Privacy Policy

This Privacy Policy ("Policy") describes how on88b ("on88b", "we", "us", "our"), the operator of the online casino and sports betting platform at https://on88b.cam, collects, processes, stores, and protects the personal data of individuals ("you", "the Player", "the User") who access or use the platform.

on88b takes data protection seriously. As a platform serving players primarily across Malaysia — including Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, and Shah Alam — we recognize our responsibility to handle personal data with transparency, care, and integrity. This Policy has been drafted in alignment with internationally recognized data protection principles including those articulated in the General Data Protection Regulation (GDPR) framework and equivalent international standards.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy. By registering an account or using any service on on88b, you consent to the collection and processing of your personal data as described in this Policy.

For the purposes of this Policy, the following terms have the meanings assigned below:

• "Personal Data" means any information that identifies or can be used to identify a living individual, directly or in combination with other information — including name, email address, date of birth, Malaysian ID number (MyKad), IP address, and transaction history.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, transfer, or deletion.
• "Data Controller" means on88b in its capacity as the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party engaged by on88b to process Personal Data on its behalf under binding contractual obligations.
• "KYC" means Know Your Customer — the identity verification process required under our licensing obligations and anti-money laundering compliance framework.
• "Cookies" means small text files placed on your device by our platform to enable functionality, analytics, and session management.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your Personal Data for a stated purpose.

on88b collects Personal Data in the following categories. We collect only the data that is necessary for the specific purpose identified:

Identity & Registration Data

This data is collected during the account registration and KYC verification process. It is required to confirm your identity, verify your age (21+ requirement), and comply with anti-money laundering obligations.

Financial & Transaction Data

Financial data is collected each time you make a deposit or withdrawal. We retain payment method references (such as the registered name on your Touch 'n Go eWallet or Maybank account) to verify that transactions originate from accounts held in your own name, as required by our anti-money laundering policy.

Technical & Usage Data

Technical data is collected automatically as you use the platform. This data is used to maintain platform security, detect fraud, personalize your experience, and comply with responsible gambling monitoring obligations.

KYC Document Data

KYC documents are collected prior to processing your first withdrawal. These documents are processed for identity verification purposes only and are stored securely with access restricted to authorised compliance personnel.

on88b collects Personal Data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make deposits or withdrawals, submit a support request, or interact with any feature of the platform that requires input.
• Automatically: Through cookies, server logs, and tracking technologies as you browse and use the platform. This includes IP address logging, device fingerprinting for fraud prevention, and session recording for responsible gambling monitoring.
• From payment processors: When you transact via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, or bank transfer, our payment processor partners share transaction confirmation data with us to reconcile your deposit or withdrawal.
• From identity verification services: During KYC verification, our platform may engage third-party identity verification services that return a verification result. These services process your document images subject to their own data processing agreements.

on88b processes your Personal Data for the following purposes:

1. Account Management: Creating, maintaining, and administering your player account, including authentication, password resets, and account preference management.
2. Payment Processing: Processing deposits and withdrawals through Malaysian and international payment channels, including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and USDT TRC20.
3. Identity Verification (KYC): Confirming your identity and age as required under international gaming licensing obligations and anti-money laundering standards.
4. Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, collusion, money laundering, and unauthorized access to accounts.
5. Responsible Gambling Monitoring: Monitoring play patterns to identify potential problem gambling indicators and enforcing self-imposed limits and exclusions requested by players.
6. Customer Support: Responding to inquiries, resolving disputes, processing complaints, and providing account assistance.
7. Legal Compliance: Meeting our obligations under international licensing requirements, anti-money laundering regulations, and any lawful request from competent authorities.
8. Platform Improvement: Analyzing aggregate, anonymized usage data to improve platform functionality, game selection, and user experience.
9. Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may opt out at any time.

on88b processes Personal Data on the following legal bases, in accordance with internationally recognised data protection frameworks:

• Contract Performance: Processing necessary to deliver the services you have requested under your account agreement, including payment processing, game provision, and account management.
• Legal Obligation: Processing required to comply with our licensing conditions, anti-money laundering obligations, KYC requirements, and any lawful request from regulatory or law enforcement authorities.
• Legitimate Interests: Processing conducted for fraud prevention, platform security, responsible gambling monitoring, and aggregate analytics — where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications and optional personalization features, for which you have provided explicit opt-in consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

on88b may share your Personal Data with the following categories of recipient:

• Payment Service Providers: Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX network participants, and other payment processors require transaction data to process your deposits and withdrawals. Each provider is bound by their own data protection obligations.
• Identity Verification Providers: Third-party KYC service providers engaged to process and verify your identity documents. These providers act as Data Processors under binding contractual terms.
• Game Technology Providers: Game studios and platform technology suppliers may receive anonymized session data to support game delivery, RNG certification, and technical support functions.
• Regulatory & Legal Authorities: Where required by our licensing obligations, court order, or a lawful request from a competent authority, on88b may disclose Personal Data as required by applicable law.
• Professional Advisers: Legal counsel, auditors, and compliance consultants engaged by on88b may access Personal Data as strictly necessary to perform their services, subject to professional confidentiality obligations.

Any third party with whom Personal Data is shared is required to maintain appropriate technical and organisational security measures and to process data only for the purpose for which it was shared.

