Privacy Policy best88 — Your Personal Data Protection

Best88 is committed to protecting the privacy and security of your personal data as a member of our platform. This Privacy Policy describes our practices regarding the collection, use, storage, and disclosure of information you provide to us when using the best88.bio website and the best88 mobile app.

This document applies to all users of the best88 platform, including website visitors, registered members, and any party that interacts with our services in any way. By using our platform, you agree to the privacy practices set out in this document.

Best88 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and strives to handle all personal data to the highest ethical and legal standards. We review and update this policy periodically to ensure it remains aligned with current technological and regulatory developments.

Best88 collects various types of information depending on how you interact with our platform. This information is collected directly from you or automatically as you use our services.

We only collect data that is strictly necessary for the stated purposes. best88 does not collect sensitive data such as your medical information, religious beliefs, or political views.

Every piece of data we collect has a clear and specific purpose. best88 uses your information for the following purposes:

• Account Management: Create and manage your member account, including the registration process, login, and KYC identity verification.
• Transaction Processing: Process deposits, withdrawals, and all financial transactions accurately and securely through your chosen payment methods such as DuitNow, FPX, Touch 'n Go, and others.
• Customer Support: Provide effective assistance when you contact us via live chat or email, including resolving complaints and inquiries.
• Platform Security: Detect and prevent fraud, money laundering, multiple account usage, and any illegal or suspicious activity.
• Service Improvement: Analyze platform usage patterns to improve user experience, introduce new features, and optimize app performance.
• Marketing Communications: Send promotional information, new bonuses, and platform updates — subject to the communication preferences you set in your account settings.
• Legal Compliance: Meet legal obligations, regulations, and directives from relevant authorities.
• Responsible Gaming: Monitor gaming patterns to identify potential gambling problems and offer appropriate support to members who need it.

Best88 does not sell, rent, or disclose your personal data to third parties without your consent, except in the following legitimate circumstances:

• Payment Service Providers: Required financial data is shared with approved payment service providers (such as FPX processors, DuitNow, and digital wallets) solely to process your transactions.
• Game Service Providers: Minimum technical information is shared with third-party game providers integrated into our platform to ensure smooth game functionality.
• Identity Verification Service Providers: Identity data is shared with certified KYC service providers for verification purposes only.
• Legal Requirements: best88 will disclose the required data if ordered to do so by a court, regulatory authority, or legitimate law enforcement agency.
• best88 Rights Protection: In cases involving fraud, litigation, or investigation, relevant data may be shared with legal counsel or the relevant enforcement authorities.

All third parties we work with are required to comply with strict data protection standards and are not permitted to use your data for any purpose other than what is specified in their agreement with best88.

Your data security is the top priority of best88. We invest in the latest security infrastructure to ensure your information is always protected:

• Data Encryption: All data transmitted between your device and our servers is protected with 256-bit SSL/TLS encryption. Sensitive data such as passwords is stored in hashed form and cannot be read by anyone.
• Secure Servers: Data is stored in certified data centres with strict physical access controls, redundant cooling systems, and protection against cyber threats.
• 24/7 Monitoring: Our IT security team continuously monitors systems to detect any suspicious activity or intrusion attempts.
• Internal Access Controls: Access to members' personal data within the best88 organisation is restricted to staff who require it to perform their duties, based on the principle of least privilege.
• Regular Security Audits: We conduct regular security audits and penetration testing with independent assessors to identify and address any system vulnerabilities.
• Two-Factor Authentication (2FA): best88 provides and encourages the use of 2FA for all member accounts to add an extra layer of protection.

While we take all reasonable precautions, no system can be guaranteed 100% secure. In the unlikely event of a data breach that may affect you, best88 will notify the relevant authorities and affected members in accordance with applicable legal requirements.

Best88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login sessions, cart management, and security. These cookies cannot be disabled.
• Performance Cookies: Collect information about how you use our website (e.g. most frequently visited pages) to help us improve the platform.
• Functional Cookies: Save your preferences such as language, display settings, and other preferences to provide a more personalized experience.
• Analytics Cookies: Help us understand overall platform usage patterns in aggregate and anonymous form for continuous improvement purposes.

The best88 mobile app also uses mobile analytics to understand app usage patterns and improve the user experience. Data collected through the app is anonymised and aggregated, and is not linked to your personal identity.

Best88 retains your personal data for as long as your account is active or as long as necessary to provide services to you. Following account closure, your data will be retained for the period required by applicable law before being securely deleted.

• Financial Records & Transactions: Retained for a minimum of seven (7) years in accordance with Malaysia's financial legal requirements.
• KYC Documents: Retained for the duration of the active account plus seven (7) years after account closure for anti-money laundering (AML) compliance purposes.
• Platform Activity Logs: Retained for twelve (12) months for security and investigation purposes.
• Communication Data: Support emails and chat records are retained for three (3) years for reference and complaint resolution.
• Marketing Data: Deleted within thirty (30) days after you withdraw consent to receive marketing communications.

Once the designated retention period has expired, your data will be securely deleted or anonymised in accordance with approved data deletion procedures.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by best88:

To exercise any of the above rights, please contact our customer support team. We will process your request within the timeframe stipulated by law, typically within twenty-one (21) business days.

The best88 platform is strictly for adults aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

If we discover that personal data of an individual under the age of 18 has been collected without our knowledge, we will immediately take the following steps:

• Immediately suspend and investigate the related account.
• Delete all personal data of that individual from our systems.
• Permanently close the relevant account and return any remaining balance to its original source.

Best88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or service improvements. The "Updated" date at the top of this document will always reflect the date of the latest amendment.

When we make significant changes to this policy, we will notify you via:

• In-app notification on best88 upon your next login.
• Email to the address registered to your account.
• A clear notice on the best88.bio homepage.

Continued use of the best88 platform following any amendments to this Privacy Policy is considered your acceptance of the updated terms. We encourage you to review this page periodically.

If you have any questions, concerns, or wish to exercise your privacy rights, we are ready to assist through the following channels:

• Live Chat: Available 24/7 via the chat icon on the best88 platform — the fastest way to get an immediate response.
• Privacy Email: [email protected] — for enquiries related to personal data and data subject rights requests.
• Support Email: [email protected] — for general enquiries related to your account and services.

Our data protection team will endeavor to respond to all privacy-related inquiries within seven (7) business days. For more complex requests such as data access or data deletion, please allow up to twenty-one (21) business days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysian Personal Data Protection Commissioner or the relevant authority under PDPA 2010.