Privacy Policy Soccer888 – Malaysia Player Data Protection

Soccer888 is committed to protecting the privacy and security of every player's personal data on our platform. This Privacy Policy provides a comprehensive and transparent overview of Soccer888's data management practices — covering what data we collect, how it is collected, why it is used, who it may be shared with, and your rights as the data owner.

This document applies to all users of the Soccer888 platform, including unregistered website visitors, active registered players, and former players whose accounts have been closed. It covers all Soccer888 services — Malaysia Super League and EPL Sports Betting, Live Casino, table games, jackpots, e-sports, virtual sports, and all other platform features.

By registering a Soccer888 account or using our platform, you agree to the data management practices described in this Privacy Policy. If you do not agree with any part of this document, please discontinue use of the Soccer888 platform and contact us to close your account if one already exists.

Soccer888 takes its responsibility as a custodian of players' personal data seriously. All staff who handle personal data are trained and bound by strict confidentiality obligations, and internal access is restricted on a strict need-to-know basis.

Soccer888 collects various categories of personal data depending on your level of interaction with our platform. Here is a comprehensive overview:

Soccer888 does not collect sensitive data such as health information, religious beliefs, or political views. We only collect data that is genuinely necessary to provide our platform services safely and effectively to players in Malaysia.

Soccer888 collects your personal data through several different methods, depending on how you interact with our platform:

1. Registration Form: When you register a new Soccer888 account, you provide basic information — such as your name, phone number, email address, and date of birth — directly through the online registration form.
2. KYC Verification: Before your first withdrawal is processed, Soccer888 requires identity verification documents to comply with Know Your Customer (KYC) and anti-money laundering (AML) requirements. This includes a copy of your MyKad and proof of ownership of your payment method.
3. Financial Transactions: Data is collected automatically when you make deposits or withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, CIMB Clicks, or any other Malaysia payment method supported by Soccer888.
4. Platform Activity: Soccer888 automatically records all activity on the platform — including bets placed on the Malaysia Super League, EPL, badminton, or any other sport, Live Casino and table game sessions, as well as usage of other platform features.
5. Device and Connection: Technical data such as IP address, device type, browser, and login session information is collected automatically for security purposes and to improve the user experience.
6. Communications with Soccer888: When you contact the Soccer888 support team via live chat, WhatsApp, or email, the content of those communications is stored for reference and service improvement purposes.
7. Cookies and Tracking Technologies: Like most online platforms, Soccer888 uses cookies and similar tracking technologies to enhance the user experience and analyse platform usage patterns. See Section 9 for more details.

Soccer888 uses collected personal data solely for legitimate, stated purposes. We do not use your data for any other purpose without first obtaining your consent:

• Account Management: Creating and maintaining your Soccer888 account, processing registration, verifying identity, and enabling access to the platform.
• Financial Transaction Processing: Processing deposits and withdrawals in MYR (RM) via your chosen local payment methods, verifying and tracking transactions, and maintaining accurate financial records.
• Gaming Services Provision: Enabling you to enjoy all games on the Soccer888 platform — Sports Betting, Live Casino, table games, jackpots, e-sports, and virtual sports — while maintaining a record of your gaming activity.
• Platform Security: Detecting and preventing fraud, duplicate accounts, money laundering, and other suspicious activity that could compromise the security of the Soccer888 platform and its players.
• Legal Compliance: Meeting applicable legal and regulatory requirements, including KYC and AML procedures and any reporting obligations required by the relevant authorities.
• Customer Support: Handling enquiries, complaints, and support requests submitted to the Soccer888 support team across all communication channels.
• Responsible Gaming: Monitoring gameplay activity patterns to identify signs of problem gambling and support Soccer888 players in using the responsible gaming tools we provide.
• Platform Improvements: Analysing aggregated, anonymised usage data to understand how players use Soccer888 and to make relevant improvements to our products and services.
• Promotional Communications (with consent): Sending promotional information, special offers, and Soccer888 platform updates via email or notifications — only to players who have given their consent and may unsubscribe at any time.

