Ap888 Privacy Policy – Malaysian Member Personal Data Protection

1 Introduction

Ap888 ("we", "Platform", or "ap888") takes your privacy very seriously. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you use ap888's services through the ap888.onl website and our mobile app.

We operate in accordance with the Personal Data Protection Act 2010 (PDPA) Malaysia and all related regulations in force. This Policy applies to all registered members, prospective members visiting our website, and anyone interacting with the ap888 platform in any capacity.

2 Data We Collect

Ap888 only collects personal data that is strictly necessary to provide a secure, seamless, and regulatory-compliant service. The categories of data we collect are as follows:

2.1 Registration & Identity Data

• Full name as shown on official identification documents.
• Date of birth for age verification and KYC compliance.
• Identity card number (MyKad) or passport number for identity verification.
• Email address valid for account communications.
• Mobile phone number for OTP verification and security notifications.
• Residential address for AML (Anti-Money Laundering) compliance purposes.

2.2 Financial & Transaction Data

• Bank account or e-wallet details registered for deposits and withdrawals.
• Records of all deposit, withdrawal, and wagering activity.
• Payment history and payment methods used.

2.3 Technical & Usage Data

• IP address, device type, operating system, and web browser type.
• Access logs, session duration, and pages visited within the platform.
• Approximate geolocation data based on IP address for regional compliance.
• Cookie and similar tracking technology data (see Section 5).

3 How We Use Your Data

Ap888 uses collected personal data solely for legitimate and transparent purposes. We will not use your data for any other purpose without obtaining your consent first. The purposes of data use are as follows:

• Account management: Creating, verifying, and securely maintaining your member account.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions in your account.
• Identity verification (KYC): Complying with Know Your Customer requirements to prevent fraud and money laundering.
• Service communications: Sending important notifications related to your account, security, and transactions.
• Customer support: Resolving enquiries, complaints, and disputes submitted by you.
• Platform security: Detecting and preventing fraudulent activity, misuse, and unauthorised access.
• Regulatory compliance: Fulfilling applicable legal and regulatory obligations.
• Service improvements: Analysing usage patterns to improve the overall user experience.
• Marketing (with consent): Sending promotional offers and the latest updates about ap888 — only if you have consented to receive such communications.

4 Data Sharing with Third Parties

Ap888 does not sell or disclose members' personal data to third parties for marketing or commercial gain. However, we may share personal data in the following limited situations:

4.1 Trusted Service Providers

We work with selected third-party service providers to help operate the ap888 platform, including payment processors, cloud infrastructure providers, and identity verification services. All third parties are bound by strict confidentiality agreements and are only permitted to use your data for the specific purposes defined.

4.2 Legal Requirements

Ap888 may disclose personal data to government authorities or regulatory bodies when required by Malaysian law, a court order, or valid legal process. In such circumstances, we will only disclose the minimum necessary information and will endeavour to notify you in advance where permitted by law.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of ap888 assets, members' personal data may be transferred to the acquiring party. In such situations, you will be notified in advance and your rights under this Privacy Policy will continue to be protected.

5 Cookies & Tracking Technologies

Ap888 uses cookies and similar tracking technologies to enhance the user experience, maintain secure login sessions, and analyse platform usage patterns. The types of cookies used are as follows:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Saving your language settings, display format, and other preferences you have set for a more comfortable experience.
• Analytics Cookies: Helping us understand how members use the platform so we can make continuous improvements. This data is aggregated and is not used to identify individuals.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect your account from unauthorised access.

You can manage your cookie settings through your web browser settings. However, disabling essential cookies may affect the functionality of the ap888 platform.

6 Data Security

Ap888 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, or accidental disclosure. Our key security measures include:

• 256-bit SSL Encryption for all data transmitted between your device and ap888's servers.
• Data encryption at rest (at-rest encryption) for all personal data stored in our databases.
• Role-based access control (RBAC) ensuring that only specifically authorised personnel may access members' personal data.
• Two-factor authentication (2FA) required for all internal staff access to systems containing personal data.
• 24/7 security monitoring and audits by ap888's experienced cybersecurity team.
• Penetration testing conducted periodically by independent third parties to identify and remediate any security vulnerabilities.
• Encrypted data backups stored at a separate secure location to ensure service continuity.

7 Your Rights as a Data Subject

Under Malaysia's PDPA 2010 and the ap888 Privacy Policy, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact the ap888 customer support team via live chat within the platform. We will process your request within 14 business days.

8 Data Retention & Deletion

Ap888 retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy or as required by Malaysian law. Our general data retention guidelines are as follows:

• Active account data: Retained for as long as your account is active and for a minimum period of 5 years after account closure for AML and regulatory compliance purposes.
• Financial transaction records: Retained for 7 years in accordance with Malaysian financial reporting requirements.
• Support communication logs: Retained for 2 years from the date of last interaction.
• Analytics cookie data: Not exceeding 13 months from the date of collection.
• KYC Documents: Retained for 6 years from the date of verification in accordance with AMLA 2001.

Once the retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be associated with you as an individual.

9 Links to Third-Party Websites

The ap888 platform may contain links to third-party websites or services in certain contexts. Please note that ap888's Privacy Policy applies solely to the ap888 platform. ap888 has no control over the privacy practices of third-party websites and is not responsible for their content or privacy policies.

We encourage you to read the privacy policy of every website you visit, especially before providing any personal information. Your access to third-party websites is entirely at your own risk.

10 Changes to the Privacy Policy

Ap888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new technologies, legal requirements, or other legitimate reasons. When we make significant changes, we will:

• Updating the "Last Updated" date at the top of this page.
• Displaying a prominent notice on the ap888.onl homepage for a minimum of 14 days.
• Sending notifications to all registered members via email or in-platform notifications.

Your continued use of the ap888 platform after any Privacy Policy changes take effect will be considered your acceptance of the updated policy. If you do not agree with the changes, please stop using the platform and contact us to close your account.

11 Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact the ap888 Data Protection Officer (DPO) through the following channels:

• Live Chat: Available 24/7 directly within the ap888 platform — the fastest way to get a response.
• Email (plain text): [email protected] — for written enquiries and formal data requests.
• Telegram: Reach our support team via the official ap888 Telegram channel.

Ap888 is committed to responding to all privacy-related enquiries within 5 business days. For cases involving data subject access requests, processing may take up to 14 business days depending on the complexity of the request.