Privacy Policy 888top — Your Personal Data Protection

Welcome to the 888top Privacy Policy. This document constitutes a legal agreement between you as a member of our platform and 888top as the responsible data controller. We understand that your personal data is highly valuable, and we are committed to protecting it with the highest level of security we can provide.

888top operates as an online casino platform providing services to members in Malaysia. In the course of our operations, we collect and process certain personal data necessary to deliver a safe, fair, and enjoyable experience to you. This Privacy Policy explains in detail what data we collect, why we need it, how we use it, and your rights as the owner of that data.

This Privacy Policy is to be read together with the Terms and Conditions 888top and both of these documents together form the complete agreement framework between you and our platform. Should any conflict arise between these two documents regarding privacy, this Privacy Policy shall prevail.

888top only collects data that is strictly necessary to operate the platform safely and to comply with applicable regulatory requirements. We do not collect data beyond these needs. The following are the categories of data we collect:

2.1 Data You Provide Directly

• Registration information: Full name, date of birth, email address, phone number, username, and hashed password
• Identity verification documents (KYC): Copy of national identity card, passport, or other valid travel document
• Financial information: Bank account details, e-wallet account numbers, and deposit/withdrawal transaction records
• Communications: Any messages, complaints, or enquiries you submit to our support team

2.2 Data Collected Automatically

• Device data: IP address, browser type, operating system, screen resolution, and device identifier
• Usage data: Games played, session duration, betting history, and platform usage patterns
• Location data: Estimated geographic location based on IP address for regulatory compliance purposes
• Cookies and similar technologies: Data collected through cookies to improve user experience

Every piece of data we collect is used for a clear and legitimate purpose. 888top will not process your data for any purpose not stated in this policy without obtaining your additional consent beforehand.

3.1 Account Management and Services

Your data is used to create and maintain your account, process deposits and withdrawals, verify your eligibility to use the platform (i.e. meeting age and location requirements), and provide effective customer support when you need assistance. Without this data, we cannot deliver the platform's core services to you.

3.2 Security and Fraud Prevention

We use your device, IP and usage pattern data to detect and prevent fraudulent activity, money laundering and other security threats. This includes monitoring unusual wagering patterns, identifying suspicious logins from new locations, and verifying that every financial transaction is legitimate and authorised by the correct account holder.

3.3 Regulatory Compliance

As a platform operating in a regulated industry, we are legally required to maintain transaction records, conduct KYC and AML (Anti-Money Laundering) checks, and report suspicious activity to the relevant authorities. Data processing for these purposes is a legal obligation, not a choice.

3.4 Responsible Gaming

Your gameplay pattern data is analysed to identify early indicators of gambling-related concerns. If our system detects worrying patterns, our Responsible Gaming team may reach out to you with support information or suggestions for gameplay limits. This is part of our commitment to member wellbeing.

3.5 Marketing Communications

With your consent, we will send you information about relevant promotions, bonuses and special offers via email or platform notifications. You may withdraw this consent at any time through your account settings or by contacting our support team.

888top does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, in the course of operating our platform, there are limited situations where we may need to share your data with certain parties:

4.1 Service Providers

We work with trusted third-party service providers to help operate our platform, including payment solution providers, certified cloud service providers, licensed gaming software providers, and customer support system providers. All service providers are required to comply with strict privacy policies and are only permitted to use your data for specified purposes.

4.2 Legal Requirements

888top may disclose your personal data when required by law, court order, legal process, or a valid request from a government authority. We will endeavour to notify you of any such request to the extent permitted by law.

4.3 Protection of Interests

In cases involving fraud, money laundering, or serious threats to the security of the platform or other members, 888top reserves the right to share relevant information with the appropriate authorities without prior notice to the user involved.

The security of your personal data is an absolute priority for 888top. We continuously invest in the latest security infrastructure and apply a multi-layered approach to protecting your data from unauthorised access, disclosure, alteration or destruction.

