88 stc Privacy Policy – Personal Data Protection for Malaysian Members

88 stc collects members' personal information through several channels when you register, use the platform, or contact our support team. The types of data collected include:

Registration & Identity Information:

• Full name as stated on your identification card
• An active, verifiable Malaysian phone number
• Email address (if provided during registration)
• Date of birth for age verification (18 years and above)
• IC or passport number for enhanced identity verification purposes

Financial & Transaction Information:

• Account name and Malaysian bank account number (for withdrawal processing)
• E-wallet account name (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow) used for deposits and withdrawals
• Deposit and withdrawal transaction history within the platform
• Betting and game activity records

Technical & Usage Information:

• Your device's IP address when accessing the platform
• Device type, operating system and web browser used
• Login session data including access time and general geographic location
• Platform usage data: pages visited, games played and session duration
• Cookie data and tracking technologies as described in Section 8

It is each member's responsibility to provide accurate and up-to-date personal information. 88 stc relies on the accuracy of the data provided to process transactions and verify member identities correctly. If any of your information changes, please update your account or contact our support team.

Data collected by 88 stc is used solely for legitimate purposes directly related to providing the platform's services to you. The primary purposes for which data is used are as follows:

88 stc does not use your personal data for third-party marketing purposes. Should we wish to use your data for any new purpose not stated in this policy, we will obtain your explicit consent before that processing begins.

88 stc processes your personal data on valid legal grounds under Malaysia's Personal Data Protection Act 2010 (PDPA). Those legal bases are:

• Contractual Fulfilment: Processing required to carry out the service agreement between you and 88 stc — including account management, financial transaction processing, and providing access to games and platform services.
• Legal Obligation: Processing required under Malaysian law — including age verification, compliance with the Anti-Money Laundering Act (AMLA), reporting obligations to relevant authorities, and compliance with the PDPA itself.
• Legitimate Interest: Processing required for legitimate business interests 88 stc — including platform security, fraud prevention, anonymised usage analytics and service improvements. These interests are always weighed against your rights and freedoms as a data subject.
• Consent: For specific purposes such as optional marketing communications (if you have opted in), processing is based on your explicit consent, which may be withdrawn at any time.

88 stc does not sell, rent or disclose your personal data to third parties for their own marketing purposes. Disclosure of personal data to third parties occurs only in the following limited and controlled situations:

• Trusted Service Providers: Third parties we engage to deliver platform services — including payment gateway providers (for processing transactions via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX), gaming software providers (Pragmatic Play, PG Soft and others), server hosting services, and cybersecurity providers. All such providers are bound by strict data protection agreements and may only use your data for the specified purposes.
• Legal Requirement: 88 stc may be required to disclose your personal data to Malaysian authorities — including Bank Negara Malaysia, the Malaysian Communications and Multimedia Commission (MCMC), the police, or judicial authorities — when mandated by law, court order, or official investigation. Such disclosures do not require your prior consent.
• Business Transfer: In the event of a merger, acquisition, or asset sale 88 stc, members' personal data may be transferred to a new entity. You will be notified in advance of any such transfer and of any changes to the privacy policy that will apply.

In all permitted instances of data sharing, 88 stc ensures that data recipients maintain a level of protection equal to or higher than the standards set out in this policy. We never share your full bank account or e-wallet information with any third party other than the payment gateways required to process your transactions.

Protecting members' personal and financial data is among our most significant investments 88 stc in terms of technical infrastructure. The security measures we have implemented include:

• 256-bit SSL Encryption: All communication between your device and the 88 stc is encrypted using 256-bit TLS/SSL protocols — the same standard used by Malaysia's major banking institutions. This means data transmitted, including login credentials and transaction details, cannot be read by any party attempting to intercept the communication.
• Two-Factor Authentication (2FA): An additional security layer is available and strongly recommended for all members. With 2FA enabled, every login attempt requires a one-time verification code sent to your registered phone number — even if someone knows your password, they cannot access your account without your phone.
• Encrypted Password Storage: Account passwords are not stored in plain text. We use a one-way cryptographic hashing function, which means your actual password cannot be retrieved — even by our staff. 88 stc yourself.
• Continuous Activity Monitoring: Our automated security system monitors all account activity around the clock to detect suspicious patterns such as login attempts from unrecognised locations, unusual transactions, or signs of unauthorised access. Automatic alerts will trigger an immediate security review.
• PCI-DSS Compliance: All financial transaction processing is handled by PCI-DSS certified third-party payment gateways — the highest security standard for payment data processing in the industry.
• Internal Access Controls: Access to members' personal data within the organisation 88 stc is restricted on a need-to-know basis — only staff who require access to perform their duties are authorised, and all access is logged for audit purposes.

88 stc retains your personal data only for as long as necessary for the purposes stated in this policy, or as required by Malaysian law. Our data retention guidelines are as follows:

• Active Account Data: For as long as your account remains active, all personal data and transaction records are retained to enable continuous service delivery and the resolution of any disputes that may arise.
• After Account Closure: Financial transaction records and identity verification documents are retained for a minimum of 7 years following account closure, in compliance with Malaysian legal requirements including the Income Tax Act and financial reporting obligations.
• Log & Security Data: Technical access logs and security monitoring data are retained for 12 months from the date of creation, then automatically deleted.
• Support Communication Data: Records of conversations with our customer support team are retained for 2 years for reference and service improvement purposes.
• Cookie Data: Depending on the type of cookie — session cookies are deleted when the browser is closed, while persistent cookies are stored for the duration specified in the relevant cookie settings (typically 30 days to 12 months).

Once the retention period expires and there is no legal requirement to continue storing the data, it will be securely deleted using methods that ensure it cannot be recovered by any party.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by 88 stc:

Platform 88 stc uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. The types of cookies we use are as follows:

You can manage your cookie settings through your web browser settings. Please note that disabling required cookies will affect platform functionality — you may be unable to log in or use certain features properly. Optional analytics and performance cookies can be disabled without affecting the platform's core functionality. 88 stc.

Platform 88 stc is a service exclusively for adults aged 18 and above. We actively take the following steps to prevent access by minors:

• Age verification requirement at registration — members must confirm they are 18 years of age or older
• Rights 88 stc to request proof of identity for age verification at any time
• Immediate closure of accounts confirmed to be owned or used by underage individuals
• No personal data from children is knowingly collected in any form

If you discover that a child or minor has accessed the platform 88 stc, please notify us immediately at support@88stc.best. We will take prompt action to close the account in question and ensure no data relating to that minor is retained in our systems.

88 stc reserves the right to update or amend this Privacy Policy from time to time in line with changes in law, technology, or our business practices. When material amendments are made:

• The "Updated" date at the top of this policy will be revised to reflect the latest version
• Notifications of important changes will be sent to members via their registered phone number or email address
• For significant amendments that affect your rights, we may require your fresh consent before the changes take effect

We recommend that you review this page periodically. Continued use of the 88 stc after the amendment date is published will be considered your acceptance of the updated policy.

For any enquiries, concerns, or requests relating to this Privacy Policy or the use of your personal data by 88 stc, please reach us through the following channels: