Privacy Policy Alpha88 – Personal Data Protection for Malaysian Players

Alpha88 only collects personal data that is strictly necessary to provide safe, fair, and regulatory-compliant online sports betting and casino entertainment services. We do not collect unnecessary data, and we do not collect data from anyone under 18 years of age.

The categories of data we collect include:

• Identification Data: Full name, date of birth, identification card number (MyKad) or passport number, nationality, and a photo of your official identification document for KYC (Know Your Customer) verification purposes.
• Contact Data: Email address, mobile number, and residential address. This information is used for account communications, transaction verification, and security notifications.
• Financial Data: Details of the payment methods you use — including e-wallet account numbers (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay), bank account numbers for DuitNow and FPX (Maybank2u, CIMB Clicks), and your deposit and withdrawal transaction history in MYR (RM). Alpha88 does not store your credit or debit card details directly on our servers.
• Platform Usage Data: Betting history, games played, amounts wagered, bet outcomes, session times, game preferences, and in-account activity.
• Technical Data: IP address, device type, operating system, web browser, cookie data, and device identifiers. This data is used for account security, fraud detection, and platform optimisation.
• Communication Data: Records of your inquiries and communications with the Alpha88 customer support team via Live Chat, email, or other provided channels.

Alpha88 only uses your personal data for legitimate purposes directly related to the provision of our services. We do not use your data for unrelated purposes without your prior consent.

• Account Management: Your data is used to create and manage your Alpha88 account, process registrations, verify your identity, and keep your account secure at all times.
• Transaction Processing: Alpha88 uses your financial data to process deposits and withdrawals in Malaysian Ringgit (RM) via your chosen Malaysian payment method — whether Touch 'n Go eWallet, GrabPay, DuitNow, FPX, or any other supported method.
• Regulatory Compliance: Alpha88 is required by law and regulatory obligations to retain certain records relating to betting activity, identity verification, and financial transactions. This includes compliance with AML (Anti-Money Laundering) and KYC procedures.
• Security & Fraud Prevention: Technical and usage data are used to detect suspicious activity, prevent fraud, identify duplicate accounts, and protect the integrity of the Alpha88 platform for all members.
• Service Improvements: Alpha88 analyses usage patterns on an aggregate (not individual) basis to understand how players interact with our platform, for the purpose of improving the interface, adding new features, and optimising the user experience.
• Service Communications: We send you emails and notifications regarding important account activity — such as deposit confirmations, withdrawal requests, password changes, and security alerts. These are necessary service communications, not marketing.
• Marketing Communications: If you have opted in to receive marketing communications, Alpha88 may send you information about relevant promotions, bonuses, and the latest offers. You can unsubscribe from marketing communications at any time through your account settings.

Alpha88 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. This is a core principle we have never compromised on.

Your personal data may be shared with a limited number of third parties in the following circumstances:

• Payment Service Providers: Alpha88 shares the necessary financial data with Malaysian e-wallet and online banking service providers that you use — including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX providers — solely for the purpose of processing your transactions. These providers are bound by strict confidentiality agreements.
• Platform Technology Providers: Alpha88 works with third-party technology providers for hosting infrastructure, cybersecurity, identity verification, and casino functions. All providers are selected based on high data security standards and are bound by data processing agreements that strictly limit how your data may be used.
• Regulatory Bodies and Law Enforcement: Alpha88 may be required to disclose certain data to regulatory authorities, law enforcement agencies, or courts where a valid legal obligation exists to do so. Alpha88 will not disclose data beyond what is required by law.
• Audit & Compliance Providers: Independent auditors who verify Alpha88's RNG systems and game fairness may have limited access to certain data within the scope of their audit work. All auditing parties are bound by strict confidentiality agreements.

In all data-sharing scenarios described above, Alpha88 ensures that receiving parties operate under data protection standards equivalent to or higher than our own. We will not transfer your data to any party that cannot guarantee adequate protection.

The security of your personal data is Alpha88's top technical priority. We continually invest in the latest cybersecurity infrastructure to ensure your data remains protected against increasingly sophisticated threats.

• 256-bit SSL Encryption: All communications between your device and Alpha88's servers are encrypted using TLS with 256-bit encryption — the same standard used by major Malaysian financial institutions and banks. This means data in transit — including login credentials and financial details — cannot be read by any third party, even if intercepted.
• Stored Data Encryption: Sensitive personal data stored in Alpha88's databases — including identification and financial information — is encrypted at rest using internationally recognised encryption standards.
• Strict Access Controls: Access to player personal data within Alpha88's systems is strictly limited to staff with a legitimate business need to access it. All access is logged and regularly audited.
• 24/7 Security Monitoring: Alpha88's security systems monitor platform activity around the clock, 24 hours a day, to detect intrusion attempts, suspicious account activity, and other cybersecurity threats.
• Regular Penetration Testing: Alpha88 conducts regular penetration testing and vulnerability assessments through independent cybersecurity specialists to identify and address any weaknesses before they can be exploited.
• Incident Response Procedures: Alpha88 has detailed security incident response procedures in place. In the event of a data breach affecting your personal data, Alpha88 will notify you and the relevant authorities within the timeframe required by regulatory obligations.

