coin88 Privacy Policy

coin88 ("we", "us", "our") operates the online gaming platform accessible at coin88.asia. We are committed to protecting the privacy and security of the personal data of all individuals who interact with our platform, including registered account holders, visitors, and prospective users (collectively "you" or "Users").

This Privacy Policy has been prepared in accordance with applicable data protection legislation and sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed. Please read this policy carefully to understand our practices regarding your personal data and how we will handle it.

This Privacy Policy should be read in conjunction with the coin88 Terms & Conditions, which govern your use of the platform. In the event of any inconsistency between this Privacy Policy and the Terms & Conditions regarding data privacy matters, this Privacy Policy shall prevail.

coin88 collects the following categories of personal data in connection with your use of the platform:

2.1 Identity Data
Full legal name, date of birth, nationality, gender, and copies of identity verification documents (such as your MyKad or passport) where required for Know Your Customer (KYC) compliance.

2.2 Contact Data
Email address, telephone number, and residential address (including city — for example, Kuala Lumpur, Penang, or Johor Bahru — and postcode).

2.3 Financial Data
Payment method details (masked where applicable), transaction histories, deposit and withdrawal records, and wallet balances. coin88 does not store full card numbers or bank login credentials.

2.4 Technical Data
IP address, browser type and version, device type and operating system, screen resolution, time zone, and login timestamps.

2.5 Usage Data
Games played, bet amounts and outcomes, session durations, navigation patterns within the platform, and feature interactions.

2.6 Communications Data
Records of your correspondence with coin88 support, including live chat transcripts, emails, and any feedback or complaints submitted.

2.7 Marketing Preferences
Your preferences regarding receiving promotional communications from coin88, including opt-in and opt-out records.

coin88 collects personal data through the following channels:

• Direct interactions: Data you provide when registering an Account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated technologies: Data collected automatically as you navigate the coin88 platform, including cookies, server logs, and similar tracking technologies (see Section 7).
• Third-party sources: Data received from payment processors (such as Touch 'n Go eWallet, DuitNow, and FPX operators), identity verification service providers, and fraud prevention services, to the extent permitted by applicable law.
• Responsible gaming monitoring: Data generated by coin88's responsible gaming tools, including limit settings, self-exclusion requests, and behavioural indicators used to identify potential problem gaming patterns.

coin88 uses your personal data for the following purposes:

• To create and manage your Account, including identity verification and age verification.
• To process deposits and withdrawals and fulfil transaction records as required by financial regulations.
• To provide, maintain, and improve the coin88 platform and its features.
• To detect, prevent, and investigate fraud, money laundering, and other illegal or prohibited activity.
• To comply with legal and regulatory obligations, including Anti-Money Laundering (AML) and Know Your Customer (KYC) requirements.
• To send you transactional communications, including deposit confirmations, withdrawal notifications, and security alerts.
• To send you promotional communications where you have consented to receiving them, including details of bonuses, new games, and platform updates.
• To monitor and enforce responsible gaming obligations, including processing self-exclusion requests and applying deposit or session limits.
• To analyse platform usage patterns for product development and to improve the user experience.
• To respond to your support enquiries and resolve complaints.

coin88 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions, including Account management, transaction processing, and game provision.
• Legal obligation: Processing required to comply with applicable law, including AML regulations, KYC requirements, and responsible gaming mandates imposed by our operating licence.
• Legitimate interests: Processing carried out in coin88's legitimate business interests, including fraud prevention, platform security, and internal analytics, where such interests are not overridden by your data protection rights.
• Consent: Processing based on your explicit consent, including the sending of marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

coin88 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly to the extent necessary for the purposes described in this Privacy Policy:

• Payment processors: To facilitate deposit and withdrawal transactions via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, and Hong Leong Connect.
• Identity verification providers: To conduct KYC checks as required by our operating licence and applicable law.
• Fraud prevention and AML service providers: To detect, investigate, and prevent fraudulent or criminal activity.
• Game software providers: Technical data may be shared with our game studio partners to the extent required for game functionality and auditing.
• Regulatory and law enforcement authorities: Where required by law, court order, or the terms of our operating licence, we may disclose personal data to competent authorities without prior notice to you.
• Professional advisers: Including legal counsel, auditors, and insurers, subject to binding confidentiality obligations.

All third-party service providers engaged by coin88 are subject to contractual data processing obligations consistent with this Privacy Policy and applicable data protection law.

coin88 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device when you visit the site. The categories of cookies we use are as follows:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies and security tokens. They cannot be disabled without materially impairing your ability to use the platform.
• Functional cookies: Used to remember your preferences, such as language settings and responsible gaming limits you have set.
• Analytics cookies: Used to collect aggregated information about how Users interact with the coin88 platform, enabling us to identify usage patterns and make improvements.
• Security cookies: Used to detect and prevent fraudulent activity and to support our brute-force login protection mechanisms.

You may control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the coin88 platform.

coin88 retains your personal data for as long as your Account is active and for a period thereafter as required by applicable law and our operating licence obligations. Specifically:

• Account and identity data is retained for a minimum of five (5) years following Account closure to comply with AML record-keeping requirements.
• Financial transaction records are retained for the period required by applicable financial regulations, which may extend to seven (7) years.
• Support communications are retained for three (3) years from the date of the interaction.
• Marketing preference records are retained for as long as necessary to honour opt-out requests and prevent re-subscription without fresh consent.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification.

Subject to applicable data protection law, you have the following rights in relation to your personal data held by coin88:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data, subject to our legal retention obligations and the requirements of our operating licence.
• Right to restriction: You may request that we restrict the processing of your personal data in certain circumstances.
• Right to object: You may object to processing based on legitimate interests, including direct marketing.
• Right to data portability: Where processing is based on consent or contractual necessity, you may request that we provide your data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact coin88 at [email protected]. We will respond to verified requests within the timeframe required by applicable law, and in any event within 30 days of receipt.

coin88 implements appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include:

• 256-bit TLS encryption for all data in transit between your device and coin88 servers.
• Encryption of sensitive data at rest, including identity documents and financial records.
• Role-based access controls ensuring that only authorised personnel can access personal data, limited to what is necessary for their function.
• Regular security assessments, penetration testing, and vulnerability scanning.
• Brute-force login protection and anomalous access detection systems.
• Segregated storage of player funds and financial data from operational systems.

Notwithstanding these measures, no internet transmission is entirely secure. You acknowledge that you provide personal data at your own risk and are responsible for maintaining the security of your Account credentials.

The coin88 platform is strictly intended for adults aged 21 and above. coin88 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by or on behalf of a person under 21, we will immediately delete that data and close the associated Account. If you believe a minor has accessed the coin88 platform, please contact us at [email protected] without delay.

coin88 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or platform features. Updated versions will be posted on this page with a revised "Last updated" date. Where material changes are made, we will notify you via your registered email address or through a prominent notice on the coin88 platform. Your continued use of the platform following notification of changes constitutes your acceptance of the revised Privacy Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by coin88, please contact our data team:

Email: [email protected] (plain text — not a clickable link)

We aim to respond to all privacy-related enquiries within 5 business days. For formal data subject rights requests, we will respond within 30 days as required by applicable law.