01 Introduction and Scope of This Policy

This Privacy Policy ("Policy") describes how ex888 ("we", "our platform") collects, uses, discloses, and protects your personal information when you use the website ex888.app, mobile app, and all related services we offer.

By registering an account or using any ex888 services, you agree to the collection and processing of your personal information as described in this Policy. If you do not agree, please discontinue use of the platform and contact us to close your account.

Ex888 operates in line with international best practices for data protection and complies with all applicable legal requirements. We update this Policy from time to time to reflect changes in our practices or legal obligations. The date of the latest update is shown at the top of this document.

02 Types of Information We Collect

Ex888 collects various categories of information to enable us to provide a safe, efficient, and responsible service to all members. The following are the main categories of information we collect:

A. Account Registration Information

  • Full name as stated in official identification documents
  • Date of birth (to verify you are 18 years of age or older)
  • Active email address
  • Mobile phone number
  • Password (stored in hashed form that cannot be reversed)
  • Country and current residential address

B. Identity Verification Information (KYC)

  • Copy of Malaysian identity card (MyKad) or passport
  • Recent proof of address (utility bill, bank statement)
  • Registered bank account or e-wallet details
  • Selfie or facial photo for liveness verification purposes (if required)

C. Usage and Technical Information

  • IP address and approximate location data
  • Device type, operating system, and web browser used
  • Login session information (time, duration, and activity during the session)
  • Cookie data and related tracking technologies
  • Wagering records, games played, and transaction history

D. Financial Information

  • Deposit and withdrawal history
  • Payment method used (bank name, card type, e-wallet)
  • Bonus and promotion records received

Ex888 does not store full credit or debit card numbers in our systems. All card transactions are processed through third-party payment gateways that comply with PCI-DSS security standards.

03 Purpose of Personal Information Use

The personal information we collect is used solely for lawful and necessary purposes in operating the ex888 platform. We do not use your data for any purpose beyond the scope stated below:

Processing Purpose Types of Data Used Legal Basis
Identity verification and account registration Name, date of birth, email, phone Contractual compliance
Processing deposits and withdrawals Banking details, transaction history Contractual compliance
Fraud prevention and AML IP, usage patterns, KYC Legitimate interest / legal
Service communications and support Email, phone number Contractual compliance
Marketing and promotions (with consent) Email, game preferences Member consent
Platform improvement and analytics Usage data, cookies Legitimate interest
Regulatory compliance requirements All related categories Legal obligation

Ex888 will not use your personal information for any other purpose without first informing you and, where required, obtaining your fresh consent.

04 Use of Cookies and Tracking Technologies

Ex888 uses cookies and similar tracking technologies to enhance the user experience, ensure account security, and understand how members interact with our platform.

Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
  • Performance Cookies: Collecting information on how pages are used to help us improve the platform.
  • Functional Cookies: Remembering your preferences such as language and display settings for your convenience.
  • Analytics Cookies: Helping us understand aggregate usage patterns for internal improvement purposes.

You can control and manage cookies through your web browser settings at any time. However, disabling essential cookies may affect the functionality of the ex888 platform. For more information about cookies, refer to your web browser's documentation.

Important Note: ex888 does not use cookies to track your activity on third-party websites. Our tracking is limited solely to the ex888.app domain and our official mobile app.

05 Sharing Information with Third Parties

Ex888 values the trust you place in us. We does not sell your personal information to any third party for marketing or commercial purposes. Your information is only shared in the following situations:

Authorised Third Parties That May Receive Your Information

  • Payment Providers: Payment gateways, banks, and e-wallet providers that process your financial transactions — only information necessary for the relevant transaction.
  • Game Providers: Third-party gaming companies that provide game content on our platform; only session data necessary to enable gameplay is shared.
  • Regulatory Authority: Government agencies or regulatory bodies when required by law, court order, or valid legal process.
  • Technology Service Providers: Companies providing cloud computing, cybersecurity, and technical support services — subject to strict confidentiality agreements.
  • KYC Verification Services: Third-party providers that conduct identity verification and financial background checks.

All third parties we work with are required to meet security and privacy standards equal to or exceeding our own. A legally binding data processing agreement is signed for every data-sharing partnership.

06 Data Security & Protection

The security of your personal data is ex888's highest priority. We continually invest in security infrastructure to ensure your information is always protected against unauthorized access, theft, or misuse.

Security Measures We Practice

  • 256-bit SSL/TLS Encryption: All data transmitted between your device and ex888 servers is protected with military-grade encryption.
  • Data-at-Rest Encryption: Sensitive data stored in our databases — including passwords and financial information — is encrypted using the latest encryption algorithms.
  • Two-Factor Authentication (2FA): Members are encouraged to enable 2FA for an additional layer of protection during login.
  • 24/7 Monitoring: Our security team continuously monitors systems to detect and respond to any security threats.
  • Periodic Security Audits: Penetration testing and independent third-party audits are conducted regularly to identify and address any vulnerabilities.
  • Internal Access Control: ex888 staff are only granted access to data necessary for their role, and all access is strictly logged.

