PRIVACY & DATA SECURITY

Privacy Policy b888
Your Personal Data Protection

At b888, your privacy is not merely a formality — it is a genuine commitment. We understand that you entrust us with your personal information, and we take that responsibility seriously. This Privacy Policy clearly explains what data we collect, why it is needed, and how we ensure it remains safe in our care.

Updated: 1 January 2026  |  Version 2.4

Why Your Privacy Matters Secure With b888

We invest in the best technologies and processes to ensure your personal data is protected at all times.

256-bit SSL Encryption

All data transmitted between your device and b888 servers is protected with bank-grade 256-bit SSL encryption. Your information never travels without full protection.

Strict Access Controls

Only b888 staff with specific authorization may access member personal data. Every access is logged and periodically reviewed by our internal security team.

Secure & Trusted Servers

Your data is stored in internationally certified data centers with automated backup systems, 24/7 monitoring, and strict physical and digital security protocols.

No Data Sales

B888 has never and will never sell, rent or trade members' personal information to any third party for advertising or marketing purposes.

Malaysia PDPA Compliance

The b888 Privacy Policy is designed in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA), ensuring your rights as a data subject are fully respected.

Your Autonomy Rights

You have the right to access, correct, download, or request deletion of your personal data at any time. Your request will be processed within 14 business days.

Important Note: By registering or using the b888 platform, you confirm that you have read, understood, and accepted this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to close your account.

1. Introduction

B888 ("we", "Platform" or "b888") is committed to protecting the privacy of all users who use our services at b888.bz and the b888 mobile app. This Privacy Policy is drafted in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA) and the highest international data protection standards.

As an online entertainment platform involving financial transactions and sensitive personal information, we recognise that your trust is our most valuable asset. We therefore never take our responsibility in managing your personal data lightly.

This Privacy Policy explains in detail: what information we collect from you, why it is collected, how it is used, who may access it, and what your rights are as a data subject. We encourage you to read this document carefully and to contact us if anything is unclear.

This policy applies to all users of the b888 platform, including website visitors, registered members, mobile app users, and anyone who interacts with our services through any channel.

2. Personal Data We Collect

We only collect data that is genuinely necessary to provide you with a safe, fair, and seamless service. The types of data we collect are as follows:

2.1 Identity Information

Full name
MyKad / Passport number
Date of birth
Gender
Nationality
KYC document images

2.2 Contact Information

Email address
Phone number
Residential address
City & state
Postcode

2.3 Financial Information

Bank name
Bank account number
E-wallet type
Transaction history
Deposit records
Withdrawal records

2.4 Platform Activity Information

Game history
Wagering records
Bonus usage
Customer support logs
VIP Status

2.5 Technical Information

IP Address
Device type
Browser type
Login timestamp
Geolocation data
Cookie data
Data Minimisation Principle: b888 only collects data that is strictly necessary for the stated purposes. We do not collect data that is excessive or irrelevant to the services we provide.

3. How We Collect Data

Your personal data is collected through several different channels when you interact with the b888 platform:

3.1 Directly from You

  • Account registration form — name, email, phone number and password you enter during registration.
  • KYC Process (Identity Verification) — identity documents and proof of address you upload for verification purposes.
  • Payment information — bank or e-wallet details you register for deposits and withdrawals.
  • Customer support communications — information you share when contacting our support team via live chat or email.

3.2 Automatically

  • Server logs — IP address, access times, pages visited and actions taken on the platform are recorded automatically.
  • Cookies and tracking technologies — session information, user preferences and usage data collected via cookies set by the b888 platform.
  • App performance data — error reports, response times and usage statistics collected for technical improvement purposes.

3.3 From Third Parties

  • Payment providers — transaction information verified by payment processors such as FPX, DuitNow and e-wallet providers.
  • Identity verification providers — information received during the KYC process through trusted third-party verification services.
  • Anti-fraud agency — risk information shared by fraud prevention networks to protect the platform and our members.

4. Purposes of Personal Data Use

We use your personal data only for legitimate and necessary purposes. Every use of data has a clear justification, and you are entitled to inquire about it:

Purpose of Use Data Used Legal Basis
Account management Name, email, password, phone number Contract fulfilment
Identity verification (KYC) MyKad/Passport, photo, address Legal obligation
Transaction processing Bank details, deposit/withdrawal records Contract fulfilment
Fraud prevention IP address, device data, activity patterns Legitimate interests
Customer support Communication logs, account history Contract fulfilment
Responsible gaming Wagering patterns, activity records Legal obligation
Platform improvement Usage data (anonymized) Legitimate interests
Marketing communications Email, phone number Your consent
Direct Marketing: b888 will only send you marketing communications if you have provided consent during registration or updated your preferences in your account settings. You may withdraw this consent at any time.

5. Data Sharing with Third Parties

B888 does not sell or transfer your personal data to third parties for their own commercial purposes. However, in the course of operating the platform, there are limited situations where data may be shared:

5.1 Trusted Service Providers

We share necessary data with service providers who assist us in running our operations, including payment processors, KYC service providers, cloud service providers, and customer support platforms. All these providers are bound by strict confidentiality agreements and are not permitted to use your data for any other purpose.

5.2 Game Providers

To enable you to play games from third-party software providers (such as slots and live casino), required session information and wagering data may be shared with the relevant game providers. These providers are subject to their own privacy policies and confidentiality agreements with b888.

