Fl888 Privacy Policy – Malaysian Member Personal Data Protection

1Introduction

Fl888 ("we", "our platform") understands that privacy is something every online user values deeply, especially when it involves financial and personal information. We do not take this lightly — every data-related decision is made carefully and with our members' best interests in mind.

This Privacy Policy applies to all users of the fl888 platform, including unregistered visitors, registered members, and participants in our promotional or VIP programmes. It covers all your interactions with the platform, whether via desktop web browser, mobile app for Android or iOS, or any official fl888 communication channel.

We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and are committed to ensuring your personal data is processed fairly, lawfully, and transparently. If you have any privacy-related enquiries, the fl888 support team is available to assist you 24 hours a day, 7 days a week.

2Personal Data We Collect

Fl888 only collects data that is genuinely necessary to deliver quality, secure and regulatory-compliant services. The following are the categories of data we collect:

3How We Collect Data

Fl888 collects your personal data through the following channels:

Information You Provide Directly

• During the account registration process — name, email, phone number and password.
• During the KYC (Know Your Customer) process — identity documents and proof of address.
• When making a deposit or withdrawal — bank account or digital wallet information.
• When contacting our support team via LiveChat, email or Telegram.
• When participating in promotions, contests or surveys organised by fl888.

Automatically Collected Data

• Technical data such as IP address, device type, and web browser information is collected automatically when you access our platform.
• Cookies and similar tracking technologies are used to enhance the user experience and understand platform usage patterns.
• Game activity logs, including games played, wagering amounts and game outcomes, are recorded for game integrity and regulatory compliance purposes.

Data from Third Parties

• Registered identity verification or KYC service providers may share verification results with fl888.
• Integrated payment providers supply the transaction verification required to process your deposits and withdrawals.
• Anti-fraud and anti-money laundering agencies may conduct background checks as required by law.

4How We Use Your Data

Fl888 uses your personal data only for legitimate and relevant purposes. Below is the full list of how your data is used, along with the applicable legal basis:

• Account management: Create, verify and maintain your fl888 account, including the KYC process required by law.
• Transaction processing: Process deposits, withdrawals, bonus credits and all financial transactions related to your account.
• Service delivery: Provide access to all games, promotions and platform features you are eligible to use.
• Security and fraud prevention: Detect, investigate and prevent fraudulent activity, money laundering, multiple account use and violations of the Terms and Conditions.
• Customer support: Respond to enquiries, resolve complaints and provide technical assistance to you.
• Legal compliance: Fulfil legal and regulatory obligations applicable to the fl888 platform.
• Platform improvement: Analyse usage patterns to improve the platform's functionality, interface and overall experience.
• Marketing communications: Send information about promotions, bonuses and the latest offers — only to members who have consented to receive such communications.

5Data Sharing with Third Parties

Fl888 values your trust. We do not sell or trade your personal data. However, there are specific situations where we need to share data with certain parties:

Trusted Service Providers

Fl888 works with third-party service providers who help us operate the platform. They only receive access to the data needed for their specific tasks and are bound by strict confidentiality agreements. These include:

• Payment and financial transaction processing service providers.
• Registered and certified KYC and identity verification service providers.
• Game software providers that supply game content on the fl888 platform.
• Cloud and server infrastructure service providers that store platform data.
• Analytics and quality assurance service providers that help us improve the platform.

Legal Requirements

Fl888 may be required to disclose your personal data when mandated by law or by directive from a competent authority, including:

• Compliance with valid court orders or warrants.
• Cooperation with law enforcement agencies investigating financial crimes.
• Mandatory reporting to the relevant regulatory authorities.

6Data Security Measures

Data security is an absolute priority at fl888. We implement multiple layers of technical and organisational protection to safeguard your personal data:

• 256-bit SSL Encryption: All data transmitted between your device and fl888's servers is protected with banking-grade encryption.
• Strict access control: Only authorised fl888 staff with a legitimate business need may access member personal data.
• Two-factor authentication (2FA): fl888 supports and encourages the use of 2FA for all member accounts to add an extra layer of security.
• Regular security audits: fl888 undergoes regular independent security audits and penetration testing to identify and address any vulnerabilities.
• 24/7 Monitoring: Our automated monitoring system operates around the clock to detect any suspicious activity or unauthorised access attempts.
• Secure data backups: Your data is regularly backed up to a separate secure storage location to ensure data recovery in the event of an unexpected incident.

While fl888 takes all reasonable steps to protect your data, no system can guarantee absolute security. We encourage you to also protect your account by using a strong password and not sharing your login credentials with anyone.

7Data Retention Period

Fl888 only retains your personal data for as long as it is needed for the purposes stated in this Privacy Policy, or as required by applicable law.

• Active account data: Retained for the duration your account is active and for a period following account closure to meet legal obligations.
• Financial transaction records: Retained for a minimum of seven (7) years after a transaction occurs, in compliance with Malaysia's financial and tax legal requirements.
• KYC Data: Retained for a minimum of five (5) years after the business relationship ends, in compliance with Anti-Money Laundering legal requirements.
• Support communication logs: Retained for two (2) years from the date of the last interaction for quality control and dispute resolution purposes.
• Cookie and session data: Retention periods vary by cookie type — please refer to Section 9 for more details.

When data is no longer required, fl888 will securely delete or anonymise it in accordance with established procedures.

8Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and fl888's policies, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact the fl888 support team via LiveChat or our official email. We will process your request within 14 working days and may request identity verification before processing your request.

9Cookies & Tracking Technologies

Fl888 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

You can control or delete cookies through your web browser settings. However, disabling essential cookies may affect certain features of the fl888 platform. For guidance on managing cookies in your browser, please refer to your browser's help section.

10Cross-Border Data Transfers

In operating an international platform, your personal data may be transferred to and stored on servers located outside Malaysia. fl888 ensures that any such data transfers are carried out with appropriate safeguards in place:

• Transfers are only made to countries or providers that offer an equivalent level of data protection.
• All overseas service providers are bound by strict data processing agreements that require them to protect your data in accordance with fl888's standards.
• Fl888 applies end-to-end encryption for all cross-border data transfers to ensure the security of your information in transit.

11Child Protection

Fl888 services are for individuals aged 18 and above only. fl888 does not knowingly collect personal data from individuals under the age of 18.

If we discover that we have collected data from minors without appropriate age verification, we will promptly take steps to delete that data and close the relevant account. Parents or guardians who suspect that a child under their care has registered on fl888 are encouraged to contact our support team immediately.

12Amendments to This Privacy Policy

Fl888 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements or service improvements.

• The "Last Updated" date at the top of this page will be updated whenever we make changes.
• For material changes, we will notify members via in-platform notifications or their registered email at least 7 days before the changes take effect.
• Continued use of the fl888 platform after the effective date of any changes constitutes acceptance of the amended Privacy Policy.
• If you disagree with any changes, you have the right to stop using the platform and request account closure.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. For any questions or concerns regarding this Privacy Policy, please contact the fl888 support team, available at all times.