Privacy Policy

This Privacy Policy ("Policy") is issued by b88club ("Platform", "we", "us", "our") and governs the collection, storage, processing, and disclosure of personal data belonging to registered players ("Player", "User", "you") who access or use the b88club online sports betting and live casino platform at b88club.cam.

b88club treats the protection of your personal data as a core operational responsibility. We collect only the data necessary to deliver Platform Services, fulfil our legal and regulatory obligations, and improve your experience on the Platform. We do not sell your personal data to third parties, and we do not use it for purposes beyond those described in this Policy without your explicit consent.

By registering an account, accessing the Platform, or continuing to use b88club Platform Services after this Policy takes effect, you acknowledge that you have read and understood this Policy and agree to the data practices described herein. If you do not accept this Policy, you must cease use of the Platform and request Account closure.

For the purposes of this Policy, the following terms shall have the meanings ascribed to them below:

b88club collects personal data through the following channels and in the following categories:

3.1 Data Provided Directly by You

• Registration data: Full legal name, date of birth, gender, residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam), nationality, and email address.
• KYC documentation: Copies of Malaysian MyKad, passport, or other government-issued photographic identification; proof of address; payment method ownership documentation where required.
• Contact data: Email address, mobile phone number, and any correspondence submitted through live chat or support channels.
• Financial data: Deposit and withdrawal transaction records, payment method identifiers (e.g., Touch 'n Go eWallet account reference, Maybank2u account suffix, DuitNow proxy ID), and cryptocurrency wallet addresses where applicable.

3.2 Data Generated Through Your Platform Activity

• Betting and gaming records: Wager amounts, odds accepted, game selections, session durations, bet outcomes, and withdrawal requests.
• Bonus and promotional activity: Claims made, wagering progress, and offer eligibility assessments.
• Responsible gambling data: Any deposit limits, loss limits, session reminders, or self-exclusion requests you have set or submitted.

3.3 Technical Data Collected Automatically

• IP address, browser type and version, operating system, device type, and screen resolution.
• Login timestamps, session durations, pages visited, and navigation patterns within the Platform.
• Cookie identifiers and analytics data as described in Section 7 of this Policy.

b88club processes your personal data on the following legal bases:

b88club uses collected personal data for the following specific purposes:

• Account creation and administration: Establishing your player account, verifying your identity and age, and managing your account settings and preferences.
• Service delivery: Processing bets, crediting winnings, managing live casino session data, applying bonus credits, and responding to support requests.
• Payment processing: Facilitating deposits and withdrawals via Malaysian Payment Methods including Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank, DuitNow, FPX, and cryptocurrency channels. Financial data is shared with the relevant payment processor solely to the extent required to complete the transaction.
• Compliance and risk management: Performing AML screening, fraud detection, bet integrity analysis, and regulatory reporting to our licensing authority as required.
• Responsible gambling: Monitoring account activity for indicators of problem gambling, applying self-requested limits and exclusions, and delivering responsible gambling communications where appropriate.
• Platform improvement: Analysing aggregate usage data to improve product features, game selection, interface design, and promotional effectiveness.
• Marketing communications: Sending personalised promotional offers, tournament notifications, and VIP programme updates — only to players who have provided opt-in consent. You may withdraw consent at any time through your account settings.

b88club does not sell, rent, or trade your personal data to any third party. We disclose personal data only in the following defined circumstances:

• Payment service providers: Transaction data is shared with the payment processor handling your specific deposit or withdrawal (e.g., Touch 'n Go eWallet, DuitNow, FPX operator) to the minimum extent necessary to complete the transaction.
• Game content providers: Where you play games supplied by third-party software studios, session data (player ID, bet amounts, game outcomes) is shared with that provider under a data processing agreement that prohibits independent use of the data.
• KYC and identity verification services: Identity documentation may be processed by our appointed KYC verification partner to validate authenticity and check against relevant watchlists.
• Analytics and platform infrastructure providers: Anonymised or pseudonymised technical data may be processed by cloud infrastructure and analytics service providers operating under contractual data protection obligations.
• Regulatory and law enforcement authorities: b88club will disclose personal data to its licensing authority, financial intelligence units, or law enforcement agencies where required to do so by applicable law, court order, or binding regulatory direction.
• Corporate transactions: In the event of a merger, acquisition, or asset sale involving b88club, personal data held at the time of the transaction may be transferred to the successor entity, subject to equivalent privacy protections.

b88club uses cookies and similar tracking technologies to enable essential Platform functionality, maintain session security, and gather analytics data that informs product improvements. We do not use tracking technologies to build advertising profiles for sale to third parties.