Soccer888 does not sell or trade players' personal data. However, in the normal course of platform operations, personal data may be shared with a limited set of specific parties as follows:

1. Payment Service Providers: Required transaction information is shared with payment processors such as Touch 'n Go, GrabPay, DuitNow, and banks supporting FPX to facilitate the processing of deposits and withdrawals. These providers are bound by strict confidentiality agreements with Soccer888.
2. Game Providers: Required technical data is shared with game software providers — such as live casino and table game providers — to deliver a functional gaming experience. Only the minimum data necessary for technical functionality is shared.
3. Authorities and Regulatory Bodies: Soccer888 may be legally required to disclose certain data to law enforcement authorities, financial regulators, or courts upon receipt of a valid order. Where permitted by law, Soccer888 will notify the affected player accordingly.
4. Technical Service Providers: Companies that provide technical infrastructure services — such as server hosting, system maintenance, and platform analytics — may require limited access to certain data in order to carry out their work. All such providers are bound by data processing agreements that require them to protect the personal data of Soccer888 players.
5. Business Acquisition or Restructuring: In the unlikely event that Soccer888 is involved in a merger, acquisition, or sale of business assets, players' personal data may be transferred as part of that transaction. Soccer888 will notify players in advance and ensure the receiving party upholds equivalent data protection standards.

In all of the data sharing situations described above, Soccer888 ensures that receiving parties are bound by adequate confidentiality and data protection agreements, and that only the minimum data necessary to fulfil the stated legitimate purpose is shared.

Soccer888 continuously invests in security infrastructure to ensure player personal data is fully protected. The technical and organisational measures we employ include:

• 256-bit SSL Encryption: All communications between your device and Soccer888 servers are encrypted using the latest TLS/SSL protocols. This ensures that data in transit — including login credentials, payment details, and personal information — cannot be intercepted by third parties.
• Password Encryption: Your Soccer888 account password is never stored in plain text. It is encrypted using a one-way hashing algorithm that cannot be reversed — not even Soccer888 staff can view your actual password.
• Multi-Layered Firewall: Soccer888's servers are protected by a multi-layered firewall system that continuously monitors and filters inbound and outbound traffic to detect and block unauthorised access attempts.
• Two-Factor Authentication (2FA): Soccer888 offers two-factor authentication for player accounts, adding an extra layer of security that requires verification through your device in addition to your password at login.
• 24/7 Security Monitoring: Soccer888's cybersecurity team monitors the platform around the clock to detect suspicious activity, intrusion attempts, and traffic anomalies that may indicate security threats.
• Internal Access Controls: Access to player personal data within Soccer888's internal systems is restricted to staff who require it to carry out their duties, based on a strict need-to-know principle.
• Regular Security Audits: Soccer888 conducts regular security audits — including penetration testing by independent third parties — to identify and remediate vulnerabilities before they can be exploited.

Soccer888 retains player personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by applicable law. The following are general data retention guidelines:

1. Active Account Data: For as long as your Soccer888 account remains active, your personal data and gameplay activity records will be retained to enable us to provide you with full platform services.
2. Data After Account Closure: When your Soccer888 account is closed, most of your personal data will be deleted or anonymised within 90 days. However, certain records may need to be retained for longer to fulfil legitimate purposes.
3. Financial Records: Financial transaction records — including deposits, withdrawals, and betting history — may need to be retained for 7 years or longer in accordance with applicable accounting and AML legal requirements in Malaysia.
4. KYC Verification Data: Identity verification documents (including MyKad copies and related documents) are retained in accordance with applicable KYC/AML legal requirements, typically for a minimum of 5 years from the date the business relationship ends.
5. Dispute Record Data: Information relating to any disputes or claims made during the active account period will be retained for the duration of the applicable statutory limitation period.
6. Support Communication Data: Communications with the Soccer888 support team are retained for 3 years for reference and service improvement purposes.

Once the required retention period has lapsed, Soccer888 will securely delete or anonymise the data using procedures that ensure it cannot be recovered or re-identified.

