888score Privacy Policy – Personal Data Protection for Malaysian Players

1. Introduction & Scope of This Privacy Policy

This Privacy Policy ("Policy") describes how 888score collects, uses, discloses, stores, and protects your personal data when you use our online platform at 888score.run — including the website, any related mobile applications, and all services provided by 888score to players in Malaysia.

888score is fully committed to protecting the privacy of every one of our players. We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and all relevant international data protection standards. Our commitment to privacy goes beyond legal obligation — it is part of the trust you place in us when you choose 888score as your entertainment platform.

2. Types of Personal Data Collected by 888score

888score collects various categories of personal data to enable us to deliver platform services safely and effectively. The following are the primary categories of data we collect:

888score does not collect sensitive data such as medical information, religious beliefs, or sexual orientation. We also do not request more data than is necessary for the stated purposes. If you register via a specific payment method such as Touch 'n Go eWallet or GrabPay, the respective provider may share information required to complete your transaction with 888score.

3. How 888score Uses Your Personal Data

888score uses collected personal data solely for legitimate and necessary purposes. The following are the primary purposes for which 888score uses your data:

• Creating and managing your player account and verifying your identity
• Processing deposits, withdrawals, and other financial transactions in Malaysian Ringgit (MYR)
• Providing and operating all 888score platform services, including Sports Betting and casino
• Sending important service communications such as account confirmations, security notices, and policy updates
• Sending promotional offers and information about new products — subject to your marketing preferences
• Detecting and preventing fraud, money laundering, and platform abuse
• Complying with applicable legal and regulatory obligations
• Improving platform performance and user experience through anonymised data analysis
• Providing responsive and effective customer support
• Enforcing 888score's Terms & Conditions and other policies

We do not use your personal data for any purpose inconsistent with those stated above without first obtaining your consent or having a valid legal basis to do so. Where you have given consent for a specific purpose such as marketing communications, you may withdraw that consent at any time through your account settings or by contacting the 888score support team.

4. Sharing Personal Data with Third Parties

888score does not sell, rent, or disclose players' personal data to third parties for their own marketing purposes. Your personal data may be shared with selected third parties only in the following circumstances:

• Authorised payment service providers — including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX providers such as Maybank2u and CIMB Clicks — for processing your financial transactions
• Technology and infrastructure providers that assist us in operating the 888score platform, subject to strict confidentiality and data protection agreements
• Gaming and casino service providers that supply games on our platform, receiving only the data necessary to deliver their services
• Government authorities or law enforcement agencies when required by Malaysian law or a valid court order
• Relevant gambling regulatory authorities as part of 888score's licence compliance obligations
• Professional advisors such as lawyers, accountants, or auditors who are bound by their professional confidentiality obligations

All third parties that receive 888score players' personal data are required to handle it in accordance with data protection standards equivalent to or higher than those we apply ourselves. We do not permit third-party providers to use 888score player data for their own purposes.

5. Data Security & Technical Protection Measures

888score continually invests in security technologies and procedures to protect players' personal data from unauthorised access, disclosure, alteration, or destruction. Our key security measures include:

• 256-bit SSL encryption for all communications between your browser and 888score servers
• At-rest encryption for all sensitive data stored in our databases
• Multi-layered access controls based on the principle of least privilege — staff may only access data necessary for their specific roles
• Two-factor authentication (2FA) available for additional player account security
• Continuous security monitoring and active intrusion detection systems
• Regular security audits conducted by independent third parties
• Established security incident response procedures to manage any data breaches swiftly and effectively

6. Cookies, Sessions & Similar Tracking Technologies

The 888score platform uses cookies and similar tracking technologies to enhance the user experience and analyse how the platform is used. The following types of cookies are used by 888score:

• Essential cookies — required for core platform functions such as login, session security, and transaction processing. These cookies cannot be disabled without affecting platform usability
• Preference cookies — store your settings such as interface language and display preferences to make your experience more comfortable
• Analytics cookies — collect anonymous information about how players use the platform to help us improve our services. This analytics data does not personally identify you
• Security cookies — help detect and prevent fraudulent activity and unauthorised use

You can control and manage cookies through your web browser settings. Please note that disabling certain cookies may affect the functionality and overall experience of the 888score platform. For more information on managing cookies in a specific browser, please refer to that browser's help documentation.

