Personal Data Protection
promo888

1. Information We Collect

To provide a safe, responsible service that meets licensing requirements, promo888 collects various categories of personal information from members and visitors. This collection happens directly through registration, automatically while you use the platform, and in certain cases through legitimate third parties.

Information you provide directly:

• Identity information: full name, identity card number (MyKad), date of birth, gender and current residential address.
• Contact information: email address, mobile phone number and, where relevant, an alternative phone number.
• Account information: username, password (in encrypted form), security questions and any optional details you enter into your account profile.
• Financial information: e-wallet details (Touch 'n Go eWallet), DuitNow information, online banking details (FPX) or crypto wallet addresses (USDT, BTC, ETH) used for deposit and withdrawal transactions.
• Identity verification information: copies of identity documents required for the KYC (Know Your Customer) process, such as MyKad or passport.

Information collected automatically:

• IP address, web browser type, device operating system and screen resolution.
• Activity data — pages visited, session duration, bets placed, games played and transaction records.
• Cookie and session tracking data (see Section 5 for more information).
• Device information including model, operating system and unique device identifier.

2. Purpose of Data Use

promo888 uses the personal information collected solely for the following legitimate and stated purposes. We will not process your data for any other purpose without prior notice and, where required, your consent.

• Account management and identity verification: processing registrations, verifying identity, managing passwords and ensuring that only legitimate account owners can access their accounts.
• Financial transaction processing: handling deposits, withdrawals and fund transfers via supported payment methods including Touch 'n Go eWallet, DuitNow, FPX online banking and cryptocurrency.
• Legal and regulatory compliance: fulfilling international licensing obligations, AML (Anti-Money Laundering) requirements, KYC obligations and monitoring of suspicious activity.
• Platform security: detecting and preventing fraud, account misuse, unauthorised login attempts and activity that violates the terms of service.
• Customer service: responding to enquiries, resolving complaints and providing effective technical support via live chat and email.
• Responsible gambling: monitoring gameplay patterns, providing deposit limit and self-exclusion tools, and reaching out to members who show signs of risk.
• Platform improvement: analysing aggregated usage data to improve features, performance and the overall platform experience.
• Service communications: sending important notifications related to accounts, policy updates and security alerts.

3. Information Sharing

promo888 does not sell, rent or transfer member personal information to third parties for marketing or commercial purposes. Information sharing only occurs in the following limited and purposeful circumstances:

• Payment service providers: transaction information that must be shared with payment processors such as FPX gateway providers, Touch 'n Go, DuitNow and crypto platforms to complete your financial transactions.
• Legal compliance: when required by a court, government authority or regulatory body through a valid order that cannot be contested.
• Fraud and crime prevention: in situations where promo888 has strong grounds to believe that sharing information is necessary to prevent financial crime or protect the safety of other users.
• Technology providers: vendors who provide technical infrastructure such as cloud services, security analysts and customer support tools, all subject to legally binding confidentiality agreements.
• Business transfers: in the event of a merger, acquisition or transfer of business assets involving promo888, members will be notified in advance.

4. Information Security

promo888 implements comprehensive technical and organisational security measures to protect member personal data from unauthorised access, disclosure, modification or destruction.

• Data encryption in transit using the latest industry-standard SSL/TLS protocols.
• Data encryption at rest for all sensitive information including financial details and identity documents.
• Role-based access controls — only authorised staff with a specific business need may access member data.
• Continuous system monitoring to detect anomalies, intrusion attempts and suspicious activity.
• Regular security audits by internal teams and, from time to time, independent third parties.
• An incident response plan that ensures any security breach is addressed promptly and members are notified accordingly.

5. Cookies and Tracking Technologies

promo888 uses cookies and similar tracking technologies to improve platform functionality, personalise the user experience and analyse usage patterns. The following are the categories of cookies used:

• Essential cookies: required for basic platform operations such as login session verification, form security and navigation stability. These cookies cannot be disabled.
• Preference cookies: store your settings such as preferred language, display theme and game preferences so you do not need to re-enter your choices each time you visit.
• Analytics cookies: collect aggregated data about how members use the platform — most frequently visited pages, time spent and navigation paths — to help us improve our services.
• Security cookies: detect unusual login activity, simultaneous access attempts from different locations, and patterns that indicate possible account misuse.

Most web browsers offer options to manage or block cookies through browser settings. However, disabling certain cookies may affect platform functionality. For more information on managing cookies, refer to your web browser's documentation.

6. Your Rights as a User

As a promo888 member, you have the following rights regarding your personal data. To exercise any of these rights, please contact our customer support team via 24/7 live chat or email at [email protected].

• Right of access: you may request a copy of the personal information we hold about you at any time.
• Right of rectification: if any of your information is inaccurate or out of date, you have the right to update it through your account panel or by contacting support.
• Right of erasure: under certain circumstances permitted by law, you may request the deletion of your personal data. Such requests will be assessed against applicable legal record-keeping obligations.
• Right to restrict processing: you may request that we limit how your data is processed while a dispute is being resolved.
• Right to object: you have the right to object to the processing of your data for certain purposes such as marketing communications.
• Right to data portability: you may request your data in a machine-readable format for transfer to another platform, subject to technical compatibility.

promo888 is committed to processing all user rights requests within a reasonable timeframe. We will keep you informed of the progress of your request and explain if there are any legal obstacles preventing its fulfilment.

7. Data Retention and Transfer

Personal data of promo888 members is stored on protected servers. Retention periods depend on the type of data and the underlying requirements:

• Active account data is retained for as long as your account remains active or as long as necessary to provide services to you.
• Financial transaction records are retained for the period specified by international licensing requirements and laws relating to anti-money laundering.
• Security logs and monitoring data are retained for the period required for incident investigation and compliance verification.
• Once an account is closed, data that is no longer required will be systematically deleted or anonymised.

As a platform operating under international licensing, certain processes may involve data processing outside Malaysia. In all such cases, we ensure that an equivalent level of protection is maintained and that appropriate data transfer agreements are in place.

8. Financial Data Protection

The security of members' financial information is the top priority in promo888's operations. Every deposit and withdrawal transaction — whether via Touch 'n Go eWallet, DuitNow, FPX online banking, or cryptocurrency (USDT, BTC, ETH) — is handled in a fully protected environment.

• Card or bank account details are not stored directly on promo888's servers — they are managed by certified third-party payment processors.
• Every withdrawal request is verified through a strict validation process before being processed within 15 minutes to 2 hours.
• A real-time transaction monitoring system detects any unusual patterns that may indicate fraudulent activity.
• All supported payment methods comply with internationally recognised security standards.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how promo888 handles your personal data, please contact us through the following channels:

• Email: [email protected]
• Live Chat: available 24 hours a day, 7 days a week in Malay and English.

promo888 reserves the right to update this Privacy Policy from time to time in line with changes in law, licensing requirements, or platform practices. Any material changes will be communicated to members via their registered email or a prominent notice on this website. Continued use of the platform after such notice will be considered acceptance of the updated terms.

The effective date of this policy is 1 January 2026. All earlier versions of the Privacy Policy are no longer applicable and are fully superseded by this document.