Casino 888 Privacy Policy — Malaysia Personal Data Protection

Last Updated: 1 January 2026

This document explains how Casino 888 collect, use, store, and protect your personal data in accordance with the Malaysia Personal Data Protection Act 2010 (PDPA). Your privacy is our priority — not merely a legal obligation.

PDPA 2010 Compliance 256-bit SSL Data Protected No Data Sales

Casino 888's Six Data Protection Guarantees

This is not just a promise — it is a daily practice we uphold for every Casino 888 member in Malaysia.

Malaysia PDPA 2010 Compliance

Casino 888 operates in full compliance with the Malaysia Personal Data Protection Act 2010 (PDPA). All collection, processing, and storage of member personal data is carried out in accordance with the principles set out in that Act, without exception.

256-bit SSL Encryption

All information transmitted between your device and Casino 888's servers — including login credentials, personal details, and financial transaction data — is protected with 256-bit SSL encryption, the same security standard used by leading Malaysian banking institutions.

No Sale of Data to Third Parties

Casino 888 has never sold, rented, or exchanged member personal data with any third party for marketing or commercial purposes, and never will. Your data belongs to you — Casino 888 acts solely as a responsible custodian.

Secure Data Storage

All Casino 888 members' personal data is stored on servers protected by multiple layers of firewalls, strict access controls, and active intrusion detection systems. Access to members' personal data is granted only to staff who genuinely need it to carry out their responsibilities.

Your Data Rights

Every Casino 888 member has the right to access, correct, transfer, or request the deletion of their personal data at any time. Such requests can be submitted through Casino 888 customer support and will be processed within the timeframe stipulated by the PDPA.

Cookie Usage Transparency

Casino 888 uses cookies to improve the user experience and analyse website traffic. We inform you clearly about the use of these cookies and provide options to manage your cookie preferences as you see fit.

Important Note

This Privacy Policy document outlines the privacy practices Casino 888 in full. By using the Casino 888 platform, you consent to the collection and use of your personal data as described in this document. Please read it carefully and contact us if you have any questions.

1

Privacy Policy Introduction & Scope

Casino 888 is committed to the privacy of every member who uses our platform. This Privacy Policy has been developed to clearly and transparently explain how we handle your personal data — from the point of collection through to final deletion — in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international standards.

This Privacy Policy applies to all individuals who:

  • Visiting the casino888-play.com website without registering as a member
  • Registering and using a Casino 888 account as a registered member
  • Contacting the Casino 888 customer support team via live chat or email
  • Interacting with Casino 888 through any other communication channel

This Privacy Policy should be read together with Casino 888 Terms & Conditions which is the primary agreement between you and our platform. Should any conflict arise between the two documents on matters of data privacy, this Privacy Policy shall prevail.

Casino 888 is the data controller for all personal data collected through this platform. This means we are responsible for determining the purposes and means of processing your personal data, and we take that responsibility fully and seriously.

2

Personal Data We Collect

Casino 888 collects only the personal data that is genuinely necessary to deliver our services safely, efficiently, and responsibly. We do not collect excessive or irrelevant data. The types of data we collect fall into several categories:

Data You Provide Directly:

  • Full name as stated on your Malaysian identity card (MyKad)
  • Identity card number (MyKad) for identity verification (KYC) purposes
  • Date of birth to verify that you are 18 years of age or older
  • An active email address for account communications and important notifications
  • An active Malaysian mobile number for OTP verification and support
  • Malaysian residential address where required for the KYC process
  • Payment method details (e-wallet account numbers, bank account numbers) for processing deposits and withdrawals
  • Copy of identity document when requested during the KYC process

Automatically Collected Data:

  • The IP address of your device when accessing Casino 888
  • Web browser type and version
  • Device type and operating system (Android, iOS, Windows, etc.)
  • Session data including pages visited, time of visit, and in-platform actions
  • Cookie data and similar tracking technologies (see the Cookies section)
  • Betting and game activity logs for record-keeping and dispute resolution purposes

Data from Third-Party Sources:

  • Verification information from accredited KYC service providers
  • Exclusion list status information from recognised responsible gambling bodies
  • Payment verification data from payment gateway providers (Touch 'n Go eWallet, GrabPay, DuitNow, FPX, and others)

Casino 888 never stored full credit or debit card numbers. All financial transactions are processed through certified, secure third-party payment gateways — Casino 888 only receives transaction confirmation, not actual card data.

