888r Personal Data Protection

888r Privacy Policy – Malaysia Personal Data Protection

At 888r, your privacy is not merely a legal obligation — it is our genuine commitment to every member. This document clearly explains how we collect, use, store, and protect your personal information, in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Last Updated: 1 January 2026 | Version 3.1
256-bit SSL Encryption
Malaysia PDPA Compliance
No Sale of Personal Data
Data Not Shared Without Consent

888r's Six Data Protection Principles

These are the principles that govern how 888r handles every piece of personal information you entrust to us.

Full 256-bit SSL Encryption

Every connection between your device and 888r's servers is encrypted with 256-bit SSL — the same technology used by Malaysia's major banks such as Maybank and CIMB. This means every password, card detail, and transaction detail you send to 888r cannot be read by any third party while in transit.

Compliant with Malaysia PDPA 2010

888r operates in full compliance with the Personal Data Protection Act 2010 (PDPA) Malaysia. This gives you clear rights to access, correct, and request deletion of your personal data. We also ensure that all data processing has a valid legal basis and a clearly defined purpose.

No Sale of Personal Data

888r has never sold, rented, or traded members' personal data to any third party for advertising, marketing, or commercial purposes — and never will. Your data belongs to you. We only use it for purposes you have explicitly consented to.

Strict Access Controls

Access to 888r members' personal data is restricted to staff who genuinely need it to carry out their duties — and nothing beyond that. All access is logged and regularly audited. 888r staff receive dedicated privacy training and are bound by strict confidentiality agreements.

Minimal Data Retention

888r retains your personal data only for as long as necessary for the stated purpose or as required by Malaysian law. When data is no longer needed, it is securely deleted or anonymised in accordance with established procedures. You may also proactively request the deletion of your data.

Immediate Breach Notification

In the event of any security incident involving members' personal data, 888r is committed to notifying affected users within the timeframe stipulated by the PDPA. We will also clearly explain what happened, what data may have been exposed, and the steps we are taking to rectify the situation.

Important Note: This Privacy Policy applies to all information collected by 888r through our website, mobile app, and all other communication channels. By using the 888r platform, you agree to the collection and use of information as described in this document. If you have any questions, please contact our Privacy Officer at privacy@888r-jit.com.

1Information We Collect from You

888r collects various types of personal information necessary to provide a safe and fully functional digital entertainment service. We only collect what is genuinely needed — a "data minimisation" principle we firmly uphold.

Information you provide directly:

  • Registration information: Full name, date of birth, MyKad or passport number, email address, mobile phone number, and account password
  • Address information: Current residential address in Malaysia — required for identity verification and KYC compliance
  • Financial information: Details of the payment methods you use (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX via Maybank2u or CIMB Clicks) — we do not store your full credit/debit card number
  • Verification documents: Copies of MyKad, passport, or other identification documents submitted during the KYC process
  • Communications: Records of your correspondence with the 888r customer support team via live chat, email, or other channels

Information collected automatically:

  • IP address, browser type and version, device operating system
  • Game session data including games played, bets placed, and session duration
  • Platform access logs including dates, times, and actions performed within the account
  • Cookie and similar technology data that helps improve your user experience
  • General location information (state/city) based on IP address — 888r does not track your precise GPS location

KYC Note: Identification documents submitted for KYC are stored in a separate system with additional security controls. Access to KYC documents is strictly limited and permitted only to 888r staff with specific authorisation.


2How We Use Your Personal Data

888r uses collected information only for legitimate, pre-stated purposes. We will not use your data for any other purpose without obtaining additional consent from you. The following are the primary purposes for which your data is used at 888r:

Purpose of Use Types of Data Used Legal Basis
Account management & identity verification Name, MyKad, date of birth, email Contract
Processing of deposits & withdrawals Financial information, e-wallet account numbers Contract
Fraud prevention & security IP address, access logs, activity patterns Legitimate interests
Customer support & complaint resolution Communication records, account history Contract
Legal compliance & KYC Identity documents, transaction records Legal obligation
Direct marketing (with consent) Email address, phone number, game preferences Consent
Platform improvement & analytics Cookie data, session logs (no personal identifiers) Legitimate interests

We never make significant decisions that affect you based solely on automated processing without human involvement — all decisions relating to account suspension or closure are reviewed by qualified 888r staff.


