Privacy Policy for plus88

plus88 ("plus88", "we", "us", "our") operates the online casino and sports betting platform accessible at https://plus88.cam (the "Platform"). We understand that the privacy and security of your personal data is a serious matter, and we are committed to handling it responsibly and transparently.

This Privacy Policy ("Policy") describes how plus88 collects, processes, stores, shares, and protects personal data provided by or generated by Members ("you", "your") when accessing or using the Platform. This Policy applies to all registered Members, visitors to the Platform, and individuals who contact us through any support channel.

By registering an Account on plus88 or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you should discontinue use of the Platform.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including but not limited to: name, identification number, contact details, financial information, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means plus88, being the entity that determines the purposes and means of Processing Personal Data collected through the Platform.
• "Data Processor" means a third party that Processes Personal Data on behalf of plus88, such as a payment gateway provider or analytics vendor, subject to binding data processing agreements.
• "Member" means any individual who has registered an Account on the Platform.
• "Account" means the personal profile registered by a Member on the Platform, through which gaming, wagering, and financial transactions are conducted.
• "Cookies" means small text files placed on a device by a website, used to store session information, preferences, and anonymised analytics data.
• "KYC" means Know Your Customer — the regulatory identity verification process used to confirm a Member's identity and age.

plus88 collects Personal Data through multiple interactions with the Platform. The categories of data collected are set out in the table below:

plus88 does not intentionally collect or process sensitive personal data (such as health information, religious beliefs, or political opinions) unless explicitly required by a regulatory obligation. We also do not collect financial credentials such as full bank account numbers, full card numbers, or banking passwords — these are processed exclusively by our licensed payment service providers and never transmitted to plus88 systems.

plus88 uses your Personal Data for the following purposes:

4.1 Account Management

Identity and Contact Data are used to create, verify, and manage your Member Account. This includes registering your profile, authenticating logins, enabling two-factor authentication, and communicating essential account-related notifications.

4.2 Transaction Processing

Financial Data is used to process your deposits and withdrawals via Malaysian payment channels including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, and cryptocurrency wallets (BTC/USDT). This data is necessary to complete financial transactions and maintain accurate MYR balance records.

4.3 Regulatory Compliance (KYC / AML)

Identity and Verification Document data are processed to fulfil our Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations. This includes verifying that Members are at least 21 years of age, confirming identity before processing withdrawals, and detecting or preventing fraudulent or suspicious financial activity.

4.4 Platform Security & Fraud Prevention

Technical and Account Activity Data are used to detect and prevent unauthorised access, multi-accounting, bonus abuse, collusion, and other forms of platform misuse. Security monitoring is an ongoing operational activity.

4.5 Service Improvement & Analytics

Anonymised and aggregated Technical Data and Account Activity Data are used to analyse platform performance, identify popular games and features, and improve the overall Member experience. These analytics are conducted in aggregate form and do not identify individual users.

4.6 Marketing Communications (Opt-in Only)

Where you have provided explicit consent, Contact Data may be used to send you promotional communications about plus88 offers, bonus updates, VIP programme announcements, and sports betting news. You may withdraw consent and unsubscribe at any time.

4.7 Customer Support

Communications Data is used to manage support enquiries, resolve disputes, and improve our service quality. Live chat and email interactions are recorded and retained in accordance with our Data Retention policy set out in Section 8.

plus88 relies on the following legal bases for Processing your Personal Data:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms and Conditions accepted by you upon registration — including Account management, transaction processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable regulatory obligations, including KYC identity verification, AML transaction monitoring, and age verification requirements.
• Legitimate Interests: Processing conducted for the legitimate interests of plus88, including fraud detection, platform security, service improvement, and dispute resolution, where such interests are not overridden by your data protection rights.
• Consent: Processing conducted on the basis of your explicit, freely given, and informed consent — specifically for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior Processing.

plus88 does not sell, rent, or trade your Personal Data to third-party marketers or data brokers. We may, however, share your data with the following categories of recipients in the circumstances described:

6.1 Payment Service Providers

To process your deposits and withdrawals, plus88 shares necessary Financial and Identity Data with licensed payment processors and gateways (including those facilitating DuitNow, FPX, Touch 'n Go eWallet, and bank transfer services). These providers are bound by contractual data processing obligations and are not permitted to use your data for their own marketing purposes.

6.2 Identity Verification Providers

For KYC compliance, Identity Data and Verification Documents may be shared with third-party identity verification service providers. These providers operate under binding data processing agreements and process data solely for verification purposes.

6.3 Technology & Infrastructure Providers

plus88 engages cloud hosting providers, database administrators, and cybersecurity vendors to operate the Platform. These entities may process Technical Data as Data Processors acting under our instruction, subject to appropriate contractual protections.

6.4 Regulatory Authorities & Law Enforcement

plus88 may disclose Personal Data to government authorities, regulators, or law enforcement agencies where required to do so by applicable law, court order, or legitimate regulatory request. We will notify you of such disclosure where legally permitted to do so.

