Privacy Policy

This Privacy Policy ("Policy") is issued by Alpha88, the operator of the online gaming and sports betting platform accessible at https://alpha88.cam ("Platform", "We", "Us", or "Alpha88"). It applies to all individuals who visit, register on, or use the Alpha88 Platform, including players, prospective players, and visitors who do not create an account ("You", "User", or "Data Subject").

Alpha88 is committed to handling your personal data with transparency, integrity, and in compliance with applicable data protection laws, including the Personal Data Protection Act 2010 (PDPA) of Malaysia. We recognise that your privacy matters, and we take our obligations under this Policy seriously.

By registering an account on Alpha88, depositing funds, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the Alpha88 Platform.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

Alpha88 collects personal data in the following categories, limited to what is necessary for the specified purposes described in Section 6 of this Policy:

3.1 Registration and Identity Data

• Full legal name as appearing on your official identification document;
• Date of birth (for mandatory age verification — players must be 21 years of age or older);
• Malaysian IC number (MyKad) or passport number;
• Email address and mobile phone number;
• Residential address, including city (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam).

3.2 Financial and Transaction Data

• Deposit and withdrawal transaction records, including amounts in MYR, timestamps, and payment method used;
• Payment method identifiers (e.g., e-wallet account number associated with Touch 'n Go eWallet, Boost, or GrabPay; bank account details for Maybank, CIMB, Public Bank, Hong Leong, or FPX transfers; cryptocurrency wallet addresses for USDT, BTC, or ETH transactions);
• Betting history, game activity records, and wagering data.

3.3 KYC Documentation

• Copies of government-issued identity documents;
• Proof of address documentation;
• Source-of-funds documentation where enhanced due diligence is required.

3.4 Technical and Device Data

• IP address and approximate geolocation derived therefrom;
• Browser type, operating system, and device identifiers;
• Session duration, pages visited, and click-stream data;
• Cookie data (see Section 10 for full details).

3.5 Communications Data

• Records of live chat conversations, email correspondence, and any other communications with the Alpha88 support team.

Alpha88 collects your personal data through the following channels:

• Directly from you: when you complete the registration form, submit KYC documents, initiate deposits or withdrawals, contact our customer support team, or respond to surveys or promotional communications;
• Automatically through the Platform: via cookies, web beacons, analytics tools, and server logs that record your interactions with the Platform during each session;
• From third-party service providers: including payment processors (such as FPX gateway operators, e-wallet providers), identity verification agencies, and fraud detection platforms that may share data with us as part of their contractual service delivery;
• From publicly available sources: in limited circumstances where we are required to perform enhanced due diligence checks in accordance with anti-money-laundering obligations.

Alpha88 processes your personal data under one or more of the following legal bases, as applicable to each specific processing activity:

Alpha88 uses the personal data we collect for the following purposes:

• Account Management: to create, maintain, and operate your player account, including account verification, login authentication, and balance management;
• Transaction Processing: to facilitate MYR deposits and withdrawals through your chosen payment method (Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, or cryptocurrency);
• KYC and Compliance: to verify your identity, confirm your age (21+ requirement), and fulfil our anti-money-laundering and regulatory obligations;
• Customer Support: to respond to your enquiries, resolve disputes, and maintain records of support interactions;
• Security and Fraud Prevention: to detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions;
• Platform Improvement: to analyse aggregated usage data and improve the performance, features, and user experience of the Alpha88 Platform;
• Responsible Gambling: to monitor gaming behaviour, identify potential problem gambling indicators, and apply responsible gambling tools where appropriate;
• Marketing Communications: where you have provided consent, to send you promotional offers, bonus notifications, and news about new games or features. You may opt out at any time.

Alpha88 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We may disclose your personal data to the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment Processors: providers of the payment infrastructure used to process your deposits and withdrawals, including operators of FPX, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and cryptocurrency network processors;
• Identity Verification Providers: third-party KYC and age-verification platforms that process submitted identity documents on our behalf;
• Fraud and Risk Management Services: specialised third-party providers that assist in the detection, investigation, and prevention of fraudulent transactions and account abuse;
• Technology and Hosting Providers: cloud infrastructure and data centre operators who host Platform data under strict confidentiality and security obligations;
• Regulatory and Law Enforcement Authorities: where we are legally compelled to disclose information in response to a lawful request, court order, or regulatory requirement. We will notify you of such disclosure to the extent permitted by law;
• Professional Advisers: legal counsel, auditors, and compliance consultants who are bound by professional confidentiality obligations.

In the course of operating the Alpha88 Platform and delivering its services to players across Malaysia, certain personal data may be transferred to, processed, or stored in jurisdictions outside of Malaysia. Such transfers may occur where our technology providers, game content suppliers, or cloud hosting infrastructure is located in a different country.

Where such international transfers occur, Alpha88 takes all reasonable steps to ensure that your personal data receives an equivalent level of protection to that afforded under the Personal Data Protection Act 2010 (PDPA). This may include relying on the recipient country's adequacy status, implementing standard contractual clauses, or obtaining your explicit consent where required.

By using the Alpha88 Platform, you acknowledge and consent to your personal data being transferred and processed internationally in the manner described in this section.

Alpha88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention standards apply:

• Account and Transaction Records: retained for a minimum of five (5) years following account closure or the date of the last transaction, in compliance with anti-money-laundering record-keeping obligations;
• KYC Documents: retained for a minimum of five (5) years from the date of submission or the date of account closure, whichever is later;
• Support Communications: retained for a period of three (3) years from the date of the interaction, for dispute resolution and quality assurance purposes;
• Marketing Preferences: retained while your account is active or until you withdraw consent for marketing communications, whichever occurs first;
• Technical and Session Data: retained for up to twelve (12) months for security monitoring and platform analytics purposes, after which it is aggregated or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that renders re-identification impossible.

Alpha88 uses cookies and similar tracking technologies (such as web beacons and pixel tags) to enhance your experience on the Platform, analyse usage patterns, and deliver relevant promotional content. The categories of cookies we deploy are as follows:

You may manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. Strictly necessary cookies cannot be disabled as they are integral to Platform operation.

Alpha88 operates a strict minimum age policy. The Platform is intended exclusively for individuals aged 21 years and above. We do not knowingly collect, process, or retain personal data from persons under the age of 21.

Where Alpha88 discovers or is notified that personal data has been collected from an individual under the age of 21, we will take immediate steps to:

• Permanently close the relevant account;
• Void any pending bets and return deposits in accordance with our Terms & Conditions;
• Securely delete or anonymise the personal data in question;
• Report the matter to relevant authorities where legally required.

Alpha88 implements and maintains a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and the Alpha88 Platform is encrypted using 256-bit SSL/TLS protocols;
• Encryption at Rest: Sensitive data fields, including identity document details and payment method identifiers, are encrypted in storage;
• Access Controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access control systems;
• Audit Logging: All access to personal data stores is logged and periodically reviewed for anomalous activity;
• Two-Factor Authentication: Available to all Players for account login and strongly recommended. All internal staff systems require multi-factor authentication;
• Penetration Testing: Alpha88 conducts regular external security assessments and penetration tests to identify and remediate vulnerabilities;
• Incident Response: We maintain a documented data breach response procedure. In the event of a personal data breach that poses a risk to affected individuals, we will notify relevant parties in accordance with applicable law.

Notwithstanding the above measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. Players are encouraged to use strong, unique passwords and to enable two-factor authentication to further protect their accounts.

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, and to the extent applicable under other data protection frameworks, you hold the following rights in relation to your personal data held by Alpha88: