Grab88 Privacy Policy – Personal Data Protection for Malaysian Members

1. Personal Data We Collect from grab88 Members

Grab88 collects various types of information from members to operate the platform safely and effectively. Below are the categories of data we collect and how they are gathered:

Grab88 does not collect sensitive data such as health information, religious beliefs or political views unless you voluntarily provide it in a relevant context. We also do not knowingly collect data from individuals under 18 years of age – if we discover that such data has been inadvertently collected, we will delete it promptly.

2. How and Why Grab88 Uses Your Personal Data

Grab88 uses members' personal data on valid legal grounds, namely contractual necessity, legitimate interests, and compliance with legal obligations. The specific purposes for which your data is used are as follows:

• Account management: Creating, verifying, and managing your grab88 account, including identity verification during registration and password recovery.
• Transaction processing: Processes all deposits in RM via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost, and ShopeePay, and manages your winnings withdrawals within the promised timeframe.
• Service delivery: Operating the Sports Betting platform, Live Casino, slots, and all other features available on grab88 for a seamless gaming experience.
• Security and fraud prevention: Detecting and preventing fraudulent activity, money laundering, multiple account ownership and any misuse of the platform that could affect other members.
• Customer Support: Provides assistance and resolves any enquiries or complaints you raise with the grab88 support team, which operates 24/7.
• Platform improvements: Analysing usage patterns in aggregate and anonymised form to understand member needs and improve the Grab88 user experience over time.
• Important communications: Sending notifications about account activity, changes to terms, security updates, and other information important to your account.
• Legal compliance: Fulfilling legal obligations and complying with orders from competent authorities where required under applicable law.

Grab88 will not use your data for purposes unrelated to our services without first obtaining your explicit consent. If you wish to withdraw consent for a specific use of your data, you may contact our privacy team.

3. Data Sharing with Third Parties – What grab88 Does and Does Not Do

Data sharing transparency matters deeply to Grab88. We want you to have a clear picture of who may receive your data and under what circumstances.

grab88 does NOT share your data with:

• Third-party marketing companies or advertisers for the purpose of targeting ads at you
• Data brokers or companies that sell user information
• Entities with no direct involvement in the operation of Grab88's services

grab88 MAY share your data with:

• Payment service providers: Parties such as Touch 'n Go eWallet, GrabPay, DuitNow, FPX banking institutions and other local e-wallets receive the transaction information necessary to process your deposits and withdrawals in MYR.
• Platform technology provider: Software providers, server infrastructure, and cloud service providers that assist grab88 in operating the platform may have limited access to data required for their technical functions. All such providers are bound by strict data protection agreements.
• Authorities and law enforcement bodies: grab88 will comply with court orders, subpoenas, or lawful requests from competent authorities in Malaysia where required by law.
• Parties in corporate transactions: In the event of a merger, acquisition or sale of Grab88's assets, member data may be transferred to the new entity, provided that entity agrees to honour this Privacy Policy or one that is equivalent or more stringent.

4. Data Security Measures Implemented by Grab88

Grab88 continuously invests in security infrastructure to protect members' personal data against unauthorised access, loss, damage, or unintended disclosure. The following security layers are in place:

• Data transmission encryption: All communication between your browser and grab88's servers is secured with TLS 1.3 protocol and a 256-bit SSL certificate. The "https://" in the address bar and the padlock icon in your browser confirm this secure connection at all times.
• Encryption of stored data: Sensitive information such as passwords is stored in hashed form and cannot be decrypted. Even grab88's internal staff are unable to view your password in its original form.
• Two-factor authentication (2FA): Log-ins and sensitive operations such as withdrawal requests are secured with an OTP sent to your registered phone number. This ensures only you can access your account, even if your password is compromised.
• Real-time threat monitoring: Grab88's systems automatically monitor account activity and transaction patterns 24/7 to detect and prevent unauthorised access attempts, cyberattacks and fraudulent activity.
• Internal access controls: Only grab88 staff with a legitimate business need may access member data, and every access is logged for internal audit purposes. Access is granted on a "least privilege" basis.
• Regular security testing: grab88 conducts regular penetration testing and security audits to identify and address any vulnerabilities in our systems before they can be exploited.