While no system can guarantee 100% absolute security, ex888 takes all reasonable precautions to protect your data. If you suspect any suspicious activity on your account, please contact our customer support immediately.

07 Data Retention Period

Ex888 retains your personal information only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The principle of "minimum necessary retention" serves as our primary guide in determining data retention periods.

  • Active Account Data: Retained for as long as the account remains active, and for an additional period following account closure as required by AML and tax legal requirements.
  • Financial Transaction Records: Retained for a minimum of seven (7) years in accordance with financial and anti-money laundering legal requirements.
  • Support Communication Logs: Retained for three (3) years for reference and dispute resolution purposes.
  • Technical and System Log Data: Retained for twelve (12) months for security and fraud detection purposes.
  • KYC Documents: Retained for the period stipulated by applicable regulatory requirements, typically five (5) to seven (7) years.

Once the retention period expires, your data will be securely deleted or fully anonymised so it can no longer be linked to your identity.

08 Your Rights as a Data Subject

As an ex888 member, you hold important rights regarding your personal data. ex888 fully respects and facilitates the exercise of these rights:

Right of Access

Request a copy of the personal data we hold about you.

Right to Rectification

Request correction of inaccurate or incomplete data.

Right to Erasure

Request deletion of your personal data under certain circumstances.

Right to Object

Object to the processing of your data for direct marketing purposes.

Right to Restriction

Request restriction of processing your data in certain situations.

Right to Portability

Receive your data in a machine-readable format.

To exercise any of the above rights, please contact our privacy team via support email or Live Chat. We will respond to your request within 30 working days. In complex cases, this period may be extended by up to 60 days with prior notice.

Rights Fulfilment Limitations: Some rights are not absolute and are subject to legal exceptions. For example, we may be unable to delete data that must be retained to comply with legal obligations such as AML requirements or court orders.

09 Cross-Border Data Transfers

In the course of our global operations, your personal information may be transferred to and stored on servers located outside Malaysia. ex888 ensures that any cross-border data transfers are carried out with adequate safeguards equivalent to local standards.

The safeguards we apply to international data transfers include:

  • Use of approved standard contractual clauses for data transfer agreements
  • Ensuring the recipient country maintains an adequate level of data protection
  • Comprehensive data processing agreements with all overseas data processing partners
  • Data protection impact assessments (DPIA) for high-risk data transfers

10 Children's Privacy

The ex888 platform is strictly for users aged 18 and above. We do not knowingly collect or process personal information of individuals under 18 years of age.

Our registration process includes strict age verification, covering date-of-birth checks and official identity document verification. If we determine that an account was registered by a minor, the account will be closed immediately and all related data will be deleted as promptly as possible.

If you believe we may have inadvertently collected information from a minor, please contact us immediately so that prompt action can be taken.

11 Communication Preferences and Unsubscribe Options

Ex888 may send you communications for different purposes. You have full control over the types of communications you wish to receive:

  • Transactional Emails: Deposit, withdrawal, and account security notifications — these cannot be unsubscribed as they are essential to your account security.
  • Promotional Emails: Bonus information, latest promotions, and exclusive offers — you may unsubscribe at any time via your account settings or the unsubscribe link in the email.
  • Push Notifications (App): You can manage your notification preferences through the ex888 mobile app settings.
  • SMS / WhatsApp: If you have provided consent for SMS communications, you may withdraw that consent via your account settings.

To update your communication preferences, log in to your ex888 account, navigate to the "Account Settings" section, and update your notification preferences. You may also contact our customer support for assistance.

12 Changes to This Privacy Policy

Ex888 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or the way we operate. When significant changes are made, we will:

  • Updating the "Last Updated" date at the top of this document
  • Sending email notifications to all registered members
  • Displaying a clear notice on the platform's home page for at least 14 days
  • For material changes, seek re-consent from members before they take effect

Continued use of the ex888 platform after a change notice is posted constitutes your acceptance of the updated Policy. If you disagree with the changes, you have the right to close your account by contacting our support team.

13 Contact Our Privacy Officer

If you have any questions, concerns, or wish to exercise your personal data rights, the ex888 privacy team is ready to assist you through the following channels:

  • Email: [email protected] (please label the subject: "Privacy Policy Inquiry")
  • Live Chat: Available 24/7 via the chat icon on the ex888 platform
  • Help Centre: Visit the page FAQ us for answers to frequently asked questions about privacy

We are committed to responding to all privacy-related inquiries within 3 working days. For requests involving more complex data subject rights, we will notify you of the estimated processing timeframe.