Privacy Policy Open88 – User Data Protection

Open88 collects various types of personal information from users for legitimate purposes necessary to operate this online betting platform. We only collect information that is genuinely required and never request information that is irrelevant to our service.

1.1 Information You Provide Directly

During the registration process and your use of the platform, you will provide us with the following information:

1.2 Information Collected Automatically

When you use the open88 platform, our systems automatically record certain technical information to ensure the service operates correctly and securely:

• IP address and general location information based on IP
• Device type, operating system, and web browser version used
• Login session times and durations
• Records of wagering activity, deposits, and withdrawals
• Platform feature usage data and navigation patterns
• Cookie information and session identifiers

1.3 Information From Third Parties

In certain cases, open88 may receive information about you from trusted third parties, such as payment processors to verify transactions or identity verification agencies as part of our KYC process. All such information is handled to the same security standards.

Open88 uses collected personal data solely for legitimate purposes related to the operation of our platform. Every use of data has a solid legal basis, whether grounded in your consent, contractual necessity, legal obligation, or the platform's legitimate interests.

2.1 Primary Purposes of Data Use

• Account Management: Creating, verifying, and managing your user account, including the mandatory KYC process.
• Transaction Processing: Processing your deposits, withdrawals, and wagering activity securely and accurately.
• Account Security: Detecting and preventing fraudulent activity, money laundering, or unauthorized access to your account.
• Customer Support: Responding to inquiries, resolving complaints, and providing technical support.
• Legal Compliance: Fulfilling reporting obligations to relevant regulatory bodies and authorities.
• Platform Improvements: Analyzing usage patterns to improve the user experience and platform features.

2.2 Marketing Communications

With your consent, open88 may send you information about promotions, bonuses, and the latest offers via email or in-app notifications. You may withdraw this consent at any time through your account settings or by contacting our support team. Withdrawing consent for marketing communications does not affect your right to continue using the platform.

2.3 Analytics and Improvement

Aggregated, non-personally identifiable usage data is used to understand how users interact with our platform. This helps us identify areas for improvement, test new features, and ensure the platform consistently meets the needs of Malaysia users.

Open88 is committed to not disclosing users' personal information to external parties without strong justification. However, there are specific situations where sharing information is necessary to ensure the platform operates safely and in compliance with the law.

3.1 Trusted Service Providers

Open88 works with carefully selected third-party service providers to help us operate the platform. These include payment processors handling FPX, DuitNow, Touch 'n Go, and GrabPay transactions, cloud service providers for secure data storage, and identity verification services for the KYC process. All such providers are bound by strict confidentiality agreements and are only permitted to use your data for the specified purposes.

3.2 Legal Obligations

Open88 may be required to disclose user information when mandated by law, court order, or direction from a competent authority. This includes cooperation with financial crime investigations, compliance with AML (Anti-Money Laundering) reporting requirements, and responses to lawful requests from law enforcement agencies.

3.3 What We Do Not Do

• Selling users' personal data to any third party for commercial purposes
• Sharing information with marketing companies without the user's explicit consent
• Disclosing users' financial information except to payment processors directly involved in your transactions
• Providing user data access to competitors or unrelated third parties

User data security is among Open88's highest priorities. We continuously invest in the latest security infrastructure to ensure your information is always protected against increasingly sophisticated cyber threats.

4.1 Technical Security Measures

• 256-bit SSL encryption for all data communication between users and servers
• Passwords are stored in a non-reversible hashed format using the bcrypt algorithm
• 24/7 system security monitoring
• Regular penetration testing by independent security experts
• Multi-layered firewall and intrusion detection system (IDS)
• Automatic data backup every 24 hours to separate server locations

4.2 Internal Access Controls

Access to user data within open88 is restricted to staff with a legitimate business need only. All access is logged and audited on a regular basis. Staff who handle user data are required to complete data protection training and sign a confidentiality agreement.

4.3 Incident Response

Open88 has a comprehensive incident response plan to address any data security breaches. Should an incident affecting your personal data occur, we will notify you within 72 hours via your registered email and take immediate steps to contain and resolve the situation.

Open88 uses cookies and similar tracking technologies to keep the platform functioning properly and to deliver a better user experience. Cookies are small text files stored on your device when you visit our website.

5.1 Types of Cookies We Use

5.2 Managing Cookies

You can control and manage cookies through your web browser settings. Most browsers allow you to view, delete, or block cookies. Please note, however, that blocking essential cookies may affect the login functionality and account security of your open88 account.

As an open88 user, you have certain rights regarding your personal data protected under Malaysia's PDPA and our internal policies. We are committed to respecting and facilitating the exercise of these rights.

To exercise any of the above rights, contact our support team by email at [email protected] with the subject line "Privacy Rights Request" along with your account number. We will process your request within 14 business days.

Open88 is a platform designed exclusively for adults aged 18 and above. We do not knowingly collect any personal information from individuals under 18 years of age.

If we find that we have inadvertently collected data from children or minors, we will take immediate action to delete that information and close the associated account. Parents or guardians who are concerned that their child has registered on our platform are encouraged to contact us immediately via our support email.

As an online platform, open88 may store or process user data on servers located outside Malaysia. Any such data transfers are carried out with adequate safeguards to ensure a level of security equivalent to Malaysia's PDPA standards.

We ensure that all international data transfers are subject to recognized protection mechanisms, such as standard data processing agreements, adequacy assessments of the recipient country's data protection standards, or equivalent contractual safeguards. Further details on the data transfer mechanisms we use can be requested from our privacy team.

Open88 does not retain users' personal data longer than necessary for the stated purposes or as required by law. Retention periods vary depending on the type of data and applicable legal requirements.

• Active Account Data: Retained for the duration your account is active and for an additional 5 years after account closure for AML compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years as required by Malaysia financial reporting laws.
• KYC Documents: Retained for 5 years following account closure or termination of the business relationship.
• Support Communication Logs: Retained for 2 years from the date of last interaction.
• Log and Security Data: Retained for 90 days for security incident investigation purposes.

After the designated retention period expires, data will be securely deleted or anonymised so that it can no longer be linked to a specific user.

Open88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform improvements. Any significant changes will be communicated to users via in-app notifications or registered email at least 14 days before the changes take effect.

The "Last Updated" date at the top of this document indicates when this Privacy Policy was last amended. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of the open88 platform after any amendments constitutes your acceptance of the updated terms.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how open88 handles your personal data, our privacy team is ready to assist you.

You can reach us through the following channels:

• Privacy Email: [email protected] – state "Privacy Enquiry" in your email subject line
• Live Chat: Available directly on the open88 platform – response in under 2 minutes
• Response Time: We will respond to all privacy-related enquiries within 14 business days

For formal complaints that cannot be resolved through our support channels, you have the right to submit a complaint to the Malaysian Department of Personal Data Protection or the relevant regulatory authority in your jurisdiction.