Privacy Policy
— Delta88 Platform

This Privacy Policy (the "Policy") is issued by Delta88 (referred to herein as "Delta88", "we", "us", or "our") and applies to all personal data processed in connection with your use of the online gaming and sports betting services accessible at delta88.cam and any associated platforms, applications, or interfaces (collectively, the "Platform").

Delta88 is committed to protecting the privacy of all users who access the Platform, including players from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all regions of Malaysia. This Policy explains in clear terms what personal data we collect, the lawful basis on which we process it, how long we retain it, and the rights you have in relation to your data.

By registering an account on the delta88 platform, depositing funds, placing a bet, or otherwise using the Services, you acknowledge that you have read and understood this Privacy Policy and agree to the processing of your personal data as described herein. If you do not agree to the terms of this Policy, you must not use the Platform.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which form part of the overall agreement between you and Delta88.

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including but not limited to name, identification number, email address, IP address, or any combination of data that could be used to identify an individual.
• "Processing" means any operation or set of operations performed on personal data, whether or not by automated means, including collection, storage, use, disclosure, alteration, or deletion.
• "Data Controller" means Delta88, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means any third party that processes personal data on behalf of Delta88 under contractual arrangement, including payment service providers and identity verification providers.
• "User" or "Player" means any natural person who has registered an account on the delta88 platform or who accesses the Platform without registration.
• "KYC Data" means identity and document verification information collected to comply with Know Your Customer requirements, including official identification documents and proof of address.
• "Cookies" means small text files placed on your device by the Platform for the purpose of enhancing user experience, maintaining session state, and collecting usage analytics.

Delta88 collects personal data across several categories depending on your level of interaction with the Platform. The categories of personal data we collect are outlined below:

Delta88 collects personal data through the following channels and means:

• Directly from you: Information you provide during account registration, KYC document submission, deposit and withdrawal requests, customer support interactions, and participation in promotions or surveys.
• Automatically through the Platform: Technical data collected automatically when you browse or use the Platform, including IP address, device identifiers, browser type, session cookies, and interaction logs generated through normal use of the Services.
• From third-party verification providers: Identity and age verification data obtained from third-party KYC service providers who cross-reference the documents you provide against independent data sources to confirm your identity and eligibility.
• From payment service providers: Transaction confirmation data, payment status notifications, and fraud screening signals provided by licensed payment processors facilitating your deposits and withdrawals on the Platform.
• From responsible gambling and self-exclusion databases: Where applicable, data from third-party self-exclusion registries to comply with responsible gambling obligations and prevent excluded individuals from accessing gambling Services.

Delta88 processes your personal data for the following defined purposes:

1. Account creation and management: To register your account, verify your identity and age, maintain your account settings, and provide you with access to the Services.
2. Service delivery: To process your bets, manage your account balance, credit bonus funds, process deposits and withdrawals, and deliver the full range of gaming and sports betting services available on the Platform.
3. Identity verification and fraud prevention: To verify that you meet the minimum age requirement of 21 years, confirm your identity through KYC procedures, detect and prevent fraudulent activity, money laundering, and other prohibited conduct.
4. Customer support: To respond to your enquiries, resolve disputes, address complaints, and maintain records of communications for quality assurance and compliance purposes.
5. Regulatory compliance: To meet obligations arising from applicable laws and regulations, including anti-money laundering (AML) requirements, data retention obligations, and responsible gambling duties.
6. Responsible gambling monitoring: To identify patterns of behaviour that may indicate problem gambling and to operate the deposit limit, self-exclusion, and reality check tools available on the Platform.
7. Security and platform integrity: To monitor for unauthorised access, system vulnerabilities, and technical issues that may affect the security or fairness of the Platform.
8. Platform improvement: To analyse aggregated, anonymised usage patterns and performance data for the purpose of improving the user experience, game catalogue, and platform functionality.
9. Marketing communications: Where you have provided explicit consent, to send you promotional emails, bonus notifications, or SMS messages relating to delta88 offers and new features. You may withdraw consent at any time.

Delta88 processes your personal data on the following legal bases depending on the nature and purpose of the processing activity:

• Contractual necessity: Processing required to perform the contract between you and Delta88 — including account operation, payment processing, and delivery of gaming services — is carried out on the basis of contractual necessity.
• Legal obligation: Processing required to comply with applicable laws — including anti-money laundering regulations, age verification requirements, and data retention mandates — is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gambling monitoring, and internal analytics is carried out on the basis of Delta88's legitimate interests, balanced against your rights and interests.
• Consent: Processing for optional marketing communications is carried out solely on the basis of your explicit prior consent. You retain the right to withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Delta88 does not sell, rent, or trade your personal data to third parties for their own commercial purposes under any circumstances. Your data may be shared with the following categories of third parties only to the extent necessary and subject to appropriate contractual safeguards:

