alpha88 Privacy Policy

1. Introduction & Scope

This Privacy Policy (hereinafter "Policy") is published by alpha88 (hereinafter "alpha88", "we", "us", "our") and applies to all personal data processed in connection with your use of the alpha88 website at https://alpha88.vu and all associated services, products, mobile-optimised interfaces, and features (collectively, the "Platform").

This Policy explains what personal information alpha88 collects about you when you register an account, access the Platform, place bets, make deposits or withdrawals, contact customer support, or interact with the Platform in any other way. It also explains why we collect this information, how we use it, with whom we share it, how long we keep it, and what rights you have in relation to it.

By registering an account with alpha88 or using the Platform, you acknowledge that you have read and understood this Policy. This Policy should be read alongside our Terms and Conditions, which govern your use of the Platform as a whole.

2. Data Controller

For the purposes of applicable data protection law, alpha88 is the data controller in respect of personal data collected through the Platform. alpha88 operates the Platform under an international gaming authority licence and assumes full responsibility for the lawful, fair, and transparent processing of member personal data in accordance with the standards required by that licence.

If you have any questions about this Policy or about how alpha88 processes your personal data, please refer to the contact details in Section 14 of this Policy.

3. Information We Collect

3.1 Information You Provide Directly

When you register an account with alpha88 or use the Platform, you provide us with personal information directly, including:

• Identity data: Full legal name, date of birth, gender, nationality;
• Contact data: Email address, Malaysian mobile telephone number, residential address (including postcode and state);
• Identity verification (KYC) data: Copy of MyKad (Malaysian National Identity Card), passport, utility bill or bank statement for proof of address, and copies of payment method documents;
• Financial data: Payment method details (bank account numbers, e-wallet identifiers for Touch n Go eWallet, Boost, or FPX-linked accounts), deposit and withdrawal transaction records;
• Account credentials: Username and encrypted password hash (we never store your password in plain text);
• Communications data: Content of messages sent to alpha88 via live chat, email, or any other support channel.

3.2 Information Collected Automatically

When you access and use the alpha88 Platform, we automatically collect certain technical and behavioural information, including:

• Device and access data: IP address, device type, operating system, browser type and version, screen resolution, device identifiers;
• Usage data: Pages and game categories accessed, time spent on each page, navigation paths, features used, bet types placed, game titles accessed, session start and end times;
• Transaction data: All deposit and withdrawal transactions, bonus claims, bet placement and settlement records, account balance history;
• Location data: General geographic location inferred from your IP address (country and city level only — we do not use GPS or precise location tracking).

3.3 Information from Third Parties

alpha88 may receive personal data about you from third parties in limited circumstances, including:

• Identity verification service providers used to authenticate KYC documents;
• Payment processors and financial institutions processing your transactions;
• Fraud prevention and anti-money laundering screening databases;
• Responsible gaming self-exclusion registries where you have registered a self-exclusion that covers the alpha88 Platform.

4. How We Use Your Data

alpha88 uses the personal data it collects for the following purposes:

Purpose	Data Used
Create and manage your alpha88 account	Identity, contact, and account credentials data
Process deposits and withdrawals in MYR	Financial data, identity data, KYC documents
Verify your age and identity (KYC compliance)	Identity data, KYC documents, third-party verification data
Prevent fraud, money laundering, and bonus abuse	Identity, financial, device, and usage data
Comply with our gaming licence obligations	All categories of personal data as required by the regulator
Provide customer support	Identity, contact, and communications data
Enforce our Terms and Conditions	Identity, usage, and financial data
Operate responsible gaming tools and self-exclusion	Identity, contact, and usage data
Send account notifications and service updates	Contact data (email, mobile number)
Improve Platform performance and user experience	Anonymised or aggregated usage and device data
Send promotional communications (where consented)	Contact data, usage preferences (opt-in only)

alpha88 does not use automated decision-making or profiling that produces legal or similarly significant effects on Members, except as expressly required by our anti-fraud and AML screening obligations, where such screening is subject to human review upon request.

5. Legal Basis for Processing

alpha88 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to create and maintain your account, process transactions, and deliver the services you have requested under our Terms and Conditions;
• Legal obligation: Processing required to comply with our international gaming authority licence conditions, anti-money laundering (AML) obligations, and other applicable regulatory requirements;
• Legitimate interests: Processing for fraud prevention, security, responsible gaming enforcement, and Platform improvement — where these interests are not overridden by your data protection rights;
• Consent: Processing for direct marketing communications, where you have explicitly opted in to receive such communications. You may withdraw consent at any time by updating your notification preferences in your account settings or by contacting support.

