Privacy Policy

1 Introduction

This Privacy Policy (hereinafter referred to as the "Policy") is published by s88 (hereinafter referred to as the "Operator", "Platform", "we", "us", or "our"), the entity operating the online gaming and sports betting services accessible ats88.buzz and all associated subdomains and mobile applications.

This Policy describes how s88 collects, uses, stores, processes, and discloses the personal data and information of users (hereinafter referred to as "Player", "User", "Member", or "you") who access or use the s88 Platform. It applies to all personal data collected through the Platform, through any communications between the Player and s88, and through any transactions conducted using s88's services.

This Policy should be read alongside our Terms and Conditions, which govern the overall use of the Platform and are incorporated herein by reference. By registering an account on s88, you confirm that you have read and understood this Privacy Policy and that you consent to the collection, processing, and use of your personal data as described herein.

s88 takes its data protection obligations seriously. We collect only the data necessary to provide our services safely and compliantly, and we do not sell, rent, or trade your personal data to third-party marketers under any circumstances.

2 Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact information, financial data, and online identifiers.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" means s88, the entity that determines the purposes and means of the processing of Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of s88 under a data processing agreement.
• "KYC Data" means identity verification documents and associated personal information collected during the Know Your Customer verification process.
• "Transaction Data" means records of deposits, withdrawals, bets, and other financial activities conducted through the Platform.
• "Technical Data" means information collected automatically about Player's device and usage patterns, including IP address, browser type, operating system, session duration, and pages visited.
• "Cookies" means small text files stored on a Player's device by the Platform to facilitate session management, preference retention, and analytical tracking.
• "Sensitive Data" means a subset of Personal Data warranting heightened protection, including financial account details, government-issued identification numbers, and health-related information where relevant to responsible gambling obligations.

3 Data We Collect

s88 collects personal data through several channels: directly from Players during registration and account use; automatically through technical systems when a Player accesses the Platform; and, in limited circumstances, from third-party service providers in connection with payment processing and identity verification.

3.1 Registration Data

When a Player creates an account on s88, we collect the following information:

• Full legal name (as it appears on government-issued identification)
• Date of birth (to verify the21+ age requirement)
• Residential address, including city, state, and postcode
• Email address
• Mobile phone number
• Chosen username and encrypted account password
• Currency preference (default: Malaysian Ringgit / MYR)

3.2 KYC Verification Data

Prior to processing any withdrawal, and in certain other circumstances at the Operator's discretion, s88 requires Players to complete a KYC verification process. The following documents and information are collected:

• A valid government-issued photo identification document (Malaysian MyKAD, Driver's Licence, or Passport)
• Proof of residential address (recent utility bill or bank statement)
• A selfie photograph holding the primary identification document
• In certain circumstances, proof of the source of funds or source of wealth

3.3 Transaction Data

s88 maintains records of all financial transactions conducted through the Platform, including deposit and withdrawal requests, the payment methods used, transaction amounts in MYR, transaction timestamps, and the outcomes of all bets and gaming rounds.

3.4 Technical & Usage Data

The Platform automatically collects Technical Data when a Player accesses s88, including:

• Internet Protocol (IP) address and approximate geographic location derived therefrom
• Browser type, version, and language settings
• Device type, operating system, and screen resolution
• Session start and end times, pages visited, and features used
• Referring URLs and search terms used to reach the Platform
• Cookie identifiers and similar tracking data (see Section 7)

3.5 Communications Data

When a Player contacts s88 via live chat, email, or any other supported communication channel, s88 retains records of those communications — including their content, timestamps, and the resolution provided — for quality assurance, compliance, and dispute resolution purposes.

4 How We Process Your Data

The table below summarises the primary purposes for which s88 processes Player personal data, the categories of data involved, and the legal basis for each processing activity:

5 Legal Basis for Processing

s88 processes Player personal data on the following legal bases, as referenced in the table in Section 4:

5.1 Contract Performance

Processing is necessary for the performance of the contract between s88 and the Player — i.e., to create and maintain the Player's Account, process deposits and withdrawals, deliver gaming services, and communicate account-related information.

