Grab88 Privacy Policy — Our Commitment Protecting Your Data

1Introduction & Our Commitment

Grab88 is an online gaming platform operating exclusively for the Malaysia market. We understand that your trust is the most valuable asset we hold, and that trust begins with responsible personal data management.

This Privacy Policy explains in detail how Grab88 collects, stores, uses, protects, and occasionally shares the personal information you provide to us, whether during the registration process, day-to-day platform use, or through interactions with our support team.

We are committed to ensuring that your privacy is always respected and your personal information is handled in a transparent, fair manner that complies with applicable laws in Malaysia, in particular the Personal Data Protection Act 2010 (PDPA).

2Types of Personal Data We Collect

Grab88 collects personal data from various sources depending on how you interact with our platform. Below is a summary of the types of data we collect:

We only collect data necessary for the purposes stated in this Privacy Policy. grab88 does not request sensitive information unrelated to platform operations, such as medical details or political affiliations.

3How We Use Your Personal Data

The personal data we collect is used solely for legitimate and stated purposes. Grab88 uses your information for the following purposes:

• Account management — creating, verifying, and maintaining your member account in a secure and well-managed state.
• Transaction processing — processing deposits, withdrawals, and any financial activity you carry out on the platform.
• Identity verification (KYC) — ensuring all members meet the minimum age requirement and applicable compliance criteria.
• Fraud detection — monitoring suspicious activity, preventing money laundering, and protecting the platform from abuse.
• Service communications — sending account notices, platform updates, promotional information, and service-related communications.
• Platform improvements — analysing usage patterns to improve overall performance, layout, and user experience.
• Customer support — resolving enquiries, complaints, and assistance requests efficiently and effectively.
• Legal compliance — fulfilling reporting and compliance obligations set by the relevant authorities.

4Data Sharing with Third Parties

Grab88 does not sell or rent your personal data. However, in certain limited situations, we may need to share some of your information with the following parties:

• Payment service providers — such as FPX, Touch 'n Go eWallet, GrabPay, and DuitNow, to securely process your financial transactions.
• Game software providers — companies that provide game content on our platform require minimal data to properly run your gaming sessions.
• Cloud and infrastructure service providers — which store and manage our data under strict confidentiality agreements.
• Legal authority — when required by law, court order, or an official investigation request from an authorised government agency.
• Audit and compliance firms — independent third parties we engage to conduct periodic compliance reviews to ensure the highest standards are maintained.

All third parties we authorise to access your data are contractually bound to handle that information with a level of protection at least equivalent to the standards we apply to ourselves.

5Data Security Measures We Practice

Grab88 continuously invests in the latest cybersecurity infrastructure to keep your data safe at all times. The protective measures we employ include:

• End-to-end encryption uses TLS 1.3 protocol for all data transmitted over the network.
• Encryption of stored data (data at rest) — all sensitive records are stored in encrypted format using AES-256.
• Role-based access control (RBAC) — only authorised personnel with a legitimate business need may access member data.
• 24/7 threat monitoring by the internal cybersecurity team and automated intrusion detection systems.
• Penetration testing conducted periodically by certified independent security firms.
• Secure data backup performed automatically to ensure your data is not lost due to any unforeseen incident.
• Two-factor authentication (2FA) available to all member accounts as an additional layer of protection.

6Cookies, Tracking Technologies & Analytics

Platform Grab88 uses cookies and similar tracking technologies to enhance the user experience and analyse platform usage patterns. The types of cookies we use are as follows:

• Essential cookies — required for core platform functions such as login sessions, security, and language preferences. These cookies cannot be disabled.
• Performance cookies — helping us understand how members interact with the platform so we can make effective improvements.
• Functional cookies — storing your preferences such as display settings and game choices for a more personalised experience.
• Analytics cookies — we use first-party analytics tools to understand traffic, page performance, and user behaviour in an aggregated and non-personal manner.

You can manage your cookie settings through your web browser settings. However, disabling certain cookies may affect the functionality and user experience of the Grab88 platform.

7Your Rights as a Data Subject

As a member Grab88 and as a data subject under Malaysia's PDPA, you hold the following rights regarding the personal information we store:

To exercise any of the rights above, please contact the support team Grab88 via live chat or email. We will endeavour to respond to every request within 14 business days. Some requests may require additional identity verification before they can be processed.

8Data Retention Period

Grab88 does not retain your personal data longer than necessary for the purposes stated in this Privacy Policy, or longer than required by applicable law.

As a general guide on data retention periods:

• Active account data — retained for as long as your account is active and for a specified period after account closure for audit and compliance purposes.
• Financial transaction records — retained for a minimum of 7 years in accordance with applicable anti-money laundering (AML) legal requirements.
• KYC Documents — retained for the duration the account is active and for the period stipulated by the regulatory authority following account closure.
• Support communication logs — retained for 3 years for reference and service improvement purposes.
• Cookie and analytics data — retained for 13 months in line with industry best practices.

When data is no longer needed and there is no legal obligation to retain it, Grab88 will securely delete or anonymise that data.

9Child Protection

Platform Grab88 is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from children under the age of 18.

If we find that a child's personal data has been collected without appropriate age verification, we will take immediate steps to delete that data and close the associated account. If you believe a child has registered on our platform, please contact our support team immediately so the matter can be resolved promptly.

10Amendments to the Privacy Policy

Grab88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or service improvements. Any amendment will take effect immediately upon publication on this page.

For significant amendments, we will take the following steps to ensure you are informed:

• Displaying a clear notice on the platform's home page.
• Sending notification emails to all registered members.
• Updating the "Last Updated" date shown at the top of this document.

Continued use of the platform Grab88 following the publication of any amendment will be considered acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how your data is handled.

11Contact Us About Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, our Grab88 ready to assist:

• Live Chat — the fastest way to get help; available 24 hours a day, 7 days a week within the platform.
• Email: [email protected] — for enquiries that require more detailed discussion or written documentation.
• Visit page FAQ team for answers to frequently asked questions on privacy and data security.
• For issues related to Responsible Gaming, our dedicated team is ready to assist you wholeheartedly.

We are committed to responding to every privacy-related inquiry within 14 working days after receiving your enquiry.