AP88 Privacy Policy – Malaysia Personal Data Protection

AP88 ("we", "the ap88 platform") is fully committed to protecting the privacy of every individual who interacts with our platform. This Privacy Policy applies to all registered members, users browsing the ap88 website without registering, and any party communicating with our team through any channel.

As an online casino platform serving Malaysian players, ap88 understands that trust is the foundation of our relationship with members. That trust extends beyond fair gameplay and financial transaction security — it also encompasses how we handle the personal information you entrust to us during and after the ap88 account registration process.

This Privacy Policy is prepared in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). AP88 is the data controller responsible for all member personal data collected and processed through our platform. Any privacy-related enquiries may be directed to the ap88 support team via email at support@ap88-bangla.com or via our platform's live chat.

AP88 collects several categories of personal data depending on how you interact with our platform. Below is a complete list of the data we may collect:

Personal Identity Data:

• Full name as stated on your Malaysian identity card (MyKad) or passport
• Date of birth and age for eligibility verification purposes (21 years and above)
• Malaysian identification card number or passport number
• Selfies or identification documents submitted during the KYC (Know Your Customer) process

Contact Data:

• Active Malaysian phone number
• Email address registered to your ap88 account
• State of residence in Malaysia (for service personalisation purposes)

Financial Data:

• E-wallet account details (phone number registered with Touch 'n Go, GrabPay, Boost or ShopeePay)
• Bank account details for FPX transactions via Maybank2u or CIMB Clicks
• Records of all deposits, withdrawals and transactions in your ap88 account
• Account balance and bonus history received

Platform Activity Data:

• Game records — titles played, session times, bet amounts and outcomes
• Login history including time, date and IP address
• Device information — device type, operating system, browser version
• Records of communications with the ap88 support team

AP88 collects members' personal data through several different methods, depending on the type of interaction that takes place between you and our platform:

Directly from You:

• During ap88 account registration — you voluntarily provide your name, phone number, email and password to create an account.
• During the KYC process — you submit a copy of your identification document for identity verification as required by regulations.
• During deposits and withdrawals — your e-wallet or bank details are recorded as part of the secure transaction process.
• When contacting support — records of conversations via live chat, email or other communication channels are retained to assist in resolving issues and improving our service.

Automatically During Platform Use:

• Game activity data is collected automatically as part of the ap88 platform's operation.
• Technical information about your device and browser is collected to ensure the platform functions correctly on your device.
• Access logs and IP addresses are recorded for security purposes and to detect suspicious activity.
• Cookies and web tracking technologies are used to enhance the user experience — further details are provided in Section 9.

AP88 processes member personal data only for legitimate, clearly stated purposes. The following are the primary purposes of data processing at ap88, along with the legal basis supporting each:

• Member Account Management: Creating, managing and maintaining your ap88 account — including account security, password recovery and identity verification.
• Financial Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, as well as withdrawals to your bank account or e-wallet.
• Regulatory Compliance: To fulfil legal obligations under Malaysia's PDPA, KYC requirements, anti-money laundering (AML) procedures, and other applicable regulatory requirements.
• Provision of Gaming Services: Enabling you to access and enjoy all ap88 games, including slots, live casino, EPL and Malaysia Super League football betting, badminton, e-sports, and more.
• Fraud Detection and Prevention: Analysing activity patterns to identify and prevent fraud, money laundering, promotional abuse, and other security threats.
• Customer Support: Providing effective assistance when you contact the ap88 support team and resolving any issues or complaints you raise.
• Service Communications: Sending important notifications related to your account, promotional updates (subject to your consent), and information on policy amendments.
• Platform Improvements: Aggregated, non-personally identifiable usage data is analysed to understand how members interact with the ap88 platform and to make relevant improvements.

AP88 does not sell, rent, or trade members' personal data to any third party for commercial purposes under any circumstances. However, in the course of operating our services, there are limited situations where personal data may be shared with certain parties:

Trusted Service Providers:

• Payment platform providers — information required to process your transactions via Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow and FPX is shared with the respective service providers. These providers are subject to their own strict privacy policies and security standards.
• Game software developers — aggregated game statistics that contain no personally identifiable information may be shared with developers such as Pragmatic Play, PG Soft and Evolution Gaming for maintenance and technical audit purposes.
• Cloud and hosting service providers — data is stored on servers operated by certified cloud service providers bound by strict data protection agreements with ap88.

Legal Obligation:

• AP88 may be required to disclose certain data to competent authorities when mandated by Malaysian law, court order, law enforcement investigation or legitimate regulatory procedure.
• In investigations related to money laundering or other illegal activities, ap88 will cooperate fully with the relevant authorities as required by law.

