retained for three (3) years for quality control and dispute resolution purposes.
• Security Log Data: Retained for one (1) to two (2) years for security investigation and system audit purposes.
• Marketing Data (With Consent): Retained until you withdraw your consent to receive marketing communications from Club88.

Once the relevant retention period has expired, Club88 will delete or anonymise your data in a secure and appropriate manner in accordance with current industry standards.

As a Club88 member and as a Malaysian citizen or resident, you have rights protected under Malaysia's Personal Data Protection Act 2010 (PDPA) with respect to your personal data. Club88 respects these rights and will fully assist you in exercising them.

To exercise any of the rights listed above, please contact the Club88 privacy team by email at [email protected] by clearly stating your request. Club88 will respond within 21 working days of receipt, in accordance with the requirements of the Malaysian PDPA 2010.

The Club88 platform is strictly intended for individuals aged 18 and above only. Club88 does not knowingly collect or process personal data from individuals under the age of 18.

Should Club88 become aware of, or have reason to believe that, personal data from a minor has been collected without appropriate age verification, we will take immediate steps to delete that information and close the account in question.

Parents or guardians who are concerned that their minor child may have registered for or used the Club88 platform are encouraged to contact us immediately at [email protected]. We will investigate and take appropriate action as promptly as possible.

Club88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, applicable Malaysian law, or how we operate. We are committed to notifying you of any material changes via your registered email address or through a prominent notice on the Club88 homepage.

The date of the most recent update will always be displayed at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Your continued use of the Club88 platform after any changes to this Privacy Policy have been published constitutes your acceptance of those changes. If you do not agree with the changes made, please discontinue use of the platform and contact us to close your account.

The latest version of this Privacy Policy takes effect from January 2026 and supersedes all previous versions.

Club88 takes every privacy-related enquiry, complaint, or request seriously. If you have any questions about this Privacy Policy, wish to exercise your rights under Malaysia's PDPA 2010, or have concerns about how we handle your personal data, please contact us through the following channels:

• Email: [email protected] — For privacy-related requests, please include "Privacy Request" in the subject line of your email.
• Live Chat: Available directly on the Club88 website, 24 hours a day, 7 days a week.

Club88 is committed to providing an initial response to all privacy-related enquiries within 48 hours of receipt, and will endeavour to resolve all data requests within 21 working days in accordance with the requirements of the Malaysian PDPA 2010.

If you believe that Club88 has not complied with its obligations under Malaysia's PDPA 2010, you also have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.