FL888 Privacy Policy – Data Protection for Malaysian Players

1. Personal Data We Collect

FL888 collects the personal data necessary to provide Malaysian players with a safe, responsible, and high-quality service. The categories of data collected are as follows:

All data collected is based on legitimate necessity and limited to what is strictly required for the stated purposes. FL888 does not collect sensitive information such as biometric data, medical records, or religious details unless required by law.

2. How FL888 Uses Your Data

Data collected by FL888 used solely for the following legitimate and necessary purposes:

1. Account Management: Creating, verifying, and maintaining your FL888 account, including the identity verification (KYC) process required by industry standards.
2. Transaction Processing: Securely and accurately process all deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX through Maybank2u and CIMB Clicks.
3. Platform Security: Detecting and preventing fraud, money laundering, unauthorised access, and any misuse of the FL888 platform.
4. Legal Compliance: Meeting applicable legal and regulatory obligations, including AML requirements and the reporting of suspicious transactions to the relevant authorities.
5. Service Improvement: Analysing usage patterns in aggregated, anonymised form to improve the playing experience, platform performance, and the relevance of content offered to Malaysian players.
6. Service Communications: Sending important account-related notifications, security alerts, policy updates, and fl888 promotional information (with your consent).
7. Responsible Gambling: Monitoring gameplay patterns to identify players who may need assistance or support related to responsible gambling, in line with FL888's commitment to player wellbeing.

FL888 does not use your personal data to make automated decisions that materially affect your rights without human oversight. Any significant decisions relating to your account will involve review by a responsible member of FL888 staff.

3. Sharing Data with Third Parties

FL888 does not sell, rent or transfer your personal data to third parties for commercial purposes. However, in certain limited circumstances, FL888 may need to share data with the following parties:

• Payment Service Providers: Required transaction details are shared with payment service providers such as Touch 'n Go eWallet, GrabPay, and DuitNow solely for the purpose of processing your payments securely. These providers are bound by strict confidentiality agreements.
• Game Software Providers: Minimum necessary technical data is shared with licensed game providers such as Pragmatic Play and PG Soft for the purposes of game result verification and fraud prevention.
• Relevant Authorities: FL888 may be required to disclose information to government authorities or law enforcement bodies when mandated by a valid court order or legal obligation.
• Technical Service Providers: Carefully selected cloud infrastructure and security service providers may have limited access to data strictly for technical operational purposes, subject to binding confidentiality agreements.

4. Data Security and Protection

FL888 implements multiple layers of technical and organisational security to protect your personal data from unauthorised access, loss, alteration, or inadvertent disclosure. Our key security measures include:

• 256-Bit SSL Encryption: All communications between your device and FL888's servers are encrypted to the 256-bit SSL standard — the same encryption technology used by leading banking and financial institutions in Malaysia and around the world.
• Hashed Password Storage: Your account password is never stored in plain text. FL888 uses a one-way cryptographic hashing function, which means even FL888's internal staff cannot retrieve your actual password.
• Two-Factor Authentication (2FA): An additional layer of protection requiring a second form of verification — typically a code sent to your mobile phone — before access to your account is granted. FL888 encourages all players to enable 2FA.
• Real-Time Threat Monitoring: fl888's automated intrusion detection system continuously monitors all platform activity and alerts the security team whenever suspicious activity patterns are identified.
• Internal Access Controls: Access to players' personal data within the FL888 system is restricted to staff with a legitimate operational need, based on the principle of least privilege.
• Regular Security Audits: FL888 conducts regular penetration testing and independent security audits to identify and address vulnerabilities before they can be exploited.

While FL888 takes all reasonable steps to protect your data, no system can be guaranteed 100% secure against every cyber threat. In the event of a data breach that materially affects your personal information, FL888 will notify you within a reasonable timeframe and take appropriate remedial action.

5. Cookies and Tracking Technologies

The FL888 platform uses cookies and similar tracking technologies to enhance your browsing experience on our website. The following are the types of cookies we use:

You can manage your cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the FL888 platform, including your ability to log in and play. For optional cookies, you may opt out without impacting the platform's core functions.

6. Data Retention Period

FL888 retains your personal data only for as long as it is necessary for the purposes stated in this policy or as required by applicable law.

In general, data retention periods are as follows:

• Active Account Data: Retained for the duration your account remains active, plus the additional period required to resolve any outstanding transactions or claims.
• Financial Transaction Data: Retained for a minimum of seven (7) years after the transaction date, in accordance with Malaysia's AML and financial regulatory requirements.
• Security Logs: Retained for six (6) months for the purposes of security incident investigation and fraud prevention.
• Closed Account Data: Retained for a minimum of five (5) years following account closure for legal compliance, dispute resolution, and prevention of unauthorised re-registration.
• KYC Records: Retained for the period required by the relevant regulatory body, typically no less than five (5) years.

Once the applicable retention period has expired, your personal data will be securely deleted or anonymised in accordance with approved data deletion procedures. Anonymised data cannot be used to identify you personally and may be retained for aggregate analytics purposes.

7. Your Rights Regarding Personal Data

As a player FL888, you have the following rights regarding your personal data that we hold. FL888 is committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, please contact the FL888 support team via Live Chat on the platform or by emailing support@fl888.best. FL888 will process your request within 30 calendar days and may require identity verification before handling certain requests to protect the security of your account.

8. Protection of Children's Data

The FL888 platform is strictly limited to individuals aged 18 years and above only. FL888 does not knowingly collect or process personal data from individuals under the age of 18.

Should FL888 discover or become aware that personal data belonging to a minor has been collected inadvertently, we will immediately take the following steps:

• Immediately suspend the associated account pending further investigation.
• Delete all personal data belonging to the individual concerned from FL888's systems.
• Returning any related deposits in accordance with established procedures.
• Reporting incidents to the relevant authorities where required.

If you become aware that a child or underage individual has accessed or registered on the FL888 platform, please notify us immediately at support@fl888.best. The protection of minors is an absolute priority at FL888 and will not be compromised under any circumstances.

9. Amendments to This Privacy Policy

FL888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements or the services offered. The most recent update date will always be displayed at the top of this page.

For material amendments — meaning changes that significantly affect how your data is used — FL888 will endeavour to notify you via an in-platform notification or email at least 14 days before the changes take effect, unless the changes are required by law to take effect immediately.

Your continued use of the FL888 platform after any amendment takes effect constitutes your acceptance of the updated Privacy Policy. It is your responsibility to review this page periodically to stay informed of any changes.

10. How to Contact Us Regarding Privacy

If you have any questions, concerns or requests relating to this Privacy Policy or the way FL888 handles your personal data, please contact us through the following channels:

FL888 welcomes all feedback regarding our privacy policy. Our goal is to continuously improve our data protection practices and transparency for all players in Malaysia. Your trust is the foundation of our relationship with you as an FL888 player.