Habibi88 Privacy Policy – Personal Data Protection for Malaysian Members

This Privacy Policy ("Policy") describes how Habibi88 ("we", "platform", "habibi88") collects, uses, stores, and protects your personal information as a member or visitor of the habibi88.asia platform. We are committed to ensuring your privacy is respected and protected in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

By registering an account or using any habibi88 service — including slots, live baccarat, Sports Betting for the Malaysia Super League or EPL, the badminton section, e-sports, and lottery — you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to close your account.

This Privacy Policy applies to all individuals who interact with the habibi88 platform in any capacity — whether as a registered member actively playing casino games, placing bets on Malaysia Super League football matches, or simply a first-time visitor browsing habibi88.asia.

Habibi88 is the data controller for all personal information collected through our platform. This means we are responsible for deciding how and why your personal data is collected and used, and we bear full legal responsibility under Malaysia's PDPA to ensure that data is handled lawfully, fairly, and transparently.

This policy covers all services offered under the habibi88 brand, including but not limited to: online slots, live baccarat, Sports Betting (football, BWF badminton, NBA, e-sports, and over 30 other sports), lottery, bonus and promotion programmes, and all customer support channels.

Habibi88 collects the following categories of personal data from members and users of our platform:

A. Personal Identification Data

• Full name as stated on your MyKad or Malaysian passport.
• Malaysian identity card number (MyKad) or passport number for KYC verification purposes.
• Date of birth for age verification (18 years and above).
• Gender (optional).
• Images of identity documents submitted during the KYC process.

B. Contact Data

• An active Malaysian mobile phone number — used for OTP verification and security communications.
• Email address (if provided) for account notifications and promotional communications.
• Malaysian residential address (if required for advanced KYC processes).

C. Financial & Transaction Data

• E-wallet account number (Touch 'n Go, GrabPay, Boost, ShopeePay) or the phone number linked to DuitNow.
• Bank name and Malaysian bank account number for withdrawals via FPX (Maybank, CIMB, Public Bank, RHB, Hong Leong).
• A full record of all deposit and withdrawal transactions, including date, time, and amount in Malaysian Ringgit (RM).
• Win and loss records for all betting and gaming activity on the habibi88 platform.

D. Technical & Usage Data

• The IP address of your device when accessing habibi88.
• Device type, operating system, and web browser version in use.
• Login session data including date, time, and session duration.
• Records of gaming and betting activity within the habibi88 platform.
• Cookie data and similar tracking technologies (see Section 9).

Habibi88 collects your personal data through several different methods, depending on how you interact with our platform:

• Account Registration: When you create a new account on habibi88, you provide us directly with basic information such as your name, phone number, and password.
• KYC Process: To meet compliance requirements, habibi88 may ask you to submit an identity document (MyKad) or proof of address to verify your identity. This is typically required before withdrawals exceed a certain limit.
• Financial Transactions: Every time you make a deposit or withdrawal via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, or any other available Malaysian local payment method, our system records the details of that transaction.
• Platform Usage: Technical data such as IP address, device type, and activity logs are collected automatically when you browse or use habibi88 — including when you play slots, place bets on Malaysia Super League matches, or use the live betting feature.
• Support Communications: When you contact the habibi88 support team via live chat, email, or WhatsApp, the content of those communications may be retained for training, quality assurance, and dispute resolution purposes.
• Cookies & Similar Technologies: Your web browser automatically sends certain information to habibi88's servers when you visit our website. For more details, please refer to Section 9 below.

Habibi88 uses the personal data it collects solely for legitimate and reasonable purposes. The following are the primary purposes for which your data is used:

Habibi88 will not use your personal data for any purpose other than those stated in the table above without first obtaining your consent. If you have previously agreed to receive marketing communications from habibi88 but wish to withdraw that consent, you may do so at any time via your account settings or by contacting support@habibi88.asia.

Habibi88 does not sell, rent, or disclose members' personal data to third parties for their own marketing purposes. However, there are limited circumstances where habibi88 needs to share your data with trusted third parties in order to deliver our services fully:

• Payment Processing Providers: Transaction information required is shared with payment providers such as DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay, and Malaysian banks supporting FPX solely for the purpose of processing your deposits and withdrawals. All such providers are bound by strict confidentiality agreements and comply with international data security standards.
• Game Providers: Required technical data may be shared with third-party game providers such as Pragmatic Play, PG Soft, and others to ensure games function correctly and win/loss records are accurately maintained.
• Malaysian Authorities: Habibi88 will disclose personal data to the relevant Malaysian authorities when required to do so by law, court order, or valid legal process.
• Security Service Provider: The cybersecurity and anti-fraud companies we engage may process certain technical data for the purpose of detecting and preventing fraud on the habibi88 platform.