5.2 Legal Obligation

Processing is necessary to comply with legal obligations applicable to s88 as a licensed gaming operator, including but not limited to anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, responsible gambling obligations, and the retention of financial records for the legally required period.

5.3 Legitimate Interests

Processing is necessary for the legitimate interests of s88, including fraud prevention, platform security, improving service quality through analytics, and responsible gambling monitoring. Where legitimate interests are relied upon, s88 has assessed that such interests are not overridden by the fundamental rights and freedoms of Players.

5.4 Consent

Where s88 relies on consent as the legal basis for processing — for example, for sending promotional email communications — Players may withdraw their consent at any time by contacting s88 support or updating their communication preferences within their Account settings. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

6 Data Sharing & Disclosure

s88 does not sell, rent, or trade Player personal data to third-party advertisers or marketers. Player data is shared only in the circumstances described below, and only to the minimum extent necessary for the stated purpose.

6.1 Payment Service Providers

To process deposits and withdrawals, s88 shares necessary transaction data with payment service providers including FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency network processors. Each payment provider operates under its own privacy policy and data handling obligations. s88 shares only the data strictly necessary to complete each transaction.

6.2 Identity Verification Services

s88 may engage third-party KYC and identity verification service providers to assist in verifying Player identities and complying with anti-money laundering obligations. These providers are engaged as Data Processors under contractual obligations consistent with this Policy.

6.3 Regulatory and Law Enforcement Authorities

s88 may disclose Player personal data to regulatory authorities, law enforcement agencies, or other competent governmental bodies where required to do so by applicable law, court order, or legitimate legal process. s88 will comply with all valid legal requests for data disclosure.

6.4 Group Companies and Technology Partners

s88 may share Personal Data with affiliated group companies or technology service providers (including hosting providers, analytics platforms, and customer support software providers) that process data on s88's behalf under appropriate data processing agreements. All such third parties are contractually prohibited from using Player data for their own purposes beyond the specific service they provide to s88.

6.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of s88's business assets, Player personal data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and the privacy terms applicable to their data following the transaction.

7 Cookies & Tracking Technologies

The s88 Platform uses cookies and similar tracking technologies to provide a functional, personalised, and secure user experience. By continuing to use the Platform, you consent to the use of cookies as described in this section.

7.1 Types of Cookies Used

• Essential Cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without breaking Platform functionality.
• Functional Cookies: Used to remember Player preferences such as language settings, preferred deposit method, and display options, to provide a more personalised experience.
• Analytical Cookies: Used to collect aggregated, anonymised data about how Players use the Platform — including which pages are visited most frequently and how long sessions last — to help s88 improve the Platform over time.
• Security Cookies: Used to support fraud detection and prevention systems, including device fingerprinting and behavioural anomaly detection.

7.2 Managing Cookies

Players can control or disable non-essential cookies through their browser settings. Most modern browsers allow users to reject cookies, delete existing cookies, or receive notifications when new cookies are set. Please note that disabling certain cookies may affect the functionality or performance of the Platform. Instructions for managing cookies vary by browser — consult your browser's help documentation for guidance.

7.3 Third-Party Cookies

Certain third-party services embedded within or connected to the Platform — including payment gateways and analytics providers — may set their own cookies on a Player's device. s88 does not control the cookie practices of third-party providers and recommends that Players review the privacy and cookie policies of relevant third parties.

8 Data Retention

s88 retains Player personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply as general guide:

• Account and Registration Data: Retained for the duration of the Player's active Account plus a minimum of five (5) years following Account closure, to satisfy anti-money laundering record-keeping requirements.
• KYC Verification Data: Retained for a minimum of five (5) years from the date of verification, or longer if required by applicable regulatory obligations.
• Transaction Data: Retained for a minimum of five (5) years from the date of the transaction.
• Communications Data: Retained for a minimum of two (2) years from the date of the communication, unless a longer period is required for ongoing dispute resolution or compliance purposes.
• Technical and Usage Data: Retained in identifiable form for up to twenty-four (24) months, after which it may be anonymised and retained indefinitely for aggregate analytical purposes.

