On88 Privacy Policy – Malaysia Member Personal Data Protection

1 Introduction and Scope of Privacy Policy

This Privacy Policy is established by on88 ("we", "Platform" or "on88") to inform all users and registered members ("you") of our transparent and responsible privacy practices. This document applies to all personal information collected through the on88 website at https://on88.vin, the on88 mobile app, and all related service channels.

On88 fully complies with Malaysia's Personal Data Protection Act 2010 (PDPA) in every aspect of personal data collection, processing, and storage. We take our responsibilities as a data controller seriously and are committed to ensuring your data is handled in the safest and most ethical manner.

By using on88 services, you acknowledge that you have read, understood, and agreed to the terms set out in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the Platform and contact us for further assistance.

2 Types of Personal Data Collected

On88 collects various categories of personal data depending on the nature of your interaction with the Platform. Below is a summary of the data we collect:

We do not collect sensitive data such as medical information, political affiliations or religious beliefs without a reasonable basis and your explicit prior consent.

3 How Personal Data Is Collected

Your personal data is collected in various ways when you interact with the on88 Platform. Understanding how we collect data helps you make more informed decisions about using our services:

• Account Registration: Information you provide when registering as a new on88 member, including your name, email, phone number and password.
• KYC Verification: Identity documents and proof of address that you upload during the mandatory identity verification process.
• Financial Transactions: Payment details collected when you make a deposit or withdrawal request via available payment methods.
• Platform Usage: Data is collected automatically when you browse the on88 website or use the on88 app, including pages visited, session duration, and interaction patterns.
• Support Communications: Records of live chat conversations, emails, or any written communications you send to our team.
• Cookies and Tracking Technologies: Information collected automatically through cookies, web beacons and similar technologies while you use the Platform.
• Recognised Third Parties: Data we receive from payment providers, identity verification partners, or anti-fraud agencies cooperating with on88.

All data collection is carried out on the basis of service necessity, legal compliance, or your explicit consent. We do not collect data beyond what is required.

4 Purpose of Personal Data Use

Personal data you provide to on88 is used responsibly for the following purposes only. We do not use your data for any other purpose without notifying you in advance:

• Account Management: Securely creating, verifying and managing your member account on the on88 Platform.
• Transaction Processing: Processing deposits, withdrawals and all financial transactions you make through the Platform accurately and securely.
• Identity Verification (KYC): Meeting legal compliance requirements relating to age verification, identity verification and anti-money laundering (AML).
• Platform Security: Detecting and preventing fraudulent activity, hacking, abuse or any security threats that could compromise your account or the Platform.
• Customer Service: Delivering effective assistance and technical support via live chat, email and other support channels.
• Service Improvement: Analysing usage patterns on an aggregated and anonymised basis to improve features, performance and user experience on the on88 Platform.
• Service-Related Communications: Sending important notifications related to your account, transactions, policy changes or relevant security information.
• Responsible Gaming: Monitoring gameplay patterns to identify early signs of problem gambling and provide the necessary support.

5 Data Sharing with Third Parties

On88 does not sell, rent, or share your personal data with third parties for commercial purposes. However, in the course of operating a safe and legally compliant platform, there are limited situations where your data may be shared with the following parties:

• Payment Providers: Required transaction information is shared with approved payment gateways, banks and e-wallet providers to securely process your deposits and withdrawals.
• KYC Verification Partner: Identity data is shared with recognised third-party identity verification service providers to complete the mandatory KYC process.
• Technology Providers: Cloud, cybersecurity, and technical infrastructure service providers that help on88 operate the Platform securely — subject to strict data protection agreements.
• Legal Authorities: Information lawfully required by regulatory authorities, law enforcement agencies or courts under binding legal obligations.
• Anti-Fraud Agency: Information required to verify identity and prevent financial fraud within Malaysia's payment ecosystem.

All third parties that receive your data are required to comply with data protection standards equal to or higher than those set out in this Privacy Policy. on88 is not responsible for the privacy practices of third parties operating outside the scope of our agreements with them.

6 Data Security and Protection

On88 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure. Our security systems are continuously updated to address the latest cyber threats:

• 256-bit SSL Encryption: All data transmitted between your browser and on88's servers is encrypted using the latest banking-grade TLS protocol.
• Stored Data Encryption: Sensitive data such as financial information and identity documents are stored in encrypted form on protected servers.
• Layered Access Controls: Only authorised staff with a legitimate business need may access member personal data, and every access is logged for audit purposes.
• Network Isolation: on88's data servers are isolated within a protected network environment secured by multi-layer firewalls and intrusion detection systems.
• Regular Security Audits: on88 conducts regular security testing and independent audits to ensure our infrastructure consistently meets the highest security standards.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA for an additional layer of protection on their account.