• Payment service providers: Licensed processors facilitating deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and cryptocurrency networks. These providers receive only the data required to process and confirm your transaction.
• Identity verification providers: Third-party KYC and age verification services engaged to confirm the authenticity of the documents you submit and verify your eligibility to use the Platform.
• Fraud and AML screening services: Providers engaged to screen transactions and account activity against watchlists and fraud databases for the purpose of preventing financial crime.
• Responsible gambling service providers: Where required, data may be shared with self-exclusion registry operators to enforce exclusion requests and prevent access by excluded individuals.
• IT and cloud infrastructure providers: Suppliers providing the technical infrastructure on which the Platform operates, including server hosting, database management, and cybersecurity services, subject to strict data processing agreements.
• Legal and regulatory authorities: Where required by law, court order, or regulatory direction, Delta88 will disclose personal data to competent authorities without prior notice to the individual concerned.

Delta88 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention standards apply:

• Active account data: Retained for the duration of your account's active status, plus a minimum period of five (5) years following account closure to meet anti-money laundering and financial record-keeping requirements.
• Transaction and financial records: Retained for a minimum of seven (7) years following the date of each transaction in accordance with standard financial record-keeping obligations.
• KYC and identity verification documents: Retained for a minimum of five (5) years following account closure or the date of the last transaction, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the interaction, except where records are required for ongoing dispute resolution or regulatory investigation.
• Marketing consent records: Retained for the duration of your consent and for a further three (3) years following withdrawal of consent as evidence of the consent management process.
• Technical and session logs: Retained for a maximum of twelve (12) months from the date of collection, after which they are deleted or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted from Delta88's systems, or anonymised such that it can no longer be linked to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

Delta88 uses cookies and similar tracking technologies on the Platform to maintain session state, enhance performance, and understand how users interact with the Services. The following categories of cookies are used:

• Essential Cookies: Strictly necessary for the Platform to function correctly. These cookies maintain your login session, remember your account preferences, and facilitate the processing of transactions. They cannot be disabled without impairing the functionality of the Services.
• Performance and Analytics Cookies: Used to collect anonymised data about how visitors use the Platform, including which pages are visited most frequently and any error messages encountered. This data is used exclusively to improve Platform performance and user experience.
• Functional Cookies: Allow the Platform to remember choices you make — such as preferred language — and provide enhanced, personalised features tailored to your use of the Services.
• Security Cookies: Used to detect and prevent fraudulent account access, suspicious login behaviour, and automated bot activity on the Platform.

Delta88 does not use third-party advertising or tracking cookies for the purpose of targeting you with advertisements on external websites. You may manage your cookie preferences through your browser settings, noting that disabling essential cookies may affect your ability to log in and use the Platform.

Subject to applicable law and certain conditions, you hold the following rights in respect of the personal data Delta88 holds about you. To exercise any of these rights, please contact our Data Protection team at the details provided in Section 15.

Delta88 will respond to data rights requests within a reasonable period, typically within 30 days. Where requests are complex or numerous, we may extend the response period and will inform you accordingly. There is no fee for submitting a data rights request. We may require proof of identity before processing your request to protect against unauthorised access to your data.

Delta88 implements a comprehensive suite of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive data at rest within Delta88's database infrastructure;
• Strict role-based access controls ensuring that employee access to personal data is limited to what is necessary for their specific function;
• Regular security audits and penetration testing of Platform systems;
• Multi-factor authentication requirements for administrative access to core systems;
• Monitoring and logging of access to personal data systems with anomaly detection alerts;
• Regular staff training on data protection obligations and information security best practices.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, Delta88 will notify affected individuals in accordance with applicable data breach notification requirements. We maintain an internal incident response protocol to ensure prompt identification, containment, and remediation of any security incidents.

The delta88 platform is strictly prohibited for use by persons under the age of 21. Delta88 does not knowingly collect personal data from individuals below the age of 21. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete the data and close the associated account.

In the course of operating the Platform and providing the Services, your personal data may be transferred to and processed in countries other than Malaysia, including for the purpose of cloud infrastructure hosting, KYC verification, and payment processing services.

Where such transfers occur, Delta88 ensures that appropriate safeguards are in place to protect your personal data in accordance with applicable data protection standards. These safeguards may include contractual data processing agreements with third-party recipients incorporating standard data protection clauses, or reliance on adequacy decisions where applicable.

By using the delta88 platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Malaysia where necessary for the purposes described in this Policy, subject to the safeguards described above.

Delta88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing activities, or operational practices. When material changes are made, we will update the "Last Updated" date displayed at the top of this page.

Where we consider the amendments to be significant, we may additionally notify registered users via the email address associated with their account. It is your responsibility to review this Policy periodically to remain informed of how Delta88 processes your personal data.

Your continued use of the delta88 platform following the publication of any amendments to this Policy constitutes your acceptance of the updated terms. If you do not agree with any amendment, you must cease use of the Platform and may request account closure in accordance with our Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way Delta88 processes your personal data, please contact us through the channels below. We are committed to responding promptly and transparently to all privacy-related enquiries.