Upon expiry of the applicable retention period, s88 will securely delete or anonymise personal data in accordance with standard disposal procedures. Where a Player has submitted a data deletion request under Section 10, s88 will action that request subject to any overiding legal or regulatory retention obligations.

9 Data Security

s88 implements industry-standard technical and organisational security measures to protect Player personal data against unauthorised access, loss, alteration, or disclosure. Key security measures include:

• 256-bit SSL (Secure Socket Layer) encryption for all data transmitted between the Player's device and the Platform
• Encryption at rest for sensitive stored data, including KYC documents and financial records
• Role-based access controls restricting access to Personal Data to authorised personnel only, on a need-to-know basis
• Multi-factor authentication for internal systems handling Player data
• Regular penetration testing and security audits by independent third-party security specialists
• Real-time intrusion detection and monitoring systems
• Segregated storage for financial and identity data, separate from general Platform operational data

Notwithstanding the above measures, no data transmission over the internet or electronic storage system can be guaranteed as completely secure. In the event of a data breach affecting Player personal data, s88 will notify affected Players and relevant regulatory authorities in accordance with applicable notification obligations.

10 Your Rights

Subject to applicable data protection law and the terms of this Policy, Players have the following rights regarding their personal data held by s88:

To exercise any of the above rights, please contact s88 at [email protected] with the subject line "Data Rights Request". s88 will acknowledge your request within five (5) business days and respond substantively within thirty (30) days. In complex cases, this period may be extended by a further thirty (30) days with prior notification.

Please note that certain rights are subject to exceptions. For example, the right of erasure may be limited where s88 is required to retain data comply with a legal obligation (such as AML record-keeping requirements). s88 will inform you of any applicable limitations when responding to your request.

11 International Data Transfers

s88 operates internationally and may transfer Player personal data to servers or service providers located outside of Malaysia. Where such transfers occur, s88 ensures that appropriate safeguards are in place to protect transferred data to a standard at least equivalent to that described in this Policy.

Safeguards used for international transfers may include: standard contractual clauses approved by relevant data protection authorities; adequacy decisions confirming that the recipient jurisdiction provides adequate data protection; or the binding corporate rules of recipient group entities.

Players who wish to obtain further information about international transfer safeguards may contact s88 support using the contact details in Section 15.

12 Minors & Age Restriction

The s88 Platform is strictly intended for use by individuals aged21 years and above. s88 does not knowingly collect or process personal data of individuals under the age of 21. Age verification is a mandatory component of the registration and KYC process.

If s88 becomes aware that personal data has been collected from an individual under the age of 21, s88 will immediately suspend the relevant Account, delete all associated personal data (subject to any applicable legal retention requirements), and refund any deposits made. Any winings generated through the Account of an underage individual will be voided.

13 Third-Party Services

The s88 Platform may integrate with or link to third-party services — including payment gateways such as Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, GrabPay, and DuitNow — that operate under their own independent privacy policies. s88 is not responsible for the data collection, use, or disclosure practices of any third-party service provider.

When a Player uses a third-party payment method, any personal or financial data transmitted through that payment channel is subject to the privacy policy and data handling practices of the respective payment provider. Players are encouraged to review the privacy policies of all third-party services they use in connection with their s88 Account.

14 Policy Amendments

s88 reserves the right to update or amend this Privacy Policy at any time. Amended versions will be published on this page with an updated "Last Updated" date. Where an amendment materially changes how s88 processes Player personal data or affects Player rights, s88 will provide reasonable advance notice via email or through an in-platform notification prior to the amendment taking effect.

Continued use of the Platform following the publication of an amended Privacy Policy constitutes the Player's acceptance of the updated terms. Players who do not accept the amended Policy should cease using the Platform and contact support to request Account closure and, where applicable, deletion of their personal data.

15 Contact Us

For any questions, concerns, or requests related to this Privacy Policy or the processing of your personal data by s88, please contact our Data Protection team using the following details:

When submitting a data rights request by email, please include your registered username and the email address associated with your Account to allow s88 to verify your identity before processing the request. s88 may request additional verification information to protect against unauthorised data access requests.