Privacy Policy

Introduction

Coin88 ("the Company", "we", "us", "our") operates the online gaming and sports betting platform accessible at https://coin88.cam ("the Platform"). We are committed to protecting the privacy and personal data of all individuals who access or use our services, particularly our players across Malaysia, including those based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond.

This Privacy Policy ("Policy") describes how Coin88 collects, processes, stores, shares, and protects your personal data in connection with your use of the Platform. It has been prepared in accordance with applicable data protection legislation and reflects our commitment to handling your information with the highest degree of care, transparency, and responsibility.

By registering an account, accessing the Platform, or otherwise engaging with Coin88's services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform more broadly.

Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

Data We Collect

Coin88 collects different categories of personal data depending on your interaction with the Platform. The categories of data we process are set out in the table below:

We do not intentionally collect sensitive personal data (such as health information, racial or ethnic origin, religious beliefs, or biometric data) unless it is voluntarily provided by you and directly relevant to responsible gambling assessments or a legal obligation we are required to satisfy.

How We Collect Your Data

Coin88 collects your personal data through the following methods:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical and behavioural data collected automatically when you access the Platform through cookies, web beacons, server logs, and analytics software. This data is collected whether or not you hold a registered account.
• Third-party sources: Identity verification data received from our KYC and fraud-screening partners. Transaction data from payment processors including DuitNow, FPX, and e-wallet service providers. Device and fraud-risk signals from device fingerprinting services.
• Publicly available sources: In limited circumstances, we may supplement your data with information from publicly accessible databases or regulatory watchlists as part of our anti-money laundering and compliance obligations.

Purposes of Processing

Coin88 processes your personal data for the following purposes:

• Account management: To create, maintain, verify, and administer your player account on the Platform.
• Service delivery: To provide access to games, sports betting markets, live casino, and all other Platform features you use.
• Payment processing: To process deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, DuitNow, FPX, USDT TRC20, and other supported channels.
• Identity verification (KYC): To verify your identity and age as required by our licensing obligations and anti-money laundering regulations. This process is mandatory before withdrawals can be processed.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeovers, collusion, money laundering, and other prohibited activities.
• Regulatory compliance: To comply with applicable laws and licensing conditions, including anti-money laundering (AML) obligations and responsible gambling requirements.
• Customer support: To respond to your enquiries, resolve disputes, and improve the quality of our support services.
• Responsible gambling: To monitor gaming behaviour for indicators of problem gambling and to administer deposit limits, cooling-off periods, and self-exclusion requests.
• Marketing communications: Where you have given explicit consent, to send you personalised promotions, bonus offers, and platform news by email or SMS. You may withdraw consent at any time.
• Platform improvement: To analyse usage patterns, conduct A/B testing, and improve the features, performance, and content of the Platform.

Legal Basis for Processing

Coin88 processes your personal data only where a valid legal basis exists. The legal bases we rely upon are as follows:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you have accepted, including account management, payment processing, and service delivery.
• Legal obligation: Processing necessary to comply with applicable laws, including KYC/AML obligations, licensing requirements, and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: Processing for fraud prevention, security monitoring, responsible gambling oversight, and Platform improvement — where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications, certain cookies, and any other processing for which we have specifically requested and obtained your consent. You have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing

Coin88 does not sell your personal data. We share your data only in the following circumstances and only to the extent necessary for the relevant purpose:

• Payment service providers: We share transaction-related data with payment processors and financial institutions (including Malaysian bank partners supporting DuitNow, FPX, and e-wallet integrations) to complete deposits and withdrawals.
• KYC and identity verification partners: We share identity document data with third-party KYC service providers who conduct verification checks on our behalf under strict data processing agreements.
• Fraud and AML screening services: We share limited technical and transactional data with fraud detection and anti-money laundering compliance platforms to identify and prevent financial crime.
• Game and platform providers: Game providers whose titles are hosted on the Platform may receive session and wagering data necessary to operate their games correctly. Such providers operate under data processing agreements that restrict their use of your data.
• Regulatory and legal authorities: We disclose personal data to regulators, law enforcement agencies, or courts where required by applicable law, a court order, or a lawful regulatory request.
• Corporate transactions: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the relevant successor entity, subject to the same privacy protections set out in this Policy.

International Data Transfers

The Coin88 Platform and its service providers operate infrastructure in multiple jurisdictions. Your personal data may therefore be transferred to and processed in countries outside Malaysia. Where such transfers occur, Coin88 ensures that appropriate safeguards are in place to maintain an adequate level of protection for your personal data, including but not limited to:

• Contractual data protection clauses incorporated into agreements with third-party processors.
• Technical and organisational security measures appropriate to the sensitivity of the data transferred.
• Transfer only to jurisdictions or processors that provide an adequate level of data protection as determined by applicable law.