6.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of plus88's business assets, Personal Data may be transferred to the acquiring entity as part of that transaction. Affected Members will be notified of any change in Data Controller prior to the transfer taking effect.

plus88 uses cookies and similar client-side technologies on the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for core Platform functionality, including user session authentication and security tokens. These cookies cannot be disabled without impairing Platform operation.
• Performance & Analytics Cookies: Used to collect anonymised data about how Members navigate and use the Platform. This helps us identify performance bottlenecks and improve the user experience. Data collected is aggregated and does not identify individual users.
• Functional Cookies: Used to remember your preferences, language settings, and regional configurations (e.g., MYR currency display).
• Security Cookies: Used to detect and prevent fraudulent login attempts, bot activity, and account takeover attempts.

plus88 does not deploy third-party advertising cookies or retargeting pixels on the Platform. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies may affect your ability to use core Platform features including account login and payment processing.

plus88 retains Personal Data for no longer than is necessary for the purposes for which it was collected, subject to any legal or regulatory retention obligations. The following indicative retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Where data is anonymised, the anonymised dataset may be retained indefinitely for statistical or analytical purposes as it no longer constitutes Personal Data.

plus88 implements technical and organisational security measures designed to protect your Personal Data from unauthorised access, accidental loss, destruction, and disclosure. Our security measures include:

• Encryption in Transit: All data transmitted between your device and the plus88 Platform is protected by TLS 1.3 encryption with 256-bit AES ciphers. The Platform enforces HTTPS across all pages.
• Encryption at Rest: Sensitive Personal Data stored in our databases is encrypted at rest using AES-256 encryption.
• Access Controls: Access to Personal Data is restricted to authorised personnel on a strict need-to-know basis. Role-based access control and audit logging are applied across all internal systems.
• Two-Factor Authentication: Members are encouraged to enable 2FA on their Accounts. Our administrative systems also enforce 2FA for all staff access to Member data.
• Penetration Testing: plus88 conducts periodic security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: We maintain a documented data breach incident response procedure. In the event of a material data breach affecting your Personal Data, we will notify affected Members and relevant authorities as required by applicable law.

plus88's primary infrastructure and data storage are maintained in facilities with appropriate security certifications. In the course of operating the Platform, your Personal Data may be transferred to and processed in countries outside Malaysia. This may occur when working with cloud infrastructure providers or licensed payment processors with operations in multiple jurisdictions.

Where Personal Data is transferred internationally, plus88 ensures that appropriate safeguards are in place, such as binding data processing agreements incorporating standard contractual clauses or equivalent data protection mechanisms, to ensure your data continues to receive a standard of protection consistent with this Policy.

As a Member of plus88, you hold the following rights with respect to your Personal Data. To exercise any of these rights, please contact our support team using the details in Section 14:

• Right of Access: You have the right to request a copy of the Personal Data plus88 holds about you, including an explanation of how it is being used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete Personal Data. Basic profile information can be updated directly within your Account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where Processing is unlawful. Please note that this right is subject to our legal and regulatory retention obligations — some data must be retained regardless of your request.
• Right to Restriction of Processing: You have the right to request that we restrict the Processing of your Personal Data in certain circumstances, such as while the accuracy of the data is being contested.
• Right to Data Portability: Where Processing is based on consent or contractual necessity and carried out by automated means, you may request that your Personal Data be provided in a structured, machine-readable format for transfer to another controller.
• Right to Object: You may object to Processing carried out on the basis of legitimate interests, including profiling. You may also withdraw consent to marketing communications at any time without affecting the lawfulness of prior Processing.
• Right to Withdraw Consent: Where Processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect any Processing lawfully conducted prior to withdrawal.

plus88 will respond to verified data rights requests within thirty (30) days of receipt. Requests will be fulfilled at no charge unless they are manifestly unfounded or excessive.

plus88 strictly prohibits access to or use of the Platform by any individual under the age of 21. We do not knowingly collect, process, or retain Personal Data from individuals under 21 years of age.

If we become aware that Personal Data has been collected from an individual under 21, we will immediately suspend the relevant Account, delete all associated Personal Data (subject to any regulatory retention requirements), and report the matter to relevant authorities where required by law.

If you believe that a minor has registered an Account on plus88, please contact our support team immediately at [email protected] with relevant details so we can investigate and take prompt action.

plus88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform functionality. Where changes are material, we will notify Members by publishing a notice on the Platform or by direct communication to the email address associated with your Account.

The "Effective Date" at the top of this Policy indicates when it was last updated. Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy. We encourage you to review this page periodically to remain informed about how we protect your data.

If you have any questions, concerns, or requests regarding this Privacy Policy, or wish to exercise any of your data rights, please contact the plus88 Data Protection team through the following channels:

When submitting a data rights request, please provide your registered email address and, where applicable, your Member ID to allow us to verify your identity and process your request efficiently.

For related legal matters, you may also refer to our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference into the overall agreement between you and plus88.