Privacy Policy FIFA88 — Data Protection & Member Privacy

Fifa88 collects your personal information through several channels — during account registration, during platform use, through interactions with our support team, and automatically via standard tracking technologies.

Information you provide directly:

• Full name as stated in your official identification document
• Active email address used for account communications
• Malaysian mobile number registered in your name
• Date of birth for age verification purposes (18 years and above)
• Bank account details or digital wallet information for payment processing
• Copy of identity document (MyKad or passport) when KYC verification is required
• Current residential address for compliance records

Information collected automatically:

• IP address and estimated location data (IP-based)
• Device type, operating system, and browser version used
• Gaming activity — including betting history, total deposits and withdrawals
• Time and duration of each login session
• Cookie data and device identifiers for security and user experience purposes
• Interaction logs with the platform, including clicks, searches, and page navigation

Fifa88 uses collected information solely for legitimate, clearly stated purposes. We do not process your data for unrelated purposes without first obtaining your consent.

• Account management: Allowing you to register, login, update your profile, and manage account settings seamlessly.
• Transaction processing: Verifying and processing all deposits and withdrawals securely and promptly through trusted payment channels.
• Identity verification (KYC): Ensuring all members meet the minimum age requirement of 18 years and comply with anti-money laundering (AML) legal requirements.
• Platform security: Detecting and preventing fraud, hacking, automated bot usage, and any attempts to exploit our systems.
• Customer support: Providing accurate and effective assistance when you contact our support team via live chat, email, or other methods.
• Personalize your experience: Delivering game recommendations, promotions, and relevant content based on your interests and gaming activity.
• Responsible gaming: Monitoring gameplay patterns to identify early warning signs of problem gambling and provide appropriate support.
• Legal compliance: Meeting the reporting and disclosure obligations required by applicable laws and regulatory bodies.
• Marketing communications: Sending information about the latest promotions, bonuses, and offers — provided you have consented to receive such communications.

Fifa88 maintains a strict policy regarding the sharing of member personal data. We does not sell, rent or disclose your information to any third party for commercial or marketing purposes. However, there are limited circumstances where data sharing is necessary and legally permissible:

• Payment service providers: Transaction data is shared with approved payment gateways such as FPX, DuitNow, and credit card processors solely to facilitate the secure processing of your deposit and withdrawal transactions.
• Technology service providers: Server hosting companies, cloud computing services and software providers that help us operate the platform — all bound by strict confidentiality agreements.
• Regulatory and law enforcement bodies: When required by a valid court order or official request from a competent authority.
• Identity verification services: Authorised third-party KYC agencies engaged to verify member identities for AML/CFT compliance purposes.
• Business development: Should fifa88 be involved in any merger, acquisition or asset transfer, member data may be transferred as part of the business assets — subject to prior notice to members.

Protecting members' personal data is fifa88's number one priority. We continuously invest in the latest security infrastructure to ensure your information remains safe from all cyber threats.

• Data-in-transit encryption: All data transmitted between your browser or app and fifa88's servers is protected by TLS 1.3 protocol with 256-bit encryption.
• Data-at-rest encryption: Sensitive data stored in our databases — including passwords and financial information — is encrypted using AES-256 algorithms.
• Two-factor authentication (2FA): An additional security layer available to all member accounts to prevent unauthorized access.
• 24/7 security monitoring: Our cybersecurity team monitors the platform around the clock to detect and respond to any threats in real time.
• Periodic penetration testing: Independent security audits are conducted periodically by third-party security experts to identify and patch any vulnerabilities.
• Firewall and intrusion detection systems: Multiple layers of network defense protecting fifa88 servers from DDoS attacks and intrusion attempts.

While we employ the most advanced security measures, no system can guarantee absolute one-hundred-percent security. In the event of a data breach affecting your information, fifa88 will notify you promptly and take the necessary steps to limit the impact.

Fifa88 uses cookies and similar tracking technologies to enhance user experience, ensure session security, and help us understand how members use our platform.

Types of cookies we use:

• Essential cookies: Required for core platform operations such as login authentication, session management, and account security. These cookies cannot be disabled.
• Functional cookies: Remembering your preferences such as language, currency, and display settings to deliver a more personalized experience.
• Analytics cookies: Collecting information on how you interact with our platform — including pages visited and time spent — to help us improve our services.
• Performance cookies: Helping us identify technical issues and optimize platform speed and performance for all users.

You can manage cookie settings through your browser preferences. However, disabling certain cookies may affect the functionality and user experience of the fifa88 platform. We recommend keeping essential cookies enabled for smooth operation.

As a data subject under Malaysia's PDPA, you have certain rights regarding your personal information held by fifa88. We fully respect these rights and are ready to help you exercise them.

Fifa88 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Once the retention period expires, data will be securely deleted or anonymised so it can no longer be linked to your identity.

• Active account data: Retained for the duration of your active account period and up to 7 years after account closure for legal compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's financial and anti-money laundering legal requirements.
• KYC Documents: Retained for the duration of the active account period and 5 years after account closure.
• Support communication logs: Retained for 3 years for reference and dispute resolution purposes.
• Cookie and analytics data: Retention period depends on cookie type — ranging from the current session up to a maximum of 2 years.

Fifa88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, legal requirements, or the services we offer. Any changes made will be posted on this page with a new update date.

For material changes — that is, changes that significantly affect how we use or protect your data — fifa88 will notify you via in-app notification or email to the address registered in your account at least 14 days before the changes take effect.

Continued use of the fifa88 platform after the effective date of any Privacy Policy amendment constitutes your full acceptance of the updated privacy terms. We encourage you to review this page periodically to stay informed about how we protect your information.

If you have any questions, concerns or wish to exercise your privacy rights, fifa88's Data Protection Officer (DPO) team is here to assist you. We are committed to responding within 3 business days for all privacy-related enquiries.