When you deposit using Malaysian payment methods — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, or FPX bank transfer — on88b receives a transaction confirmation containing the payment reference, amount, timestamp, and sender account identifier. Full payment account credentials are never transmitted to or stored by on88b.

For Malaysian bank transfers processed through Maybank, CIMB, Public Bank, Hong Leong Bank, RHB, or other FPX-participating institutions, on88b receives confirmation data from the FPX or DuitNow network operator. Bank login credentials and full account numbers are handled exclusively by your bank's secure portal and are never accessible to on88b.

For USDT TRC20 cryptocurrency deposits, on88b records the sending wallet address, transaction hash, and USDT amount. Cryptocurrency transactions are conducted on public blockchain ledgers; on88b cannot guarantee the privacy of blockchain-recorded transaction data, which is publicly visible by nature.

on88b uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in, security cookies that protect against cross-site request forgery, and cookies that remember your language preferences. These cannot be disabled.
• Functional Cookies: Used to remember your preferences, such as preferred deposit method, display settings, and responsible gambling limit configurations. Disabling these may affect your user experience.
• Analytics Cookies: Used to collect anonymized data about how players use the platform — which pages are visited most frequently, how sessions flow, and where users encounter difficulties. This data is used solely to improve the platform. These cookies do not identify you personally.
• Security & Fraud Prevention Cookies: Used to detect and prevent unauthorized access, fraudulent activity, and the use of automated software. These are strictly necessary for platform integrity and cannot be disabled.

You may configure your browser to refuse cookies or to alert you when cookies are being sent. Disabling strictly necessary cookies will prevent you from using the platform. Disabling functional or analytics cookies will not prevent access but may degrade your experience.

on88b retains Personal Data for as long as is necessary for the purpose for which it was collected, or for as long as is required by applicable legal, regulatory, or contractual obligations, whichever is longer.

• Account Data: Retained for the duration of your active account and for a period of five years following permanent account closure, to satisfy potential audit, legal, and compliance obligations.
• KYC Documents: Retained for a minimum of five years following account closure, in line with standard international anti-money laundering record-keeping requirements.
• Transaction Data: Retained for a minimum of five years following the transaction date.
• Technical Logs: Retained for up to 12 months, after which they are anonymized or deleted unless required in connection with an ongoing investigation or legal proceeding.
• Marketing Consent Records: Retained for the duration of your opt-in consent and for two years following any withdrawal of consent, to demonstrate compliance.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized. You may request earlier deletion of certain categories of data subject to the conditions described in Section 12 (Your Rights).

on88b implements appropriate technical and organisational security measures designed to protect your Personal Data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data in transit between your device and our servers;
• Encryption at rest for sensitive Personal Data fields including ID numbers and financial account references;
• Role-based access controls ensuring that only authorised personnel can access specific categories of Personal Data;
• Multi-factor authentication requirements for administrative access to systems containing Personal Data;
• Regular security assessments and penetration testing of platform infrastructure;
• Comprehensive access logging and anomaly detection to identify and respond to unauthorized access attempts.

Notwithstanding the above, no data transmission over the internet or electronic storage system is guaranteed to be 100% secure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, on88b will notify affected players without undue delay once the breach has been identified and contained.

Subject to applicable law and certain exemptions, you have the following rights in relation to your Personal Data held by on88b:

To exercise any of these rights, please contact our support team at [email protected]. We will respond to your request within 30 days. In some circumstances we may need to verify your identity before processing your request. Requests that are manifestly unfounded or excessive may be declined, and we will explain our reasoning in such cases.

on88b employs age verification during the registration process and again at the KYC verification stage. Any Account found to belong to an individual under 21 years of age will be immediately suspended, all associated data will be reviewed by our compliance team, and the matter may be referred to relevant authorities as required by our licensing conditions.

As an internationally licensed platform, on88b may store and process Personal Data on servers located outside of Malaysia. Where Personal Data is transferred to jurisdictions that do not provide a comparable level of data protection to internationally recognised standards, on88b will implement appropriate safeguards to protect your data, including:

• Standard contractual data protection clauses with the receiving entity;
• Binding data processor agreements that require the receiving party to maintain appropriate security standards;
• Technical measures such as encryption to protect data in transit.

By using the on88b platform, you acknowledge that your Personal Data may be transferred to and processed in countries outside Malaysia, and consent to such transfer where required for the provision of our services.

on88b reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform functionality. Where changes are material — for example, changes to the categories of data collected, new third-party sharing arrangements, or changes to your rights — we will notify you via email or via a prominent platform notification prior to the change taking effect.

Minor amendments such as typographical corrections or clarifications that do not materially affect your rights may be made without prior notice. The date at the top of this page reflects the most recent update. We encourage you to review this Policy periodically to remain informed of how we protect your Personal Data.

Continued use of the on88b platform following the effective date of any amendment to this Policy constitutes your acknowledgement of the updated terms.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your Personal Data by on88b, please contact our support and data team using the details below. We take all privacy enquiries seriously and aim to respond promptly and transparently.

For data access requests, erasure requests, or portability requests, please include your registered email address and account username in your communication so that we can verify your identity before processing the request.