Privacy Policy

Introduction

be88 ("be88", "we", "us", "our") operates the online gaming and sports betting platform accessible at be88.casa (the "Platform"). This Privacy Policy (the "Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed. We are committed to protecting the privacy of all persons who interact with the Platform, including registered members, account applicants and visitors.

By registering an Account or continuing to use the Platform, you acknowledge that you have read and understood this Policy. This Policy should be read alongside the be88 Terms & Conditions and the Responsible Gambling Policy, both of which contain additional provisions relevant to your use of the Platform.

Scope & Application

This Policy applies to all personal data processed by be88 in connection with the Platform, including data relating to registered members, persons who submit account registration enquiries, persons who contact be88 customer support and visitors who access the Platform without registering. It covers data processed via the Platform's website and any associated mobile-optimised interface.

The Platform primarily serves adult players located in Malaysia and is presented in English. Where this Policy references Malaysian payment services — such as DuitNow, FPX, Maybank, CIMB, Touch 'n Go eWallet and similar providers — it is in the context of transaction data handling relevant to Malaysian members. This Policy does not govern the privacy practices of third-party payment processors or identity verification partners, who maintain their own independent privacy documentation.

Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial data and online identifiers.
• "Processing" — any operation performed on personal data, including collection, recording, storage, use, disclosure, transmission, restriction or deletion.
• "Data Subject" — the identified or identifiable natural person to whom personal data relates; in most cases, this means you as the member or visitor.
• "Controller" — the entity that determines the purposes and means of processing personal data; be88 acts as the Controller in respect of data processed under this Policy.
• "Processor" — a third party that processes personal data on behalf of the Controller under documented instructions and appropriate safeguards.
• "Consent" — a freely given, specific, informed and unambiguous indication of agreement to the processing of personal data for a stated purpose.
• "KYC Data" — identity and documentation data collected as part of Know Your Customer verification processes, including government-issued identification and proof of payment method.

Data We Collect

be88 may collect and process the following categories of personal data:

How We Collect Data

be88 collects personal data through the following means:

Direct Collection

Data you provide when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting customer support or submitting feedback. This is the primary source of identity, contact and financial data.

Automated Collection

Technical and usage data collected automatically when you access or interact with the Platform, including through cookies, server logs and platform analytics. This data is collected to ensure security, detect fraud and improve the member experience. See Section 11 for further information on cookies.

Third-Party Sources

Data received from identity verification partners and payment processors during KYC procedures or payment authentication. be88 may also receive data from publicly available sources where necessary for fraud detection or responsible gambling compliance. Third-party sources are limited to those whose privacy practices meet the standards required by be88.

Purposes of Processing

be88 processes personal data for the following purposes:

• Account administration: creating, maintaining and managing member accounts, including verifying eligibility and identity;
• Transaction processing: facilitating deposits and withdrawals in MYR via DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, Touch 'n Go eWallet, Boost, GrabPay and other supported methods;
• Regulatory compliance: meeting anti-money-laundering (AML), Know Your Customer (KYC) and applicable gaming regulatory obligations;
• Security and fraud prevention: detecting, investigating and preventing fraudulent activity, unauthorised access and abuse of the Platform;
• Responsible gambling: monitoring account behaviour to identify potential problem gambling indicators and administering self-exclusion, deposit limit and session control tools;
• Customer support: responding to queries, complaints and account-related requests through the Platform's live chat and email channels;
• Platform improvement: analysing aggregate usage data to improve Platform features, stability and member experience;
• Marketing communications: sending promotional offers and product updates to members who have provided consent, with a straightforward mechanism to withdraw consent at any time.

Legal Basis for Processing

be88 processes personal data on the following legal grounds, depending on the purpose:

• Contractual necessity: processing required to fulfil the membership agreement, including account administration, payment processing and KYC compliance;
• Legal obligation: processing required to comply with applicable AML regulations, gaming licensing requirements and other legal obligations;
• Legitimate interests: processing carried out for fraud prevention, platform security and service improvement, where such interests are not overridden by the rights of the data subject;
• Consent: processing for non-essential marketing communications and optional personalisation features, where the member has given explicit consent and may withdraw it at any time without detriment to their account.

