Best88 Privacy Policy – Malaysia Member Personal Data Protection

1Information We Collect

Best88 collects various types of information from you in the course of delivering high-quality online Sports Betting and casino services. A clear understanding of the data we collect is the first step in helping you make informed decisions about your privacy.

Information You Provide Directly:

• Identity Information: Full name, date of birth, identity card or passport number, gender, and nationality during the registration and KYC process.
• Contact Information: Email address, mobile number, and mailing address for communication and account verification purposes.
• Financial Information: Payment method details including bank account numbers, digital wallet information (TNG eWallet, Boost), and deposit and withdrawal transaction records.
• KYC Documents: A digital copy of a valid government-issued ID, proof of address such as a utility bill or bank statement, and an identity verification selfie if required.
• Communications: Your correspondence with the best88 customer support team via live chat, email, or any other support channel.

Information Collected Automatically:

• Technical Data: IP address, web browser type and version, device operating system, screen resolution, and other relevant device information.
• Usage Data: Pages visited, time spent on each page, games played, bets placed, and access dates and times.
• Cookie Data: Session data, language preferences, display settings, and analytics data collected through cookies and similar tracking technologies.
• Geolocation Data: Approximate location based on IP address for geographic eligibility verification and fraud prevention.

2How We Use Your Data

All information collected by best88 is used for lawful and specific purposes. We do not use your data for any purpose not stated in this Privacy Policy. Below is a detailed description of how your data is used:

We also use aggregated, non-personally identifiable data for internal research, statistical reporting, and new product development. This aggregated data contains no personal information that can directly identify you.

3Legal Basis for Data Processing

Best88 processes your personal data based on one or more valid legal grounds. Understanding these grounds gives you a clearer picture of your rights in relation to each type of data processing.

• Contract Performance: Most data processing is necessary to fulfil the service contract between you and best88 — including account registration, wagering processing, and financial transactions. Without this processing, we are unable to provide services to you.
• Legitimate Interest: best88 processes certain data based on legitimate business interests such as fraud prevention, platform security, and service improvement, provided these interests do not override your fundamental privacy rights.
• Legal Obligation: In some situations, we are legally required to process and retain certain data, such as financial transaction records for anti-money laundering (AML) compliance and tax compliance purposes.
• Consent: For processing not covered by the categories above — such as sending marketing communications or using non-essential cookies — we require your explicit consent, and you may withdraw that consent at any time.

4Data Sharing with Third Parties

Best88 adopts a strict and prudent approach to sharing member personal data. We do not share your data for third-party marketing purposes without your consent. However, in the course of legitimate business operations, there are specific situations where data sharing is necessary:

• Payment Service Providers: Transaction details are shared with approved payment providers such as FPX, TNG eWallet, and Boost solely for the purpose of processing your deposits and withdrawals.
• Game Software Providers: Account information required to activate and run games is shared with licensed game providers integrated with the best88 platform.
• KYC & Anti-Fraud Services: Identity verification data is shared with recognised third-party KYC and fraud detection service providers for platform security purposes.
• Regulatory Body & Law Enforcement: best88 will disclose required information to the relevant authorities when compelled to do so by law or a valid court order.
• Business Transfer: In the event of a merger, acquisition, or sale of best88 assets, member data may be transferred as part of the business assets, provided that the acquiring company is bound by an equivalent Privacy Policy.

All third parties that receive best88 member data are bound by strict data confidentiality agreements and are only permitted to use such data for the agreed purposes.

5Cookies & Tracking Technologies

Best88 uses cookies and similar tracking technologies to enhance the user experience, analyse website traffic, and enable platform features to function correctly. Understanding how we use these technologies helps you make more informed choices about your privacy.

Types of Cookies We Use:

• Essential Cookies (Required): Required for basic platform operations such as login, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: Storing your preferences such as language settings, displayed currency, and display options to deliver a more personalized experience.
• Analytics Cookies: Collecting information on how you use the platform — pages visited, time spent, and navigation paths — to help us improve our services.
• Marketing Cookies: Used to display relevant advertisements and measure the effectiveness of our marketing campaigns. These cookies are only activated with your consent.