3Data Sharing with Third Parties

888r takes seriously its responsibility to protect our members' privacy. We do not sell, rent, or trade your personal data. However, there are limited situations in which we need to share certain information with selected third parties:

  • Payment service provider: We share the necessary transaction details with e-wallet and banking providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX) to process your deposits and withdrawals. Each of these providers has their own privacy policy governing how that data is used
  • Game software provider: Certain game session information (not your full identity) is shared with the third-party game software providers we use to operate slots and table games. This data is required for match processing and result verification
  • Law enforcement: 888r will disclose required information to Malaysian authorities (police, anti-corruption commission, courts) when mandated by a court order, warrant, or valid legal requirement
  • KYC service providers: For identity verification purposes, we use a third-party service based in Malaysia that assists in verifying identification documents. This provider is bound by a strict confidentiality agreement with 888r
  • Audit & compliance: Independent auditors and testing bodies that verify game fairness may access anonymised game statistical data (no personal information included)

Important: In all of the above cases, we only share data that is strictly necessary for the stated purpose. All third parties we work with are required to sign a robust data protection agreement and adhere to the security standards set by 888r. We do not share data with advertising companies, social media platforms, or data brokers.


4Data Security & Encryption

888r invests seriously in cybersecurity infrastructure to protect our members' personal data. The following technical and organisational measures are in place to ensure the security of your data:

  • Data encryption in transit: All communications between your device and 888r's servers are protected with Transport Layer Security (TLS 1.3) and 256-bit SSL encryption — making it impossible for unauthorised parties to intercept data in transit
  • Stored data encryption: Sensitive data such as passwords is stored using a strong hashing algorithm (bcrypt) — even in the highly unlikely event of a server breach, your password cannot be read in plain text
  • Multi-layered access controls: 888r's servers are protected by multi-layered firewalls, intrusion detection and prevention systems (IDS/IPS), and strict role-based access controls
  • 24/7 Monitoring: 888r's cybersecurity team monitors the platform's infrastructure around the clock to detect and respond to any threats or suspicious activity
  • Regular penetration testing: 888r conducts regular penetration testing through independent security firms to identify and address vulnerabilities before they can be exploited
  • Environment segregation: Production data is fully segregated from development and testing environments to prevent any accidental leakage

While we take all reasonable steps to protect your data, no security system is completely impenetrable. You also play a key role in keeping your account safe — use a strong, unique password for your 888r account, enable two-factor authentication (2FA), and never share your login credentials with anyone.


5Cookies & Tracking Technologies

888r uses cookies and similar technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies we use:

  • Strictly necessary cookies: These cookies are essential for the 888r platform to function properly — they manage your login session, maintain account security, and enable transactions to be processed. This type of cookie cannot be disabled without affecting the platform's core functionality
  • Functional cookies: Saving your preferences such as language, theme, and display settings so you don't have to reconfigure them each time you visit the 888r platform
  • Analytics cookies: Helps us understand how members use the 888r platform overall — which pages are visited most frequently, average session duration, and where users encounter difficulties. This data is analysed in aggregate form (without identifying individuals) for platform improvements
  • Game session cookies: Saving the current state of your game session so that if your connection is unexpectedly interrupted, you can pick up right where you left off

You can manage cookie settings through your web browser. However, disabling strictly necessary cookies may impair the functionality of the 888r platform. 888r does not use third-party cookies for behavioural advertising purposes.

Mobile App Note: The 888r mobile app uses device identifiers and similar technologies in place of cookies for the same purposes. You can manage these permissions through the privacy settings on your Android or iOS device.


