Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how afb88my ("we", "us", "our", "the Platform", "the Operator") collects, processes, uses, stores, and discloses personal data belonging to individuals who register an account, access, or otherwise interact with the afb88my platform accessible at afb88my.cam ("you", "the Player", "the Data Subject").

afb88my is an online casino and sports betting platform principally serving players across Malaysia, including those based in Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, Ipoh, and all other regions of the country. As an internationally licensed gaming operator, we are subject to data protection obligations that are inherently linked to our licensing and anti-money laundering compliance requirements.

We take the privacy and security of your personal data seriously. This Policy is intended to be transparent, specific, and written in plain language so that you fully understand how your information is being handled at every stage of your relationship with afb88my. Please read it carefully before registering an account or using any of our services.

2 Definitions

For the purposes of this Policy, the following terms shall carry the meanings set out below:

3 Data We Collect

afb88my collects personal data across several categories depending on your level of interaction with the Platform. The categories and specific data points we may collect are set out below:

3.1 Identity & Registration Data

• Full legal name as it appears on your national identity document (MyKad or passport);
• Date of birth and age verification information;
• Gender (optional, where provided);
• Nationality and country of residence;
• Username and account credentials (passwords are stored in hashed form and are not visible to afb88my staff).

3.2 Contact Data

• Email address;
• Mobile phone number;
• Residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru — state, and postcode).

3.3 Financial & Payment Data

• Deposit and withdrawal transaction records denominated in Malaysian Ringgit (MYR);
• Payment method identifiers — e-wallet account references (Touch 'n Go eWallet, Boost, GrabPay), bank account details used for FPX or DuitNow transfers, card type (Visa/Mastercard) and partial card numbers where applicable;
• Transaction timestamps, amounts, and processing status records;
• Source of funds documentation submitted as part of enhanced KYC processes.

3.4 KYC & Verification Documents

• Copies of identity documents (MyKad, passport);
• Proof of address documents (utility bills, bank statements);
• Selfie or live verification images where requested;
• Occupation and source of wealth declarations where required for enhanced due diligence.

3.5 Platform Usage & Behavioural Data

• Game session logs, wagering history, and betting patterns;
• Login timestamps, session durations, and platform navigation paths;
• Device information including device type, operating system, browser, and screen resolution;
• IP address and approximate geolocation data;
• Responsible gambling tool usage, including deposit limits set, session reminders activated, and self-exclusion requests.

3.6 Communications Data

• Records of live chat conversations with the afb88my support team;
• Email correspondence and support ticket content;
• Feedback, complaint submissions, and dispute correspondence.

4 How We Collect Your Data

afb88my collects personal data through the following primary channels:

4.1 Directly from You

The majority of personal data we hold is provided by you directly — at the point of account registration, during KYC verification, when you make a deposit or withdrawal, when you contact our support team, or when you respond to surveys or promotional communications.

4.2 Automatically via Platform Technology

When you access the Platform, our servers and analytics infrastructure automatically collect technical data including your IP address, browser type, device identifiers, and session activity logs. This data is collected whether or not you are logged in to a registered account.

4.3 From Third-Party Payment Providers

When you make a deposit or withdrawal using a Malaysian payment channel — such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, or CIMB Clicks — the relevant payment provider may share transaction confirmation data and account reference identifiers with afb88my for the purpose of reconciling your account balance.

4.4 From Identity Verification & Compliance Partners

afb88my may engage third-party KYC and identity verification service providers to validate identity documents and confirm player eligibility. Where such services are used, the verification partner processes your document data on our behalf under a data processing agreement.

5 Legal Basis for Processing

afb88my processes personal data one or more of the following legal bases, depending on the nature of the processing activity:

6 How We Use Your Data

The personal data collected by afb88my is used for the following specific purposes:

1. Account Registration & Management: Creating and maintaining your player account, verifying your identity and age, and communicating account-related notifications;
2. Transaction Processing: Processing MYR deposits and withdrawals via your selected Malaysian payment method, reconciling your account balance, and managing payment disputes;
3. KYC & Compliance: Conducting identity verification, fulfilling AML screening obligations, and satisfying the requirements of our international gaming licence;
4. Customer Support: Responding to your enquiries, resolving complaints, and managing dispute resolution processes;
5. Responsible Gambling: Monitoring platform usage patterns to identify indicators of problem gambling, administering player-requested limits and self-exclusion arrangements, and contacting players where safeguarding concerns arise;
6. Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, account takeovers, and other security incidents;
7. Platform Improvement: Analysing aggregated, anonymised usage data to improve game selection, payment infrastructure, and user experience;
8. Marketing Communications: Sending promotional offers, bonus notifications, and news about new games or features — where you have consented to receive such communications and have not subsequently opted out.

7 Data Sharing & Disclosure

afb88my does not sell, rent, or commercially share your personal data with any third party. We may share your data with carefully selected partners and authorities in the following limited circumstances:

7.1 Service Providers & Data Processors

We engage trusted third-party processors to provide operational services including payment processing (e.g., FPX network operators, e-wallet gateways such as those supporting Touch 'n Go eWallet, Boost, and GrabPay), identity verification services, cloud hosting, platform analytics, and customer support technology. All processors are contractually bound to handle your data solely on afb88my's instructions and in accordance with this Policy.

7.2 Regulatory & Law Enforcement Authorities

We are required by our gaming licence conditions and applicable laws to disclose certain data to regulatory authorities, gaming commissions, financial intelligence units, and law enforcement agencies where lawfully requested. Such disclosures are made solely on the basis of a valid legal mandate and are limited to the minimum data required.

