Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how 88atm ("the Platform", "we", "us", "our") collects, uses, stores, discloses, and protects personal data provided by or collected about users ("you", "your") of the 88atm website, mobile applications, and all associated online gaming and betting services (collectively, "the Services").

88atm is committed to handling personal data responsibly and in accordance with applicable data protection legislation, including the Personal Data Protection Act 2010 (Malaysia) ("PDPA") and the data protection requirements imposed by the international gaming authority under which 88atm holds its operating licence. By registering an account on or using any part of the 88atm platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

This Policy should be read in conjunction with the 88atm Terms & Conditions, which together govern your relationship with the platform.

2. Data Controller

For the purposes of applicable data protection law, 88atm acts as the data controller in respect of personal data collected through the platform. As data controller, 88atm determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in accordance with applicable law and this Policy.

Queries relating to data protection matters, including requests to exercise your data subject rights, should be directed to the 88atm Data Protection contact via the support team at [email protected]. All data protection queries will be acknowledged within five (5) business days of receipt.

3. Data We Collect

3.1 Registration Data

When you create an 88atm account, we collect the information you provide during the registration process, which may include: full legal name, date of birth, residential address, email address, phone number, and username. This information is required to establish your account and verify your identity in accordance with our Know Your Customer (KYC) obligations.

3.2 Identity Verification Data

To comply with anti-money laundering (AML) regulations and the terms of the 88atm operating licence, we may collect copies of government-issued identity documents (such as a Malaysian national identity card (MyKad) or passport), proof of address documents (such as utility bills or bank statements), and proof of payment method ownership. This data is collected and processed solely for KYC compliance purposes.

3.3 Financial Data

We collect details of your financial transactions on the platform, including deposit amounts, withdrawal requests, payment method identifiers (such as eWallet account references for Touch n Go eWallet and Boost, or bank account details for Maybank, CIMB, and Public Bank transactions), and transaction timestamps. We do not store full payment card numbers, CVV codes, or complete bank account credentials on our systems.

3.4 Usage and Gaming Data

We automatically collect data about your use of the platform, including: bet history, game session data, sports markets accessed, login timestamps, session duration, and in-platform navigation patterns. This data is used to operate the platform, detect fraud, and improve the user experience for Malaysian players.

3.5 Technical Data

We collect technical data from your device and browser when you access the platform, including: IP address, browser type and version, operating system, device type, screen resolution, referring URL, and cookie identifiers. This data is used for platform security, fraud detection, geographic access control, and platform optimisation.

3.6 Communications Data

Where you contact 88atm support via live chat, email, or any other channel, we retain records of those communications for quality assurance, dispute resolution, and regulatory compliance purposes.

4. How We Use Your Data

88atm uses your personal data for the following purposes:

• Account Creation and Management: To register your account, verify your identity, maintain your account profile, and process account closure requests.
• Service Delivery: To provide access to all 88atm gaming and betting products, process bets, settle games, and manage your account balance.
• Payment Processing: To process deposit and withdrawal transactions via your chosen Malaysian payment method and to carry out required AML checks on financial transactions.
• Regulatory Compliance: To fulfil KYC, AML, and responsible gaming obligations required under the 88atm operating licence and applicable law, including the Malaysia PDPA.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, collusion, money laundering, and other prohibited conduct on the platform.
• Responsible Gaming: To monitor gaming patterns and, where necessary, intervene to protect players identified as potentially at risk from problem gambling behaviours.
• Customer Support: To respond to your support queries, process complaints, and resolve disputes relating to your account or bets.
• Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving platform performance, game selection, and the overall experience for Malaysian players.
• Marketing (where consented): To send you promotional communications about 88atm offers and products where you have provided explicit consent. You may withdraw consent at any time by contacting support.

5. Legal Basis for Processing

88atm processes your personal data on the following legal bases:

• Contract Performance: Processing necessary to deliver the Services you have contracted for by registering an account and accepting the Terms & Conditions.
• Legal Obligation: Processing required to comply with applicable law, including KYC, AML, and responsible gaming obligations imposed by the 88atm operating licence.
• Legitimate Interests: Processing carried out in pursuit of 88atm's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your data protection rights.
• Consent: Processing carried out on the basis of your explicit consent, including optional marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Disclosure to Third Parties

88atm does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. We may disclose your personal data to the following categories of recipients where strictly necessary:

• Payment Service Providers: Third-party payment processors facilitating deposits and withdrawals, including operators of Touch n Go eWallet, Boost, and banking partners (Maybank, CIMB, Public Bank), solely for the purpose of processing your financial transactions.
• Identity Verification Providers: Third-party KYC service providers engaged to assist with identity document verification and AML screening.
• Game Content Providers: Third-party gaming studios and platform providers who supply casino, slot, and live dealer games available on 88atm; these providers may receive limited session data required to operate their games.
• Regulatory Authorities: Competent regulatory authorities, law enforcement agencies, and courts where disclosure is required by law or by order of a court or tribunal of competent jurisdiction.
• Professional Advisers: Legal, accounting, or other professional advisers engaged by 88atm in connection with the legitimate operation of the platform, subject to appropriate confidentiality obligations.