Alpha88 uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session security, and understand how our platform is used. This section explains what cookies we use and how you can manage them.

Types of Cookies We Use:

• Required Session Cookies: These cookies are strictly necessary for the Alpha88 platform to function properly. They store your login session information, keep you signed in during your betting session, and protect your account from unauthorised access. These cookies do not store any personally identifiable information and are automatically deleted when you close your browser.
• Preference Cookies: These cookies store your preferences and settings within the Alpha88 platform — such as your preferred language, display settings, and game preferences — so you don't have to reconfigure them each time you log in.
• Analytics Cookies: Alpha88 uses analytics cookies to understand how players interact with our platform in aggregate — which pages are visited most often, which features are used the most, and where players encounter difficulties. This data is used for platform improvements and is not linked to any individual player's identity.
• Security Cookies: These cookies help Alpha88 identify and prevent fraudulent activity, detect duplicate accounts, and stop platform abuse. They form part of our ongoing security system.

Cookie Controls: You can control and manage cookies through your browser settings. However, disabling essential cookies may affect the functionality and security of the Alpha88 platform. Alpha88 recommends that you keep essential cookies enabled at all times for a smooth and secure betting experience.

As an Alpha88 player whose data we hold, you have certain rights regarding your personal data. Alpha88 respects these rights and provides a clear process for you to exercise them.

To exercise any of the rights listed above, please contact the Alpha88 customer support team at support@alpha88.cash or via Live Chat on the platform. We will acknowledge receipt of your request within two business days and endeavour to resolve it within 30 days. If your request is complex or involves multiple items, we reserve the right to extend this period to 60 days — with prior notice to you.

Alpha88 does not retain your personal data for longer than is necessary for the purposes set out in this Privacy Policy or to fulfil our legal obligations. Retention periods vary depending on the type of data and the applicable requirements.

• Active Account Data: While your account is active, Alpha88 retains all data associated with your account to ensure smooth service delivery, account security, and regulatory compliance.
• After Account Closure: When your account is closed — whether at your request or by Alpha88 — certain data will be retained for a period determined by applicable legal and regulatory requirements. This typically includes financial transaction records and identification data that must be kept for AML and audit purposes.
• Log & Security Data: Activity logs and security data are typically retained for 12 months for security investigation and fraud detection purposes.
• Support Communication Data: Customer support communication records are retained for 24 months for quality control purposes and to assist in resolving any disputes that may arise.
• Marketing Data: If you have unsubscribed from marketing communications, Alpha88 will retain a record of your opt-out preference to ensure you do not receive marketing communications in the future.

Once the applicable retention period has ended, Alpha88 will securely delete or anonymise your data so that it can no longer be linked to your identity.

Alpha88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new regulatory requirements, or changes to the services we offer. We are committed to notifying you of any significant changes.

• Change Notifications: If we make significant changes to how we process your personal data, Alpha88 will notify you by email to the address registered on your account and/or via a prominent notification on the platform.
• Amendment Date: The effective date of the current version of this Privacy Policy is displayed at the top of this document. You are responsible for reviewing this Privacy Policy periodically to stay informed of our current privacy practices.
• Continued Use: Your continued use of the Alpha88 platform after any changes to this Privacy Policy take effect constitutes your acceptance of the updated terms. If you do not agree with any of the changes, you have the right to close your account and request the deletion of your data accordingly.

Alpha88 takes every privacy-related query, request, and concern seriously. If you have any questions about this Privacy Policy or how we handle your personal data, we encourage you to reach out to us directly.

• Privacy Email: Send your data privacy enquiries to support@alpha88.cash with the subject line "Data Privacy Enquiry". Our team responsible for data protection will address your enquiry within two business days.
• Live Chat: For general privacy enquiries, Alpha88 customer support is available 24 hours a day via Live Chat on the platform. For formal data rights requests, email is the preferred channel to ensure a complete written record is maintained.
• Formal Requests: When exercising your personal data rights — such as access, correction, or deletion requests — please include your account number, the type of request you are making, and any relevant details. This helps us process your request accurately and efficiently.

Alpha88 believes that open and transparent communication about data privacy is the foundation of trust between the platform and its players. We welcome your feedback and are committed to addressing every concern seriously and promptly.