6Data Retention & Deletion

888r retains your personal data only for as long as necessary for the stated purpose or as required by Malaysian law. Below are our data retention guidelines:

  • Active account data: Retained for as long as your account is active with 888r and for 7 years after account closure — this period is required for compliance with Malaysian tax and financial laws
  • Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian legal requirements on financial records and anti-money laundering
  • Customer support communication logs: Retained for 3 years from the date of communication — useful for reference in the event of a delayed complaint
  • Game session data: Retained for 2 years for the purpose of resolving game disputes and fairness audits
  • KYC documents: Retained for 7 years after account closure in accordance with compliance and legal requirements
  • Analytics cookie data: Deleted within 13 months from the date of collection

Once the retention period expires or upon a valid deletion request, 888r will securely delete or anonymise your data using methods that ensure it cannot be recovered. Data deletion is carried out on a regular schedule as defined by our internal policies.


7Your Rights as a User Under PDPA

Malaysia's Personal Data Protection Act 2010 (PDPA) grants you specific rights over your personal data. 888r fully respects each of these rights:

Right of Access
You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 business days.
Right to Rectification
If your data is inaccurate or out of date, you can request a correction through your profile settings or via customer support.
Right to Erasure
You may request deletion of your data — subject to the minimum statutory retention requirements we are obliged to comply with.
Right to Object
You may object to the processing of your data for direct marketing purposes at any time, without needing to provide a reason.
Right to Data Portability
You may request a copy of your data in a machine-readable format for transfer to another service provider.
Right to Restrict Processing
In certain circumstances, you may request that we restrict how we process your data while a dispute is being resolved.

To exercise any of the above rights, send a written request to privacy@888r-jit.com stating the right you wish to exercise and sufficient information for us to verify your identity. 888r will respond within the timeframe stipulated by the PDPA. We do not charge a fee for reasonable data rights requests.


8Marketing Communications from 888r

888r may send you marketing communications about new promotions, exclusive bonuses, the latest game releases, and VIP offers — but only with your explicit consent. Here is how we handle marketing communications:

  • Consent options during registration: When registering for an 888r account, you will be given the option to receive marketing communications via email, SMS, and app notifications. This is optional and does not affect your eligibility to use the platform
  • Unsubscribe at any time: Every marketing email we send includes a clear "unsubscribe" link. Click it to stop receiving marketing emails from 888r within 10 business days
  • Managing communication preferences: You can update your marketing communication preferences at any time through the "Notification Settings" section in your 888r account profile
  • Service communications (mandatory): Important account-related communications — such as deposit confirmations, security notifications, or changes to our terms — will continue to be sent regardless of your marketing preferences. These are essential service communications, not marketing

888r does not employ aggressive or misleading marketing tactics. We also do not use automated profiling to target members who may be at risk of excessive gambling activity — the privacy and wellbeing of our members is a priority we take seriously.


9Children's Privacy & Minor Protection

888r is a platform exclusively for individuals aged 18 and above. We do not knowingly collect, store, or process any personal information from children or minors.

Minor Protection: If you are a parent or guardian who believes your minor child has registered for or used the 888r platform, please contact us immediately at privacy@888r-jit.com. We will investigate promptly, close the account in question, and delete all associated personal data. Any financial transactions that have occurred will be handled in accordance with the appropriate procedures.

888r employs multiple mechanisms to prevent access by minors, including age verification at registration, KYC checks requiring official identification documents, and monitoring systems designed to detect signs of underage activity. While no system is perfect, we are committed to doing everything reasonably possible to prevent use of the platform by those who are not eligible.


10Contact Our Privacy Officer

888r has appointed a Data Protection Officer (DPO) responsible for ensuring compliance with this Privacy Policy and Malaysia's Personal Data Protection Act 2010. Our Privacy Officer can be contacted for:

  • Requests to access, correct, or delete personal data
  • Complaints regarding how 888r handles your personal data
  • Enquiries about this Privacy Policy or your PDPA rights
  • Reporting any data security or privacy concerns
Privacy Officer Email
privacy@888r-jit.com
Response time: 5 business days
General Customer Support
support@888r-jit.com
In-platform 24/7 live chat

888r reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or the services we offer. When material changes are made, we will notify you via an in-platform notification or an email to your registered address. The "Last Updated" date at the top of this document will always reflect the current version of the 888r Privacy Policy.

