Play88 Privacy Policy – Personal Data Protection for Malaysian Members

Play88 ("We", "Platform") is the data controller responsible for personal data collected through our platform. We recognise that trust is the foundation of our relationship with every member, and protecting data privacy is an integral part of that trust.

This Privacy Policy has been drawn up to meet the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and sets out transparently how play88 collects, processes, stores, and protects the personal information of all users on our platform — whether you are a registered member actively playing live baccarat or blackjack, someone considering signing up, or simply browsing our website.

Play88 has appointed a Data Protection Officer responsible for ensuring that all data processing activities comply with applicable legal requirements. All privacy-related enquiries or complaints may be directed to this officer through the channels set out in Section 11 of this document.

Play88 collects personal data through several different methods throughout your interactions with our platform. Below is a comprehensive overview of the types of data we may collect and the context in which they are collected.

Play88 does not collect sensitive personal data such as medical information, religious beliefs, or political views except where required by law. We also do not collect biometric data other than identity photos that may be required for KYC purposes in relation to large withdrawals.

Play88 uses collected personal data only for legitimate purposes that do not conflict with your interests as a member. Below is a detailed explanation of each data use purpose and the legal basis supporting it.

Play88 does not sell or disclose members' personal data to third parties for their own commercial purposes. However, in the course of operating the platform, certain categories of third parties may access member data under limited and controlled circumstances.

Play88 continuously invests in security infrastructure to ensure members' personal data is protected to the highest level technically and operationally achievable. Below is an overview of the key security measures we have in place.

• Encryption in Transit: All communication between your browser or app and play88's servers is secured with TLS 1.3 and a 256-bit SSL certificate — any data intercepted by a third party will be completely unreadable;
• Encryption of Data at Rest: Sensitive data stored in play88 databases — including financial information and identity details — is encrypted using robust at-rest encryption algorithms.
• Hashed Passwords: Member passwords are never stored in plain text. We use modern cryptographic hashing algorithms with random salts, meaning that even if our database were compromised, your password could not be recovered.
• Two-Factor Authentication (2FA): play88 members are encouraged to enable 2FA in their account settings for an added layer of security that requires an SMS code for every login from a new device;
• 24/7 Security Monitoring: play88 systems are monitored around the clock to detect suspicious activity, intrusion attempts, and anomalies that may indicate security weaknesses.
• Regular Penetration Testing: Independent third-party cybersecurity specialists conduct regular penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Internal Access Controls: Access to member data is restricted to play88 staff who require it to perform their specific job functions. All access is logged and audited on a regular basis.

While play88 takes comprehensive steps to protect your data, no security system can guarantee 100% absolute protection against all threats. You also play an important role in securing your account by using a strong password, keeping your login credentials private, and enabling 2FA.

Play88 retains personal data only for as long as necessary to fulfil the original purpose of collection or to meet applicable legal requirements. Our key data retention schedule is as follows:

Once the applicable retention period has expired, data will be securely deleted or anonymised so that it can no longer be linked to any specific individual. The deletion process follows procedures that ensure data cannot be recovered once removed.

Play88 uses cookies and similar tracking technologies to enhance the user experience, maintain platform security, and understand how members use our services. Below is an explanation of the types of cookies we use.

You can manage your cookie settings through your web browser settings at any time. However, disabling essential cookies may affect the functionality of the play88 platform and your ability to log in or transact securely.

The play88 platform is intended for adults aged 18 and above only. play88 does not knowingly collect or process personal data from individuals under the age of 18. Our registration process includes steps to verify the age eligibility of account applicants.

Should play88 discover that personal data belonging to someone under the age of 18 has been collected inadvertently, we will take immediate steps to:

• Closing the account in question;
• Deleting all related personal data from our systems;
• Returning any available balance (where applicable and permitted by law);
• Notifying the relevant authorities where required.

If you become aware that a minor has registered a play88 account without authorisation, please contact us immediately at support@play88-khelo.com so that prompt action can be taken.

In the course of operating the platform, play88 members' personal data may be processed outside Malaysia by technology infrastructure providers, such as international cloud services used to host our platform. play88 ensures that any such data transfers are carried out with adequate safeguards as required under Malaysia's PDPA, including:

• Use of approved standard contractual clauses for international data transfers;
• Ensuring that the recipient country maintains a level of data protection equivalent to or higher than Malaysia's;
• Binding data processing agreements with all vendors involved in cross-border data transfers.

Members' personal data is not transferred to countries without adequate data protection laws unless appropriate additional safeguards are in place.

Play88 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data handling practices, new legal requirements, or changes to platform operations. Members will be notified of any material amendments via:

• A clear in-platform notice on play88 upon login, informing members that the Privacy Policy has been updated;
• Updating the "Updated" date at the top of this document;
• SMS to your registered phone number for significant amendments that materially affect members' privacy rights.

We encourage you to review this Privacy Policy periodically to stay informed about how play88 handles your personal data. Continued use of the play88 platform after a notice of amendment is considered acceptance of the updated policy.

For any questions, concerns, or requests relating to your data privacy at play88, please contact our Data Protection Officer through the following channels: