Live88 Privacy Policy — Data Security & Member Privacy Malaysia

01 Information We Collect

Live88 collects your personal information only when it is necessary to provide a safe, efficient, and responsible service. We believe in the principle of minimum data collection — we do not collect more than what is genuinely needed to operate the platform.

The following are categories of information we may collect when you use the live88 platform:

02 How We Use Your Data

Every piece of information we collect is used for a clear and lawful purpose. live88 only processes your personal data on a solid legal basis — whether to fulfil a service contract with you, meet legal obligations, or based on the platform's legitimate interests that do not compromise your fundamental rights.

• Account Management: Creating, verifying, and maintaining your member account, including registration processing, secure login, and two-factor authentication.
• Transaction Processing: Processing deposits, withdrawals, and bonus payments promptly and accurately through integrated payment methods.
• KYC Verification: Verifying member identity and age to ensure compliance with anti-money laundering (AML) laws and prevention of illicit financial activity.
• Platform Security: Detecting and preventing fraud, unauthorized access, multiple account usage, and any suspicious activity in real time.
• Customer Support: Providing technical support and effectively resolving disputes related to accounts or transactions.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate self-control tools.
• Service Communications: Sending important notifications related to your account, security, promotions you have opted in to receive, and policy updates.
• Platform Improvement: Analyzing usage data in aggregate and anonymized form to improve overall user experience and platform performance.

03 Information Sharing with Third Parties

Live88 does not sell, rent, or disclose your personal information to third parties for marketing or commercial purposes without your explicit consent. However, there are limited situations where we need to share certain information with specific parties for legitimate operational purposes.

• Payment Service Providers: Required transaction information is shared with trusted payment gateway providers such as FPX, DuitNow, and e-wallet providers to process your transactions securely.
• KYC Service Provider: Identity documents may be transmitted to licensed third-party identity verification service providers who are subject to strict confidentiality obligations.
• Game Providers: Minimum required game session data is shared with game platform providers such as Pragmatic Play and Evolution Gaming to deliver a seamless gaming experience.
• Statutory Authority: live88 will disclose information requested by Malaysian law enforcement authorities or relevant regulatory bodies when required by court order or applicable law.
• Security Partners: Minimum technical data may be shared with cybersecurity services to detect and counter security threats against the platform.

04 Data Security — Technology & Procedures

Protecting your personal data from unauthorized access, loss, or misuse is live88's highest priority. We continuously invest in the latest security infrastructure and enforce strict security operating procedures at every level of the organization.

• 256-bit SSL Encryption: All data communications between your web browser or mobile app and live88's servers are protected by 256-bit SSL encryption that cannot be broken by current technology.
• Data-at-Rest Encryption: Sensitive data stored in our databases — including financial information and identity documents — is encrypted using AES-256 standards, not only during transit.
• Multi-Layered Access Control: Access to member personal data within live88's internal systems is restricted to staff with a legitimate business need only, enforced through a role-based access control (RBAC) system.
• Real-Time Threat Monitoring: Our security platform monitors all system activity 24/7 to automatically detect anomalies, intrusion attempts, and suspicious access patterns.
• Regular Penetration Testing: live88 conducts regular penetration testing and independent security audits to identify and patch any system vulnerabilities before they can be exploited.
• Security Incident Management: We have a comprehensive incident response plan to address any data breaches swiftly and efficiently, including member notification procedures within stipulated timeframes.

05 Cookies & Tracking Technologies

Live88 uses cookies and similar tracking technologies to enhance platform functionality, maintain login session security, and understand how members interact with our services. Cookies are small text files stored on your device when you visit the live88 website.

• Essential Cookies: These cookies are required for the live88 platform to function properly. They manage your login session, store language preferences, and ensure session security. These cookies cannot be disabled.
• Performance Cookies: We use analytics cookies to understand how members use our platform — the most frequently visited pages, time spent, and navigation patterns. All analytics data is aggregated and anonymised.
• Functional Cookies: These cookies store your personal preferences such as display settings, last played game, and account limits you have set, so you don't need to reconfigure them each time you log in.
• Cookie Management: You can manage your cookie settings through your web browser settings. Please note that disabling certain cookies may affect the full functionality of the live88 platform.

06 Your Rights as a live88 Member

Under Malaysia's PDPA and live88's own privacy commitments, you have important rights regarding your personal data. live88 fully respects these rights and provides straightforward mechanisms for you to exercise them.

07 International Data Transfers

As live88 operates in a global digital environment, your personal data may be processed or stored on servers located outside Malaysia in limited circumstances. When this occurs, we ensure that protection equivalent to Malaysia's PDPA standards is fully upheld.

• All international data transfers are conducted only to countries or organisations that provide an adequate level of data protection or are bound by comprehensive data protection agreements with live88.
• We apply internationally recognised Standard Contractual Clauses (SCCs) to ensure your data is protected to the highest standards regardless of the physical processing location.
• Sensitive payment data is processed through payment gateways compliant with the highest PCI DSS standards, ensuring the security of your financial information throughout the entire processing chain.
• You have the right to obtain information about the safeguards used for international data transfers by contacting the live88 support team.

08 Data Storage & Deletion

Live88 adheres to the principle of "data retention limits" — we retain your personal data only for as long as necessary to fulfil the purpose of collection or as required by law. When data is no longer needed, it is securely deleted or anonymised.

• Active Account Data: Retained for the duration your account is active at live88, plus 5 years after account closure to fulfil anti-money laundering legal requirements.
• Financial Transaction Records: Retained for 7 years after the transaction occurs, in accordance with Malaysia's financial reporting and tax law requirements.
• Security Log: Security and access log data is retained for 12 months to facilitate security incident investigations when required.
• Marketing Data: Data used for marketing communications is deleted within 30 days after you withdraw your marketing communication consent.
• Secure Deletion: When data is required to be deleted, we apply cryptographic erasure and physical removal methods to ensure the data cannot be recovered by any party.

09 Children's Privacy

Live88 is an online gaming platform exclusively dedicated to adults aged 18 and above. We take children's privacy protection extremely seriously and do not knowingly collect any personal information from individuals under age.

• Live88's registration process requires mandatory age verification. Anyone unable to confirm they are at least 18 years old is not permitted to register or use the platform.
• Should we discover or be informed that personal data of a child under 18 has been collected without valid consent, we will delete such data immediately and close the associated account.
• If you as a parent or guardian believe your child has registered with live88 without your knowledge, please contact our support team immediately for prompt remedial action.

10 Amendments to This Privacy Policy

Live88 reserves the right to amend this Privacy Policy from time to time to reflect changes in business practices, technological requirements, or new legal obligations. We are committed to informing you of any material changes in a transparent and timely manner.

• Any amendments to this Privacy Policy will be published on this page, with the updated date clearly noted at the top of the page.
• For material amendments that significantly affect how we process your data, we will send you a direct notification via email or in-platform notification at least 14 days before the changes take effect.
• Continued use of the live88 platform after the effective date of any amendment will be deemed as your acceptance of the updated Privacy Policy.
• We recommend that you review this Privacy Policy page periodically to stay up to date on how we protect your privacy.

11 Contact Us — Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way live88 handles your personal data, we encourage you to contact us directly. The live88 Data Protection Team is available to assist you 24 hours a day, 7 days a week.

• Contact us via live chat within the live88 platform for an immediate response to any privacy enquiries.
• Written enquiries may be sent to [email protected] with the subject line "Privacy Policy Enquiry" for priority processing.
• We are committed to responding to all privacy enquiries within 3 business days and resolving more complex cases within 14 business days.
• If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory body.