Privacy Policy

a88 ("a88", "we", "us", "our") operates the online casino and sports betting platform accessible at https://a88.casa and associated sub-domains. We are committed to protecting the personal data of all individuals who interact with our platform, including registered players, prospective players, and visitors browsing our website.

This Privacy Policy ("Policy") describes in detail how we collect, use, store, share, and protect personal data in connection with the operation of the a88 platform. It also sets out the rights you hold in relation to your personal data and the mechanisms available to you for exercising those rights.

By registering an account, depositing funds, or continuing to use the a88 platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. This Policy should be read in conjunction with our Terms & Conditions, which govern your use of the platform more broadly.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, location data, online identifiers, or factors specific to that individual.
• "Processing" means any operation performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, combination, restriction, erasure, or destruction.
• "Data Controller" means a88, as the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of a88 under a contractual arrangement.
• "KYC Data" means identity and address verification documents submitted by Players in fulfilment of Know Your Customer obligations.
• "Cookies" means small text files placed on your device by the Platform to store session information, preferences, and usage analytics.
• "Platform" means the a88 website, mobile site, and all associated account management, gaming, and support services.
• "You" / "Player" means the individual accessing or using the Platform, whether as a registered account holder or a visitor.

a88 collects only the data that is necessary to provide our services, comply with legal obligations, and protect the integrity of the platform. The categories of personal data we collect are set out below:

We do not collect sensitive categories of personal data (such as racial or ethnic origin, health data, or political opinions) unless specifically required by a regulatory obligation, and only with your explicit consent where applicable.

a88 collects personal data through the following channels:

• Direct Submission: Information you provide when registering an account, completing KYC, making a deposit or withdrawal, contacting support, or responding to promotions.
• Automated Technologies: Cookies, web beacons, server logs, and similar technologies that collect technical and behavioural data when you access and use the Platform.
• Third-Party Sources: Identity verification providers, payment processors (including Malaysian banking and e-wallet partners), fraud prevention databases, and publicly available sources where permitted by applicable law.
• Correspondence: Any written communication you send to us via email, live chat, or other support channels.

a88 processes your personal data for the following specific purposes:

• Account Management: Creating, maintaining, and administering your player account, including authentication, profile updates, and account closure.
• Payment Processing: Facilitating deposits and withdrawals in MYR via local payment methods including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, BTC, and USDT.
• KYC and Age Verification: Verifying your identity and confirming that you meet the minimum age requirement of 21 years, as required by our licensing obligations.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent transactions, money laundering, account takeovers, and other forms of platform abuse.
• Legal and Regulatory Compliance: Meeting obligations imposed by our licensing authority, anti-money laundering regulations, and other applicable laws.
• Customer Support: Responding to your enquiries, resolving disputes, and providing assistance with account, payment, and game-related issues.
• Responsible Gambling: Monitoring account activity to identify indicators of problem gambling, enforcing deposit limits and self-exclusion arrangements, and contacting players who may require support.
• Platform Improvement: Analysing usage patterns, game performance, and technical data to enhance the platform experience and fix issues.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications.

We do not process your personal data for any purpose not listed above without first notifying you and, where required, obtaining your consent.

a88 relies on the following legal bases to process your personal data, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform our contract with you — namely, operating your account, processing transactions, and providing gaming services.
• Legal Obligation: Processing necessary to comply with applicable laws, including anti-money laundering requirements, KYC regulations, and obligations imposed by our licensing authority.
• Legitimate Interests: Processing conducted for the legitimate business interests of a88, including fraud prevention, platform security, responsible gambling monitoring, and service improvement, provided these interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications and optional analytics cookies, where we have obtained your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

7.1 We Do Not Sell Your Data. a88 does not sell, rent, or otherwise commercially exploit your personal data to third parties for their own marketing purposes.

7.2 Authorised Third Parties. We share personal data with the following categories of third-party recipients, solely to the extent necessary to deliver the specified function:

• Payment Processors: Malaysian banking partners, e-wallet providers (Touch 'n Go, Boost, GrabPay), FPX, DuitNow, and cryptocurrency network operators — to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC services that verify the authenticity of your identity documents and confirm your age and address.
• Fraud Prevention Services: Providers of risk scoring, device fingerprinting, and transaction monitoring tools used to protect your account and the platform.
• Game Studios and Content Providers: Licensed game providers whose software operates on the a88 platform may receive limited session data required to operate games correctly.
• Customer Support Tools: Providers of live chat and ticketing systems used by our support team to communicate with you.
• Regulatory Authorities: Our licensing authority and, where required, law enforcement agencies or other competent authorities in response to lawful requests.