7. Your Rights Over Your Personal Data

As an 888score player, you have the following rights regarding the personal data we hold about you, subject to Malaysia's Personal Data Protection Act 2010 (PDPA) and related legislation:

• Right of access — you have the right to obtain a copy of the personal data we hold about you
• Right to rectification — you have the right to request that we correct any inaccurate or incomplete personal data
• Right to erasure — under certain circumstances, you have the right to request that we delete your personal data
• Right to restriction of processing — you have the right to request that we restrict the processing of your data under certain circumstances
• Right to data portability — you have the right to receive your personal data in a machine-readable format
• Right to object — you have the right to object to the processing of your data for specific purposes such as direct marketing
• Right to withdraw consent — you may withdraw any consent previously given for data processing at any time

To exercise any of the above rights, please submit a written request to the 888score support team at support@888score.run. We will endeavour to respond to your request within 72 hours and resolve it within 30 days. In complex cases, this period may be extended to up to 60 days, with prior notice given to you.

8. Data Retention Period

888score retains personal data only for as long as necessary for the purpose for which it was collected, or as required or permitted under Malaysian law. Retention periods vary by data type:

• Active account data — retained for the duration of your account and for a reasonable period after closure to allow resolution of any outstanding issues
• Financial transaction records — retained for a minimum of 7 years in accordance with Malaysian legal requirements relating to financial and tax records
• Support communication records — retained for 3 years for reference and dispute resolution purposes
• Security and activity logs — retained for 12 months for fraud detection and security purposes
• Anonymised analytics data — may be retained indefinitely as it contains no information that can personally identify you

Once the retention period has lapsed, personal data will be securely deleted or fully anonymised so that it can no longer be linked to you. 888score operates a systematic data review and deletion schedule to ensure data is not retained longer than necessary.

9. Children's Data & Underage Player Protection

The 888score platform is intended solely for individuals aged 18 and above. 888score does not knowingly collect personal data from anyone under the age of 18. If you believe that a person under 18 has registered or provided their personal data to 888score, please contact us immediately at support@888score.run.

Upon receiving such information, or where we independently identify that a player may be under 18 years of age, 888score will take immediate action to:

• Suspending access to the account in question until age verification is complete
• Deleting all collected personal data if the player is confirmed to be under 18 years of age
• Voiding any transactions or winnings associated with that account
• Returning eligible deposits to the original payment method where applicable

888score uses age verification technology and requires identity document verification as part of our KYC (Know Your Customer) process to ensure our platform is not accessed by ineligible individuals.

10. Cross-Border Data Transfers

In operating the 888score platform for players in Malaysia, your personal data may be processed or stored on servers located outside Malaysia — for example, through cloud infrastructure providers or international technology service providers used by 888score.

Any transfer of personal data outside Malaysia will be carried out with adequate safeguards to ensure your data receives a level of protection equivalent to that provided within Malaysia. This includes:

• Ensuring that data recipients in other countries are subject to equivalent data protection laws
• Using standard data transfer agreements that bind recipients to the same data protection standards
• Periodically assessing the data transfer risks and protections provided by recipients

If you have any questions about cross-border data transfers or would like to know more about the protections in place, please contact the 888score support team.

11. Links to Third-Party Platforms & Services

The 888score platform may contain links to or integrations with third-party services — such as payment providers including Touch 'n Go eWallet, GrabPay, and FPX. When you click such links or use third-party services, you will be subject to that third party's own privacy policy, not this 888score Privacy Policy.

888score is not responsible for the privacy practices or content of any third-party websites or services. We recommend that you read the privacy policy of any third-party service you use alongside the 888score platform. Your choice to use third-party services is entirely at your own discretion and risk.

12. Privacy Policy Amendments & Contact Us

888score reserves the right to amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or platform improvements. Any material changes will be communicated to you via a prominent notice on the platform or by email to the address registered to your account, prior to the changes taking effect.

The "last updated" date at the top of this document indicates when this Policy was last reviewed and amended. Your continued use of the 888score platform following notification of any amendments constitutes your acceptance of the revised Policy. We recommend reviewing this Policy periodically to stay informed of how 888score manages your personal data.