You can manage your cookie preferences through your web browser settings or via the cookie consent management panel available on the best88 platform. Please note that disabling certain cookies may affect the functionality and your experience on our platform.

6Data Storage & Retention Period

Best88 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law. Once the data is no longer needed, we will securely delete or anonymise it.

• Active Account Data: For as long as your account remains active, your profile data and preferences will be retained to ensure continuous and personalised service.
• Financial Transaction Records: Retained for a minimum of 5 years from the transaction date in accordance with financial compliance and AML reporting legal requirements.
• KYC Documents: Retained for the duration of the active account plus 5 years after account closure, or longer if required by regulatory authorities.
• Support Communication Logs: Retained for 2 years from the date of last interaction for reference and dispute resolution purposes.
• Analytics Data: Aggregated and anonymised usage data may be retained for a longer period for long-term trend analysis purposes.

Once the designated retention period has expired, your data will be permanently deleted from our active systems. Data stored in backup systems will be removed during the next backup update cycle.

7Your Rights Regarding Personal Data

As a best88 member, you have certain rights regarding your personal data, which we fully respect. Below are the rights you hold and how to exercise them:

To exercise any of the above rights, please contact the best88 customer support team via live chat or email. We will process your request within 30 business days. For complex cases, this period may be extended to 60 days with prior notice to you.

8Data Security Measures

Best88 continually invests in sophisticated security infrastructure to protect members' personal and financial data from unauthorised access, disclosure, alteration, or destruction. Our multi-layered security system includes:

• Data Encryption in Transit: All communications between your browser and best88 servers are secured with TLS 1.3 protocol and SSL 256-bit encryption, ensuring your data cannot be intercepted during transmission.
• Data Encryption at Rest: Sensitive data stored in our databases, including financial information and KYC documents, is encrypted using robust AES-256 encryption algorithms.
• Strict Access Control: Access to member personal data on our end is strictly limited to staff with a legitimate business need, and all access is logged and monitored.
• Two-Factor Authentication: Our internal systems use multi-factor authentication to prevent unauthorised access even in the event of a password compromise.
• Regular Security Audits: best88 conducts regular penetration testing and security audits by independent third parties to identify and address any system vulnerabilities.
• Incident Response Plan: We have established security incident response procedures in place, including notification protocols for members and relevant authorities in the event of a material data breach.

9Children's Privacy

The best88 platform is strictly for individuals aged 18 and above. We do not knowingly collect, process, or store any personal data from individuals under the age of 18.

All registration applications go through a strict age verification process. Should best88 discover that personal data of a minor has been collected without our knowledge — whether through the provision of false information or any other means — we will take immediate action to:

• Suspending the relevant account immediately while an investigation is conducted.
• Deleting all personal data related to the individual from our systems.
• Processing the return of remaining funds to the relevant parent or guardian.

If you have reason to believe that someone under the age of 18 has registered or is using the best88 platform, please contact us immediately so that appropriate action can be taken.

10Amendments to This Privacy Policy

Best88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, new legal requirements, or improvements in data protection. All amendments will take effect upon publication of the latest version on this page.

When we make significant changes to this Privacy Policy, we will notify you through one or more of the following methods:

• In-platform notifications when you are logged in to your best88 account.
• Notification email sent to the email address registered to your account.
• Clear notification banners displayed on the main page of the website.

Your continued use of best88 services after the effective date of any amendment will be deemed as your acceptance of the updated Privacy Policy. If you do not agree with any amendment, you have the right to close your account and discontinue use of our services.

11Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how best88 handles your personal data, our Privacy and Data Protection team is ready to assist you.

We are committed to responding to all privacy-related inquiries within 3 working days. For more complex cases requiring in-depth investigation, we will contact you within 10 working days with an update on the status of your request.

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.