7.3 Business Transfers. In the event that a88 undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. We will provide notice of such transfer and your data will remain subject to the protections described in this Policy.

a88 is an internationally operated platform and your personal data may be transferred to, stored in, and processed in countries outside Malaysia. These jurisdictions may have data protection laws that differ from those in Malaysia.

Where such transfers occur, we take steps to ensure that your data receives a level of protection consistent with the principles described in this Policy. These steps may include entering into data processing agreements with recipients that incorporate appropriate contractual safeguards, or relying on adequacy determinations where applicable.

By registering an account and using the a88 platform, you acknowledge and consent to the international transfer of your personal data for the purposes described in this Policy.

a88 retains personal data for as long as is necessary to fulfil the purposes set out in this Policy, unless a longer retention period is required or permitted by applicable law. Our standard retention periods are as follows:

• Account Data: Retained for a minimum of 5 years following account closure, to satisfy anti-money laundering obligations and licensing requirements.
• Transaction and Financial Records: Retained for a minimum of 5 years from the date of each transaction.
• KYC Documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Support Communications: Retained for 3 years from the date of the final communication in a support thread.
• Marketing Data: Retained until you withdraw consent or opt out. Following opt-out, a record of your preference is maintained to ensure compliance.
• Technical and Log Data: Retained for 12 months for security and fraud prevention purposes, after which it is aggregated or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Anonymised data — which can no longer identify you — may be retained indefinitely for statistical and analytical purposes.

Subject to applicable law and certain conditions, you have the following rights in relation to your personal data held by a88:

To exercise any of the above rights, please contact our support team at [email protected]. We will respond to all verified data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, and we will notify you accordingly.

11.1 What Are Cookies. Cookies are small text files placed on your device when you visit the a88 platform. They enable core functionality, remember your preferences, and help us understand how the platform is used.

11.2 Types of Cookies We Use.

• Essential Cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. You cannot opt out of essential cookies without disabling the platform entirely.
• Functional Cookies: Remember your preferences such as language settings, display options, and notification preferences to personalise your experience.
• Analytical Cookies: Collect anonymised or pseudonymised data about how players navigate and use the platform, enabling us to identify and fix issues and improve user experience. These are placed only with your consent.
• Marketing Cookies: Used only where you have opted in to receive personalised promotional content. These cookies help us avoid sending irrelevant offers and measure the effectiveness of our marketing communications.

11.3 Managing Cookies. You can manage your cookie preferences through your browser settings, which allow you to block, delete, or receive notifications about cookies. Please be aware that disabling certain categories of cookies may affect the functionality of the platform.

a88 implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, and disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the a88 platform is encrypted using industry-standard Transport Layer Security protocols.
• Access Controls: Personal data is accessible only to authorised staff who require it to perform their duties. Role-based access controls and audit logging are in place for all internal data systems.
• Secure Data Infrastructure: Player data is stored on secured servers with regular security patching, intrusion detection systems, and firewall protection.
• KYC Document Handling: Identity documents are stored in encrypted, access-restricted repositories and are never transmitted via unsecured channels.
• Staff Training: All a88 personnel who handle personal data are trained on data protection obligations and the correct procedures for handling, storing, and disposing of personal information.
• Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, a88 will notify you and relevant authorities in accordance with applicable data breach notification requirements.

While a88 takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. You are encouraged to maintain the security of your account credentials and to contact support immediately if you suspect any unauthorised access to your account.

a88 is strictly for players aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of our KYC process, and accounts found to belong to underage individuals are closed immediately, with deposited funds returned to the original payment method.

If you are a parent or guardian and believe that a minor has registered an account on a88 or provided personal data to us without your consent, please contact our support team at [email protected] immediately. We will investigate and take appropriate action, including permanent closure of the account and deletion of any data collected.

For tools and resources to help protect young people from accessing gambling platforms, please visit our Responsible Gambling page.

a88 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing activities, applicable law, or the structure of our platform. Material changes will be communicated to registered Players via the email address associated with their account at least 7 days before taking effect.

The "Last updated" date at the top of this document reflects when this Policy was most recently revised. We encourage you to review this page periodically to stay informed about how we are protecting your data. Continued use of the platform following the effective date of any revision constitutes acceptance of the updated Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the a88 support team using the details below. For formal data rights requests, please include your registered account email address and a description of your request to help us process it efficiently.

If you are not satisfied with our response to your data privacy enquiry or complaint, you may escalate the matter to the relevant supervisory authority or data protection regulator in your jurisdiction. We remain committed to resolving all data concerns transparently and without unnecessary delay.