Y88 Privacy Policy – Member Personal Data Protection

Y88 values the privacy of every member and visitor to our platform. This Privacy Policy explains in detail how we collect, process, store, and protect your personal information when you use the y88 website and all related services.

By registering an account or using any part of the y88 platform, you confirm that you have read, understood, and accepted the privacy practices described in this document. We encourage you to read this policy in full so you understand your rights and how we handle your personal information.

This Privacy Policy is drawn up in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia and relevant international data protection standards. y88 is committed to ensuring that your personal data is handled with full transparency, integrity, and accountability.

We only collect personal data that is strictly necessary to provide quality, secure services and to comply with legal requirements. The following are the categories of data we collect:

In addition to data you provide directly, we also collect data automatically via cookies, pixel tracking, and similar technologies when you browse our platform. This data is used solely to improve your user experience and platform security.

The personal data we collect is used for legitimate, clearly defined, and limited purposes. y88 will not use your data for any purpose unrelated to the provision of our services without your prior consent. The following are the primary purposes for which data is used:

• Account Management: Registering new accounts, verifying your identity, and managing your profile information on an ongoing basis.
• Transaction Processing: Processing deposits, withdrawals, and all other financial transactions securely and efficiently in accordance with your instructions.
• KYC Verification and AML Compliance: Conducting background checks required by law to prevent fraud, money laundering, and terrorist financing.
• Platform Security: Detecting and preventing unauthorised access, fraud, account abuse, and any suspicious activity.
• Customer Support: Providing technical assistance and resolving any issues or complaints you report to our team.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate self-control tools.
• Service Communications: Sending important notices regarding your account, policy changes, security information, and service updates.
• Platform Improvements: Analysing usage data in aggregate to improve our platform's performance, design, and functionality.
• Marketing (with consent): Sending promotional offers and bonus information only to those who have given consent to receive marketing communications.

Y88 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. Data sharing only occurs under the following limited circumstances:

• Payment Service Providers: Required financial information is shared with licensed payment providers that process your deposits and withdrawals. All such providers are bound by strict confidentiality agreements.
• Game Providers: Minimum required game data is shared with third-party game providers (slots, live casino, sports betting) to enable you to play seamlessly.
• Identity Verification Services: Identity data is shared with licensed KYC and AML companies for age verification and background checks as required by law.
• Regulatory Authority: We may be required by law to disclose certain information to regulatory authorities, law enforcement agencies, or courts when necessary.
• Technology Providers: Cloud infrastructure, cybersecurity, and analytics providers that help us operate the platform. All such parties are subject to strict data processing agreements.

The security of your personal data is the highest priority at y88. We implement multiple layers of technical and organisational security to ensure your data is protected from unauthorised access, loss, damage, or unintended disclosure.

The key security measures we implement include:

• 256-bit SSL Encryption: All data transmitted between your browser and y88's servers is encrypted using the latest TLS protocol, rendering any interception attempt meaningless.
• Data-at-Rest Encryption: Sensitive data stored in our databases, including financial information and identity documents, is encrypted using AES-256 algorithms.
• Two-Factor Authentication (2FA): An additional security layer is available for all member accounts to prevent unauthorised access even if your password is compromised.
• 24/7 Monitoring: Our security team continuously monitors systems to detect suspicious activity, intrusion attempts, and traffic anomalies.
• Regular Security Audits: Our platform undergoes regular penetration testing and independent security audits conducted by certified cybersecurity firms.
• Internal Access Controls: Access to members' personal data among our staff is restricted to individuals who genuinely require it, and every access is logged for audit purposes.

Y88 uses cookies and similar tracking technologies to enhance your experience, maintain session security, and understand how our platform is used. Cookies are small text files stored on your device when you browse our website.

We use the following types of cookies:

• Essential Cookies (Required): Required for core platform functions such as login, session security, and navigation. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting anonymous information about how you use our website — pages visited, time spent, and errors encountered — to help us improve platform performance.
• Functional Cookies: Saving your preferences such as interface language, display settings, and game preferences to make your experience more personalised and comfortable.
• Analytics Cookies: We use analytics tools to understand usage trends in aggregate and to improve our platform's content and design.

You can manage your cookie settings through your web browser settings at any time. However, disabling essential cookies may affect your ability to use certain features of the y88 platform.

As a y88 member and data subject under Malaysia's PDPA, you have the following rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

Y88 only retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable laws and regulations.

Our general data retention guidelines are as follows:

• Active Account Data: Retained for the duration your account is active and for a reasonable period after account closure to fulfil legal obligations.
• Financial Transaction Records: Retained for minimum 7 years after the transaction date, in accordance with Malaysia's anti-money laundering and tax legislation.
• KYC Documents: Retained for the period stipulated by regulatory authorities, typically between 5 and 7 years after the business relationship ends.
• Security Logs: Retained for 2 years for the purposes of security incident and fraud investigation.
• Support Communication Records: Retained for 3 years to ensure service continuity and complaint resolution.
• Marketing Data: Retained until you withdraw your consent or request deletion, whichever comes first.

Once the relevant retention period has expired, your personal data will be securely deleted or anonymised so that you can no longer be identified from that data.

The y88 platform may contain links to third-party websites or services such as game providers, payment providers, or our technology partners. It is important that you understand the following:

• The y88 Privacy Policy applies only to platforms and services operated directly by y88.
• When you leave the y88 platform to browse third-party websites, you are subject to the respective privacy policies and terms of service of those websites.
• Y88 is not responsible for the privacy practices or content of third-party websites, even where links are provided from our platform.
• We encourage you to read the privacy policy of every website you visit and understand how they handle your personal data.

Y88 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or technological developments. Any changes made will take effect immediately upon publication on this page.

For significant changes that affect your rights, we will endeavour to provide advance notice via your registered email or in-platform notification at least 14 days before those changes take effect.

The "Last Updated" date shown at the top of this page always reflects the currently in-force version of the Privacy Policy. We encourage you to review this page periodically so you are always aware of how we protect your personal data.