88 Fortunes Privacy Policy – Data Protection for Malaysian Members

1 Introduction & Scope of Privacy Policy

88 Fortunes ("Company", "We") is the operator of Malaysia's leading online entertainment platform, operating under the website address 88fortunes.my. We understand that your personal data is a trust placed in us, and we do not take this responsibility lightly.

This Privacy Policy explains in detail how 88 Fortunes collect, use, process, store, disclose, and protect your personal information when you use our platform — whether through our website, mobile app, or any of our official communication channels.

We are fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA) and all related regulations currently in force. If you have any questions about this Privacy Policy, do not hesitate to contact us at support@88fortunes.my.

2 Types of Personal Data We Collect

88 Fortunes only collects personal data necessary to provide the services you request. Below are the categories of data we collect:

We do not collect sensitive data categories such as health information, political views, religious beliefs, or biometric data unless required by law or with your explicit consent.

3 How We Collect Your Data

Your personal data is collected in various ways when you interact with the 88 Fortunes:

• Account Registration: Information you provide when completing the registration form, including your name, email address, phone number, and date of birth.
• KYC Verification: Identity documents such as MyKad or passport uploaded during the identity verification process.
• Financial Transactions: Information relevant when you make a deposit via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX, as well as when you withdraw to your bank account.
• Platform Use: Activity data automatically generated when you play games, place bets, or use platform features.
• Communications: Information you share when reaching out to our support team via live chat, email, or other channels.
• Cookies & Tracking Technologies: Technical data collected automatically via cookies and similar technologies when you browse our website.
• Third Parties: Verification information from payment providers or authorised identity verification agencies.

4 How Your Personal Data Is Used

88 Fortunes uses your personal data for the following legally justified purposes:

• Account Management: Creating, verifying, and managing your member account, including all required KYC processes.
• Service Provision: Gives you access to all games and platform features including lottery, Live Casino, football betting, badminton, Poker, blackjack, and slots.
• Transaction Processing: Securely processing deposits and fund withdrawals via your chosen payment method.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, and unauthorised account access.
• Legal Compliance: Meeting legal obligations, including anti-money laundering (AML) and know your customer (KYC) requirements.
• Customer Support: Providing assistance and resolving issues you report to us.
• Marketing Communications: Sending information about promotions, bonuses, and new offers — only if you have agreed to receive such communications.
• Platform Improvements: Analysing usage patterns to improve the functionality and user experience of our platform.
• Responsible Gaming: Monitoring gameplay patterns to identify and assist members who may need responsible gambling support.

5 Data Sharing & Disclosure

88 Fortunes does not sell, rent, or trade your personal data to any third party for their marketing purposes. However, we may share your data with certain parties in limited and legitimate circumstances:

• Payment Service Providers: Providers such as Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, and FPX banks (Maybank, CIMB, RHB, and others) receive only the data necessary to process your financial transactions.
• Identity Verification Provider: The KYC agencies we engage to verify member identities in compliance with legal requirements.
• Technical Service Providers: Companies that help us operate the platform, store data, and provide technical support services — all bound by strict confidentiality agreements.
• Authorities & Law Enforcement: When required by Malaysian law or a valid court order.
• Audit & Compliance: Independent auditors who verify our platform's compliance with industry standards.

6 Data Security & Protection

88 Fortunes implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL Encryption: All data transmitted between your device and our servers is protected with industry-standard SSL encryption.
• Data-at-Rest Encryption: Sensitive data such as passwords and financial information is encrypted when stored in our database.
• Two-Factor Authentication (2FA): Available to all accounts as an added layer of security.
• 24/7 Monitoring: Our security systems are monitored around the clock to detect and respond to any security threats.
• Internal Access Controls: Only employees who require access to specific data to carry out their duties are permitted to do so.
• Regular Penetration Testing: Our platform undergoes regular independent security testing to identify and address any vulnerabilities.

7 Data Retention Period

88 Fortunes retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by Malaysian law:

• Active Account Data: Retained for the duration your account is active and for a reasonable period following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's tax and anti-money laundering legal requirements.
• KYC & Identity Verification Data: Retained for 5 years after account closure or the date of the last transaction, whichever is later.
• Game Activity Logs: Retained for 3 years for audit and dispute resolution purposes.
• Support Communication Records: Retained for 2 years from the date of last interaction.

When data is no longer needed and there is no legal requirement to retain it, we will securely delete or anonymise it using industry-approved methods.

8 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by 88 Fortunes:

9 Cookies & Tracking Technologies

Website 88 Fortunes uses cookies and similar tracking technologies to enhance your experience and ensure certain features function correctly.

• Essential Cookies: Required for core website functions such as login and session security. These cookies cannot be disabled.
• Performance & Analytics Cookies: Helping us understand how visitors interact with our website so we can make improvements.
• Functional Cookies: Remembering your preferences such as language, display settings, and login details for your convenience.
• Marketing Cookies: Used to display relevant content and offers to you — only with your consent.

You can manage cookie settings through your web browser. Please note that disabling certain cookies may affect the functionality of our platform. For more information on managing cookies, refer to your web browser's help documentation.

10 Protection of Children's Data

Platform 88 Fortunes is strictly for individuals aged 18 years and above only. We do not knowingly collect personal data from minors.

If you believe that someone under the age of 18 has registered or is using our platform, please contact us immediately at support@88fortunes.my. We will take immediate action to:

• Suspending and closing the account in question
• Deleting all associated personal data from our systems
• Returning any relevant balance in accordance with established procedures

11 Privacy Policy Amendments

88 Fortunes reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. Any material amendments will be communicated to you via:

• A prominent notice on the homepage of our website
• An email notification to your registered address at least 14 days before the amendments take effect
• An in-account pop-up notification upon your next login

The "Last Updated" date at the top of this document will always reflect the date of the most recent amendment. Continued use of the 88 Fortunes after the amendment's effective date will be considered as acceptance of the updated Privacy Policy.

12 Contact Us & Privacy Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer (DPO):

• Privacy Email: privacy@88fortunes.my
• General Support Email: support@88fortunes.my
• Live Chat: Available 24/7 on the 88 Fortunes platform

We are committed to resolving all privacy enquiries and complaints within 30 working days. If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP) under the Ministry of Communications and Digital.