7.3 Anti-Money Laundering Obligations

As a licensed gaming operator, afb88my is subject to AML screening and reporting obligations. Transaction data and player identity information may be shared with designated reporting channels in accordance with applicable legislation where we are legally obligated to do so.

7.4 Business Transfers

In the event of a corporate restructuring, acquisition, or transfer of the afb88my business, player data may be transferred as part of the transaction. Affected players will be notified in advance where possible, and any acquiring entity will be required to honour the commitments set out in this Policy.

8 Cookies & Tracking Technologies

The afb88my Platform uses cookies and similar tracking technologies to ensure proper functionality, enhance your experience, and support internal analytics. Cookies are small text files stored on your device by your browser.

8.1 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function correctly — including session management, login state persistence, and security tokens. These cannot be disabled without impairing Platform functionality.
• Analytics Cookies: Collect anonymised data about how players navigate the Platform, which games are most accessed, and where technical errors occur. Used solely for internal improvement purposes.
• Functional Cookies: Remember your preferences such as language settings, responsible gambling limit selections, and display configurations.
• Marketing Cookies: Used to deliver relevant promotional content within the Platform. Enabled only where you have provided consent.

8.2 Managing Cookies

You may adjust your browser settings to block or delete cookies at any time. Please note that disabling essential cookies will significantly impact your ability to use the Platform. Marketing and analytics cookies can be disabled without affecting core account functionality. Instructions for managing cookies are available in the help documentation of all major browsers.

9 Data Retention

afb88my retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any overiding legal or regulatory retention requirements. The following general retention periods apply:

• Account Data: Retained for the duration of the active account relationship and for a period of at least five (5) years following account closure, as required by our licensing and AML obligations;
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction in accordance with financial record-keeping requirements;
• KYC Documents: Retained for a minimum of five (5) years following the end of the account relationship or the completion of the relevant transaction;
• Support Communications: Retained for a period of up to three (3) years from the date of the interaction;
• Marketing Preferences: Retained until you withdraw consent or for a period of two (2) years from your last interaction with a marketing communication, whichever is earlier.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in manner that prevents re-identification.

10 Data Security

afb88my implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• Transport Layer Encryption: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher (256-bit SSL);
• Data-at-Rest Encryption: Sensitive data stored in our databases — including identity documents and financial records — is encrypted using AES-256 or equivalent standards;
• Password Security: Player passwords are stored exclusively in salted, hashed format. afb88my staff cannot retrieve or view your plaintext password;
• Access Controls: Internal access to personal data is restricted on a need-to-know basis, with role-based permissions enforced across all internal systems;
• Two-Factor Authentication: Available to all players as an additional account security layer;
• Regular Security Audits: Our platform and infrastructure undergo regular penetration testing and security assessments by qualified third parties.

While afb88my takes all reasonable and technically practicable steps to protect your data, no digital system is entirely immune from security risks. Players are encouraged to use strong, unique passwords and to enable two-factor authentication on their accounts to reduce exposure.

11 Your Rights as a Data Subject

Subject to applicable law and the limitations inherent in our licensing and AML obligations, you hold the following rights in respect of the personal data afb88my processes about you:

To exercise any of the above rights, please contact our Data Protection team by email at [email protected]. We will respond to valid requests within 30 days. We may require proof of identity before processing your request to ensure we are releasing data only to the authorised account holder.

Please note that some rights are subject to limitations — for example, we cannot delete data that we are legally required to retain for AML or KYC purposes, or data that is necessary to resolve outstanding disputes.

12 Children's Privacy

afb88my is an adults-only platform. Access is strictly limited to persons aged21 and above. We do not knowingly collect, process, or retain personal data belonging to individuals under the age of 21. Age verification is a mandatory step in the account registration process, and enhanced KYC checks may be applied where there is reason to question a player's stated age.

If afb88my becomes aware that personal data has been collected from an individual under the minimum age requirement, that account will be immediately suspended, all associated data will be securely deleted, and any funds in the account will be returned in accordance with our Terms & Conditions. If you believe a minor has registered on our platform, please contact us immediately at [email protected].

13 International Data Transfers

afb88my may transfer personal data to servers, processors, or partners located in jurisdictions outside Malaysia where this is necessary for platform operations — for example, where cloud infrastructure or identity verification services are hosted in other countries. Where such transfers occur, afb88my ensures that appropriate contractual safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy.

Players located in Malaysia should be aware that their personal data may be processed in the jurisdiction in which afb88my holds its gaming licence. All such processing remains subject to the commitments set out in this Policy.

14 Changes to This Policy

afb88my reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform functionality. Material changes — those that materially affect how your data is processed or your rights as a data subject — will be communicated to registered players via a notice displayed on the Platform and/or by email to the registered account address, at least seven (7) days before the changes take effect.

The effective date at the top of this document will be updated each time the Policy is revised. Continued use of the Platform after the effective date of an updated Policy constitutes acceptance of the revised terms. If you do not accept the changes, you should discontinue use of the Platform and request account closure.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data afb88my holds about you, please contact our Data Protection team through the following channels:

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the Platform
• Response Commitment: Privacy-related requests acknowledged within 24 hours; substantive response within 30 days

When submitting a data subject rights request, please include your registered username and a description of your request to help us locate your account and process your enquiry efficiently. We may request proof of identity before fulfilling access or erasure requests to protect against unauthorised disclosures.

If you are not satisfied with our response to a privacy complaint, you may have the right to escalate your concern to the relevant data protection authority in your jurisdiction or to the regulatory body that issued afb88my's gaming licence.