All third-party service providers engaged by 88atm are required to process your personal data only in accordance with our instructions and are subject to contractual data protection obligations consistent with applicable law.

7. Cookies & Tracking Technologies

88atm uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small data files stored on your device that enable the platform to recognise your browser, maintain your logged-in session, and collect usage data.

7.1 Types of Cookies Used

• Essential Cookies: Required for the platform to function correctly, including maintaining your login session and remembering your language preference. These cookies cannot be disabled without significantly impairing your ability to use the Services.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the platform for the purpose of identifying performance issues and improving the user experience.
• Security Cookies: Used to detect and prevent fraudulent activity, including unusual login patterns and account takeover attempts.

You may configure your browser to refuse or delete cookies. Note that disabling essential cookies will impair platform functionality. 88atm does not use cookies to serve third-party advertising.

8. Data Retention

88atm retains your personal data for the period necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods:

• Account and KYC data: Retained for a minimum of five (5) years from the date of account closure, as required by applicable AML legislation and gaming authority regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Bet and gaming history: Retained for a minimum of three (3) years from the date of the relevant gaming activity.
• Support communications: Retained for a period of two (2) years from the date of the communication, or longer where required for ongoing dispute resolution.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with 88atm's data disposal procedures.

9. International Data Transfers

As an internationally licensed online gaming operator, 88atm may transfer your personal data to servers and service providers located outside of Malaysia where operationally necessary. Any such transfers are carried out subject to appropriate safeguards designed to protect your personal data to a standard equivalent to that required under the Malaysia PDPA, including contractual data protection obligations with the relevant recipient.

By using the 88atm platform, you consent to the transfer of your personal data outside Malaysia for the purposes described in this Policy, subject to the safeguards described above.

10. Your Rights

Subject to applicable law and certain exceptions, you have the following rights in respect of your personal data held by 88atm:

• Right of Access: You may request a copy of the personal data 88atm holds about you and information about how it is being used.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer required for the purposes for which it was collected, subject to applicable legal retention obligations that may prevent immediate deletion.
• Right to Restrict Processing: You may request that 88atm restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data.
• Right to Object: You may object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming monitoring purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact the 88atm support team via live chat or at [email protected]. We will respond to verified requests within thirty (30) calendar days.

11. Children's Privacy

The 88atm platform is strictly for individuals aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. Where 88atm becomes aware that personal data has been collected from a person under the required minimum age, the relevant account will be immediately closed, all balances forfeited, and the personal data deleted in accordance with our data disposal procedures.

If you believe that an underage person has registered an account on the platform, please contact our support team immediately via live chat so that appropriate action can be taken promptly.

12. Security Measures

88atm implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction, including:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 88atm platform.
• Encrypted storage of passwords and sensitive credentials — plaintext passwords are never stored in 88atm systems.
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis.
• Regular security audits and penetration testing of platform infrastructure.
• Two-factor authentication (2FA) available to all registered account holders as an additional login security layer.
• Automated fraud detection systems monitoring for unusual account activity patterns on a continuous basis.

Notwithstanding the above, no method of electronic transmission or storage is 100% secure. 88atm cannot guarantee absolute security of your data and encourages you to use a strong, unique password for your account and to enable 2FA.

13. Changes to This Policy

88atm reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. The revised Policy will be published on this page with an updated effective date. Where changes are material, 88atm will endeavour to notify registered account holders via email or in-platform notification prior to the revised Policy taking effect.

Your continued use of the 88atm platform following publication of a revised Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you should cease using the platform and may request account closure by contacting support.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to 88atm's handling of your personal data, please contact us through the following channel:

• Live Chat: Available 24 hours a day, 7 days a week via the in-platform chat function.
• Email: [email protected] (plain text — not a clickable link)

All data protection queries will be handled by staff with appropriate data protection responsibilities and will be acknowledged within five (5) business days. We aim to resolve all privacy-related requests fully within thirty (30) calendar days of receipt of a verified request.