Ali88 Privacy Policy — Data Protection Commitment Malaysian Members

1Introduction & Scope of Privacy Policy

This Privacy Policy is published by ali88 ("we", "us", "the ali88 platform") to clearly explain how we collect, use, store, protect, and disclose the personal information of members who use ali88.casino and all related services.

Ali88 takes data protection responsibilities very seriously. We operate in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and global best practices in data security. This Privacy Policy applies to all users of the ali88 platform — including website visitors, prospective members, and registered members.

By registering for or using the ali88 platform, you agree to the collection and use of your personal information as described in this Privacy Policy. You may choose not to provide certain information, though this may limit your ability to use some features of the ali88 platform.

2Types of Personal Data We Collect

Ali88 collects several categories of personal information to enable us to provide each member with a secure, complete, and personalised experience. The table below outlines each data category, the specific types collected, and the purpose of collection:

We do not collect sensitive personal information such as biometric data, medical records, or religious information unless required by applicable law. All data collection is done directly from you or automatically as you use the platform, and not from third-party sources without your consent.

3Purposes for Use of Personal Data

Ali88 uses members' personal data solely for legitimate and reasonable purposes in the context of providing our online entertainment platform services. The purposes for which data is used are as follows:

• Account Management: Creating and managing member accounts, verifying identity during registration and login, processing withdrawal requests, and updating account information
• Transaction Processing: Processes deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks, and other FPX-participating banks), and processes withdrawals to bank accounts registered under the member's name
• Platform Security: Detecting and preventing fraud, money laundering, unauthorised access, and platform abuse through activity pattern analysis
• Customer Support: Responding to enquiries, resolving complaints, and providing technical support to members via live chat or email
• Legal Compliance: Meeting anti-money laundering (AML) compliance obligations, Know Your Customer (KYC) requirements, and directives from relevant authorities
• Direct Marketing: Sending information about ali88's latest promotions, bonuses, and offers — only to members who have consented to receive marketing communications
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate intervention when needed
• Platform Improvements: Analyses anonymised usage data to better understand member needs and develop improved new features

4Sharing Data with Third Parties

Ali88 does not sell, rent, or trade member personal data to any third party for their own marketing or commercial purposes. However, there are limited circumstances in which we may need to share certain information with trusted third parties:

• Payment Service Providers: Required transaction information is shared with e-wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay) and banking systems (DuitNow, FPX) solely for the purpose of processing legitimate transactions
• Game Providers: Minimum account information required is shared with third-party game providers to enable access to their games within the ali88 platform
• Regulatory Authority: Ali88 will disclose information to the relevant authorities when required by law, court order, or valid legal process
• Cybersecurity Firm: Anonymised or aggregated data may be shared with third-party security firms for the purposes of security audits and threat detection
• Analytics Partners: Fully anonymised usage data that cannot be linked to any individual is shared with analytics service providers to help us understand how the platform is used.

All third parties that receive ali88 member data are bound by strict data confidentiality agreements and are prohibited from using that information for any purpose other than what has been specified. Ali88 only works with third parties that demonstrate compliance with data protection standards equal to or higher than our own.

5Ali88 Data Security Measures

Ali88 implements a comprehensive set of technical and organisational security measures to protect member personal data from unauthorised access, alteration, disclosure, or destruction:

• Data Encryption in Transit: All communications between your web browser and ali88's servers are secured with 256-bit TLS/SSL protocol, ensuring that data cannot be intercepted or read by unauthorised parties during transmission.
• Encryption of Stored Data: Sensitive data such as passwords and financial information is encrypted in the database using robust encryption algorithms — your password is never stored in plain text
• Two-Factor Authentication: Two-factor authentication (2FA) is available for all accounts to provide an additional layer of security at login
• 24/7 Monitoring: Our security monitoring system operates around the clock to detect suspicious activity, intrusion attempts, and anomalies in usage patterns.
• Staff Access Controls: Only authorised staff with a legitimate work requirement may access member data, and all access is logged for audit purposes.
• Independent Security Audits: Security infrastructure is audited by an accredited independent cybersecurity firm at least twice a year
• Incident Response Plan: Ali88 has a clearly defined security incident response procedure — in the event of a data breach, affected members will be notified within the timeframe required by applicable law

While ali88 takes all reasonable steps to protect your data, no internet transmission system or electronic storage is 100% guaranteed to be secure. We encourage you to take your own precautions as well — including using strong, unique passwords, not sharing your password, and reporting any suspicious activity to us immediately.

