Encrypted Transmission
All data exchanged between your device and the88online platform is protected by TLS encryption. Your login credentials, payment details, and account information are never transmitted in plain text.
This Privacy Policy explains how 88online collects, uses, stores, shares, and protects your personal data when you access or use the88online platform at 88online.casa. We are committed to handling your information with care, in accordance with applicable data protection principles and with the respect that every player deserves.
88online ("we", "us", "our", "Company") operates the online entertainment platform accessible at 88online.casa (the "Platform"), which offers casino games, live dealer tables, sports betting, lottery products, and related services to players across Malaysia and other permitted territories.
We recognise that your personal data is an important part of your relationship with 88online, and we take our obligation to protect it seriously. This Privacy Policy ("Policy") describes what data we collect from you, why we collect it, how we use and protect it, and what choices you have with respect to your personal information.
By registering an account, making a deposit, using any feature of the Platform, or otherwise interacting with 88online, you acknowledge that you have read and understood this Policy and agree to the processing of your personal data as described herein. If you do not agree, you must discontinue use of the Platform immediately.
Important: This Policy should be read in conjunction with the88online Terms & Conditions, which together form the full legal framework governing your use of the Platform.
For the purposes of this Privacy Policy, the following terms shall carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial data, and online identifiers. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction. |
| "Data Controller" | 88online, as the entity that determines the purposes and means by which Personal Data is processed. |
| "Data Processor" | Any third-party service provider that processes Personal Data on behalf of 88online under a contractual arrangement. |
| "Consent" | A freely given, specific, informed, and unambiguous indication of agreement to the processing of Personal Data for a stated purpose. |
| "KYC" | Know Your Customer — the identity and document verification process required before processing a player's first withdrawal or when required by law. |
| "Cookie" | A small data file stored on a user's device by a web browser, used to retain session information and record usage patterns. |
| "Platform" | The 88online website, mobile interface, and all associated features accessible at 88online.casa. |
88online collects Personal Data from you through several channels: information you provide directly when registering or using the Platform, data generated automatically through your use of our services, and information received from third-party payment and identity verification providers.
When you create an 88online account, we collect your full name, date of birth, gender, nationality, Malaysian MyKad number or passport number, residential address (including city — such as Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or Bangsar), email address, mobile phone number, and chosen username and password.
We collect data related to your deposits, withdrawals, and gaming activity on the Platform. This includes payment method identifiers (e.g., bank account names associated with FPX or DuitNow, e-wallet identifiers for Touch'n Go eWallet, Boost, and GrabPay, bank names such as Maybank, CIMB, Public Bank, or Hong Leong Bank), transaction amounts, timestamps, and reference numbers. For cryptocurrency deposits (Bitcoin, Ethereum, USDT TRC20), wallet addresses are recorded. We do not store full card numbers or online banking passwords.
To comply with internal fraud prevention requirements, we collect copies of government-issued identification documents (such as your Malaysian MyKad, front and back), proof of address, and in some cases a selfie or liveness check. This data is processed for verification purposes and retained as required for compliance and audit.
Automatically collected data includes your IP address, device type and operating system, browser type and version, referring URL, pages viewed, session duration, click patterns, and approximate geographic location derived from your IP address. This data helps us maintain Platform security and improve user experience.
If you contact our support team via live chat, email, or WhatsApp, we retain a record of the communication content, timestamp, and the account associated with the enquiry. This data is used to resolve issues and improve service quality.
We process your Personal Data only for specific, legitimate purposes. The table below summarises how different categories of data are used:
| Purpose | Data Categories Used |
|---|---|
| Account registration and management | Registration data, contact details, username, password (hashed) |
| Identity verification (KYC) | Government ID documents, date of birth, address, selfie/liveness data |
| Payment processing and fraud prevention | Financial data, transaction records, IP address, device identifiers |
| Customer support and dispute resolution | Communications data, account history, transaction data |
| Legal compliance and anti-money laundering (AML) | KYC data, transaction patterns, account activity |
| Platform security and abuse prevention | IP address, device data, login history, behavioural patterns |
| Responsible gambling monitoring | Wagering frequency, deposit patterns, self-limit settings |
| Service improvement and analytics | Anonymised or aggregated usage data, session behaviour |
| Promotional communications (where consented) | Email address, account preferences, gaming history |
We do not use your Personal Data to make fully automated decisions that produce significant legal or similarly significant effects without human review, except where expressly required by law.
88online processes your Personal Data on the following legal bases, depending on the purpose of processing:
88online does not sell your Personal Data to third parties. We may share your data with the following categories of recipients, strictly for the purposes described in this Policy:
We share relevant payment identifiers and transaction data with payment processors supporting FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency networks as necessary to execute deposits and withdrawals.
KYC documentation may be shared with licensed identity verification service providers for document authentication. These processors act under strict contractual data protection obligations.
We use cloud hosting and infrastructure partners to operate the Platform. These providers access data only as necessary to deliver contracted services and may not use your data for their own purposes.