As a Soccer888 player and the owner of your own personal data, you have the following rights, which you may exercise at any time by contacting Soccer888:

To exercise any of the rights above, submit a written request to support@soccer888.xyz stating your full name, Soccer888 account number, and the specific right you wish to exercise. Soccer888 will acknowledge receipt of your request within 5 business days and aim to resolve it within 30 days. In complex cases, this period may be extended with notice to you.

Soccer888 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the Soccer888 website. The following are the types of cookies Soccer888 uses:

• Session Cookies (Required): These cookies are required for the Soccer888 platform to function properly. They store your login status, partially completed form data, and current session preferences. Without them, you will not be able to use the Soccer888 platform. Session cookies are automatically deleted when you close your browser.
• Preference Cookies: These cookies store your preferences — such as your selected language and display settings — so you don't have to reconfigure them each time you visit Soccer888.
• Analytics Cookies: Soccer888 uses aggregated, anonymised analytics data to understand how players interact with the platform — which pages are visited most often, which buttons are clicked most frequently, and which features are most popular. This information helps us make meaningful improvements to Soccer888.
• Security Cookies: These cookies help Soccer888 identify and prevent suspicious activity, such as login attempts from unusual locations or usage patterns that may indicate fraud or bot activity.

You can manage cookies through your web browser settings. However, blocking all cookies may cause certain Soccer888 platform features to stop working correctly — including the possibility of being unable to stay logged in. Soccer888 recommends accepting at least the essential session cookies for the best experience.

In the course of operating the Soccer888 platform, your personal data may be processed on servers located outside Malaysia — for example, by cloud service providers or international game software providers that Soccer888 works with.

When your personal data is transferred outside Malaysia, Soccer888 ensures that adequate protections are in place through:

• Comprehensive data processing agreements are in place with all service providers outside Malaysia, requiring them to uphold data protection standards equivalent to Soccer888's Privacy Policy.
• Selecting service providers that operate in jurisdictions with recognised data protection laws.
• Encrypting data in transit across borders to prevent unauthorised access during transfer.

Soccer888 does not transfer player personal data to countries or jurisdictions that lack adequate data protection without appropriate additional safeguards in place.

The Soccer888 platform is intended solely for individuals aged 18 and above. Soccer888 does not knowingly collect or process personal data from anyone under the age of 18.

Soccer888 applies a rigorous age verification process at registration and during KYC to ensure that only adults are able to use the platform. Should Soccer888 become aware that we have collected personal data from an individual under the age of 18, we will take the following steps immediately:

1. Suspending the account in question immediately while verification is carried out.
2. Deleting all personal data associated with the account from Soccer888's systems.
3. Returning any deposited funds through an appropriate and legitimate method.
4. Recording the incident for the purpose of improving our age verification procedures.

Soccer888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or Soccer888 platform developments. Each updated version will be published on this page with a clear revision date at the top of the document.

For significant changes — particularly those that materially affect how your data is used or shared — Soccer888 will endeavour to give players advance notice via registered email or in-platform notification at least 14 days before the changes take effect.

Soccer888 encourages you to review this Privacy Policy periodically, especially when you receive update notifications from us. Your continued use of the Soccer888 platform following any changes to the Privacy Policy will be considered acceptance of those changes.

If you have any questions, concerns, or complaints about how Soccer888 handles your personal data, or if you wish to exercise any of the data rights outlined in Section 8, please contact us through the following channels:

• Privacy Email: support@soccer888.xyz (please include "Data Privacy Enquiry" in the subject line for faster processing)
• Live Chat: Available directly on the Soccer888 platform, 24 hours a day, 7 days a week
• Support Language: Bahasa Melayu, Mandarin, and English

Soccer888 is committed to handling all privacy-related enquiries and complaints seriously and within a reasonable timeframe. We will acknowledge receipt of your enquiry within 2 business days and endeavour to provide a substantive response within 14 business days. If you are unsatisfied with Soccer888's response, you have the right to refer the matter to the Personal Data Protection Commissioner under Malaysia's Personal Data Protection Act 2010.