2888 Privacy Policy – Malaysia User Personal Data Protection

1. Introduction

2888 values the privacy of every individual who uses our platform. We understand that your trust depends greatly on how we handle your personal information, and we take this responsibility seriously.

This Privacy Policy is drafted to comply with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA). It explains the types of data we collect, why we need it, how it is used and protected, and the rights you have in relation to that data.

This policy applies to all users of the 2888 platform, including those who use the 2888.sx website, the 2888 mobile app, and any related services we provide.

2. Types of Data We Collect

2888 collects two main categories of data:

Data you provide directly:

• Full name, date of birth, and identification number (for KYC purposes).
• Email address and mobile number for account communications.
• Residential address information for identity verification.
• Payment method details (only the information required to process transactions).
• Identity verification documents such as MyKad, passport, or driving licence.
• Any information you share while interacting with our support team.

Data collected automatically:

• IP address and general location information.
• Your browser type and version, as well as your device's operating system.
• Game session information including time, duration, and game type.
• Account activity logs for security and fraud prevention purposes.
• Cookie data and similar tracking technologies (see section 8).

3. How We Collect Data

Your data is collected through the following means:

• Account registration — information you provide when registering a new account at 2888.
• KYC Verification — documents and information you submit to fulfil identity verification requirements.
• Financial transactions — information shared when a deposit or withdrawal is processed.
• Platform usage — technical and behavioural data collected automatically as you browse and play.
• Support interactions — records of conversations and requests you submit to our support team.
• Third-party sources — in limited contexts, we may receive data from identity verification service providers we engage.

4. Purpose of Data Use

The data we collect is used exclusively for the following purposes:

1. Manage and maintain your platform account safely and efficiently.
2. Process deposit and withdrawal transactions accurately and securely.
3. Conduct the identity verification (KYC) required for regulatory compliance.
4. Prevent fraud, money laundering, and other illegal activities.
5. Provide effective and relevant customer support.
6. Send important account-related communications such as transaction confirmations and security notices.
7. Send promotional information and offers (only if you have opted in to receive them).
8. Improve the platform, its features, and the overall user experience.
9. Comply with legal and regulatory obligations applicable to our operations.

We do not use your data to make automated decisions that significantly affect you without human involvement, except for security and fraud prevention purposes where automated action is required to protect your account.

5. Data Sharing with Third Parties

2888 does not sell your personal data. However, in the course of operating the platform, we share data in the following limited circumstances:

• Payment service providers — information required to process your financial transactions, subject to strict confidentiality agreements.
• Identity verification providers — data required to complete the KYC process in accordance with regulatory requirements.
• Technology service providers — companies that assist us in running the platform's technical operations, subject to data processing agreements compliant with PDPA.
• Regulatory authorities and law enforcement agencies — when required by Malaysian law or a valid court order.

6. Data Security

2888 continuously invests in security infrastructure to protect your personal data. The protective measures we implement include:

• 256-bit SSL encryption for all data communications between the platform and your device.
• Data-at-rest encryption for all databases containing personal information.
• Role-based access control ensuring only authorised staff can access sensitive data.
• Continuous security monitoring and intrusion detection systems.
• Regular security audits conducted by independent third parties and information security specialists.
• A comprehensive incident response procedure to address any data breaches swiftly.

In the event of a data breach that affects your rights, 2888 will notify you and the relevant authorities within the timeframe required by law, and will take all reasonable steps to limit the impact of the incident.

7. Data Retention Period

We retain your personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by law. In general:

• Active account data — retained for the duration your account is active and for an additional period after account closure in accordance with regulatory requirements.
• Financial transaction records — retained for a minimum of 7 years in compliance with Malaysia's accounting and anti-money laundering legal requirements.
• KYC documents — retained for the period stipulated by the relevant regulatory authorities.
• Support communication logs — retained for 2 years after the last interaction.
• Technical data and security logs — retained for 12 months for security and troubleshooting purposes.

8. Cookies and Tracking Technologies

The 2888 platform uses cookies and similar technologies to enhance the user experience, maintain session security, and understand how our platform is used. We use several types of cookies:

• Essential Cookies — Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Preference Cookies — Remembers your preferred settings such as language and interface theme.
• Analytics Cookies — Helps us understand how users interact with the platform for improvement purposes.

You can manage cookie settings through your web browser. Please note that disabling certain cookies may affect platform functionality.

9. Exercising Your Rights

To exercise any of the privacy rights described in the preceding sections, you may contact our data protection team through the channels listed in section 13. We will process your request within 30 days of receipt, and will notify you if additional time is needed in complex cases.

We may need to verify your identity before processing certain requests, to ensure we do not disclose personal data to unauthorised parties.

10. Cross-Border Data Transfers

In the course of global operations, your data may be processed or stored outside Malaysia by certain service providers we engage. In all cases, 2888 ensures that such data transfers are protected by appropriate safeguards, including standard data processing agreements and adequate data protection assessments.

We only work with service providers in countries that offer an equivalent or higher level of data protection, or where appropriate additional safeguards are in place.

11. Protection of Minors

The 2888 platform is exclusively for individuals aged 18 and above. We do not knowingly collect any personal data from persons under the age of 18. Should we discover that a minor's data has been collected inadvertently, we will promptly delete it and close the associated account.

If you believe your child has registered an account on our platform, please contact our support team immediately.

12. Amendments to the Privacy Policy

2888 reserves the right to amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or technological developments. Significant amendments will be communicated to you via an in-platform notice or email at least 14 days before they take effect.

Continued use of the platform after a change notice is posted constitutes acceptance of the revised policy. It is your responsibility to review this page periodically.

13. Contact the Data Protection Officer

For any enquiries, concerns, or requests relating to our Privacy Policy or your personal data, you may reach us via:

• Live chat within the 2888 platform or app (available 24/7) — select the "Privacy & Data" category.
• Official email: [email protected]

We are committed to responding to all privacy enquiries within 3 business days, and to resolving data rights requests within 30 days.