3

How Casino 888 Uses Your Personal Data

Personal data collected by Casino 888 is used solely for legitimate and necessary purposes. The table below details each purpose and its corresponding legal basis:

Purpose of Use Data Involved Legal Basis
Member registration and account management Name, email address, phone number, password Contractual performance
Identity verification (KYC) and fraud prevention MyKad, date of birth, supporting documents Legal obligation
Processing of deposits and withdrawals Payment method details, transaction records Contractual performance
Provision of gaming and betting services Session data, gaming activity logs Contractual performance
Customer support and dispute resolution Communication records, transaction logs Legitimate interests
Anti-money laundering (AML) Transaction records, identity verification data Legal obligation
Marketing communications (with consent) Email address, phone number Consent
Platform analytics and improvement Anonymised usage data Legitimate interests
Compliance with regulatory reporting requirements Data required by regulatory authorities Legal obligation

Casino 888 will not use your personal data for any purpose beyond those stated above without first obtaining your fresh consent. If we wish to use your data for a purpose that differs from the original reason it was collected, we will contact you to request new consent.

4

Legal Basis for Data Processing

Casino 888 processes your personal data on the basis of one or more valid legal grounds as provided under Malaysia's Personal Data Protection Act 2010 (PDPA). Understanding these legal bases is important as they determine the rights available to you in relation to that data:

  • Contractual Fulfilment: The majority of your personal data processing is carried out solely to enable Casino 888 to fulfil its contractual obligations to you as a member — for example, processing deposits, providing access to games, and processing withdrawal of winnings.
  • Legal Obligation: Certain processing is mandatory for Casino 888 to comply with applicable law — particularly identity verification (KYC) and anti-money laundering (AML) obligations required under Malaysian law.
  • Consent: For marketing communications, promotional notifications, and any data use beyond contractual or legal requirements, Casino 888 will only process your data on the basis of consent that is freely given, specific, informed, and unambiguous. You may withdraw this consent at any time.
  • Legitimate Interests: In certain cases, Casino 888 processes your data on the basis of legitimate business interests that do not override your fundamental privacy rights — for example, to prevent fraud, maintain platform security, and improve service quality.
5

Sharing Data with Third Parties

Casino 888 does not sell, rent, or share members' personal data with third parties for their own marketing purposes. However, in the course of operating our platform, there are limited situations where Casino 888 needs to share your personal data with carefully selected third parties:

  • Payment Service Providers: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX providers (Maybank, CIMB, RHB, Hong Leong, and other participating banks) receive the data necessary to process your deposits and withdrawals. This data is shared under strict contractual terms.
  • KYC Service Providers: Recognised third-party identity verification companies receive your identification data to carry out the mandatory KYC checks.
  • Game Software Providers: Providers such as Pragmatic Play, PG Soft, Microgaming, NetEnt, Habanero, and Evolution receive the game session data necessary to deliver their games. This data is typically in the form of pseudonymised user IDs.
  • IT & Security Service Providers: Companies providing server hosting, cybersecurity, and analytics services have limited access to our data under strict confidentiality agreements.
  • Regulatory Authority: Casino 888 will disclose member personal data to relevant authorities (police, courts, regulatory bodies) when required by law or a valid court order.

All third parties that receive Casino 888 member personal data are bound by data processing agreements requiring them to handle that data in accordance with the security and privacy standards set by Casino 888, which are no less stringent than Malaysia's PDPA requirements.

Casino 888 is not responsible for the privacy practices of any third-party websites or platforms that may be linked from our platform. We recommend reading the privacy policy of any third-party platform before using it.

6

Personal Data Security

Casino 888 takes data security infrastructure seriously to ensure that every member's personal data is protected to the highest standard. The technical and organisational security measures we have implemented include:

  • Data Encryption in Transit: All communications between your browser or app and Casino 888's servers are secured using TLS 1.3 with AES-256 encryption — the same 256-bit SSL encryption used by banks in Malaysia.
  • Data-at-Rest Encryption: All sensitive personal data stored in Casino 888's databases — including MyKad numbers, payment information, and passwords — is stored in encrypted or hashed form using the latest security algorithms.
  • Role-Based Access Controls: Only Casino 888 staff who require access to specific personal data to perform their assigned duties are granted such access. All access is logged and monitored.
  • Two-Factor Authentication (2FA): Casino 888 internal systems containing member personal data are accessible only to staff who have completed two-factor authentication.
  • 24/7 Security Monitoring: Active intrusion detection systems (IDS) and intrusion prevention systems (IPS) monitor Casino 888's infrastructure around the clock to detect and block cyber threats.
  • Regular Penetration Testing: Casino 888 conducts regular security assessments, including penetration testing by independent security experts, to identify and address vulnerabilities before they can be exploited.

