play88 Privacy Policy

1. Scope & Application

This Privacy Policy applies to all personal data collected by play88 in connection with your use of the play88 platform accessible at play88.lat, including all associated gaming, betting, customer support, and promotional services. It applies to registered players, unregistered visitors, and any individual who interacts with play88 through the platform or via customer support channels.

By registering a play88 Account or continuing to use the play88 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent, you should not create an Account or use play88 Services.

This Policy should be read alongside the play88 Terms & Conditions and the play88 Responsible Gaming Policy, which together form the complete framework governing your relationship with play88.

2. Data We Collect

2.1 Registration Data

When you create a play88 Account, we collect the following information:

• Full legal name as shown on government-issued identification;
• Date of birth (for age verification — play88 is strictly 21+);
• Residential address;
• Email address;
• Mobile phone number (Malaysian number required for SMS OTP and 2FA);
• Username and encrypted password hash.

2.2 Identity Verification (KYC) Data

In compliance with international gaming authority anti-money laundering requirements, play88 may collect copies of:

• Malaysian National Registration Identity Card (MyKAD), passport, or other government-issued photo ID;
• Proof of residential address (utility bill, bank statement, or equivalent, dated within 90 days);
• Payment method documentation (front of payment card, eWallet verification, or bank statement);
• Source of funds documentation where required for high-value transactions.

2.3 Transaction Data

play88 records all financial transactions associated with your Account, including deposit amounts, withdrawal requests, payment method identifiers, timestamps, and transaction reference numbers.

2.4 Gaming Activity Data

play88 maintains records of your gaming and betting activity, including games played, bet amounts, wager outcomes, session durations, and bonus usage. This data is used for account management, responsible gaming monitoring, and regulatory compliance.

2.5 Technical & Device Data

When you access play88, we automatically collect certain technical data, including your IP address, device type, operating system, browser type and version, screen resolution, language settings, and referring URL. This data is used for security monitoring, fraud detection, and platform optimisation.

2.6 Customer Support Data

Communications you have with the play88 support team — including live chat transcripts, email correspondence, and complaint records — are retained for quality assurance, dispute resolution, and regulatory audit purposes.

3. How We Use Your Data

play88 processes your personal data for the following purposes:

Purpose	Data Used
Account creation and management	Registration data, device data
Age and identity verification (KYC)	KYC documents, registration data
Payment processing and fraud prevention	Transaction data, KYC data, device data
Platform security and access control	Device data, IP address, session logs
Responsible gaming monitoring	Gaming activity data, transaction data
Anti-money laundering compliance	Transaction data, KYC documents, source of funds
Customer support and dispute resolution	Support data, account data, gaming activity data
Regulatory reporting	All categories, as required by law
Marketing communications (with consent)	Email, mobile number, gaming preferences
Platform analytics and improvement	Technical data, gaming activity data (aggregated)

play88 does not use personal data for any purpose not listed above without first updating this Privacy Policy and, where applicable, seeking your consent.

4. Legal Basis for Processing

play88 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to perform the contract between you and play88, including Account management, payment processing, and gaming services;
• Legal obligation: Processing required to comply with international gaming authority regulations, anti-money laundering laws, and regulatory reporting requirements;
• Legitimate interests: Processing for fraud detection, security monitoring, platform improvement, and responsible gaming oversight — where such interests are not overridden by your data protection rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent that you may withdraw at any time.

5. Data Sharing & Disclosure

play88 does not sell or commercially transfer your personal data to third parties. We share data only in the following limited circumstances:

5.1 Service Providers

play88 engages trusted third-party service providers to support platform operations, including payment processors (for Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and RHB transactions), identity verification providers, cloud hosting infrastructure, and customer support tooling. All service providers are bound by contractual data processing agreements that prohibit use of your data for any purpose other than delivering services to play88.

5.2 Game Content Providers

Certain game studios and live casino providers (such as Evolution Gaming and SA Gaming) may receive anonymised session data necessary to deliver their game content on the play88 platform. No personally identifiable information is shared with game studios beyond what is technically required.

5.3 Regulatory & Legal Disclosure

play88 may disclose your personal data to regulatory authorities, law enforcement agencies, or courts where required by applicable law, international gaming authority obligation, or in response to a lawful request. play88 will notify you of such disclosure where legally permissible.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of substantially all assets of the Company, your personal data may be transferred to the successor entity, subject to equivalent data protection obligations.

