Privacy Policy – 88gasia Online Casino Malaysia

1. Data Controller

The data controller responsible for your personal information in connection with the 88gasia platform is the operator of 88gasia, accessible at https://88gasia.win. References to "88gasia", "we", "us", or "our" throughout this Privacy Policy refer to this operator entity.

For all data protection enquiries, including requests to exercise your rights under applicable data protection law, you may contact us at [email protected]. We are committed to responding to all legitimate data requests within a reasonable timeframe, and in any event within the period prescribed by applicable law.

By registering an account with 88gasia, using the platform, or submitting any personal information to us, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your data in the manner described herein.

2. Personal Data We Collect

In the course of providing its services to Malaysian players and visitors, 88gasia may collect the following categories of personal data:

2.1 Identity & Contact Data

• Full legal name as appearing on your Malaysian IC (MyKad), passport, or equivalent government-issued identity document.
• Date of birth, for the purpose of age verification (confirming you are 21 years of age or older).
• Residential address, including postcode and state within Malaysia.
• Email address and Malaysian mobile telephone number.

2.2 Account & Gaming Data

• Registered username and account credentials (passwords are stored in hashed form and are never accessible in plain text).
• Gaming activity including bet history, game preferences, session duration, and win/loss records.
• Responsible gaming settings, including any deposit limits, session limits, or self-exclusion periods you have set.
• Customer support communications, including live chat transcripts and email correspondence.

2.3 Financial Data

• Deposit and withdrawal transaction records including amounts, dates, and payment method references.
• Payment method identifiers (e.g., the last four digits of a bank account, Touch n Go eWallet account reference, or Boost account reference). Full payment credentials are not stored by 88gasia.
• KYC documentation submitted for identity and payment method verification.

2.4 Technical & Usage Data

• IP address, device type, operating system, browser type, and version.
• Login timestamps, session logs, and navigation patterns within the platform.
• Geolocation data at the jurisdiction level, used to verify access from eligible regions.

3. How We Collect Personal Data

88gasia collects personal data through the following channels:

• Direct submission: Information you provide when completing the registration form, KYC verification process, contact forms, or live chat interactions.
• Platform usage: Data generated automatically when you log in, browse the games lobby, place wagers, or interact with any feature of the 88gasia platform.
• Payment processors: Transaction confirmations and reference data received from Malaysian e-wallet providers and banking partners when you make a deposit or withdrawal.
• Cookies and tracking technologies: Technical data collected via cookies, web beacons, and similar technologies as described in Section 6 of this Policy.
• Third-party verification services: Identity and age verification data may be cross-referenced with third-party KYC service providers for compliance purposes.

4. Purpose and Legal Basis for Processing

88gasia processes your personal data for the following purposes, each underpinned by a lawful legal basis:

• Account management and platform access — necessary for the performance of your agreement with 88gasia.
• Identity and age verification (KYC) — necessary for compliance with anti-money laundering obligations and international gaming licensing requirements.
• Processing deposits and withdrawals — necessary for the performance of the contract between you and 88gasia.
• Fraud prevention and security monitoring — necessary for 88gasia's legitimate interests in protecting the platform and its players from fraudulent activity.
• Responsible gaming monitoring — necessary for compliance with licensing obligations and 88gasia's legitimate interest in promoting safe gambling practices.
• Customer support — necessary for the performance of the service agreement and 88gasia's legitimate interest in resolving player issues efficiently.
• Platform improvement and analytics — based on 88gasia's legitimate interest in improving the quality and performance of its services.
• Marketing communications — based on your explicit consent, where you have opted in to receive promotional communications from 88gasia. You may withdraw this consent at any time.

5. Sharing of Personal Data

88gasia does not sell or commercially share personal data with third parties. Data may be shared with the following categories of recipients only to the extent necessary for the stated purpose:

• Game software providers — limited technical identifiers may be shared with licensed game studios for the purpose of delivering games and recording outcomes. No personally identifying information beyond a session token is shared with game providers.
• Payment processing partners — transaction data is shared with Malaysian e-wallet operators (including Touch n Go eWallet and Boost) and banking institutions solely to process financial transactions.
• KYC and identity verification services — identity documents may be processed by third-party compliance service providers operating under binding data processing agreements.
• Regulatory and law enforcement authorities — 88gasia will disclose personal data to competent authorities where required to do so by law, court order, or in connection with anti-money laundering reporting obligations.
• Corporate successors — in the event of a merger, acquisition, or transfer of the 88gasia business, personal data may be transferred to the acquiring entity, subject to the same privacy obligations.