While Casino 888 takes all reasonable steps to protect your personal data, no security system is 100% impenetrable. In the event of any security incident involving members' personal data, Casino 888 is committed to notifying the relevant authorities and affected members within the timeframe required by applicable law.

7

Data Retention & Deletion

Casino 888 does not retain your personal data for longer than is necessary for the purposes set out in this Privacy Policy or to meet applicable legal requirements. Our data retention practices are as follows:

Data Type Retention Period Reason
Active member account data For the duration of the active account Contractual performance
Financial transaction records 7 years after the transaction date Malaysian legal requirements
KYC Documents (MyKad, etc.) 5 years after account closure AML/KYC Requirements
Customer support communication logs 3 years Dispute resolution
Gaming and betting activity logs 5 years Audit and compliance
Marketing data (with consent) Until consent is withdrawn Member consent
Cookie and analytics data 13 months Platform usage analytics

Once the defined retention period has elapsed, your personal data will be securely deleted or anonymised so that it can no longer be linked back to you. The deletion process follows procedures that ensure the data cannot be recovered.

8

Your Rights as a Data Subject

As a Casino 888 member and data subject under Malaysia's PDPA 2010, you have the following rights regarding your personal data:

🔍
Right of Access

You have the right to request a copy of your personal data held by Casino 888 at any time. Such requests will be processed within 21 business days.

✏️
Right to Rectification

You have the right to request correction of any personal data that is inaccurate or incomplete, either through your Casino 888 account settings or by contacting customer support.

🗑️
Right to Erasure

You may request the deletion of your personal data, subject to legal requirements that obligate Casino 888 to retain certain data for a specified period.

🚫
Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes. Such objections will be acted upon immediately and without conditions.

📦
Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider if required.

⏸️
Right to Restriction

In certain circumstances, you may request that Casino 888 suspend the processing of your personal data while a dispute or investigation relating to that data is being resolved.

To exercise any of the rights listed above, please contact the Casino 888 customer support team via live chat or email at support@casino888-play.com, specifying the right you wish to exercise along with any relevant details. Casino 888 will respond within the timeframe required under PDPA and will not charge any fee for reasonable requests.

If you are dissatisfied with how Casino 888 handles your personal data or responds to a request regarding your rights, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

9

Cookies & Tracking Technologies

Casino 888 uses cookies and similar tracking technologies to enhance the user experience, maintain platform security, and analyse how our platform is used. Cookies are small text files stored on your device when you visit our website.

Types of cookies used by Casino 888:

  • Essential Cookies: These cookies are essential for the Casino 888 platform to function properly. They manage your login session, secure transactions, and remember your basic preferences. They cannot be disabled without affecting platform functionality.
  • Performance Cookies: These cookies help us understand how visitors use Casino 888 — which pages are visited most, time spent on each page, and any technical issues encountered. Data collected is aggregated and anonymised.
  • Functional Cookies: These cookies allow Casino 888 to remember your preferences — such as your selected language and display settings — to deliver a more personalised experience.
  • Analytical Cookies: Casino 888 uses third-party analytics tools to understand overall platform usage patterns. This data is used solely for the purpose of platform improvement.

You can manage or disable cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Casino 888 platform or your user experience. For guidance on managing cookies in a specific browser, please refer to that browser's documentation.

10

Cross-Border Data Transfers

In the course of its operations, Casino 888 may need to transfer members' personal data to systems or service providers operating outside Malaysia — for example, international hosting servers or game provider systems such as Pragmatic Play and Evolution Gaming.

Any such cross-border data transfer is only carried out when:

  • The recipient country or region has data protection laws that Casino 888 is satisfied provide an adequate level of protection
  • Casino 888 has ensured that appropriate data transfer agreements — including standard contractual clauses — are in place with data recipients
  • The transfer is necessary for the performance of your contract as a Casino 888 member

Casino 888 ensures that all international data transfers are carried out with adequate safeguards in line with Malaysia's PDPA requirements, and that members' personal data is not exposed to unreasonable risk.

