Privacy Policy 2888 – Data Protection Member Privacy

This Privacy Policy ("Policy") is published by 2888, an online betting platform operating under the domain 2888.plus ("we", "Platform", or "2888"). This Policy clearly and transparently describes how we collect, use, store, protect, and share the personal information you provide to us when using the platform.

This Policy applies to all individuals who access or use 2888's services, including website visitors, registered members, and anyone who interacts with our platform through any device or channel. We are committed to managing your personal data with full integrity, transparency, and responsibility.

All our data protection practices comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international standards. We consistently review and update our data protection practices to ensure member security and privacy remain upheld in line with the latest technological developments.

2888 collects various categories of personal data to enable us to provide a secure, effective, and personalised service for every member. Below is a detailed breakdown of the types of data we collect:

We only collect data that is strictly necessary for the stated purposes. We do not collect sensitive data categories such as medical information, religious beliefs, or political views unless you voluntarily provide them in a specific relevant context.

Every piece of data we collect is used solely for legitimate, defined purposes. 2888 does not use your data for any other purpose without first obtaining your additional consent. The following are the primary purposes for data use:

• Identity Verification & KYC: To verify that every member is a legitimate individual aged 18 and above, and to fulfil legal requirements for fraud prevention and anti-money laundering (AML).
• Transaction Processing: To process deposits, withdrawals, and all financial transactions securely and accurately using approved payment methods.
• Account Management: To create, manage, and protect member accounts, including security settings, two-factor authentication, and account recovery.
• Customer Support: To enable the 2888 support team to handle enquiries, complaints, and assistance requests effectively and accurately.
• Platform Security: To detect and prevent fraudulent activity, account abuse, unauthorised access, and cybersecurity threats.
• Service Improvement: To analyse usage patterns in order to improve the interface, platform performance, and overall member experience.
• Marketing Communications: To send promotional information, bonuses, and platform updates – only to members who have given their consent to receive such communications.
• Legal Compliance: To fulfil relevant legal and regulatory obligations, including record-keeping as required by the authorities.

2888 takes a highly cautious and restricted approach to sharing members' personal data. We do not sell, rent, or disclose your data to any party for their own commercial purposes. Data sharing only occurs in limited and legitimate situations as follows:

• Payment Processors: Required financial data is shared with approved payment processors such as banks and digital wallet providers to enable deposit and withdrawal transactions to be processed securely.
• Game Software Provider: Minimum required information is shared with licensed game software providers to enable smooth game integration and technical resolution.
• Legal Authority: Where required by law or a valid court order, we may be obligated to disclose certain data to the relevant authorities.
• Identity Verification Service: Identity data is shared with approved KYC service providers solely for the purposes of identity verification and AML compliance.
• Independent Auditor: Non-identifiable aggregated data may be shared with independent auditors for RNG certification and platform security purposes.

All third parties working with 2888 are required to sign strict data processing agreements and adhere to data protection standards at least equivalent to our own. We conduct thorough due diligence on all partners before any data sharing is permitted.

The security of member personal data is 2888's highest priority. We implement multiple layers of technical and organizational security to protect your information from unauthorized access, loss, alteration, or unintended disclosure.

Technical security measures we implement:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and our servers
• Database-level data encryption for sensitive information such as passwords and financial details
• Two-factor authentication (2FA) is available and encouraged for all member accounts
• High-powered intrusion detection systems (IDS) and firewalls monitoring traffic 24/7
• Regular penetration testing by independent cybersecurity firms
• Real-time account activity monitoring with automatic alerts for any suspicious behavior

Organizational security measures:

• Role-based access control (RBAC) policy – staff may only access data required for their specific duties
• Mandatory cybersecurity awareness training for all 2888 staff on a regular basis
• Clear and tested incident response procedures for managing any data breaches
• Internal and external security audits conducted at least twice a year

2888 uses cookies and similar tracking technologies to enhance your experience on the platform, maintain your login session, and analyse usage patterns for service improvement purposes. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session authentication and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collects information on how members use the platform to help us identify and fix technical issues and improve performance.
• Functional Cookies: Stores your preferences such as language settings and display options to provide a more personalized experience.
• Analytics Cookies: Collects aggregated and anonymized data on traffic and user behavior to help us understand how the platform is used overall.

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality and user experience of the 2888 platform. For analytics and marketing cookies, you may opt out through the privacy settings in your account.

Under Malaysia's Personal Data Protection Act 2010 and 2888's privacy policy, you have the following rights regarding the personal data we hold about you:

• Right of Access: You have the right to request a copy of all personal data we hold about you. This request will be processed within 14 business days.
• Right to Rectification: If you find that the data we hold is inaccurate or incomplete, you have the right to request an immediate correction.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data, subject to applicable legal record-keeping requirements.
• Right to Restrict Processing: You may request that we restrict the processing of your data in certain situations, such as while you are disputing the accuracy of the data.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time.
• Right to Data Portability: You may request your personal data in a machine-readable format for transfer to another service provider.
• Right to Withdraw Consent: Where data processing is based on your consent, you have the right to withdraw that consent at any time.

To exercise any of the above rights, please contact our privacy team by email at [email protected] including your account number and request details. We will verify your identity before processing any data-related request.

2888 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or for as long as required by applicable law. Retention periods vary according to data type and legal requirements:

• Active Account Data: Retained for the duration your account is active on the 2888 platform plus the mandatory period following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in line with Malaysian financial and tax legal requirements.
• KYC & Identity Verification Records: Retained for a minimum of 5 years after account closure or the end of the business relationship, in accordance with Malaysia's AMLA requirements.
• Support Communication Logs: Retained for 2 years for reference and dispute resolution purposes.
• Analytics Data: Non-identifiable aggregated data may be retained for longer periods for long-term trend analysis purposes.

When data is no longer needed and there is no legal requirement to retain it, 2888 will delete or anonymise that data using secure deletion methods that ensure it cannot be recovered or accessed again.

The 2888 platform is strictly for individuals aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If you are under 18, you are not permitted to register or use any 2888 services.

If we discover that we have inadvertently collected data from a minor, we will take immediate steps to delete the data and close the account involved. Parents or guardians who believe their child has registered on our platform are encouraged to contact our support team immediately.

2888 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, current legal requirements, or new technological developments. We are committed to notifying you of any material changes through the following means:

• In-platform notification during your next login session
• Email to your registered address at least 7 days before the changes take effect
• Clear announcements on the 2888 platform homepage

The "Last Updated" date shown at the top of this page will always reflect the date of the most recent revision. We encourage you to review this page periodically to stay informed of how we handle your personal data. Continued use of the platform after any Privacy Policy changes are published will be considered your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, the 2888 privacy team is ready to assist you through the following channels:

• Privacy Email: [email protected] – for detailed enquiries regarding privacy and data rights
• Live Chat: Available 24/7 directly within the 2888 platform – for general enquiries and immediate assistance

When contacting us regarding privacy matters, please state your account number (if applicable) and a clear description of your enquiry or request. This will help us process your request more quickly and efficiently. We aim to respond to all privacy-related enquiries within 5 business days.