888spo Privacy Policy – Player Personal Data Protection

1 Introduction

888spo is fully committed to protecting the privacy and personal data of every player who trusts our platform. As a trusted online casino platform in Malaysia, we understand that your trust is built not only through a quality gaming experience, but also through the responsible and transparent way we handle your personal information.

This Privacy Policy has been drafted to comply with international data protection standards and to ensure every 888spo player fully understands their rights regarding personal data. We believe that transparency is the foundation of a healthy relationship between a platform and its users.

This document covers all aspects of personal data processing at 888spo — from the types of data we collect and how we use it, to the parties we may share it with, as well as your rights as a data subject and how to exercise them.

2 Data We Collect

888spo collects various categories of personal information for legitimate and necessary purposes to effectively operate platform services. Below is a detailed description of each category of data we collect:

888spo does not collect sensitive personal data such as health information, religious beliefs, or political views unless a specific legal requirement mandates it. We only collect data that is genuinely necessary for the stated purpose — a principle we call "data minimisation".

3 How We Use Your Data

Every piece of data collected by 888spo is used for defined and legitimate purposes. We do not use your data for any other purpose without notifying you or obtaining your consent. The use of your personal data covers the following aspects:

• Account management: Creating, verifying, and maintaining your player account, including registration processing, secure login, and account activity monitoring.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions securely and accurately using integrated payment gateways.
• Identity verification (KYC): Meeting legal compliance requirements regarding customer identity verification and anti-money laundering (AML).
• Service provision: Providing access to all games, promotions, and platform features you are eligible for based on your account status.
• Security and fraud prevention: Identifying and preventing fraudulent activity, multi-account usage, and any security threats to the platform or other players.
• Service communications: Sending account-related notifications, platform updates, security alerts, and promotional information you have opted in to receive.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and offering appropriate assistance or self-management tools.
• Platform improvement: Analyzing usage data in aggregate and anonymized form to understand player needs and continuously improve the gaming experience at 888spo.

888spo strictly applies the principle of purpose limitation — data collected for one purpose will not be reused for an unrelated purpose without clear notice to you.

4 Legal Basis for Data Processing

All personal data processing carried out by 888spo rests on a solid legal basis. Depending on the type of data and the purpose of processing, we rely on one or more of the following legal bases:

• Contractual compliance: Processing required to fulfill the agreement between 888spo and you as a player — including account management and payment processing — is carried out on the basis of contractual necessity.
• Legal obligation: 888spo is legally required to conduct KYC checks, meet AML requirements, and retain certain financial records. Processing for these purposes is mandatory.
• Legitimate interest: Certain processing activities — such as fraud prevention, network security, and service improvement — are carried out on the basis of 888spo's legitimate interests, provided those interests do not override your fundamental rights.
• Consent: For optional marketing communications and the use of non-essential cookies, 888spo relies on your explicit consent. You may withdraw this consent at any time.

5 Data Sharing With Third Parties

888spo does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, in the course of normal platform operations, there are certain situations where data may be shared with trusted parties:

• Payment service providers: Payment gateways such as DuitNow, FPX, and e-wallet providers such as Touch 'n Go and Boost receive the information required to process your transactions. All such providers are subject to strict data protection agreements.
• Game providers: Gaming software providers that supply content for the 888spo platform may receive session data required to operate games correctly. No personally identifiable information beyond what is strictly necessary will be shared.
• Regulatory authority: 888spo may be required to disclose data to legal or regulatory authorities upon valid official requests in accordance with applicable law.
• Analytics and security services: Analytics tools and fraud detection systems used by 888spo may process technical and behavioural usage data within a secure and controlled environment.
• Professional advisors: Lawyers, accountants, and consultants subject to strict professional confidentiality obligations may receive data required to provide advice to 888spo.

Every third party that receives personal data of 888spo players is bound by data processing agreements that impose data protection obligations equivalent to 888spo's own standards. 888spo remains accountable for the protection of your data even when it is processed by third parties on our behalf.