5.3 Legal Requirements

B888 may be required to disclose your personal data to authorities as required by Malaysian law, including:

  • Bank Negara Malaysia (BNM) for anti-money laundering (AML) reporting requirements
  • Royal Malaysia Police (PDRM) in valid criminal investigations
  • Courts or tribunals with jurisdiction
  • Other regulators authorised by law
Cross-Border Data Transfer: If your data needs to be transferred outside Malaysia (for example, to servers in another country), b888 ensures protection equivalent to Malaysia's PDPA standards through appropriate safeguards such as standard contractual clauses.

6. Data Security

B888 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction or accidental disclosure.

6.1 Technical Security Measures

  • Data encryption in transit: All communications are secured with TLS 1.3 protocol and 256-bit SSL encryption.
  • Data encryption at rest: Sensitive data such as passwords and financial information is encrypted using AES-256 algorithms before storage.
  • Two-Factor Authentication (2FA): 2FA options are available for all member accounts as an added layer of security.
  • 24/7 Security Monitoring: An intrusion detection system (IDS) operates around the clock to identify suspicious activity.
  • Periodic penetration testing: Independent security assessments are conducted periodically to identify and patch any vulnerabilities.

6.2 Organisational Security Measures

  • Strict role-based access control (RBAC) policies for internal staff.
  • Mandatory security awareness training for all b888 staff.
  • Clear security incident management procedures that are regularly tested.
  • Internal and external audits are conducted annually to ensure ongoing compliance.
Data Breach Reporting: In the event of a data breach that may affect your privacy, b888 will notify you and the relevant authorities within the timeframe required by law, no later than 72 hours after the breach is identified.

7. Cookies and Tracking Technologies

B888 uses cookies and similar tracking technologies to enhance the user experience, understand usage patterns and ensure platform security. The following are the types of cookies we use:

7.1 Essential Cookies

These cookies are required for the basic operation of the platform and cannot be disabled. They include login session cookies, security settings, and language preferences. Without these cookies, the platform cannot function properly.

7.2 Performance Cookies

These cookies collect information about how you use the platform — the most frequently visited pages, time spent on each page, and any error messages. All data is collected anonymously and used solely to improve platform performance.

7.3 Functional Cookies

These cookies allow the platform to remember your preferences such as your username, preferred language, and display settings to deliver a more personalized experience.

7.4 Managing Cookies

You can manage and delete cookies through your browser settings at any time. Please note that disabling essential cookies may affect your ability to fully use the features of the b888 platform.

8. Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold:

Your Rights Description Response Time
Right to Access Request a copy of all personal data we hold about you in a readable format. 14 business days
Right to Rectification Request correction of inaccurate or incomplete personal data. 7 business days
Right to Erasure Request deletion of your personal data, subject to legal retention obligations. 30 business days
Right to Restrict Processing Request that we restrict how we process your data in certain circumstances. 14 business days
Right to Object Object to the processing of your data for direct marketing purposes at any time. Instant
Right to Data Portability Receive your data in a structured, portable format for transfer to another provider. 14 business days

To exercise any of the rights above, please contact our Data Protection team by email at [email protected]. We may require identity verification before processing your request.

Exceptions: The right to data erasure may not be fully fulfilled if b888 is legally required to retain that data — for example, financial records that must be kept for 7 years under Malaysia's anti-money laundering laws.

9. Data Retention Period

B888 does not retain your personal data longer than necessary for the stated purposes or as required by Malaysian law. Our data retention guidelines are as follows:

  • Active account data: Retained for the duration your account is active and 5 years after account closure.
  • Financial transaction records: Retained for a minimum of 7 years in accordance with the Anti-Money Laundering Act 2001 (AMLA).
  • KYC documents: Retained for 5 years after the end of the business relationship.
  • Customer support communication logs: Retained for 2 years from the date of last communication.
  • Technical and security logs: Retained for 12 months for security and investigation purposes.
  • Marketing data (where permitted): Retained until you withdraw consent or 3 years of inactivity, whichever comes first.

After the retention period expires, your data will be securely deleted or anonymised so that it can no longer be personally associated with you.

10. Child Protection

The b888 platform is strictly for individuals aged 18 years and above. We do not knowingly collect or process personal data from children under the age of 18.

Should we discover that we have inadvertently collected data from individuals under the age of 18, we will take immediate action to:

  • Close the account in question immediately.
  • Delete all associated personal data as promptly as possible.
  • Forfeit all winnings or remaining funds in the account.

If you believe a minor has registered on the b888 platform, please contact us immediately at [email protected] so that we can take appropriate action promptly.

11. Privacy Policy Amendments

B888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, new legal requirements or feedback from members. Whenever an amendment is made, we will:

  • Update the "Last Updated" date at the top of this document.
  • Display a notification on the b888 platform upon your next login.
  • Send a notification email to your registered address for significant changes.

We encourage you to review this page periodically. Continued use of the b888 platform after any amendments are published will be considered your acceptance of the updated Privacy Policy. If you disagree with the changes made, you have the right to close your account and request deletion of your personal data.

12. Contact Us About Privacy

If you have any questions, concerns, or complaints regarding how we handle your personal data, b888's Data Protection Officer (DPO) team is ready to assist you.

You can reach us through the following channels:

All privacy-related enquiries will be responded to within 14 business days. For more complex cases such as data deletion requests or data breach complaints, we will inform you of the estimated processing time in our initial response.

Complaints to the Authorities: If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia or the relevant authority in your country.
YOUR DATA IS SECURE, YOUR MIND IS AT EASE

Join b888 with Full Confidence

You now know how b888 protects your privacy. Join over 500,000 Malaysian members enjoying online entertainment on a platform that truly puts your security first.

SSL 256-bit PDPA Compliant Data Secure No Data Sales
Bahasa Melayu