Privacy Policy on88 — Our Commitment to Protecting Your Personal Data

1 Introduction and Scope of Privacy Policy

On88 ("we", "Platform", "company") is the operator of the online betting platform accessible at on88.plus. We are committed to protecting the privacy of every individual who interacts with our platform — whether you are simply browsing, registering as a new member, or a long-standing active user.

This Privacy Policy explains in detail:

• The types of personal data we collect from you.
• The purposes and ways we use your data.
• Parties that may receive or access your data.
• The security measures we take to protect your data.
• Your rights regarding the personal data we hold.

This Privacy Policy applies to all users of the on88 platform, regardless of how you access it — via desktop web browser, mobile app, or any other access method we provide.

2 Types of Personal Data We Collect

On88 collects various types of information to ensure our platform operates effectively, securely, and in compliance with legal requirements. The following are the categories of data we collect:

On88 not collect sensitive data such as health information, biometric data, or religious beliefs unless explicitly required by law.

3 Purpose of Data Collection and Use

All personal data collected by on88 is used solely for lawful and transparent purposes. We use your information for the following purposes:

• User account management — Allows you to Register, Login, and manage your on88 account securely.
• Transaction processing — Verifies and processes all deposits and withdrawals accurately and promptly.
• Legal compliance (KYC/AML) — Fulfils the Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements mandated by Malaysian law.
• Platform security — Detects and prevents fraudulent activity, unauthorised access, and other security threats.
• Personalise your experience — Tailors content, promotions, and game recommendations based on your preferences.
• Customer support — Handles your enquiries, complaints, and support requests more effectively.
• Service communications — Sends important notifications relating to your account, transactions, and platform updates.
• Platform improvements — Analyses usage patterns to improve the overall performance, interface, and user experience of on88.
• Marketing (with consent) — Sends relevant promotional information and the latest offers, only to users who have given explicit consent.

4 Personal Data Processing Basis

On88 only processes your personal data where a valid legal basis exists under Malaysia's Personal Data Protection Act (PDPA) 2010. The legal bases we rely on are as follows:

• Contract performance — Processing necessary to fulfil the agreement between you and on88, including account management and transaction processing.
• Legal compliance — Processing required under Malaysian law, including KYC and AML obligations and reporting to relevant authorities.
• Legitimate interest — Processing for the purposes of platform security, fraud prevention, and service improvement, provided these interests do not override your privacy rights.
• Consent — Processing for marketing and promotional communications, where you may withdraw your consent at any time through your account settings.

5 Data Sharing with Third Parties

On88 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. However, your data may be shared with the following categories of parties under limited and controlled circumstances:

• Technical service providers — Includes cloud service providers, payment processing platforms, and game software providers that assist us in operating the on88 platform. All such providers are bound by strict confidentiality agreements.
• Regulatory authorities — on88 may be required by law to disclose certain information to regulatory bodies, law enforcement agencies, or courts of competent jurisdiction.
• Auditors and legal advisors — Professionally appointed parties engaged to conduct audits, compliance reviews, or provide legal advice to on88, provided they are bound by professional confidentiality obligations.
• Business partners — In certain situations such as a merger, acquisition, or sale of business assets, user data may be transferred to the new entity involved, subject to appropriate notice being given to users.

6 Data Security Measures

The security of your personal data is on88's highest priority. We implement multiple layers of technical and organisational security controls to protect your data from unauthorised access, loss, or misuse:

• 256-bit SSL/TLS encryption — All communications between your device and on88's servers are protected with industry-standard encryption, the same standard used by leading financial institutions.
• Data encryption at rest — Sensitive data such as financial information and identity verification documents is stored in encrypted form on our servers.
• Strict access controls — Only specifically authorised on88 staff may access user data, and only to the extent necessary to carry out their duties.
• Two-factor authentication (2FA) — on88 supports and encourages the use of 2FA for all user accounts to add an extra layer of security.
• 24/7 security monitoring — Our systems are continuously monitored to detect any suspicious activity or unauthorised access attempts.
• Regular security audits — on88 conducts regular penetration testing and security audits by independent parties to identify and address any potential vulnerabilities.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure. If you suspect your account has been exposed to a security risk, please contact the on88 support team immediately.

7 Data Retention Period

On88 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by Malaysian law. Our data retention guidelines are as follows:

• Active account data — Retained for the duration your account remains active on the on88 platform.
• Data after account closure — After your account is closed, core data will be retained for a minimum of 5 years to comply with Malaysia's AML regulations and financial reporting requirements.
• Financial transaction records — Retained for 7 years in accordance with Malaysia's Companies Act and tax legislation requirements.
• KYC Documents — Retained for a minimum of 5 years after the date of account verification or closure, whichever is later.
• Support communication logs — Retained for 2 years for reference and service improvement purposes.
• Cookie and analytics data — Data collected through session cookies will be deleted when the session ends; persistent cookies are retained for the duration specified in your cookie settings.

Once the retention period expires and there is no legal requirement to retain the data, on88 will securely delete or anonymise the relevant data.

8 Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act (PDPA) 2010 and the on88 Privacy Policy, you have the following rights regarding your personal data that we hold:

To exercise any of the rights above, please contact the on88 support team via live chat or email. We will process your request within 30 working days. Please note that certain rights may be limited by legal requirements that on88 is obligated to comply with.

9 Cookies and Tracking Technologies

On88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the on88 website.

The types of cookies we use are as follows:

• Essential Cookies — Required for core platform functions such as login verification, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Performance & Analytics Cookies — Collects anonymous information about how you use our platform to help us understand usage patterns and improve performance.
• Functional Cookies — Remembers your preferences and settings such as language, currency, and display preferences to deliver a more personalised experience.
• Marketing Cookies — Used to display advertisements and promotional offers relevant to your interests, with your consent only.

You can manage or disable cookies through your web browser settings at any time. However, disabling essential cookies may affect your ability to use certain features of the on88 platform.

10 Links to Third-Party Websites

The on88 platform may contain links to third-party websites or services in certain contexts. This Privacy Policy applies solely to the on88 platform and does not cover the privacy practices of any third-party websites you visit through those links.

On88 is not responsible for the content, privacy policies, or practices of any third-party websites. We encourage you to read the privacy policy of every website you visit before providing any personal information to them.

11 Changes to This Privacy Policy

On88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Any material changes will be communicated to you via:

• A clear notice on the home page or login page of the on88 platform.
• Email notification to the address registered in your account (for significant changes).
• Update the "Updated" date shown at the top of this document.

Your continued use of the on88 platform after any amendments to the Privacy Policy are published will be considered your acceptance of the latest updated version. We encourage you to review this page periodically to stay informed about how we protect your information.

12 Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how on88 handles your personal data, please contact us through the following channels:

• Live chat — Available 24 hours a day, 7 days a week via the chat icon at the bottom corner of the on88 platform.
• Email — Send your privacy enquiries to [email protected] and we will respond within 3 business days.

For complaints that cannot be resolved directly with on88, you have the right to refer the matter to the Personal Data Protection Commissioner of Malaysia or the relevant authority.