Privacy Policy Alpha888 — Player Data Protection

1Introduction and Scope of Privacy Policy

Alpha888 is an online casino and digital entertainment platform designed for adult players in Malaysia. We take the privacy and personal data protection of every user very seriously. This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international industry best practices.

This policy applies to all personal data collected through the Alpha888 website at alpha888.run, our Android and iOS mobile apps, all interactions with our customer support team, and all financial transactions carried out on our platform — including deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, and other local Malaysian payment methods.

2Types of Personal Data We Collect

Alpha888 collects various types of personal data depending on how you interact with our platform. Below are the categories of data we collect and their sources:

We may also collect data you share voluntarily, such as information submitted through survey forms, promotional contests, or referral programmes. The data you provide must be accurate and up to date — you are responsible for ensuring the accuracy of the information submitted to Alpha888.

3How Your Personal Data Is Used

Alpha888 uses your personal data only for legitimate and transparent purposes. The following are the primary purposes for which your data is used:

• Service Provision: Creating and managing your member account, processing deposits and withdrawals, and providing access to all games including slots, live casino, baccarat, football betting, and lottery.
• Identity Verification (KYC): Verifying your identity in accordance with anti-money laundering (AML) legal requirements and complying with applicable financial regulations in Malaysia.
• Payment Processing: Securely processes financial transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, CIMB Clicks, and other local Malaysian payment methods.
• Account Security: Detecting and preventing fraud, unauthorised access, account misuse, and suspicious activity that could compromise the security of your account.
• Service Communications: We send you important notifications regarding your account, transactions, policy changes, and security updates.
• Platform Improvements: Analysing aggregate usage patterns to improve the user experience, platform performance, and quality of our services.
• Legal Compliance: Fulfilling legal obligations, complying with court orders, or responding to lawful requests from authorities in Malaysia.

4Sharing Data with Third Parties

Alpha888 does not sell, rent, or trade your personal data to any third party. However, in the following limited circumstances, we may share your data:

• Service Providers: We share necessary data with trusted technical service providers, including licensed game providers, payment processors, and cloud service providers. All third parties are bound by strict data protection agreements.
• Legal Requirements: We may disclose data to Malaysian authorities — including Bank Negara Malaysia, the Royal Malaysia Police, or other regulatory bodies — when required by law or court order.
• Alpha888 Rights Protection: In cases of fraud, misuse, or legal proceedings, we reserve the right to disclose information necessary to protect the rights, property, and safety of Alpha888, our members, and the public.
• Business Transfer: In the event that Alpha888 is involved in a merger, acquisition, or asset sale, user data may be transferred as part of those business assets. We will provide advance notice should this occur.

In all instances of data sharing, we ensure that recipients maintain data protection standards equal to or higher than our own.

5Cookies, Tracking & Related Technologies

Alpha888 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session management, security, and navigation. These cookies cannot be disabled, as the platform will not function properly without them.
• Performance Cookies: Collecting information on how you use the platform — pages visited, time spent, and any errors encountered. This data is used in aggregate to improve platform performance.
• Functional Cookies: Enabling the platform to remember your preferences — such as language, display settings, and favourite games — for a more personalised experience.
• Analytics Cookies: We use analytics tools to understand overall platform usage patterns for continuous improvement purposes. This data cannot be used to directly identify any individual.

You can manage your cookie preferences through your web browser. Please note that disabling certain cookies may affect the functionality and user experience of the Alpha888 platform.

6Data Security Measures

Alpha888 continuously invests in security infrastructure to ensure your personal data is always protected against unauthorised access, loss, or misuse.

• 256-bit SSL Encryption: All data transmitted between your device and Alpha888's servers is encrypted using 256-bit TLS/SSL — the highest security standard used in the banking industry.
• Strict Access Controls: Only staff with specifically granted authorisation may access member personal data, and all access is automatically logged and audited.
• Two-Factor Authentication (2FA): Members are encouraged to enable 2FA for an additional layer of security when logging in. This setting is available in your account control panel.
• 24/7 Monitoring: Our systems are monitored around the clock by our cybersecurity team to detect any unusual activity or attempted breaches.
• Regular Security Audits: Alpha888 conducts regular penetration testing and independent security audits to identify and address any system vulnerabilities.

7Data Retention Period

Alpha888 retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable Malaysian law.

• Active account data is retained for as long as the account remains active, plus any legally required retention period.
• Financial transaction records are retained for a minimum of 7 years in accordance with Malaysia's anti-money laundering legislation.
• Communication logs with our support team are retained for 2 years for reference and service improvement purposes.
• Data from accounts that have been closed or inactive for more than 5 years will be deleted or anonymised in accordance with our data retention policy.

When data is no longer needed, Alpha888 will delete or anonymise it using secure methods to ensure it cannot be recovered or misused.

8Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and data protection best practices, you have the following rights regarding your personal data held by Alpha888:

To exercise any of the rights above, please contact us at privacy@alpha888.run or via Live Chat. All requests will be processed within 14 business days.

9Children's Privacy Protection

Alpha888 is a platform intended exclusively for adults aged 18 and above. We do not knowingly collect, use, or disclose personal data from individuals under the age of 18.

Should we discover that we have inadvertently collected personal data from an individual under the age of 18, we will take immediate steps to delete that data and close the associated account. Parents or guardians who suspect a child in their care has registered on Alpha888 are urged to contact us immediately at support@alpha888.run.

10Contact Our Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way Alpha888 handles your personal data, please contact our Data Protection Officer (DPO) through the following channels:

• Privacy Email: privacy@alpha888.run
• Support Email: support@alpha888.run
• Live Chat: Available 24/7 on the Alpha888 platform in Bahasa Malaysia and English
• Response Time: All privacy enquiries will be responded to within 3 business days; data rights requests within 14 business days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia or the relevant regulatory authority.