6 Cookies and Tracking Technologies

888spo uses cookies and similar tracking technologies to enhance user experience, ensure platform security, and understand how players interact with our website. The following are the categories of cookies we use:

• Essential cookies: These cookies are required for core platform functions such as login authentication, session management, and account security. Essential cookies cannot be disabled as they are critical to platform operation.
• Performance cookies: These cookies collect information about how players use the 888spo platform — such as pages frequently visited and time spent — to help us improve the user experience. All data is collected anonymously.
• Functional cookies: These cookies allow the platform to remember your preferences such as language, display settings, and login details to deliver a more personalized experience.
• Analytics cookies: 888spo uses analytics tools to understand overall platform usage patterns for service improvement and responsible gaming strategy purposes.

You can manage or disable non-essential cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality of some platform features. To change your cookie preferences, please review your browser settings.

7 Data Security

888spo continuously invests in high-grade security infrastructure to ensure that players' personal and financial data is always protected against both external and internal threats. The key security measures we employ include:

• End-to-end encryption: All data transmitted between your device and 888spo servers is protected by TLS 1.3 protocol and AES-256 encryption, ensuring no third party can intercept or read your data in transit.
• Layered access controls: Access to player data within 888spo's internal systems is restricted according to the principle of least privilege — each staff member can only access the data required for their specific role.
• Continuous monitoring: 888spo's security systems operate 24 hours a day to detect and respond to any suspicious activity or unauthorised access attempts in real time.
• Regular security testing: 888spo conducts regular penetration testing and vulnerability assessments by independent security experts to identify and address potential risks before they can be exploited.
• Two-factor authentication (2FA): The 888spo system supports and encourages the use of two-factor authentication for all player accounts, adding an extra layer of security beyond a standard password.
• Secure data backup: Player data is regularly backed up to a secure, separate location to ensure rapid recovery in the event of a system failure or unexpected incident.

8 Your Rights as a Data Subject

As an 888spo player, you have important rights regarding your personal data, which we fully respect. These rights can be exercised by contacting the 888spo privacy team through the channels specified in section 11.

888spo will respond to all data rights requests within 30 days of receipt. For complex cases, this period may be extended up to 60 days with prior notice to you. Please note that certain rights may be subject to specific exemptions based on legal obligations binding on 888spo.

9 Data Retention

888spo does not retain personal data longer than necessary for the purpose for which it was collected. Data retention periods are determined based on the following factors:

• Active account: For as long as your account is active on 888spo, we retain all data necessary to deliver our services to you effectively and securely.
• Legal requirement: Financial records and KYC documents must be retained for the minimum period required by applicable AML regulations and tax laws, typically between 5 and 7 years.
• After account closure: Upon account closure, 888spo will retain data for the period prescribed by law, then delete or anonymise data that is no longer required.
• Customer support data: Support interaction records are retained for 2 years after the last interaction for quality control purposes and to resolve any disputes that may arise thereafter.

Once the retention period expires, data will be securely deleted using methods that ensure it cannot be recovered or accessed again. We conduct regular data retention reviews to ensure data that is no longer needed is deleted in a timely manner.

10 Changes to the Privacy Policy

888spo reserves the right to update or amend this Privacy Policy from time to time to reflect changes in data processing practices, legal requirements, or platform improvements. We are committed to informing you of any material changes.

• Any material changes to this Privacy Policy will be communicated to registered players via their registered email and in-platform notifications at least 14 days before the changes take effect.
• The "Last Updated" date shown at the top of this document will always reflect the current version of the Privacy Policy.
• Continued use of the 888spo platform after the effective date of any changes constitutes acceptance of the latest version of the Privacy Policy.
• If you disagree with any changes, you have the right to contact us to discuss your options or close your account.

11 Contact the 888spo Privacy Team

For any enquiries, concerns, or requests relating to this Privacy Policy and the handling of your personal data, the 888spo privacy team is ready to assist you:

• Live chat: Reach us directly via the live chat feature available on the 888spo platform — the fastest way to get an immediate response.
• Email: Submit your written request to [email protected]. Include your account name and full details of your request for faster processing.
• Response time: We are committed to responding to all privacy inquiries within 3 business days and resolving formal data requests within 30 days.