Privacy Policy fafa88 — Malaysia Player Data Protection

1Introduction and Scope of This Policy

This Privacy Policy is issued by fafa88 and applies to all users who browse our website at fafa88.onl, using the fafa88 mobile app, or accessing any of the services we offer. This document clearly explains what information we collect, why we need it, how it is used, and the steps we take to protect it.

We believe transparency is the foundation of trust. This Privacy Policy is therefore written in plain language that any player can understand, not confusing legal jargon. If you have any questions after reading this document, our support team is available to help 24 hours a day.

2Information We Collect

Fafa88 collects your personal information through several different channels, depending on the nature of your interaction with our platform. The following are the main categories of information we collect:

Information You Provide Directly

• Full name, date of birth, and ID card number (for KYC verification purposes)
• Registered email address and mobile phone number
• Residential address and postcode
• Registered bank account details and payment methods
• Username, password (stored in hashed format), and security questions
• Identity documents uploaded for the KYC process

Automatically Collected Information

• Your IP address, web browser type, and device operating system
• Session data including pages visited, time spent, and actions taken on the platform
• Mobile device information such as model, operating system, and unique device identifier
• Cookies and similar tracking technologies to enhance user experience
• Transaction logs including deposits, withdrawals, wagering, and wins

3How We Use Your Information

Every piece of information we collect has a clear and legitimate purpose. fafa88 does not collect more information than is necessary for the purposes stated below:

4Information Sharing and Disclosure

Fafa88 does not sell your personal information. However, there are limited circumstances in which we may need to share your data with certain parties to enable the platform to operate properly and comply with the law:

• Payment providers: the information required to process your deposits and withdrawals via FPX, Touch 'n Go, GrabPay, and credit card
• Game software providers: the minimum information required to verify eligibility to play and prevent fraud
• Regulatory authorities: when required by Malaysian law or a valid court order
• Identity verification services: for KYC and AML (anti-money laundering) purposes
• Cloud services: technical infrastructure providers that operate our servers and data storage

All third parties we work with are bound by strict confidentiality agreements and may only use your data for agreed purposes. fafa88 takes full responsibility for ensuring that third parties comply with equivalent data protection standards.

5Data Storage and Retention Period

Fafa88 retains your personal information for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law. The following are our general data retention guidelines:

• Active account data: for as long as your account is active and for 5 years after account closure
• Financial transaction records: minimum 7 years in accordance with anti-money laundering legal requirements
• Customer support communication logs: 2 years from the date of interaction
• Log and analytics data: maximum 2 years in identifiable format
• KYC documents: 5 years after the termination of the business relationship

6Your Information Security

Data security is an absolute priority at fafa88. We continuously invest in industry-leading technology and best practices to protect your information from unauthorized access, loss, misuse, or disclosure. The security measures we implement include:

• Data encryption in transit using TLS 1.3 and SSL 256-bit protocols
• Data encryption at rest using AES-256 standard
• Intrusion detection system (IDS) that monitors network traffic 24/7
• Access control based on the principle of least privilege — staff may only access data required for their role
• Regular security audits by independent third parties
• Two-factor authentication (2FA) for internal administrative access
• Regular data backups at secure, separate locations

While we take all reasonable measures, no system is 100% immune to cyber threats. In the event of a security breach involving your data, fafa88 is committed to notifying you within 72 hours of becoming aware of the incident, in line with international best practices.

7Your Rights as a Player

Under Malaysia's Personal Data Protection Act 2010, you have several important rights regarding your personal information held by fafa88. We are committed to respecting and facilitating the exercise of these rights:

8Cross-Border Data Transfers

In certain circumstances, your personal data may be processed or stored on servers located outside Malaysia, particularly when involving cloud service providers or international technology partners. fafa88 ensures that any such data transfers are carried out with protections equivalent to or higher than the requirements of PDPA 2010, including the use of standard contractual clauses and strict data processing agreements.

9Children and Privacy

Fafa88 services are strictly for individuals aged 18 and above. fafa88 does not knowingly collect personal information from minors. If we determine that someone under the age of 18 has registered an account, we will immediately close that account and delete all associated data. If you are aware of a minor using our platform, please contact our support team immediately.

10Changes to This Privacy Policy

Fafa88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in law, technology, or our business practices. When significant changes are made, you will be notified via your registered email or a prominent notice on the platform at least 14 days before the changes take effect. The latest version of the Privacy Policy is always available on our website with a clear update date.

Continued use of the fafa88 platform after a change notice is considered acceptance of the updated Privacy Policy. If you disagree with the changes made, you have the right to close your account before the changes take effect.