Habibi88 invests seriously in security infrastructure to protect members' personal data from unauthorised access, misuse, loss, or accidental disclosure. The following are the key security measures we have in place:

• 256-bit SSL Encryption: All communications between your device and habibi88's servers are encrypted using TLS/SSL 256-bit protocol — the same standard used by Maybank2u, CIMB Clicks, and Malaysia's leading financial institutions. This means your data cannot be read by any third party during transmission.
• Stored Data Encryption: Sensitive data stored in habibi88's databases, including identification information and transaction records, is encrypted using industry-standard encryption algorithms both during processing and at rest on our servers.
• Two-Factor Authentication (2FA): All logins to your habibi88 account require OTP verification via SMS to your registered Malaysian phone number, providing an additional layer of protection beyond your password.
• 24/7 Monitoring: habibi88's security monitoring system operates around the clock to detect and respond in real time to suspicious activity, unusual login attempts, and other security threats.
• Internal Access Controls: Access to habibi88 members' personal data within our organisation is restricted to staff who require it to carry out their duties, based strictly on a need-to-know basis.
• Regular Security Audits: Habibi88 conducts regular independent penetration testing and security audits to identify and address any vulnerabilities before they can be exploited.

While we take all reasonable steps to protect your data, no system can guarantee absolute 100% security. In the event of a data breach that affects your rights and freedoms, habibi88 is committed to notifying you within a reasonable timeframe and taking appropriate remedial action in accordance with Malaysia's PDPA requirements.

Habibi88 does not retain your personal data for longer than necessary for the purposes it was collected, or longer than required under applicable Malaysian law. Our general data retention guidelines are as follows:

• Active Account Data: For as long as your habibi88 account remains active, we retain all personal data necessary to provide our services to you.
• Financial Transaction Data: Records of all deposits, withdrawals, and betting activity are retained for a minimum of 7 years as required under Malaysian financial and tax laws, even after account closure.
• KYC Documents: Copies of identification documents submitted for KYC purposes are retained for 5 years after the submission date or account closure date, whichever is later, in accordance with anti-money laundering (AML) requirements.
• Communication Records: Customer support logs and dispute-related communications are retained for 3 years for reference purposes and future dispute resolution.
• Technical Data & Logs: Technical logs such as IP address and session records are retained for 90 days for system security and debugging purposes.

Once the relevant retention period has ended, habibi88 will securely delete or anonymise that data using industry-recognised methods, ensuring it cannot be recovered or used to identify you.

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have important rights regarding your personal data that habibi88 is obligated to respect and facilitate:

Habibi88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored in your web browser when you visit habibi88.asia. Below are the types of cookies we use:

You can manage cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the habibi88 platform. For guidance on managing cookies in major browsers, please refer to your browser's support documentation (Chrome, Safari, Firefox, Edge).

The habibi88 platform is strictly for individuals aged 18 and above. Habibi88 does not knowingly collect, use, or retain any personal information from individuals under the age of 18.

We have age verification measures in place during the registration process and during KYC to ensure only eligible individuals can use the habibi88 platform. If we discover that we have collected personal data from someone under the age of 18, we will take immediate action to delete that data and close the relevant account.

In the course of operating the habibi88 platform, some of your personal data may be processed or stored on servers located outside Malaysia — for example, in connection with the use of international game providers or cloud infrastructure used for platform scalability.

When your personal data is transferred outside Malaysia, habibi88 ensures that such transfers are carried out with adequate safeguards in place, including:

• Ensuring that recipient countries maintain a level of data protection equivalent to that of Malaysia.
• Implementing recognised Standard Contractual Clauses.
• Ensuring all data recipients are bound by data processing agreements that require a level of protection equivalent to Malaysia's PDPA.

In all cases, habibi88 remains accountable for your personal data even when it is processed by third parties outside Malaysia, and we ensure that adequate protections are always in place.

Habibi88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, relevant legislative changes, or platform operational requirements. Any updated version will be published at habibi88.asia with a new "Updated" date at the top of this document.

For significant changes that materially affect your privacy rights, habibi88 will make reasonable efforts to notify you in advance through:

• An in-platform notice on habibi88 when you log in to your account.
• SMS or email messages sent to the phone number or email address registered to your habibi88 account.

It is your responsibility to review this Privacy Policy periodically. Your continued use of the habibi88 platform after any changes take effect will be considered your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how habibi88 handles your personal data, you may reach our Data Privacy Officer through the following channels:

• Email: support@habibi88.asia (subject: "Data Privacy Enquiry")
• Live Chat: Available 24/7 directly within the habibi88 platform — average response time under 3 minutes.
• WhatsApp: Available for immediate enquiries in Bahasa Melayu.

We are committed to responding to all privacy-related enquiries within 14 business days from the date of receipt. For more complex cases requiring further investigation, we will keep you informed of the progress within 5 business days from the date the request is received.

If you are not satisfied with how habibi88 has handled your privacy complaint, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia or the relevant authority under PDPA 2010.