F88 Privacy Policy – Personal Data Protection for Malaysia Members

F88 ("we", "Platform", or "f88") is fully committed to protecting the privacy of all users who access and use our online entertainment platform at https://f88.st and the f88 mobile app. This Privacy Policy explains in detail how we manage your personal information from the moment of registration through the entire duration of your active membership with f88.

This policy is developed in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and international best practices in data protection. We update this policy from time to time to reflect changes in our operational practices or applicable legal requirements.

Your privacy is not merely a legal obligation to us — it is a responsibility we take seriously, because your trust is the foundation of our long-term relationship with f88.

F88 only collects information that is strictly necessary to provide members with a secure, lawful, and high-quality service. The following are the categories of information we collect:

Every piece of information we collect is used for a specific and legitimate purpose. f88 uses your personal data for the following purposes:

• Account management: Creating, verifying and managing your f88 account, including the KYC process required for legal compliance.
• Transaction processing: Processing all deposits, withdrawals and other financial activities in your account securely and accurately.
• Service provision: Ensuring all games and platform features run smoothly and deliver the best possible experience to you.
• Security & fraud prevention: Detecting, investigating and preventing any fraudulent activity, money laundering or security threats against your account.
• Customer support: Providing effective and personalised assistance when you contact our support team.
• Responsible gaming: Monitoring gaming patterns to identify signs of problem gambling and offering appropriate assistance when needed.
• Platform communications: Sending important account-related information, policy updates and relevant promotions (with your consent).
• Platform enhancement: Analysing aggregated usage data to improve the overall f88 platform experience.

F88 does not sell, rent, or disclose members' personal information to third parties for marketing purposes. However, in the course of operating the platform, we may share data with a limited number of third-party categories as follows:

• Approved payment providers: To process deposits and withdrawals, we share the necessary information with payment service providers such as FPX, Touch 'n Go eWallet, and registered local banks. All such providers are bound by strict confidentiality agreements.
• Technical service providers: Companies that assist us with hosting, cybersecurity, analytics, and platform development may have limited access to data strictly required for their tasks.
• Relevant authorities: f88 will disclose information to government authorities or law enforcement bodies when required by Malaysian law or a valid court order.
• Licensed game providers: Game software providers may receive session data required to ensure game integrity and functionality.

F88 continually invests in robust security infrastructure to protect the personal data of all members. The key security measures we implement include:

• Encryption of data in transit: 256-bit SSL/TLS technology secures all communications between your device and f88 servers.
• Encryption of data at rest: Sensitive data such as financial information and personal identification is stored in encrypted format within our databases.
• Two-factor authentication (2FA): Members are encouraged to enable 2FA for an additional layer of security when logging in.
• 24/7 security monitoring: Our threat detection system operates around the clock to identify and respond to any suspicious activity.
• Internal access controls: Only authorized f88 personnel with a legitimate operational need may access members' personal data.
• Periodic security audits: f88 conducts regular penetration testing and security audits through qualified independent third parties.

While we take all reasonable steps to protect your data, no system can guarantee 100% security. In the event of a data breach affecting your personal information, f88 will notify you within the timeframe required by applicable law.

F88 uses cookies and similar tracking technologies to enhance user experience and platform security. The following are the types of cookies we use:

• Session cookies (required): Required to maintain your login session and ensure account security while you use the platform. These cookies cannot be disabled without affecting the core functionality of the platform.
• Preference cookies: Saving your preferences such as language, display settings and game preferences to deliver a more personalised experience.
• Analytics cookies: Helping us understand how members use the platform so we can make meaningful improvements. This data is collected in aggregate and does not identify individuals.
• Security cookies: Used to detect suspicious login attempts and protect your account from unauthorized access.

As an f88 member, you have the following rights regarding the personal data we hold about you, in accordance with Malaysia's PDPA:

To exercise any of the rights above, please contact the f88 data protection team by email at [email protected]. We will respond to your request within 30 business days.

F88 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable Malaysian law. General data retention guidelines are as follows:

• Active account data: Retained for the duration your account remains active and used for platform operations.
• Financial transaction data: Retained for a minimum of 7 years from the transaction date in accordance with Malaysia's financial and tax legal requirements.
• KYC and identity verification data: Retained for a minimum of 5 years after account closure to meet anti-money laundering (AML) compliance requirements.
• Support communication logs: Retained for 3 years for quality control purposes and the resolution of any disputes that may arise.
• Technical data and access logs: Retained for 12 months for security and fraud detection purposes.

Once the designated retention period expires, your personal data will be securely deleted or fully anonymised in accordance with recognised industry standards.

The f88 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process any personal data from individuals under the age of 18.

F88 reserves the right to update this Privacy Policy from time to time to reflect changes in our operational practices, new legal requirements, or new technologies we adopt. When material changes are made, we will:

• Updating the "Last Updated" date shown at the top of this page.
• Sending a notification to your registered email address if the changes materially affect your privacy rights.
• Displaying a clear notice on the f88 platform homepage for a reasonable period before any changes take effect.

We encourage you to review this Privacy Policy periodically. Continued use of the f88 platform after any changes take effect constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns or complaints regarding this Privacy Policy or how f88 handles your personal data, you may contact us through the following channels:

• Privacy email: [email protected]
• General support email: [email protected]
• Live chat: Available 24/7 via the chat icon on the platform after login.

Our data protection team will respond to all privacy-related enquiries within 5 business days. For formal complaints requiring thorough investigation, the full response period is up to 30 business days, in line with Malaysia's PDPA requirements.