Disclosure of Data

be88 does not sell, rent or trade your personal data to third-party marketers. Personal data is shared only in the following limited circumstances:

• Service providers: third-party processors engaged to deliver platform services, including payment processors, identity verification providers, cloud hosting providers and customer support technology providers. Such processors operate under binding contractual obligations that prohibit independent use of member data;
• Regulatory authorities: government bodies, law enforcement agencies, financial intelligence units and gaming regulators where disclosure is required by law, court order or regulatory direction;
• Fraud prevention networks: industry fraud prevention and AML databases where sharing is necessary to protect the Platform and its members;
• Business transfers: in the event of a merger, acquisition or asset sale involving be88, personal data may be transferred to the relevant successor entity, subject to equivalent privacy protections.

Where data is transferred outside the primary jurisdiction of operations, be88 ensures that appropriate safeguards — such as contractual data protection clauses — are in place prior to the transfer.

Data Retention

be88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulatory obligation. The following general retention principles apply:

• Account and KYC data is retained for a minimum of five (5) years from the date of account closure, in line with standard AML record-keeping requirements;
• Transaction records are retained for a minimum of five (5) years from the date of the transaction;
• Customer support communications are retained for a period of three (3) years from the date of the final communication in a given case;
• Technical and usage data is retained for a rolling period sufficient for fraud detection and Platform analytics purposes, typically not exceeding twenty-four (24) months;
• Consented marketing preferences and opt-out records are maintained for the duration of the member relationship and for a reasonable period thereafter.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.

Security Measures

be88 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encrypted storage of personal and financial data at rest;
• Role-based access controls limiting staff access to personal data strictly on a need-to-know basis;
• Regular security assessments and monitoring of Platform infrastructure;
• Two-factor authentication options for member accounts to reduce the risk of unauthorised access;
• Internal policies governing data handling, staff training and incident response procedures.

While be88 takes all reasonable steps to protect your data, no transmission over the internet can be guaranteed as entirely secure. You are responsible for maintaining the security of your own Account credentials. If you suspect unauthorised access to your Account, please contact be88 support immediately.

Cookies & Tracking Technologies

be88 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you access the Platform. They help us recognise returning members, maintain session state, analyse usage patterns and prevent fraud.

Types of Cookies Used

• Strictly necessary cookies: required for the Platform to function correctly, including session management and security. These cannot be disabled without affecting core Platform functionality.
• Analytical cookies: collect aggregated, anonymised data about how members use the Platform, enabling us to measure performance and identify areas for improvement.
• Functional cookies: remember your preferences such as language settings, currency display and notification preferences to personalise your experience.
• Marketing cookies: used only where you have given consent, to deliver relevant promotional communications and measure their effectiveness.

You may manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of parts of the Platform. For analytical and marketing cookies, be88 will seek your consent before placing them. Consent may be withdrawn at any time.

Your Rights as a Data Subject

Subject to applicable law, you have the following rights in relation to the personal data we hold about you. Requests may be submitted by contacting be88 support via the live chat on the Platform or by email using the address listed in Section 15.

be88 will respond to verified data subject requests within a reasonable period, typically not exceeding thirty (30) calendar days. Where a request is complex or there is a volume of concurrent requests, a response period of up to sixty (60) days may apply, with prior notification provided.

Minors

The be88 Platform is strictly intended for adults aged 21 and above. be88 does not knowingly collect or process personal data from persons under the age of 21. If we become aware that personal data has been submitted by or on behalf of a person under 21, we will take prompt steps to delete that data and close the associated account.

If you believe that a minor has registered or attempted to register on the Platform, please contact be88 support immediately via live chat so that appropriate action can be taken without delay.

Policy Amendments

be88 may update or revise this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations or Platform functionality. The "Last updated" date at the top of this page will be revised to reflect any material change. Where changes are material and affect existing members, be88 will endeavour to provide advance notice via email or a prominent Platform notice.

Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgement of the revised Policy. If you do not agree with the revised terms, you should discontinue use of the Platform and may request Account closure by contacting support.

Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data by be88, you may contact us through the following channels:

• Live Chat: available 24 hours a day, 7 days a week via the Platform;
• Email (non-clickable, plain text): [email protected] — please allow up to one (1) business day for a written response.

When contacting us regarding a data subject rights request, please include your registered email address and a clear description of your request to enable us to verify your identity and respond efficiently.