6. Cookies & Tracking Technologies

play88 uses cookies and similar tracking technologies on the platform. The following cookie categories are used:

• Strictly Necessary Cookies: Required for the play88 platform to function, including session authentication, security tokens, and load balancing. These cannot be disabled without rendering core platform functions inoperable.
• Functional Cookies: Used to remember your preferences, such as language settings, display preferences, and logged-in state persistence ("Remember me"). These enhance your experience but are not essential.
• Analytics Cookies: Aggregated, anonymised data on how players navigate and use the play88 platform. This helps us identify areas for improvement. No personally identifiable information is associated with analytics cookies.
• Session Security Cookies: Used to detect anomalous session activity, prevent cross-site request forgery, and protect against session hijacking attacks.

You may configure your browser to reject or delete non-essential cookies. Note that disabling functional cookies may affect platform features such as session persistence. play88 does not use third-party advertising or behavioural tracking cookies.

7. Data Retention

play88 retains personal data for the period necessary to fulfil the purposes for which it was collected, subject to the following minimum retention obligations:

• Account and KYC data: Retained for a minimum of 5 years following Account closure, in compliance with international gaming authority anti-money laundering record-keeping requirements;
• Transaction records: Retained for a minimum of 5 years following each transaction date;
• Gaming activity logs: Retained for 3 years from the date of each gaming session;
• Customer support records: Retained for 3 years from the date of each interaction;
• Marketing consent records: Retained for 2 years from the date of consent or until withdrawal, whichever is earlier.

After applicable retention periods expire, play88 securely deletes or anonymises personal data using industry-standard data destruction procedures.

8. Data Security

play88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:

• 256-bit SSL/TLS encryption on all data in transit between your device and play88 servers;
• AES-256 encryption for sensitive data at rest, including KYC documents and payment credentials;
• Role-based access control (RBAC) ensuring play88 staff access only the data necessary for their specific function;
• Multi-factor authentication required for all play88 internal systems with access to player data;
• Regular penetration testing and vulnerability assessments conducted by independent security firms;
• Intrusion detection systems with 24/7 monitoring and automated incident response protocols;
• Segregated data storage with player personal data physically separated from operational systems.

In the event of a personal data breach that poses a risk to your rights, play88 will notify affected players and relevant authorities within 72 hours of becoming aware of the breach, in accordance with applicable regulatory requirements.

9. International Data Transfers

play88 operates infrastructure that may involve the transfer of personal data to servers located in jurisdictions outside Malaysia. Where such transfers occur, play88 ensures they are subject to appropriate safeguards, including contractual data protection clauses that provide equivalent protection to the standards described in this Privacy Policy. play88 does not transfer personal data to jurisdictions that have not implemented adequate data protection frameworks without additional protective measures in place.

10. Your Data Rights

play88 respects the following data protection rights, which you may exercise by contacting play88 support:

• Right of Access: You may request a copy of all personal data play88 holds about you. Requests are fulfilled within 30 days;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held by play88;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected — subject to play88's legal retention obligations;
• Right to Restriction: You may request that play88 restrict processing of your data in certain circumstances, such as while a dispute is under investigation;
• Right to Data Portability: You may request a structured, machine-readable copy of personal data you provided to play88 for purposes based on consent or contract;
• Right to Object: You may object to processing based on legitimate interests, including direct marketing — objection to marketing will be processed immediately;
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact play88 support via live chat. play88 will respond within 30 days. Where a request cannot be fulfilled due to legal obligations, play88 will explain the reason in writing.

11. Children's Privacy

play88 Services are strictly prohibited for persons under the age of 21 years. play88 does not knowingly collect personal data from individuals under 21. If play88 becomes aware that personal data has been collected from a person under 21, it will immediately delete that data and close the associated Account. If you believe that personal data belonging to a minor has been submitted to play88, please contact support immediately so that appropriate action can be taken.

12. Third-Party Links

The play88 platform may contain links to third-party websites or services. play88 is not responsible for the privacy practices or content of those third-party sites. This Privacy Policy applies solely to data collected by play88 through the play88 platform. We encourage you to review the privacy policies of any third-party sites you visit.

13. Policy Amendments

play88 reserves the right to update this Privacy Policy at any time. Material changes — including changes to the types of data collected, the purposes for which data is used, or how data is shared — will be communicated to registered players via email or platform notification at least 7 days before the changes take effect.

Minor changes (such as clarifications of existing practices) may be published without advance notice. The "Last Updated" date at the top of this page reflects the most recent revision. Your continued use of play88 following publication of a revised Privacy Policy constitutes your acceptance of the updated terms.

14. Contact & Complaints

If you have questions about this Privacy Policy, wish to exercise a data right, or wish to raise a data protection complaint, please contact the play88 Data Protection team:

• Live Chat: Available 24/7 via the play88 platform — average response under 90 seconds
• Email: [email protected]

play88 will acknowledge all data protection complaints within 5 business days and issue a substantive response within 28 days. If you are not satisfied with play88's response, you may refer your complaint to the applicable data protection authority in your jurisdiction.