Privacy Policy – Sepak88

Sepak88 (referred to as "we", "platform", or "Company") respects the privacy of every individual who uses our platform. This Privacy Policy explains our practices regarding the collection, use, disclosure, and protection of your personal data when you register for, use, or interact with our Sepak88.

This policy applies to all players who access Sepak88 via the sepak88.bet website, mobile app, or any of our official service channels. By using our platform, you acknowledge that you have read and understood this Privacy Policy.

1Introduction and Scope of This Policy

Sepak88 is an online betting entertainment platform operating to serve the needs of Malaysian players. In the course of our daily operations — from account registration, processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u or CIMB Clicks, to handling football, badminton, e-sports, slots, and live casino betting — we necessarily collect and process your personal data.

We understand that your trust is the most valuable asset to Sepak88. As such, we are committed to handling your personal data with full responsibility, transparency, and in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection standards.

This policy covers all personal data collected directly from you (such as information you provide during registration) as well as indirectly (such as data generated through your use of our platform).

2Types of Personal Data We Collect

Sepak88 collects the following personal data to enable us to deliver our services safely and effectively:

A. Data You Provide Directly:

• Personal Identification Information: Full name, date of birth, identification card number (MyKad), gender.
• Contact Information: Email address, Malaysian mobile number, residential address.
• Account Information: Username, password (stored in encrypted form), language and currency preferences.
• Financial Information: Registered payment method details (Touch 'n Go e-wallet number, GrabPay account, bank account information), along with deposit and withdrawal transaction records in MYR.
• KYC Documents: A copy of your identification card, passport, utility bill, or bank statement for identity verification purposes.

B. Automatically Generated Data:

• IP address and approximate location information.
• Device type, operating system, and web browser used.
• Login and logout session records, including timestamps.
• Betting history, games played, and session duration.
• Cookie data and unique device identifiers.

3How We Use Your Personal Data

Personal data collected by Sepak88 used solely for the following legitimate purposes:

We do not use your personal data to make automated decisions that have a material impact on you without appropriate human involvement.

4Data Sharing & Disclosure

Sepak88 does not sell your personal data. However, in certain limited circumstances, we may need to share data with the following parties:

Trusted Service Providers:

• Payment gateway: To process deposit and withdrawal transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, and CIMB Clicks. These providers receive only the data necessary to process transactions and are bound by strict confidentiality agreements.
• Game software providers: Game-related information required to deliver a seamless slots, Live Casino, poker, and virtual sports experience.
• Customer support services: The communication platform used to handle live chat enquiries and emails.
• Analytics services: Anonymised data is used to understand usage patterns and improve the platform.

Legally Mandated Disclosure:

• To Malaysian law enforcement authorities where required by law or court order.
• To financial authorities to fulfil anti-money laundering (AML) and counter-terrorism financing (CFT) obligations.
• Should Sepak88 involved in corporate transactions such as mergers or acquisitions, subject to appropriate confidentiality agreements.

5Data Security – How We Protect Your Information

Sepak88 implements multiple layers of technical and operational security to safeguard your personal data:

• 256-bit SSL/TLS Encryption for all communication between your browser and the Sepak88.
• Data at-rest encryption for all personal data stored in our databases.
• Role-based access control (RBAC) — only authorised personnel with a legitimate business need may access users' personal data.
• 24/7 security monitoring with active intrusion detection systems (IDS) and intrusion prevention systems (IPS).
• Penetration testing conducted periodically by independent security experts.
• Data Backup securely encrypted across multiple locations to ensure service continuity.
• Two-factor authentication (2FA) is available for player accounts as an additional layer of security.

That said, no security system can guarantee absolute 100% protection. You also play an important role in keeping your account secure — use a strong password, never share your login credentials, and log out after every session, especially when using a shared device.

6Cookie Policy & Tracking Technologies

Platform Sepak88 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform runs smoothly. The following are the types of cookies we use:

You can manage your cookie preferences through your web browser settings. Please note that disabling essential cookies may affect the functionality of the platform. Sepak88. For optional cookies, you may withdraw your consent at any time without affecting your basic access to the platform.

7Data Retention Period

Sepak88 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy or as required by law:

• Active account data: For as long as your account remains active on the platform Sepak88.
• Data following account closure: Identity records, financial transaction records, and betting records are retained for a minimum of 7 years after account closure to fulfil legal and regulatory obligations (including AML and tax requirements).
• Technical log data: Access logs and system activity records are retained for 2 years.
• Customer support communication data: Conversation records and support tickets are retained for 3 years.
• KYC Documents: Retained in accordance with applicable regulatory requirements, typically for no less than 5 years.

Once the retention period has expired, your personal data will be securely deleted or anonymised so that it can no longer be linked to you personally.

8Your Rights Regarding Personal Data

As a player Sepak88 who are Malaysian citizens or residents, you have the following rights under PDPA 2010:

How Your Data Flows at Sepak88

9Children's Data Protection

Sepak88 takes child protection in the online space seriously. Our platform not designed for or directed at individuals under the age of 18. We do not knowingly collect or process personal data from children.

Should we discover or be informed that we have collected personal data from a child under the age of 18, we will take immediate steps to:

• Closing the account in question promptly.
• Removing all personal data related to that child from our systems.
• Refunding any funds deposited into that account.
• Reporting the incident to the relevant authorities where required by law.

If you become aware or suspect that a minor is using the platform Sepak88, please contact us immediately at support@sepak88.bet.

10Changes to This Privacy Policy

Sepak88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new technologies, or evolving legal requirements.

When we make material changes, we will notify you via:

• In-account notifications when you log in.
• Email to your registered address (for significant changes).
• Prominent notice on the homepage Sepak88.

The "Last Updated" date at the top of this document will always reflect the date of the most recent version. We encourage you to review this Privacy Policy periodically so you stay informed about how we protect your information.

11Contact Us About Privacy

If you have any questions or concerns, or wish to exercise your privacy rights regarding how Sepak88 handles your personal data, please contact our Data Protection Officer (DPO) through the following channels:

• Email: support@sepak88.bet (with the subject line: "Privacy Enquiry")
• Live Chat: Available 24/7 on the platform Sepak88
• Response Time: We aim to respond to all privacy enquiries within 5 business days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysian Department of Personal Data Protection under the Ministry of Communications and Digital.