While on88 takes all reasonable steps to protect your data, no digital system can be guaranteed 100% secure. In the event of any security breach involving your data, on88 will notify you in a timely manner and take immediate remedial action.

7 Use of Cookies and Tracking Technologies

On88 uses cookies and similar tracking technologies to enhance your experience on the Platform, ensure smooth functionality, and understand how members interact with our services.

• Essential Cookies: Required for core Platform functions such as login authentication, session management, and security. These cookies cannot be disabled without affecting Platform functionality.
• Functional Cookies: Storing your preferences such as language, display settings and saved login details for your convenience.
• Analytics Cookies: Collecting anonymised usage data to help on88 understand navigation patterns and improve the Platform. This data does not identify you individually.
• Security Cookies: Detecting suspicious login attempts and abnormal activity to protect your account.

You may manage cookie settings through your web browser settings at any time. However, disabling certain cookies may affect the functionality and your experience on the on88 Platform. Continued use of the Platform after being notified of this cookie policy is considered your consent.

8 Your Rights Regarding Personal Data

As an on88 member and under the provisions of Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data that we hold:

• Right of Access: You have the right to request a copy of the personal data we hold about you at any time.
• Right to Rectification: If any of your personal data is inaccurate or outdated, you have the right to request an immediate correction.
• Right to Erasure: You may request the deletion of your personal data, subject to mandatory legal retention requirements and legitimate service interests.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format for transfer to another service provider.
• Right to Withdraw Consent: Where data processing is based on consent, you may withdraw your consent at any time without affecting the validity of prior processing.

To exercise any of the above rights, please contact the on88 Privacy team via email at [email protected], clearly stating your request. We will process your request within 30 business days of receipt.

9 Data Retention Period

On88 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law:

• Active Account Data: Retained for the duration your account remains active, plus the mandatory period following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years as required by Malaysia's financial and taxation laws.
• KYC Documents: Retained for a minimum of 5 years after account closure as required by AML/CFT regulations.
• Support Communication Logs: Retained for 2 years for quality control and dispute resolution purposes.
• Analytics Data: Anonymised usage data is retained indefinitely as it no longer identifies any individual.

Once the retention period expires, your personal data will be securely deleted or anonymised in accordance with on88's approved data deletion procedures.

10 Children's Policy and Protection of Young Persons

On88 maintains a zero-tolerance policy towards underage participation. The on88 platform is strictly for adult users aged 18 and above only. We implement the following measures to protect children and young people:

• All members are required to verify their age at registration and again during the KYC process via official identification documents.
• On88 does not knowingly collect any personal data from individuals under the age of 18.
• Should we discover that personal data of an individual under the age of 18 has been collected without our knowledge, we will immediately delete that data and close the account in question.
• Parents and guardians who discover that their child has registered on the on88 Platform are urged to contact us immediately so that prompt action can be taken.

11 Links to Third-Party Websites

The on88 Platform may contain links to third-party websites or services, including payment providers, game partners, or other service providers. This Privacy Policy applies only to the on88 Platform and does not cover the privacy practices of those third-party websites.

On88 is not responsible for the content, privacy policies, or practices of any third-party websites. We encourage you to read and understand the privacy policy of every website you visit before providing any personal information. Your access to third-party websites is entirely at your own risk and responsibility.

12 Changes to Privacy Policy

On88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or new Platform features. Each updated version will be published on the on88 website with a clear effective date.

For significant changes, on88 will endeavour to notify members via a prominent notice on the Platform or via their registered email. However, it is your responsibility to review this Privacy Policy page periodically to ensure you are always aware of the latest applicable terms.

Your continued use of the on88 Platform after any changes to this Privacy Policy are published will be considered your acceptance of the revised policy. If you do not agree with any changes, please stop using the Platform and contact us to close your account.

13 Contact the on88 Privacy Team

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, please contact the on88 Data Protection Officer through the following channels:

• Email: [email protected] — mark your email subject as "Privacy Enquiry" for a faster response.
• Live Chat: Use the chat icon at the bottom corner of the Platform to reach our 24/7 support team.
• FAQ: Many privacy-related FAQs have been answered at on88 FAQ page.

Our team aims to respond to all privacy-related enquiries within 5 business days. For formal data protection complaints, you may also contact the Department of Personal Data Protection (JPDP) Malaysia as the responsible regulatory authority.