While grab88 takes all reasonable steps to protect your data, no security system is entirely foolproof. You also play an important role in keeping your account safe – use a strong password, never share your login credentials, and contact us immediately if you suspect any suspicious activity on your grab88 account.

5. Cookies, Analytics & Tracking Technologies at Grab88

Grab88 uses cookies and similar tracking technologies to enhance the user experience, analyse platform usage and ensure proper technical functionality. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, game sessions, and security. These cookies cannot be disabled as the platform cannot function without them.
• Performance Cookies: Collects information on how members use the grab88 platform – which pages are visited most frequently, how much time is spent, and any errors encountered. This data is used in aggregate form to improve the platform.
• Functional Cookies: Storing your preferences such as language settings, display preferences and login information you've chosen to remember. This enables a more personalised experience every time you visit Grab88.
• Analytics cookies: Grab88 uses analytics tools to understand aggregated platform usage patterns. This analytics data does not contain any personally identifiable information.

You can manage cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies. However, disabling essential cookies may affect the functionality of the grab88 platform and your gaming experience. Please refer to your browser's help section for guidance on managing cookies.

6. Your Rights as a Data Subject at Grab88

As a grab88 member, you have specific rights regarding your personal data. grab88 is committed to respecting and facilitating the exercise of these rights. Your rights are as follows:

To exercise any of the above rights, please contact the grab88 privacy team by email at support@grab88.best with the subject line "Privacy Rights Request". We will respond to your request within 30 business days and will not charge for reasonable requests. We may need to verify your identity before processing certain requests to ensure the security of your data.

7. Grab88 Members' Personal Data Retention Period

Grab88 does not retain personal data longer than is necessary for the purposes set out in this Privacy Policy. Retention periods vary depending on the type of data and applicable legal requirements:

• Active account data: For as long as your account remains active with grab88, your identity and contact data will be retained to allow you full use of our services.
• Data for closed accounts: After account closure, core data will be retained for 5 years for legal compliance, dispute resolution, and fraud prevention purposes. After this period, data will be securely deleted or anonymised.
• Financial transaction records: Deposit and withdrawal history in MYR is retained for 7 years in accordance with applicable Malaysian financial and tax legal requirements.
• Technical and security logs: Access logs and system activity records are retained for 90 days for security audit and incident investigation purposes.
• Customer support records: Support chat records and correspondence are retained for 2 years after case resolution for future reference if required.
• Marketing data (with consent): If you have given consent to receive marketing communications, the relevant data will be retained until you withdraw that consent.

Grab88 runs scheduled automated data deletion processes to ensure that data exceeding its defined retention period is deleted or anonymised securely and in a timely manner.

8. Contact grab88's Privacy Officer & Policy Updates

If you have any questions, concerns, or requests regarding this Privacy Policy or how grab88 handles your personal data, we encourage you to reach out to us directly. We are committed to addressing every enquiry seriously and within a reasonable timeframe.

• Privacy email: support@grab88.best (include the subject line "Privacy Inquiry" or "Data Rights Request")
• Live chat: Available 24/7 on the grab88 platform – select the "Privacy & Data" category when starting a chat session
• Response time: Grab88 is committed to responding to all privacy enquiries within 2 business days for general enquiries and 30 business days for formal data rights requests

Grab88 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technology. Members will be notified of any material changes via their registered email or a prominent in-platform notification at least 14 days before the changes take effect. The latest version of this Privacy Policy is always available on this page with a clear update date.

Your continued use of the Grab88 platform after any Privacy Policy update takes effect will be considered your acceptance of the revised version. If you do not agree with the changes, you have the right to close your account and request deletion of your data in accordance with the procedure outlined in Section 6.