Privacy Policy Alpha88 – Personal Data Protection for Malaysian Members

This Privacy Policy document describes in detail how Alpha88 ("we", "platform") collects, stores, uses, protects, and discloses your personal information ("member", "you") when you use the services provided through the Alpha88 website and mobile application. This policy is formulated in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection.

Alpha88 regards your privacy as the foundation of trust in our relationship. We understand that you are entrusting us with your personal information — including financial details and betting activity records — and we never take that trust lightly. Every decision we make regarding data management begins with one question: "Is this in the best interest of our members?"

By registering an account or using any Alpha88 service, you confirm that you have read and understood this Privacy Policy and agree to the collection and use of your information as described herein. If you do not agree with any part of this policy, please discontinue use of the Alpha88 platform and contact our support team for further information.

Alpha88 collects your personal data only when it is necessary to provide the services you have requested, ensure platform security, or fulfil applicable legal obligations. Below are the categories of data we collect and the purpose for each:

Alpha88 does not collect any unnecessary sensitive data such as medical information, religious beliefs, or political views. The financial data we retain is limited to what is required to process transactions and comply with anti-money laundering (AML) obligations — we do not store your full credit card number or e-wallet password in our systems.

Every piece of data we collect has a clear and legitimate purpose. Alpha88 uses your personal data for the following purposes, and nothing beyond that:

• Account setup and management: To create, verify, and manage your member account, including the identity verification (KYC) required prior to processing your first withdrawal or for withdrawals that exceed certain limits.
• Financial transaction processing: To process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as to credit winnings and process withdrawals to your account in MYR.
• Platform security and fraud prevention: To detect and prevent fraudulent activity, multi-account abuse, money laundering, and other security threats that could compromise other members and the integrity of the platform.
• Customer support: To provide effective assistance when you contact the Alpha88 support team via live chat, WhatsApp, or email, including verifying your identity before discussing any sensitive account details.
• Service communications: To send important account-related notifications — such as deposit confirmations, successful withdrawal alerts, security warnings, and policy updates — via email or SMS to your registered Malaysian phone number.
• Legal and regulatory compliance: To fulfil Alpha88's legal obligations under Malaysia's PDPA, anti-money laundering regulations, and lawful requests from relevant Malaysian authorities when required by law.
• Responsible gambling: To monitor betting activity patterns that may indicate signs of problem gambling and to enforce the betting limits you have set yourself in your account settings.

Alpha88 does not use your data to make automated decisions that significantly affect you without human oversight. Every major decision — such as account suspension or withdrawal rejection — is reviewed by our operations team before being carried out.

Alpha88 does not sell, rent, or trade your personal data to any third party for marketing purposes or for any purpose unrelated to the provision of our services to you. Your data may be shared in the following limited circumstances:

• Payment processors: The transaction information required is shared with payment providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX processors to facilitate your deposits and withdrawals. This sharing is limited strictly to the minimum information needed to complete the transaction.
• Game software providers: Usernames and member IDs (not full personal details) are shared with game providers such as Evolution Gaming and Pragmatic Play to enable access to live casino, baccarat, blackjack, and slots games on the Alpha88 platform.
• Malaysian authorities: Alpha88 will disclose required data to the relevant Malaysian authorities — including the police, Bank Negara Malaysia, or the Attorney General's Chambers — when mandated by a valid court order, legal summons, or other applicable legal obligations in Malaysia.
• Technical service providers: Minimal technical data is shared with cloud infrastructure providers and cybersecurity service providers that assist Alpha88 in operating and securing the platform. All such providers are bound by strict data protection agreements.

Alpha88 continually invests in security infrastructure to protect your personal data from unauthorised access, alteration, disclosure, or destruction. The key security measures we apply include:

• 256-bit SSL encryption: All communications between your device and Alpha88's servers are encrypted using the latest TLS protocol with 256-bit key strength. This means that even if someone manages to intercept your data packets, they will be unreadable without the correct decryption key.
• Secure password storage: Alpha88 account passwords are never stored in plain text. We use a high-strength one-way hashing algorithm with a unique "salt" for each password, ensuring that no one — including Alpha88 staff — can ever read your original password.
• Two-factor authentication (2FA): Alpha88 encourages all members to enable two-factor authentication on their accounts. Once activated, logging in from a new device will require additional verification via SMS to your registered Malaysian phone number.
• Continuous security monitoring: Alpha88's security systems are actively monitored around the clock by our IT security team to detect any suspicious activity, intrusion attempts, or unusual access patterns before they can cause harm.
• Data segregation: Sensitive personal data such as MyKad numbers and financial details are stored separately from general platform activity data, with distinct access control layers applied to each category.
• Regular security audits: Alpha88 conducts regular internal security audits and engages independent cybersecurity firms to carry out penetration testing, identifying and addressing vulnerabilities before they can be exploited.

