Privacy Policy hk88 — Personal Data Protection for Malaysian Players

Hk88 ("we," "platform," or "Company") is committed to protecting the privacy and personal data of every member, visitor, and user of our platform. This Privacy Policy is drawn up in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010 and clearly explains how we collect, use, disclose, store, and protect your information.

The hk88 platform offers online casino services including Baccarat, Blackjack, Poker, slots, lottery, Live Matches, and Sports Betting covering the Malaysia Super League, EPL, badminton, and e-sports. In providing these services, we need to collect certain personal data to ensure security, legal compliance, and the best possible user experience.

This Privacy Policy applies to all your interactions with hk88, including visits to our website, account registration, deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, and every game you play on our platform.

Hk88 collects various categories of personal data depending on how you interact with our platform. Below is a summary of the data we collect:

Hk88 uses the personal data we collect for the following purposes, all of which are directly related to delivering our platform services to you:

• Account Management: Registering and verifying your identity, processing login requests, and managing your account settings;
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, and managing withdrawals to your account in Malaysian Ringgit (MYR);
• Game Delivery: Running Baccarat, Blackjack, Poker, slots, lottery, Live Casino, and Sports Betting games fairly and seamlessly;
• Legal Compliance: Meeting legal obligations including age verification (21+), anti-money laundering (AML) compliance, and adherence to Malaysia's PDPA 2010;
• Platform Security: Detecting and preventing fraud, collusion, bot usage, and multi-accounting in violation of hk88's Terms & Conditions;
• Customer Support: Providing support via Live Chat, email, and WhatsApp in Bahasa Melayu, 24/7;
• Service Improvements: Analysing aggregated, anonymised usage patterns to improve the hk88 platform's interface, speed, and features;
• Service Communications: Sending you important notifications relating to your account, transactions, security, and changes to our terms via email or SMS;
• Marketing (with Consent): Sending you hk88 promotions, bonuses, and offers — only where you have given your consent to receive marketing communications.

Hk88 will not use your personal data for any purpose not stated in this Privacy Policy without obtaining your consent first.

Under Malaysia's PDPA 2010, hk88 processes your personal data on the following legal bases:

• Contract Performance: The majority of our data processing is necessary to fulfil our contractual obligations to you as an hk88 member — including running games, processing payments in MYR, and providing customer support;
• Legal Obligations: Certain data processing is required to comply with applicable Malaysian laws, including anti-money laundering legislation, consumer protection regulations, and financial reporting requirements;
• Legitimate Interest: hk88 processes certain data based on our legitimate interests — such as detecting fraud, maintaining platform security, and preventing financial crime — provided these interests do not override your fundamental rights and freedoms;
• Consent: For marketing activities and promotional communications, we rely on the explicit consent you provided during registration or subsequently through your account settings. You may withdraw this consent at any time without affecting your gaming account.

Hk88 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, in the course of operating the platform, we may share necessary data with the following categories of third parties:

• Payment Providers: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks, and other FPX providers process your financial transactions in MYR. Data sharing is limited strictly to the information required to complete each transaction;
• Game Providers: Gaming software companies that supply casino and sports games to the hk88 platform. They receive only the technical session data required to run the games;
• Technology Service Providers: Companies that assist us with server hosting, cloud computing, and technical infrastructure are bound by strict confidentiality agreements;
• Mandated Authorities: Law enforcement agencies, regulatory bodies, or Malaysian courts where required by court order or applicable law;
• Fraud Prevention Services: Identity verification and fraud monitoring service providers that help us protect the platform and our members from unauthorised activity.

In certain cases, your personal data may be transferred to or processed in countries or regions outside Malaysia — for example, by cloud service providers or international gaming operators that partner with hk88.

When cross-border data transfers occur, hk88 ensures that protections equivalent to Malaysia's PDPA 2010 are upheld through the following measures:

• Binding data processing agreements with all data recipients outside Malaysia;
• Use of internationally recognised data transfer mechanisms such as Standard Contractual Clauses;
• Data protection impact assessments prior to any new transfer to regions with less stringent data protection standards;
• Regular audits of overseas data recipients to ensure ongoing compliance.

Hk88 will not transfer your personal data to any country that does not provide an adequate level of data protection without appropriate contractual safeguards in place.

Hk88 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure:

• 256-bit SSL Encryption: All data transmitted between your browser and hk88's servers is protected by 256-bit SSL encryption — the same standard used by Malaysia's leading banking institutions;
• Data-at-Rest Encryption: Sensitive data stored in hk88's databases — including financial and identity information — is encrypted using modern cryptographic algorithms;
• Strict Access Controls: Access to member personal data is restricted to hk88 staff who require it to perform their duties, with detailed audit logs maintained;
• Fund Segregation: hk88 member funds are held in accounts segregated from the company's operating funds, providing an additional layer of protection;
• 24/7 Threat Monitoring: Intrusion detection and security monitoring systems operate around the clock to detect and block unauthorised access attempts;
• Regular Security Testing: hk88 conducts regular penetration testing and independent security audits to identify and remediate vulnerabilities before they can be exploited.

Hk88 retains your personal data for as long as necessary for the purposes stated in this Privacy Policy, or as required under applicable Malaysian law. General retention period guidelines are as follows:

Once the relevant retention period has passed, your personal data will be securely deleted or anonymised in a manner that can no longer be linked back to you as an individual.

As a data subject under Malaysia's PDPA 2010, you have the following rights regarding your personal data held by hk88:

The hk88 platform uses cookies and similar tracking technologies to enhance the user experience, ensure the platform functions correctly, and understand how players use our services. Cookies used by hk88 fall into two main categories:

Cookies classified as "Required" cannot be disabled, as they are essential to core hk88 platform functions — including secure login and fraud protection. "Optional" cookies can be managed through your web browser settings, though disabling them may affect your gaming experience.

Hk88 does not use third-party cookies for targeted advertising based on your browsing behaviour on other websites.

The hk88 platform is intended exclusively for individuals aged 21 and above. hk88 does not knowingly collect or process personal data from individuals under 21. All account registrations require age verification, and hk88 carries out a Know Your Customer (KYC) process to confirm member eligibility.

Should we become aware that personal data of an underage individual has been collected inadvertently, we will take immediate steps to delete that data, close the relevant account, and block further access to the platform. Any funds in such an account may be held pending investigation and dealt with in accordance with hk88's Terms & Conditions.

Hk88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, Malaysian legal requirements, or the technologies we use. Each version of the Privacy Policy will include a "Last Updated" date at the top of the document.

When we make material changes to this Privacy Policy, we will notify you via:

• A notification email to the address registered to your hk88 account, at least 14 days before the changes take effect;
• A clear notice within the hk88 platform when you log in;
• Display of an information banner on the hk88 homepage during the notification period.

Your continued use of the hk88 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you should stop using the platform and contact hk88 to close your account.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

If you have any questions, concerns, or complaints about how hk88 handles your personal data, or if you wish to exercise any of your rights under Malaysia's PDPA 2010, please contact hk88's Data Protection Officer (DPO) through the following channels:

If you are not satisfied with hk88's response to your privacy request or complaint, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia under the Ministry of Digital Malaysia.