Privacy Policy promo888 — Our Commitment to Protecting Your Information

This Privacy Policy is issued by promo888 and applies to all users, registered members, website visitors, and any individuals who interact with the promo888 platform in any capacity. It covers all our service channels, including the website, mobile app, live chat, email, and phone communications.

Promo888 acts as the data controller for all personal information collected through our platform. This means we are responsible for determining the purposes and means of processing your data, and for ensuring adequate protection is applied at every stage of processing.

Promo888 collects various categories of personal information depending on the type of interaction you have with our platform. Below is a comprehensive overview of the data we collect:

We may also receive information about you from trusted third parties such as identity verification service providers, payment providers, and legitimate business partners — all strictly within the scope necessary to deliver services to you.

Promo888 uses your personal information responsibly and only for legitimate purposes. Every use of data is based on a solid legal basis under Malaysia's PDPA. The primary purposes for using your data include:

• Account Management: Registering, verifying, and managing your member account on the promo888 platform securely and efficiently.
• Transaction Processing: Processing deposits, withdrawals, bonuses, and all financial transactions related to your account.
• Identity Verification (KYC): Conducting two-layer identity verification required to meet legal obligations and prevent fraud.
• Customer Support: Providing effective technical assistance and customer support whenever you need help.
• Platform Security: Detecting and preventing fraud, unauthorised access, money laundering, and other suspicious activities.
• Experience Personalisation: Tailoring promotional offers, game recommendations, and the platform interface based on your preferences and behaviour.
• Service Communications: Sending important notifications regarding your account, service updates, and relevant security information.
• Legal Compliance: Fulfilling reporting obligations to the relevant authorities in accordance with applicable Malaysian law.

Promo888 does not sell, rent, or trade your personal information to third parties for their own marketing purposes — this is an absolute commitment that will never change. However, in the course of running our business operations, there are certain situations where we need to share your information with specific parties:

• Payment Service Providers: Financial institutions and e-wallet providers that process your deposit and withdrawal transactions require relevant financial data to complete those transactions.
• Technical Service Providers: Companies that provide the technical infrastructure, cloud services, analytics, and security required for the operation of the promo888 platform.
• Identity Verification Providers: A third-party KYC service that helps us verify member identities to meet legal compliance requirements.
• Regulatory Authority: Government agencies, law enforcement authorities, and regulatory bodies when required by law or a valid court order.
• Game Partners: Game providers supplying gaming content on our platform, within a limited and necessary scope only.

All third parties with whom we share data are required to comply with strict data protection standards and are not permitted to use your information for any purpose other than those specified in our service agreements with them.

Promo888 invests seriously in technical security infrastructure to ensure your personal data is always protected. The security measures we employ reflect the highest industry standards and are continuously updated to address the latest cyber threats.

• 256-bit SSL Encryption: All data transmitted between your device and promo888's servers is encrypted using unbreakable 256-bit Transport Layer Security (TLS) technology.
• Data-at-Rest Encryption: Personal information stored in our databases is encrypted using AES-256 encryption algorithms that comply with international standards.
• Two-Factor Authentication (2FA): An additional security layer for account login to prevent unauthorised access even if your password is compromised.
• 24/7 Security Monitoring: Our cybersecurity team continuously monitors systems to detect and respond to any threats or suspicious activity.
• Regular Security Audits: Independent security audits are conducted periodically to identify and address any potential vulnerabilities.
• Internal Access Controls: Only authorised personnel who require access to specific data are permitted to do so — based on the need-to-know principle.

Promo888 uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use:

• Essential Cookies: Required for core platform functions such as login session verification and account security. These cookies cannot be disabled.
• Performance Cookies: Helps us understand how users interact with the platform through anonymised analytics data for continuous improvement.
• Functional Cookies: Remembering your preferences and settings such as language choice and interface layout for a more personalised experience.
• Marketing Cookies: Used with your consent to display relevant ads and offers based on your interests and activity.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality and user experience of the promo888 platform.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal information we hold about you. promo888 fully respects these rights:

• Right of Access: You have the right to request a copy of the personal information we hold about you. Such requests will be processed within 21 working days.
• Right to Rectification: If any information we hold about you is inaccurate or out of date, you have the right to request immediate correction.
• Right to Restriction: Under certain circumstances, you may request that we restrict how we process your personal information.
• Right to Withdraw Consent: You may withdraw consent previously given for specific data processing at any time, without affecting the validity of processing that has already taken place.
• Right to Complain: You have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you believe your rights have been violated.

Promo888 does not retain your personal information for longer than is necessary to fulfil the purpose for which it was collected. Our data retention periods are determined based on operational needs, legal obligations, and legitimate business interests.

• Active Account Data: For the duration your account is active and for a minimum of 7 years after account closure to meet financial and legal compliance requirements.
• Transaction Records: Retained for 7 years in accordance with financial reporting and anti-money laundering legal requirements.
• Support Communication Records: Retained for 3 years from the date of last interaction for reference and dispute resolution purposes.
• Analytics Data: Anonymised data used for platform analytics is retained for no more than 2 years.
• Security Logs: System and security logs are retained for 1 year for incident investigation purposes when required.

Once the retention period expires, data will be securely deleted or permanently anonymised in accordance with approved data disposal procedures.

The promo888 platform may contain links to third-party websites or services in certain contexts. promo888 is not responsible for the privacy practices or content of those third-party sites. We encourage you to read the privacy policy of any external website you visit.

Please note that payment integrations and third-party services used on the promo888 platform have their own privacy policies. While we select partners who uphold high privacy standards, we cannot fully control their data practices beyond the scope of our cooperation agreements.

Promo888 has appointed a Data Protection Officer (DPO) responsible for ensuring compliance with this privacy policy and handling all privacy-related enquiries from members.

If you have any questions, concerns, or requests regarding your personal information, you may contact us via:

• Privacy Email: [email protected]
• Live Support: 24/7 live chat on the promo888 platform
• Mailing Address: Data Privacy Division, promo888, Malaysia

We will endeavour to respond to all privacy-related enquiries within 14 business days of receipt. For more complex complaints, we may require up to 30 business days and will notify you if additional time is needed.