That said, Alpha88 wishes to emphasise that no digital security system can be guaranteed to be 100% completely secure. We are committed to responding swiftly and responsibly in the event of any data security incident involving our members' information, including notifying affected members within the timeframe stipulated by Malaysia's PDPA.

Alpha88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They help us remember your preferences and understand how you use the platform so we can make continuous improvements.

• Session cookies (required): Required to maintain your login session while you are active on the platform. Without this cookie, you would need to log in again each time you navigate to a different page. This cookie is automatically deleted when you close your web browser.
• Preference cookies: Stores your preferred settings such as display language and your preferred baccarat table or game type, so you do not need to reconfigure them each time you log in.
• Analytics cookies: Alpha88 uses anonymised analytics data to understand how members interact with the platform — which pages are visited most frequently, which features are used the most, and where members encounter difficulties. This data contains no information that could personally identify you.
• Security cookies: Used to detect suspicious login attempts, identify unrecognised devices, and prevent CSRF (Cross-Site Request Forgery) attacks that could compromise the security of your account.

You can manage cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality of the Alpha88 platform — for example, disabling session cookies will require you to log in repeatedly during your session.

Alpha88 retains your personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by applicable Malaysian law. Our data retention policy is as follows:

• Active account data: Retained for the entire duration your account remains active with Alpha88. Should your account be closed at your request, personal data that identifies you will be deleted or anonymised within 90 days, except for data that must be retained to meet legal compliance obligations.
• Financial transaction records: Retained for a minimum of 7 years from the transaction date, in line with Malaysia's anti-money laundering and accounting legal requirements. This includes deposit records made via Touch 'n Go eWallet, GrabPay, FPX, and other methods.
• Support communication records: Customer support conversations and help tickets are retained for 3 years to allow for historical reference and the resolution of any disputes that may arise at a later stage.
• Security logs: Access logs and security logs are retained for 12 months for security incident investigation purposes. These logs do not contain game content or personal financial information.
• Account data terminated due to fraud: In cases where an account is terminated due to fraudulent activity or a serious breach of terms, relevant information may be retained for a longer period to prevent re-registration or for investigation and legal action purposes.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and Alpha88's commitment to privacy protection, you have the following rights over the personal data we hold about you:

To exercise any of the rights listed above, please contact the Alpha88 data protection team by email at support@alpha88-jit.com or via the in-platform live chat. Please include your account number and a brief description of your request. Alpha88 will verify your identity before processing any data-related request to ensure your privacy is protected.

Alpha88 services are exclusively for individuals aged 18 and above. Alpha88 does not knowingly collect, store, or process any personal data from individuals under the age of 18.

Should Alpha88 discover that personal data belonging to a minor has been collected without proper age verification, we will take immediate action to delete the relevant data and terminate the account in question. Parents or guardians who find that their child has registered an Alpha88 account without authorisation may contact our support team for prompt assistance.

Alpha88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to how we protect your information. Any significant amendments will be communicated to active members via in-platform notifications or email to your registered address at least 14 days before the changes take effect.

Your continued use of the Alpha88 platform after any policy amendment takes effect will be considered your acceptance of the updated policy. Alpha88 encourages you to review this Privacy Policy periodically to stay informed about how we protect your data. The "Updated" date shown at the top of this document indicates when this Privacy Policy was last reviewed and revised.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how Alpha88 handles your personal data, please do not hesitate to contact our data protection team. We are committed to responding to all enquiries within 3 business days.

If you are not satisfied with our response to your data privacy enquiry after contacting Alpha88 directly, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia under the Ministry of Communications and Digital, in accordance with the provisions of the PDPA 2010.