Smb888 Privacy Policy – Malaysia Player Personal Data Protection

1. Introduction Updated

Smb888 understands that trust is the foundation of the relationship between a platform and its players. One of the most important ways we build that trust is by managing your personal data responsibly, transparently, and securely.

This Privacy Policy applies to all services provided through the smb888.win website, the smb888 mobile app for Android and iOS, and all official smb888 communication channels including live chat, support email, and in-app notifications.

We encourage you to read this Privacy Policy carefully and to contact the smb888 support team if you have any questions or concerns. Your trust in us is something we do not take lightly — and the way we handle your data reflects our commitment to that trust.

2. Data We Collect

Smb888 collects personal information necessary to provide our players with a safe, responsible, and high-quality service. The data we collect falls into several categories:

2.1 Registration & Identity Information

• Full name as shown on a valid identification document.
• Date of birth for age verification (18 years and above).
• Active email address and Malaysia mobile number.
• Current residential address.
• Identification card number (MyKad) or passport number for KYC purposes.

2.2 Financial Information

• Bank account or digital wallet details used for deposits and withdrawals.
• In-platform transaction history records.
• Payment verification details from financial service providers.

2.3 Platform Usage Data

• Login activity logs including IP address, device, and access time.
• Records of games played, total wagering amounts, and session duration.
• Your saved game preferences and account settings.
• Customer support interaction data including live chat transcripts.

2.4 Technical & Device Data

• Device type, operating system, and web browser version used.
• IP address and estimated location information based on IP.
• Cookie data and unique device identifiers (Device ID).
• App performance data and technical error reports.

3. How We Use Your Data

Smb888 uses collected data solely for lawful purposes directly related to the provision of platform services. The following are the primary purposes for which your data is used:

• Identity verification and KYC — ensuring every player meets the required age and identity eligibility criteria.
• Financial transaction processing — enabling deposits and withdrawals to be processed securely and accurately.
• Account security — identifying and preventing unauthorised access, fraud, and suspicious activity.
• Legal compliance — fulfilling reporting and compliance obligations under anti-money laundering (AML) laws and related regulations.
• Service improvement — analysing usage patterns to improve the gaming experience and platform features.
• Service communications — sending important notifications relating to your account, transactions, and platform updates.
• Marketing communications — sending promotional information and exclusive offers (subject to your opt-in preferences).
• Customer support — resolving complaints, enquiries, and assistance requests more efficiently.
• Responsible gaming — monitoring gameplay patterns to identify players who may need support.

Smb888 will not use your data for any purpose other than those stated above without first obtaining your consent.

4. Basis for Data Processing

Smb888 processes your personal data on the following legally recognised bases:

4.1 Contract Performance

Data processing required to provide platform services to you — including account management, transaction processing, and game delivery — is carried out on the basis of a contract between you and smb888.

4.2 Legal Obligations

Certain data processing activities, particularly those relating to KYC, AML, and financial reporting, are mandated by applicable laws and regulations. smb888 has no discretion to opt out of these obligations.

4.3 Legitimate Interests

Smb888 processes certain data based on our legitimate interest in operating a secure platform, preventing fraud, and improving the user experience — provided such processing does not unreasonably infringe upon your fundamental rights.

4.4 Consent

For data processing not covered by the bases above — such as marketing communications or data sharing with selected partners — smb888 will obtain your explicit consent. You may withdraw this consent at any time.

5. Data Sharing with Third Parties

Smb888 does not sell or rent your personal data to any party. However, in the course of operating the platform, we may share data with selected third parties in the following circumstances:

5.1 Service Providers

We work with trusted service providers to handle key platform functions, including:

• Payment service providers and digital wallets (for processing deposits and withdrawals).
• Accredited KYC and identity verification service providers.
• Licensed game providers and casino content suppliers.
• Cloud hosting and security services.
• Analytics platforms and customer support tools.

All these service providers are bound by strict data confidentiality agreements and are only permitted to use your data for the specific purposes defined.

5.2 Legal Obligations

Smb888 may disclose your data to government authorities, law enforcement bodies, or courts when required to do so by law or a valid court order.