All third parties that receive data from ap88 are subject to confidentiality and data protection agreements, ensuring your data is handled to a standard consistent with ap88's privacy policy.

Protecting ap88 member personal data is a technical and operational priority that we invest in seriously. The following are the security measures we have implemented to safeguard your data:

Technical Security:

• 256-bit SSL Encryption protects all data transmitted between your browser and ap88's servers. HTTPS connections are mandatory across all pages on our platform.
• Stored data encryption — sensitive information such as passwords and financial details is encrypted using modern cryptographic algorithms before being stored in the ap88 database.
• Two-factor authentication (2FA) available to ap88 members who wish to add an extra layer of security to their account login process.
• Continuous security monitoring — ap88 systems are monitored around the clock to detect and respond to any unauthorised access attempts or security anomalies.
• Regular penetration testing conducted by independent security experts to identify and remediate any vulnerabilities in the ap88 system before they can be exploited.

Organisational Security:

• Access to member personal data is restricted to ap88 staff who require it, based on the principle of minimum access rights.
• All ap88 staff who handle personal data undergo data protection training and are bound by strict confidentiality agreements.
• Comprehensive security incident response procedures are in place to ensure any data breach is addressed promptly and members are notified accordingly.

AP88 retains member personal data only for as long as necessary to fulfil the original purpose of collection, or as required under applicable Malaysian law. General data retention guidelines are as follows:

• Active Account Data: For as long as your ap88 account remains active, we retain all data necessary to manage your account and provide services to you.
• Financial & Transaction Records: Minimum 7 years from the transaction date, in accordance with applicable Malaysian financial and accounting legal requirements.
• KYC Verification Data: A minimum of 5 years after account closure, or longer if required under anti-money laundering regulations.
• Security & Access Logs: Up to 2 years for fraud detection and security incident investigation purposes.
• Customer Support Records: Up to 3 years after the last interaction, for reference and service improvement purposes.
• Gaming Activity Data: Up to 5 years for audit, dispute resolution, and regulatory compliance purposes.

Once the applicable retention period has expired and there is no legal requirement mandating continued storage, ap88 will delete or anonymise the relevant data using secure, irreversible procedures. In the case of anonymisation, the processed data can no longer be linked to any individual and is therefore no longer subject to the provisions of this privacy policy.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and ap88's privacy policy, you have the following rights regarding your personal data that we hold:

To exercise any of the above rights, you may contact the ap88 support team via the platform's live chat or by email. AP88 is committed to responding to all privacy-related requests within 30 calendar days from the date the request is received. For complex requests, additional time may be required, and you will be informed accordingly.

Please note that the right to data erasure may be subject to certain limitations where Malaysian law requires ap88 to retain specific data for a prescribed period, particularly financial records and KYC documents.

AP88 uses cookies and similar web tracking technologies to enhance your experience on our platform. Below are the types of cookies we use and their purposes:

• Necessary Cookies (Required): These cookies are required for the core functionality of the ap88 platform — including maintaining your login session, saving language preferences, and ensuring security features operate correctly. They cannot be disabled without affecting platform functionality.
• Functional Cookies: Stores your preferences and settings — such as your usual bet size, favourite game selections, and display settings — to deliver a more personalised experience each time you log in to your ap88 account.
• Analytics Cookies: Collects anonymised usage data to help us understand how members interact with the ap88 platform — including the most frequently visited pages, most popular games, and common exit points. This data is used solely for platform improvement purposes.
• Security Cookies: Helps identify and prevent fraudulent activity by linking your session to relevant security records and detecting unusual behavioural anomalies.

You can manage cookie settings through your web browser's preferences. Major browsers such as Chrome, Safari and Firefox allow you to view, delete or block cookies from specific websites. Please note that disabling certain cookies may affect some functionality on the ap88 platform.

AP88 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or improvements in how we protect member data. Whenever a significant amendment is made, we will notify you via an in-platform notification on ap88 and/or by email to the address registered on your account.

The "Updated" date shown at the top of this page reflects the current version of this policy. We encourage you to review the ap88 Privacy Policy page periodically. Your continued use of the ap88 platform after any amendments take effect constitutes your acceptance of the updated policy.

If you have any questions, concerns, or wish to exercise your privacy rights, please contact us through the following channels:

• Live Chat: Directly within the ap88 platform — response time under 3 minutes, 24 hours a day
• Email: support@ap88-bangla.com — for detailed privacy enquiries
• Response Time: All privacy-related enquiries will be responded to within 30 calendar days