By using the Platform, you acknowledge that your personal data may be processed in jurisdictions outside Malaysia as described in this Section.

Data Retention

Coin88 retains your personal data only for as long as is necessary to fulfil the purposes described in this Policy or as required by applicable law. Our general retention principles are as follows:

• Account data: Retained for the duration of your active account relationship with Coin88, and for a minimum of five (5) years following account closure, in accordance with our AML and licensing obligations.
• Transaction records: Financial transaction data is retained for a minimum of five (5) years from the date of the transaction.
• KYC documents: Identity verification documents are retained for a minimum of five (5) years following account closure or the date of the last transaction, whichever is later.
• Support communications: Customer support records are retained for three (3) years from the date of the interaction.
• Technical and analytical data: Aggregated and anonymised analytics data may be retained indefinitely. Identifiable technical data (such as IP address logs) is retained for up to twelve (12) months.
• Marketing consent records: Records of your marketing preferences and consent are retained until you withdraw consent and for a reasonable period thereafter for compliance documentation purposes.

Upon expiry of the applicable retention period, your personal data will be securely deleted or irreversibly anonymised unless further retention is required by a legal obligation or for the establishment, exercise, or defence of legal claims.

Cookies & Tracking Technologies

Coin88 uses cookies and similar tracking technologies to operate the Platform, improve user experience, conduct analytics, and — where you have consented — serve personalised content. The types of cookies we use are described below:

• Strictly necessary cookies: Essential for the Platform to function. These cookies enable core features such as session management, account authentication, and payment security. They cannot be disabled without impacting Platform functionality.
• Performance and analytics cookies: Used to collect anonymised data about how visitors interact with the Platform — pages visited, time spent, error messages encountered. This information helps us understand usage patterns and improve the Platform. We use industry-standard analytics tools for this purpose.
• Functional cookies: Remember your preferences and settings (such as language, game history, or responsible gambling limits you have set) to provide a more personalised experience across sessions.
• Fraud detection cookies: Support our security infrastructure by helping us identify suspicious access patterns, bot activity, and potential account takeover attempts.

You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality or security of the Platform. Strictly necessary cookies cannot be disabled as they are essential to the operation of the site.

Your Data Rights

Subject to applicable data protection law, you hold the following rights in relation to the personal data that Coin88 holds about you:

• Right of Access: You may request confirmation of whether Coin88 holds personal data about you, and a copy of that data along with information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held about you. You may also update certain details directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where you object to processing and we have no overriding legitimate grounds. This right is subject to exceptions, including our legal obligation to retain certain data for regulatory and AML compliance purposes.
• Right to Restrict Processing: You may request that we temporarily restrict the processing of your personal data in certain circumstances, such as while we verify a rectification request or investigate a complaint.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing of your personal data where it is based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the rights described above, please contact our data protection team using the contact details in Section 15. We will respond to verified requests within 30 calendar days. Complex or multiple requests may require up to an additional 60 days, in which case we will notify you of the extension.

Data Security

Coin88 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security practices include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data fields (including payment data and KYC documents) at rest.
• Role-based access controls limiting internal access to personal data to authorised personnel with a demonstrated need to process it.
• Regular security audits and penetration testing conducted by independent third-party security firms.
• Multi-factor authentication requirements for administrative access to systems holding personal data.
• Monitoring and alerting systems for detecting unusual access patterns or potential data breach indicators.

Notwithstanding these measures, no method of electronic transmission or storage is 100% secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, Coin88 will notify you and any applicable supervisory authority in accordance with applicable data breach notification requirements.

Children's Privacy

The Coin88 Platform is strictly intended for persons aged 21 years and above. We do not knowingly collect or process personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately close the associated account, void any transactions, forfeit any balances, and delete the personal data from our systems.

If you are a parent or guardian and believe that your child may have accessed or registered on the Coin88 Platform, please contact us immediately using the details in Section 15 so that appropriate action may be taken without delay.

Updates to This Policy

Coin88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, the services we offer, or other operational requirements. Where any amendment is material, we will provide notice to registered players via the email address on file or through a prominent notice on the Platform at least 7 days before the changes take effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically to stay informed about how we are protecting your personal data. Your continued use of the Platform following any amendments constitutes your acknowledgment of the updated Policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way in which Coin88 processes your personal data, please contact our data protection team using the following details:

Where your request relates to the exercise of your data rights under Section 11, please clearly state the nature of your request in your initial message and include sufficient identifying information to allow us to verify your identity before we proceed.