6. Sharing Your Data

alpha88 shares your personal data with third parties only in the following circumstances and solely to the extent necessary:

• Payment processors: Financial data is shared with payment service providers processing your MYR deposits and withdrawals, including FPX network participants (Maybank, CIMB, Public Bank, Hong Leong Bank, RHB Bank), Touch n Go eWallet, and Boost, for the sole purpose of transaction processing;
• Identity verification providers: KYC documents are shared with accredited identity verification service providers for the purpose of authenticating your identity in compliance with our licence obligations;
• Fraud and AML screening providers: Identity and transaction data may be cross-referenced against fraud prevention and anti-money laundering databases as required by our licence;
• Game providers: Limited session and account data is shared with our licensed game providers (such as Evolution Gaming, Pragmatic Play, PG Soft) to the extent technically necessary to facilitate your game sessions;
• Regulatory authorities: We may be required to disclose member data to our gaming authority regulator, financial regulators, or law enforcement agencies where required by applicable law or our licence conditions;
• Platform infrastructure providers: Hosting, content delivery, and security infrastructure providers who process data on our behalf under strict data processing agreements.

alpha88 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. All third-party data processors engaged by alpha88 are subject to contractual data protection obligations consistent with our licence requirements.

7. Cookies & Tracking Technologies

The alpha88 Platform uses cookies and similar technologies (including session tokens and local storage) for the following purposes:

• Essential cookies: Required for the Platform to function, including maintaining your login session, storing your language preferences, and enabling secure communications. These cannot be disabled without impairing Platform functionality;
• Analytics cookies: Used to collect anonymised, aggregated data about how members use the Platform — page visits, session duration, navigation paths — to identify areas for improvement. Individual members are not identifiable from analytics data;
• Security cookies: Used to detect and prevent fraudulent access attempts, identify unusual account activity, and enforce our one-account-per-person policy.

alpha88 does not use third-party advertising cookies or cross-site tracking cookies. You can control cookie settings through your browser's privacy settings, but disabling essential cookies may prevent you from accessing your alpha88 account.

8. Data Security

alpha88 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the alpha88 Platform;
• Encryption of sensitive data at rest, including identity documents and financial account details;
• Role-based access controls ensuring that alpha88 staff can access member personal data only to the extent required for their specific job function;
• Regular penetration testing and vulnerability assessments by independent security firms;
• Two-factor authentication for alpha88 staff accessing systems that contain member personal data;
• Incident response procedures for detecting, reporting, and responding to personal data breaches in accordance with our regulatory obligations.

Notwithstanding these measures, no data transmission over the internet is completely secure. You are responsible for keeping your alpha88 account credentials confidential and for notifying us immediately if you suspect any unauthorised access to your account.

9. Data Retention

alpha88 retains your personal data for as long as your account is active and for such period thereafter as is required by law, regulatory obligation, or legitimate business need. Specifically:

• Account and identity data is retained for a minimum of five (5) years following account closure, as required by anti-money laundering regulations applicable to licensed gaming operators;
• Transaction records are retained for a minimum of seven (7) years following the date of the transaction;
• Customer support communications are retained for three (3) years following the date of the interaction;
• Marketing consent records are retained for the duration of your consent and for one year following withdrawal;
• Device and usage log data is retained for up to twelve (12) months and then anonymised or deleted.

10. Your Rights

Subject to applicable data protection law and the conditions of alpha88's gaming licence, you have the following rights in relation to your personal data held by alpha88:

• Right of access: Request a copy of the personal data we hold about you;
• Right of rectification: Request correction of inaccurate or incomplete personal data;
• Right of erasure: Request deletion of your personal data, subject to our legal and regulatory retention obligations;
• Right to restrict processing: Request that we limit how we use your personal data in certain circumstances;
• Right to data portability: Request your personal data in a structured, machine-readable format where processing is based on consent or contract;
• Right to object: Object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent: Withdraw consent to marketing communications or other consent-based processing at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact alpha88 support with your request. We will acknowledge receipt within 5 business days and respond substantively within 30 calendar days. Identity verification will be required before any data access or deletion request is fulfilled.

11. International Data Transfers

The alpha88 Platform is operated on infrastructure that may be hosted in data centres outside of Malaysia. When your personal data is transferred to or processed in a jurisdiction outside Malaysia, alpha88 ensures that appropriate safeguards are in place to protect your data in accordance with our licence requirements and applicable data protection standards. These safeguards include contractual data processing agreements that impose obligations on overseas processors equivalent to those imposed on us under our licence.

12. Children's Privacy

The alpha88 Platform is strictly for adults aged 21 years and older. alpha88 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately delete such data and close the associated account. If you believe that alpha88 may have inadvertently collected data from a minor, please contact us immediately using the details in Section 14.

13. Changes to This Privacy Policy

alpha88 reserves the right to update or revise this Privacy Policy at any time. Where material changes are made to how we process your personal data, we will provide you with prominent notice through the Platform or via email to your registered address prior to the changes taking effect. The "Last updated" date at the top of this Policy reflects when it was most recently revised. Your continued use of the Platform following any update constitutes acceptance of the revised Policy.

14. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to raise a complaint about how alpha88 has handled your personal data, please contact us:

• Live Chat: Available 24/7 via the alpha88 Platform (recommended for fastest response)
• Data Protection Enquiries Email: [email protected] (plain text — not a clickable link)

alpha88 will acknowledge data-related complaints within 5 business days and aims to resolve them within 30 calendar days. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant supervisory authority or to the dispute resolution body specified in alpha88's gaming licence terms.