5.3 Platform Protection

In cases of suspected fraud, money laundering attempts, or serious security threats, smb888 reserves the right to share necessary information with the relevant authorities to protect the platform and other players.

6. Data Security

Smb888 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or disclosure:

• 256-bit SSL/TLS encryption for all data communications between your device and smb888 servers.
• At-rest data encryption for all sensitive information stored within our databases.
• Role-based access control (RBAC) — only authorised personnel may access sensitive player data.
• 24/7 security monitoring with automated intrusion detection systems.
• Regular security audits by independent third parties to identify and address potential vulnerabilities.
• Two-factor authentication (2FA) available for player accounts as an additional layer of protection.

While smb888 takes all reasonable precautions, no online security system can be guaranteed 100% secure. We encourage players to also adopt personal security measures, such as using strong, unique passwords and never sharing account details with anyone.

In the event of a data breach affecting your personal information, smb888 will notify you within a reasonable timeframe via your registered email and take immediate remedial action.

7. Cookies & Tracking Technologies

Smb888 uses cookies and similar tracking technologies to enhance the user experience and ensure platform security. The following are the types of cookies we use:

7.1 Essential Cookies

These cookies are required for core platform functions such as maintaining your login session, remembering language preferences, and securing transactions. The platform cannot function properly without them.

7.2 Performance & Analytics Cookies

These cookies help us understand how players interact with the platform — most visited pages, session duration, and navigation patterns. This information is used in aggregate and anonymised form to improve platform design and functionality.

7.3 Functional Cookies

These cookies remember your personal preferences and settings — such as game preferences, display settings, and language choices — to deliver a more personalised experience each time you use the platform.

7.4 Cookie Management

You may manage or delete cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality or user experience of the smb888 platform.

8. Your Rights as a Data Subject

Smb888 respects your rights over your own personal data. The following are the rights available to you:

To exercise any of the above rights, contact the smb888 support team via live chat, available 24/7. smb888 will process your request within 30 days of receipt.

9. Data Retention Period

Smb888 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law:

• Active account data: Retained for the entire duration your account remains active and in use.
• Financial transaction records: Retained for a minimum of 7 years to meet financial compliance and AML requirements.
• KYC records and identity verification: Retained for 5 years after account closure.
• Support communication logs: Retained for 3 years for reference and dispute resolution.
• Platform analytics data: Processed anonymously and may be retained indefinitely.

Upon expiry of the applicable retention period, smb888 will securely delete or anonymise your data in accordance with established procedures.

10. Cross-Border Data Transfers

In some operational situations, your personal data may be processed or stored on servers located outside Malaysia. smb888 ensures that any cross-border data transfer is carried out with adequate safeguards:

• Data transfers are only made to countries or entities with equivalent or higher data protection standards.
• Comprehensive data processing agreements are signed with all partners involved in cross-border data transfers.
• Smb888 continuously monitors and reassesses existing protections to ensure your data remains secure wherever it is processed.

11. Children & Underage Individuals

Smb888 services are strictly for individuals aged 18 and above. smb888 does not knowingly collect or process personal data from individuals under the age of 18.

If we discover that personal data of a minor has been collected without our knowledge, we will take immediate steps to delete that data and close the relevant account. If you become aware that a minor has used the smb888 platform, please contact us immediately.

12. Privacy Policy Amendments

Smb888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operational practices, legal requirements, or technological developments. Any significant changes will be communicated to you via:

• In-platform or smb888 mobile app notifications.
• An email will be sent to your registered address at least 14 days before changes take effect.
• Update the "Last Updated" date at the top of this page.

Your continued use of the smb888 platform after any Privacy Policy changes take effect will be considered your acceptance of the updated terms. If you do not agree with the changes, please discontinue use of the platform and contact us to close your account.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how smb888 handles your personal data, please contact us through the following channels:

The smb888 privacy team will respond to all personal data enquiries within 3–5 business days. For formal data subject rights requests, please provide sufficient identity verification information to allow us to process your request securely.

Smb888 values your trust and is always committed to providing transparent, accurate, and meaningful responses to all privacy-related enquiries. Your privacy is not merely a legal obligation for us — it is a core value we uphold in operating the smb888 platform for Malaysia's player community.