We may disclose Personal Data to law enforcement agencies, regulators, courts, or other public authorities where required by applicable law or in connection with legal proceedings, including disclosures required under anti-money laundering or counter-terrorism financing obligations.
All third-party Data Processors engaged by 88online are required to maintain confidentiality and implement appropriate technical and organisational security measures consistent with applicable data protection standards.
The 88online Platform uses cookies and similar tracking technologies to maintain session state, recognise returning users, prevent fraud, and analyse anonymous usage patterns. The following types of cookies are used:
You may manage cookie preferences through your browser settings. Disabling certain categories of cookies may affect Platform functionality. Continued use of the Platform following a cookie notice constitutes acceptance of cookies as described above.
88online retains your Personal Data for as long as necessary to fulfil the purposes described in this Policy and to meet our legal, regulatory, and contractual obligations. Specific retention practices include:
Upon expiry of the applicable retention period, Personal Data is either securely deleted, anonymised so it can no longer be associated with an individual, or archived in accordance with applicable law.
88online implements a range of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These include:
While we take reasonable and commercially practicable steps to protect your data, no method of transmission over the internet or electronic storage is entirely secure. In the event of a data breach that may affect your rights and freedoms, we will notify affected individuals as required under applicable law.
Subject to applicable law and our legal retention and disclosure obligations, you have the following rights in relation to your Personal Data held by 88online:
You may request a copy of the Personal Data we hold about you and information on how it is processed.
You may request correction of inaccurate or incomplete Personal Data held about you.
You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to overiding legal obligations.
You may request that we limit how we use your data in certain circumstances, for example where you contest its accuracy.
Where processing is based on consent or contract, and carried out by automated means, you may request your data in a structured, machine-readable format.
You may object to processing based on legitimate interests, including direct marketing. If you object to marketing, we will stop processing for that purpose immediately.
To exercise any of the above rights, please contact our support team at [email protected]. We will respond within a reasonable timeframe and no later than thirty (30) days. In some cases, we may require you to verify your identity before fulfilling a data request.
The 88online Platform and certain of its service providers may operate infrastructure located outside Malaysia. Where your Personal Data is transferred to servers or processors in other countries, 88online takes steps to ensure that such transfers are made only to destinations that provide an adequate level of data protection, or that appropriate contractual safeguards are in place to protect your information consistent with the standards described in this Policy.
By using the Platform and providing your Personal Data, you acknowledge that your information may be processed in jurisdictions outside Malaysia. In all cases, we require receiving parties to maintain data security standards no less protective than those applied by 88online.
The 88online Platform is strictly restricted to individuals who are 21 years of age or older. We do not knowingly collect Personal Data from individuals under the age of 21. If you are under 21, you must not use the Platform or provide any Personal Data to 88online.
Where we discover or have reasonable grounds to believe that Personal Data has been collected from an individual below the minimum age, we will take immediate steps to delete such data and close the associated account. If a parent or guardian believes their child has provided data to 88online, they should contact our support team immediately.
Age Verification: As part of our KYC process, we verify the identity and date of birth of all players before processing withdrawal requests. This process helps ensure that the Platform is not accessed by minors.
88online reserves the right to update or amend this Privacy Policy at any time. The revised Policy will be published on this page with an updated effective date. Material changes — such as alterations to the categories of data collected, new third-party sharing arrangements, or changes to your rights — will be communicated to registered players via a notice on the Platform or, where appropriate, by direct communication to your registered contact.
Your continued use of the Platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to a material amendment, you should contact support to discuss options including account closure.
We encourage you to review this page periodically to remain informed of how88online protects and manages your personal information.
If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by 88online, please contact our team using the details below. All data-related requests will be handled with care and responded to within a reasonable timeframe.
Email: [email protected]
Availability: 24 hours a day, 7 days a week
Languages: English, Bahasa Melayu, Chinese
Average response via live chat: 3–5 minutes
For the exercise of data subject rights (access, rectification, erasure, restriction, portability, or objection), please include your registered account username and a clear description of your request. Identity verification may be required before certain requests are fulfilled.
These are the practical commitments behind our Privacy Policy — not just legal obligations, but principles that guide how we operate day to day.
All data exchanged between your device and the88online platform is protected by TLS encryption. Your login credentials, payment details, and account information are never transmitted in plain text.
Our KYC process ensures that accounts are associated with real, verified individuals. This protects genuine players from fraud and identity misuse on the Platform.
88online does not sell, rent, or exchange personal data with advertisers or data brokers. Your information is used only for the purposes described in this Policy.
You have the right to access, correct, delete, and export your Personal Data. All rights requests are handled within a reasonable timeframe and with identity verification where appropriate.
We keep your data only as long as necessary for service delivery, legal compliance, and fraud prevention. Data is securely deleted or anonymised when retention periods expire.
Our support team is available 24/7 in English, Bahasa Melayu, and Chinese to address any privacy concern, data request, or question about how your information is handled.
This Privacy Policy is one part of how 88online operates responsibly. Visit our homepage to explore games, payment methods, and promotions, or browse the FAQ and Terms & Conditions for further information on your rights and our obligations.