You may manage non-essential cookie preferences through your browser settings. Disabling strictly necessary cookies will impair or prevent your ability to log in and use the Platform. Instructions for managing cookies in common browsers are available through your browser's help documentation.

b88club retains personal data for as long as is necessary for the purposes for which it was collected, or as required by applicable licensing obligations, AML regulations, or other legal requirements. The following general retention periods apply:

• Account registration data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, to meet licensing and AML record-keeping obligations.
• KYC documentation: Retained for a minimum of five (5) years following the completion of the KYC process or account closure, whichever is later.
• Transaction and betting records: Retained for a minimum of five (5) years for AML and licensing audit purposes.
• Support communications: Retained for up to three (3) years following the close of the relevant support interaction.
• Marketing consent records: Retained until consent is withdrawn, plus six (6) months as an audit record of the withdrawal.
• Technical and analytics data: Anonymised aggregate data may be retained indefinitely; personally identifiable technical data is retained for up to twenty-four (24) months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data destruction procedures.

b88club implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and the b88club Platform infrastructure.
• AES-256 encryption at rest for sensitive stored data, including KYC documentation, payment method identifiers, and account credentials.
• Two-factor authentication (2FA) available for all player accounts and mandatory for administrative access.
• Access controls: Personal data is accessible only to authorised b88club personnel or contractors who require access to perform their defined duties. Access is governed by role-based permissions and logged for audit purposes.
• Regular penetration testing and third-party security audits conducted on Platform infrastructure.
• Incident response procedures: In the event of a data breach affecting your personal data, b88club will notify affected players and relevant authorities within the timeframes required by applicable law.

As a data subject whose personal data is processed by b88club, you hold the following rights. These rights may be exercised by contacting our support team at the address provided in Section 15.

The b88club Platform is strictly prohibited for persons under 21 years of age. We do not knowingly collect, store, or process personal data from individuals below this minimum age threshold. Age verification is a mandatory component of our KYC process, and accounts that cannot satisfy age verification requirements will be suspended pending documentation or permanently closed where the age requirement cannot be met.

If b88club becomes aware that personal data has been submitted by a person who is under 21 years of age, all such data will be permanently deleted without delay, and the associated account will be closed. Any balance held in an underage account will be handled in accordance with applicable licensing requirements.

Parents and guardians who believe that a minor in their care has registered with b88club are encouraged to contact our support team immediately so that the account can be identified and closed as a matter of priority.

The b88club Platform may contain references to or integrations with third-party services in the context of payment processing, game provision, and infrastructure. Each third-party service provider operates under its own privacy policy and data protection framework.

Where b88club engages a third-party service provider that processes personal data on its behalf, we enter into a data processing agreement that requires the provider to: process data only as instructed by b88club; maintain appropriate technical and organisational security measures; and not sub-process data without prior written authorisation.

b88club is not responsible for the data practices of third-party entities that operate independently of our data processing agreements. Players are encouraged to review the privacy policies of any third-party service they interact with directly.

b88club operates under international licensing arrangements, and your personal data may be transferred to, stored in, or processed in jurisdictions outside Malaysia. Such transfers may involve jurisdictions that do not have a domestic data protection framework equivalent to the Malaysian PDPA.

Where international transfers occur, b88club ensures that appropriate safeguards are in place, which may include: standard contractual clauses; contractual obligations on the recipient to apply equivalent data protection standards; or reliance on the necessity of the transfer to perform the contract between b88club and you.

By registering an account and using the Platform, you acknowledge and consent to the transfer of your personal data in accordance with the safeguards described in this Policy.

b88club reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, Platform functionality, or data processing practices. Material changes to this Policy will be communicated to registered players via email notification and/or a prominent notice displayed on the Platform, with a minimum of 7 days' notice prior to the effective date of the amendment.

Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy. The date of the most recent update is displayed at the top of this page.

If you do not agree with a revised Policy, you have the right to cease use of the Platform and to request Account closure and data deletion in accordance with Section 10 and Section 8 respectively.

For any questions, concerns, or formal requests relating to this Privacy Policy or the processing of your personal data, please contact the b88club Data Protection team through either of the following channels:

• Live Chat: Available 24/7 via the Platform interface. Select "Account & Privacy" as the enquiry category.
• Support Email: [email protected] (plain text — not a clickable link). Include "Privacy Request" in your subject line along with your registered account username.

We aim to acknowledge all privacy-related requests within 48 hours and to resolve them fully within 30 days. Complex or volume requests may require additional time, in which case we will notify you of the extended timeline promptly.