All third parties with whom 88gasia shares personal data are required to process such data in accordance with applicable data protection law and under contractual obligations consistent with this Privacy Policy.

6. Cookies and Tracking Technologies

The 88gasia platform uses cookies and similar technologies to operate efficiently, personalise your experience, and support security monitoring. The following categories of cookies may be set when you visit or use the platform:

• Strictly necessary cookies: Essential for platform functionality, including session authentication, login state management, and security features. These cannot be disabled without impairing your ability to use the platform.
• Performance and analytics cookies: Used to measure aggregate usage patterns and platform performance. This data is used in anonymised or pseudonymised form and helps 88gasia improve the player experience.
• Functional cookies: Store your preferences such as language settings, responsible gaming configurations, and game lobby display preferences.
• Security cookies: Support fraud detection and abuse prevention mechanisms, including login anomaly detection.

You may manage non-essential cookie preferences through your browser settings. Please note that disabling cookies may affect the functionality and performance of the 88gasia platform.

7. Data Retention

88gasia retains personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law and licensing obligations. The following retention principles apply:

• Account and KYC data is retained for a minimum of five (5) years from the date of account closure, consistent with anti-money laundering record-keeping requirements.
• Transaction and bet history records are retained for a minimum of five (5) years for regulatory and audit purposes.
• Customer support communications are retained for up to three (3) years from the date of the interaction.
• Technical logs (IP addresses, session logs) are retained for up to twelve (12) months for security and fraud investigation purposes, after which they are deleted or anonymised.
• Marketing consent records are retained for as long as you remain an active player or until consent is withdrawn, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

8. Security Measures

88gasia implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 88gasia platform.
• Encryption of sensitive data fields at rest, including identity document data and payment method references.
• Role-based access controls limiting internal access to personal data to authorised personnel with a legitimate operational need.
• Regular security assessments and penetration testing of platform infrastructure.
• Two-factor authentication available to all players for account login protection.
• Automated anomaly detection systems monitoring for unusual login patterns or account activity.

Whilst 88gasia takes all reasonable precautions to protect personal data, no security system is completely impenetrable. In the event of a personal data breach that poses a risk to your rights and freedoms, 88gasia will notify affected players and relevant authorities in accordance with applicable regulatory requirements.

9. Your Data Protection Rights

Subject to applicable law, as an 88gasia player you may exercise the following rights in respect of your personal data:

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days of receiving a verified request.

10. Children and Minors

The 88gasia platform is strictly intended for adults aged 21 years and above. 88gasia does not knowingly collect personal data from individuals below the age of 21. Age verification is a mandatory step in the registration and KYC process, and access to real-money gaming features is blocked until age verification is satisfactorily completed.

If 88gasia becomes aware that personal data has been collected from an individual below the minimum age, such data will be deleted promptly and the associated account will be closed. If you believe that a minor has registered with 88gasia, please contact us immediately at [email protected].

11. Third-Party Services

The 88gasia platform integrates with third-party services including game software providers, payment processors, and analytics tools. Where such integrations involve the transfer or processing of your personal data, 88gasia ensures that appropriate data processing agreements are in place with all such service providers.

88gasia is not responsible for the privacy practices of third-party websites or services that are not directly operated by 88gasia. This Privacy Policy applies solely to data processed in connection with the 88gasia platform at https://88gasia.win.

12. International Data Transfers

As an internationally licensed platform, 88gasia may transfer personal data to servers or service providers located outside of Malaysia. Where such transfers occur, 88gasia ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable Malaysian data protection law, including the Personal Data Protection Act 2010 (PDPA) where applicable.

Such safeguards may include contractual data transfer clauses, binding corporate rules, or transfers to jurisdictions recognised as providing an adequate level of data protection.

13. Amendments to This Privacy Policy

88gasia reserves the right to update or amend this Privacy Policy at any time. Where changes are material, we will provide reasonable notice via a notification on the platform or by email to your registered address. The "Last updated" date at the top of this document indicates when the most recent revisions were made.

Your continued use of the 88gasia platform following publication of an amended Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to remain informed about how your data is being handled.

14. Contact Us

For all privacy-related enquiries, data subject rights requests, or concerns about how 88gasia handles your personal data, please contact our team at:

[email protected]

Our customer support team is available 24 hours a day, 7 days a week. For formal data subject requests, please use the subject line "Data Privacy Request" and include your registered account email address and a brief description of your request. We will acknowledge your request promptly and provide a substantive response within 30 days.

You also have the right to lodge a complaint with the relevant data protection authority in your jurisdiction if you believe your personal data has been processed unlawfully. In Malaysia, the relevant authority is the Department of Personal Data Protection (JPDP).