6Cookies & Tracking Technologies

The ali88 platform uses cookies and similar tracking technologies to enhance the user experience, ensure the platform functions correctly, and gather analytical data that helps us understand how the platform is used.

The types of cookies used by ali88 are as follows:

• Essential Cookies (Required): Required for core platform functions such as login sessions, security, and transaction processing. These cookies cannot be disabled without affecting overall platform functionality
• Preference Cookies: Saving your preferences such as language, display settings, and game preferences so you do not have to reset them each time you visit
• Analytics Cookies: Collects anonymised usage data to help us understand which pages are visited most frequently, user navigation flows, and overall platform performance
• Marketing Cookies: Used to display promotions and offers relevant to your interests — only activated with your consent

You can manage your cookie settings through your web browser. Most modern browsers provide controls to accept, reject, or delete cookies. However, disabling essential cookies may affect your ability to use certain features of the ali88 platform properly.

7Data Retention Period

Ali88 retains member personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law — whichever is longer. General retention period guidelines are as follows:

• Active Account Data: For as long as your account remains active and you continue to use ali88's services
• Closed Account Data: Minimum 7 years after the account closure date, to fulfil anti-money laundering and tax compliance obligations
• Financial Transaction Records: Minimum 7 years from the transaction date to meet financial reporting and audit requirements
• Security Logs: 2 years from the date the log was created, for investigation purposes if required
• Support Communication Data: 3 years from the date of interaction, for reference and dispute resolution purposes

Once the applicable retention period expires, data will be deleted or anonymised in a manner that ensures it can no longer be linked to any specific individual. If you request early deletion (see Section 8), ali88 will honour that request to the extent permitted by law.

8Your Rights Regarding Personal Data

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights in relation to the personal information we hold about you:

To exercise any of the rights above, please contact ali88's data protection team by email at support@ali88.casino or via live chat on the platform. We will process your request within 30 working days from the date the request is received. If a request requires additional time, we will notify you with a reasonable explanation.

9Child Protection

The ali88 platform is strictly for individuals aged 18 and above only. We do not knowingly collect personal information from minors. The ali88 registration system is designed with measures intended to prevent underage registration, including phone number verification and KYC procedures that incorporate age verification.

If we become aware that we have inadvertently collected personal information from someone under the age of 18, we will take immediate steps to delete that information and close the relevant account. Parents or guardians who discover that a child or person in their care has registered with ali88 are encouraged to contact us immediately at support@ali88.casino.

10Links to Third-Party Websites

The ali88 platform does not contain outbound links to third-party websites. However, if you access game or payment provider services integrated within the ali88 platform, please note that those services operate under their own privacy policies, which are separate from this Privacy Policy.

Ali88 is not responsible for the privacy practices of third-party providers that work with us. We only work with providers that demonstrate compliance with reasonable data protection standards; however, we encourage you to read the privacy policy of any third party whose services you access through the ali88 platform.

11Amendments to This Privacy Policy

Ali88 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Any material amendments — those that significantly alter how we process your personal data — will be communicated to members via an in-platform notice at least 14 days before the effective date.

Notices of amendments will be prominently displayed on the ali88 login page, and for particularly significant changes, communicated via email or SMS to the member's registered contact. The effective date of each version of this Privacy Policy will always be shown at the top of this document.

Continued use of the ali88 platform after the effective date of any amendment constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes made, you have the right to close your account and request deletion of your personal data to the extent permitted by law.

12Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how ali88 handles your personal data, please reach out to our data protection team through the following channels:

• Privacy Email: support@ali88.casino (please state "Privacy Enquiry" in the email subject line)
• Live Chat: Available 24/7 within the ali88 platform — our agents speak Malay and are ready to assist
• Response Time: Privacy enquiries are responded to within 5 business days; data rights requests within 30 business days.

We encourage you to contact us first if you have any concerns. We are committed to resolving all complaints directly and fairly. If you feel your complaint has not been addressed to your satisfaction, you have the right to escalate it to the Department of Personal Data Protection Malaysia or the relevant regulatory authority.

For more information on your rights and responsibilities when using the ali88 platform, please refer to Terms & Conditions and page Responsible Gaming us.