Coin88 Privacy Policy – How We Protect the Personal Data of Malaysian Members

This Privacy Policy ("Policy") describes how coin88, operating through the website coin88.run, collects, uses, stores, protects, and discloses your personal data when you use our platform. This Policy applies to all coin88 platform users, including website visitors, prospective members in the process of registering, and active members with an existing account.

Coin88 takes member privacy very seriously. In this digital age, where personal data grows ever more valuable and the risk of misuse continues to rise, we are committed to being a responsible custodian of every piece of information you entrust to us. Our core principle is straightforward: we only collect what we need, we only use it for the purposes you've shared it with us, and we protect it to the highest security standards we can provide.

This policy is provided in Bahasa Melayu to ensure it is easily understood by all coin88 members in Malaysia. In the event of any inconsistency between a translated version in another language and this Bahasa Melayu version, the Bahasa Melayu version shall prevail.

Coin88 collects your personal data in two main ways — information you provide directly to us, and information we collect automatically when you use our platform.

Information you provide directly:

• Registration information: Full name, Malaysian phone number, password (stored in encrypted form only)
• Identity verification (KYC) information: MyKad number, copy of identity card, date of birth, current residential address
• Financial information: Bank account or e-wallet numbers used for deposits and withdrawals — coin88 supports Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, and CIMB Clicks
• Communication information: Chat conversations with customer support, emails sent to us, feedback and complaints
• Communication preferences: Your preferences regarding promotional notifications and marketing communications

Automatically collected information:

• Technical data: IP address, device type, operating system, web browser version, screen resolution
• Usage data: Pages visited, time spent, games played, bets placed, login and logout times
• Location data: General location information based on IP address for geographical region verification purposes
• Cookie data: Session information, preference cookies, and identifiers to ensure platform features function correctly

Coin88 uses the personal data collected for the following purposes, all of which have a valid legal basis under Malaysia's Personal Data Protection Act 2010:

• Account management and administration: Creating and maintaining your account, processing logins, managing your balance and transaction history, and sending account statements when required
• Financial transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, and other Malaysian payment methods, as well as processing withdrawal requests to your bank account or e-wallet
• Identity verification and KYC/AML compliance: Verifying your identity to meet anti-money laundering legal requirements and to prevent identity fraud
• Provision of customer support services: Answering enquiries, resolving complaints, and providing technical support in Bahasa Melayu 24/7
• Platform security and fraud detection: Monitoring account activity to detect unauthorised access, fraud attempts, or the use of multiple accounts
• Product and service improvement: Analysing aggregated usage patterns (not individual) to improve the interface, add new games, and optimise platform performance
• Marketing communications (with consent): Sending information about promotions, bonuses, and special offers to members who have consented to receive such communications
• Responsible gaming: Identifying usage patterns that may indicate control issues and reaching out to the relevant members with appropriate support information

Coin88 does not make automated decisions that materially affect your rights or interests based solely on data processing — any significant decisions such as account closures or withdrawal rejections involve review by a human member of staff.

Coin88 does not sell, rent, or trade member personal data to any third party for marketing or commercial purposes under any circumstances. However, there are limited situations where coin88 is required to share data with certain parties:

• Payment processor: Required transaction information is shared with authorised payment service providers such as FPX providers, Touch 'n Go eWallet, GrabPay, DuitNow, and other payment gateways, solely for the purpose of processing your transactions
• Technology service provider: Companies that help us operate the platform, store data securely, and provide technical infrastructure — all bound by strict confidentiality agreements
• Identity verification body: Third-party KYC service providers that assist in verifying member identities for legal compliance purposes
• Legal authorities: When required by law, court order, or instruction from a legitimate authority in Malaysia — coin88 will disclose the necessary data to fulfil our legal obligations
• Anti-fraud bodies: Limited information may be shared with legitimate industry bodies to prevent fraud and protect the integrity of payment systems

The security of your personal data is a responsibility we take very seriously. coin88 implements multiple layers of technical and operational protection to keep your data safe at all times:

• Data encryption in transit: All communications between your device and coin88's servers are encrypted using TLS 1.3 with AES-256 encryption — meaning no one can intercept or read your data while it is being transmitted over the internet
• Data encryption at rest: Sensitive data such as payment information and KYC documents is stored in encrypted form in our databases — even if someone were to gain physical access to our servers, they would be unable to read this data without the encryption key
• Layered access controls: Only coin88 staff with a legitimate business need are granted access to members' personal data, and that access is strictly limited to the scope of their respective roles
• Continuous security monitoring: Automated monitoring systems operate 24 hours a day to detect and flag any suspicious activity or unauthorised access attempts
• Regular security audits: coin88's security infrastructure is regularly audited by independent third parties to identify and address any vulnerabilities before they can be exploited
• Passwords are not stored in plain text: Your account password is never stored in a readable format — we use cryptographic hashing with salting to ensure your password cannot be recovered, even by coin88 staff themselves

While coin88 takes all reasonable steps to protect your data, no security system is 100% foolproof. In the event of a security incident involving members' personal data, coin88 is committed to notifying affected members within the timeframe required by applicable law, and to taking appropriate remedial action.

Coin88 retains members' personal data for as long as necessary to fulfil the purpose for which it was collected, or for as long as required to meet our legal obligations. The following are retention period guidelines for key data categories:

• Active account information: Retained for the duration of your account and up to 7 years after account closure, in line with Malaysia's financial regulatory requirements
• Financial transaction records: Retained for a minimum of 7 years to comply with anti-money laundering (AML) regulations and financial reporting requirements
• KYC documents: Retained for the duration of the active account and a minimum of 5 years after account closure or the date of the last transaction, whichever is later
• Customer support communication logs: Retained for 3 years from the date of communication for reference and dispute resolution purposes
• Cookie and session data: Session cookies expire automatically when you close your browser. Optional cookies are stored for up to 12 months or until you delete them

When data is no longer required for any legitimate purpose, coin88 will securely delete or destroy it in accordance with established procedures. Anonymised data (with all individual identifiers removed) may be retained longer for aggregate statistical analysis purposes.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and coin88's privacy policy, you have the following rights regarding your personal data:

Coin88 uses cookies and similar tracking technologies to enhance your experience on our platform. Below are the types of cookies we use and their purposes:

You can manage your cookie preferences through your web browser settings. However, disabling essential cookies may affect the functionality of the coin88 platform and your overall experience. For more information on managing cookies in your browser, refer to your browser's help documentation.

Coin88 is an entertainment platform intended strictly for individuals aged 21 and above. We do not knowingly collect or process personal data from minors.

If you are a parent or guardian who believes your underage child has registered a coin88 account using false information, please contact us immediately at support@coin88.run. We will investigate, close the account in question, and immediately delete all collected data upon confirmation.

For any enquiries, concerns, or requests relating to your privacy and personal data at coin88, you can reach us through the following channels:

• Email: support@coin88.run (use the subject line "Privacy Enquiry" for a faster response)
• Live Chat: Available 24/7 within the coin88 platform — typical response time within 2 minutes
• Communication language: All enquiries may be submitted in Bahasa Melayu — our team communicates fluently in the national language

We will respond to all privacy enquiries within 5 business days. For formal privacy rights requests (access, correction, deletion, etc.), the response period is up to 21 business days from the date a complete and valid request is received.

This Privacy Policy may be updated from time to time to reflect changes in our practices, new legal requirements, or new services introduced on the coin88 platform. Members will be notified of any material changes via email or in-platform notifications. The "Updated" date at the top of this page reflects the latest version of the Privacy Policy currently in effect.