11

Child & Minor Protection

Casino 888 is a platform intended exclusively for adults aged 18 and above. Casino 888 does not knowingly collect any personal data from children or individuals under the age of 18.

If Casino 888 discovers that personal data has been collected from an individual under the age of 18 without proper age verification, we will take the following steps immediately:

  • Immediate closure of the account in question
  • Voiding all transactions conducted through that account
  • Deleting all personal data collected from that individual from our systems
  • Returning any original deposits to the payment method used

Parents and guardians who suspect that a minor in their care may have registered a Casino 888 account are urged to contact our support team immediately at support@casino888-play.com for prompt action. Casino 888 treats the protection of minors as the highest priority within our responsible gambling policy.

12

Privacy Policy Amendments

Casino 888 reserves the right to amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or platform improvements. Any amendments will take effect once the latest version is published on this page with an updated revision date.

For material amendments — that is, significant changes that affect how we collect, use, or protect your personal data — Casino 888 will notify you through:

  • An in-account notification on Casino 888 when you next log in
  • An email to the address registered to your account, at least 14 days before the amendment takes effect

We encourage you to review this Privacy Policy page periodically to stay informed about how Casino 888 protects your personal data. Continued use of the Casino 888 platform after any amendments to the Privacy Policy take effect will be considered your acceptance of the revised terms, subject to your right to withdraw as described in the Your Rights section.

13

Contact Us — Data Privacy Officer

If you have any questions, concerns, or requests regarding Casino 888's Privacy Policy or the handling of your personal data, you may reach us through the following channels:

  • Privacy Email: support@casino888-play.com — please include "Privacy Inquiry" in your email subject line
  • Live Chat: Available 24 hours a day, 7 days a week via the chat icon on the Casino 888 platform — please state that you wish to discuss a data privacy matter

Casino 888 is committed to responding to all privacy-related enquiries within 5 business days. For more complex requests such as data access or data deletion, processing may take up to 21 business days as provided under Malaysia's PDPA. We do not charge any fee for reasonable privacy requests submitted for the first time by a member.

Frequently Asked Questions — Casino 888 Privacy Policy

Answers to the most frequently asked questions about data privacy and personal information protection at Casino 888.

No. Casino 888 has never sold, rented, or shared member personal data with third parties for marketing or commercial purposes, and never will. Your data is shared only with third parties that are strictly necessary for platform operations — such as payment providers (Touch 'n Go, GrabPay, DuitNow, FPX), game suppliers, and KYC service providers — and all such third parties are bound by strict confidentiality agreements.

You may submit a data deletion request by contacting the Casino 888 support team via live chat or by emailing support@casino888-play.com, stating "Data Deletion Request" in your message. Please include your account number and the reason for your request. Note that Casino 888 is required to retain certain data for specified periods to comply with Malaysian legal requirements — for example, financial transaction records must be kept for 7 years. Data not subject to any legal retention requirement will be deleted within 30 days from the date your request is approved.

No. Casino 888 does not store your full bank card number, CVV, or e-wallet login credentials. All financial transactions — whether via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX — are processed entirely through certified, secure third-party payment gateways. Casino 888 only receives confirmation that a transaction was successful, not your actual financial data. This is one of the key security measures we have in place to protect your financial assets.

Yes, you have the right to request a copy of the personal data held by Casino 888 under the access rights provided by Malaysia's PDPA 2010. Please send your request by email to support@casino888-play.com with the subject line "Data Access Request", along with your Casino 888 account number. We will verify your identity before processing the request as a security measure. Requests will be processed within 21 business days, and the data will be sent in a secure format to the email address registered to your account. No fee is charged for the first request made each year.

In the event of a security incident involving Casino 888 members' personal data, we have a comprehensive incident response plan in place. The first step is to isolate and contain the incident as quickly as possible. Casino 888 will then notify the relevant authorities within the timeframe required by applicable law. Members whose personal data may have been affected will be informed via their registered email address, with details of the incident, the data potentially exposed, possible risks, and the steps members should take to protect themselves. Casino 888 will also provide guidance and support to affected members throughout the resolution process.

Your Data Is Safe at Casino 888 — Register with Confidence

Casino 888 protects your personal information with 256-bit SSL encryption and full compliance with the Malaysia PDPA 2010. Register a free account today and enjoy over 1,000 slots, football betting, badminton, live casino, and much more — with complete peace of mind that your privacy is fully protected.

Touch 'n Go GrabPay FPX DuitNow Boost
Bahasa Melayu