5.1 Technical Measures

• 256-bit SSL/TLS encryption for all data communications between your browser and our servers
• Encryption of sensitive data at rest using AES-256 standard
• Data environment separation — production and test data are fully isolated
• Regular vulnerability scanning and penetration testing
• Intrusion detection system (IDS) and 24/7 threat monitoring
• Two-factor authentication (2FA) for staff access to internal systems

5.2 Organisational Measures

• Mandatory privacy and data security training for all staff
• Role-Based Access Control Policy
• Binding confidentiality agreements for all employees and contractors
• Tested and documented incident response procedures
• Regular internal and external security audits

5.3 Data Breach Response

In the event of a data breach affecting the security of your personal data, 888top is committed to notifying the relevant authorities within 72 hours of becoming aware of the incident, and informing you directly within a reasonable timeframe, in accordance with applicable legal requirements.

888top retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Once data is no longer needed, it will be securely deleted or anonymised.

6.1 Standard Retention Periods

• Active account data: Retained for the duration of the active account plus 5 years after account closure for legal compliance purposes
• Financial transaction records: Minimum 7 years as required by Malaysian financial regulations
• KYC documents: Retained for the duration of the active account and 5 years after closure
• Support communication logs: 3 years from the date of last communication
• System log data: 12 months for operational security monitoring
• Marketing cookies: Up to 12 months or until you withdraw your consent

Once the retention period has expired, your data will be securely deleted using methods that ensure it cannot be recovered. In certain cases where full deletion is technically not possible (for example, in backup systems), the data will be isolated and protected until full deletion can be carried out.

888top uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They help us recognise you on subsequent visits and personalise your experience.

7.1 Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled as they are critical to platform operations.
• Performance Cookies: Collecting information on how you use our platform to help us improve our services. All data is collected in aggregate and anonymised form.
• Functional Cookies: Storing your preferences such as language, display settings, and other information to make your experience more comfortable.
• Marketing Cookies: Used to display relevant advertisements to you on our platform and on partner websites. These cookies require your explicit consent.

7.2 Managing Cookie Preferences

You can manage or disable cookies through your browser settings at any time. Please note that disabling essential cookies may affect platform functionality and your gaming experience. For non-essential cookies, you can update your preferences via the cookie settings panel displayed during your first visit to the platform.

Under Malaysia's Personal Data Protection Act (PDPA) and related privacy legislation, you have several important rights regarding your personal data held by 888top. We are committed to respecting and facilitating the exercise of these rights.

In the context of operating a global online platform, your personal data may be transferred to and stored on servers located outside Malaysia. This occurs primarily when we use international cloud services or work with service providers operating across multiple countries.

888top ensures that all international data transfers are protected by appropriate safeguards, including:

• Internationally recognised standard data transfer agreements
• Ensuring the recipient country has an equivalent or higher level of data protection
• Standard contractual clauses binding data recipients to strict protection obligations
• Data Protection Impact Assessment (DPIA) for high-risk transfers

You may contact us for more information about the specific data transfer mechanisms we use and a list of countries where your data may be processed.

888top reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or platform service improvements. We will not reduce your rights under this Privacy Policy without your explicit consent.

When we make significant changes to this Privacy Policy, we will:

• Updating the "Last updated" date at the top of this page
• Displaying a clear notice on our platform regarding the changes
• Sending you a notification via your registered email or platform message for material changes
• Providing a reasonable notice period before changes take effect, typically at least 30 days

Continued use of the 888top platform after the effective date of any changes will be considered your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account before they take effect.

If you have any questions, concerns or complaints regarding this Privacy Policy or how we handle your personal data, the 888top privacy team is ready to assist you. We are committed to responding to every privacy enquiry thoroughly and within a reasonable timeframe.

If you are not satisfied with our response, you also have the right to lodge a complaint with the Malaysia Department of Personal Data Protection or the relevant data protection authority in your country.