888r Privacy Commitment Summary
  • Full compliance with Malaysia PDPA Act 2010
  • 256-bit SSL encryption for all data
  • No sale of data to third parties
  • Right to access, correct & delete data
  • Data Protection Officer appointed
  • Data minimisation — only what is necessary
  • Marketing controls in your hands
  • Data retention for prescribed periods
  • Breach notification within the stipulated timeframe
  • Special protection against underage access

Your Trust Is the Foundation of Everything at 888r

If you have ever wondered — "this platform knows a lot about me, what exactly are they doing with all that information?" — that is a fair and sensible question. At 888r, we do not want you to simply "take our word for it" without an explanation. That is why we have written this Privacy Policy in plain, straightforward language rather than lengthy legal jargon that is difficult to understand.

Since 888r first launched in 2018, we have served over 1.28 million Malaysian members. Every one of them has trusted us with deeply personal information — full names, MyKad numbers, e-wallet account details. That trust is not something we take lightly. It is a responsibility we feel every day, in every decision we make about our systems and data.

Privacy in Malaysia's Digital Age — Why It Matters More Than Ever

We live in an age where personal data is increasingly valuable. You may have received a call or SMS from an unknown number where the caller somehow knew your full name — an unsettling and alarming experience. This typically happens when personal data has been sold or leaked by an irresponsible platform. 888r is committed to ensuring this never happens to our members.

Malaysia's Personal Data Protection Act 2010 (PDPA) provides a clear legal framework governing your rights and the responsibilities of organisations that process your data. 888r does not comply with the PDPA merely because it is the law — we comply because we believe it is the right way to handle other people's information. Our PDPA compliance is reviewed periodically by independent legal counsel to ensure we remain on solid footing.

What Happens to Your Data When You Play Slots or Badminton at 888r

Many members wonder — when I hit "spin" on a slot, or place a bet on a Lee Zii Jia badminton match, what information is recorded? The answer is straightforward: 888r's system records your gameplay actions (game type, bet amount, outcome) for very specific purposes — transaction processing, winnings verification, and responding to any game-related disputes. These records are not shared with third parties for advertising purposes or sold to anyone.

Your game session data is also used in aggregate and anonymised form — meaning 888r may know that "more users play slots on weekends than on weekdays," but we do not know that you specifically played on a Saturday night and spent RM200. Your personal data remains yours.

Malaysian Digital Payments & Transaction Privacy at 888r

When you make a deposit using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX via Maybank2u or CIMB Clicks, transaction information passes through several systems to process that payment. 888r only receives confirmation that the transaction was successful and the amount involved — we do not store your full debit/credit card number, your e-wallet password, or your online banking login credentials. All such sensitive information is handled directly by your e-wallet provider or bank in accordance with their own high security standards.

One thing many users are not aware of: 888r requires that your withdrawal method must match your deposit method — and this is specifically to protect you. It means your funds can only be returned to the same account you used to deposit, preventing any third party from redirecting your money to an unauthorised destination, even if they manage to gain access to your 888r account.

Your Rights — More Than Just Words on Paper

The "User Rights" section of this Privacy Policy is not just text we've included to satisfy a legal requirement. We actively honour these rights when members request them. Over the past year, 888r has processed dozens of data access, information correction, and account deletion requests — all completed within the promised timeframe and at no charge.

If you would like to know exactly what personal data we hold about you, send an email to privacy@888r-jit.com. We will provide a full report within 21 business days. If any information is inaccurate, we will correct it. If you wish to close your account and delete all data that can be deleted under the law, we will do so. Your privacy, your choice.

Frequently Asked Questions about the 888r Privacy Policy

No. 888r has never sold, rented, or shared members' personal data with advertisers, data brokers, or any third party for advertising or marketing purposes, and we never will. Your data is only shared in very limited circumstances — such as payment processing, legal compliance, or with selected service providers bound by strict confidentiality agreements. If you receive a call or message from someone claiming to represent 888r through channels other than our official ones, it is a scam — please report it to support@888r-jit.com.

Submit a written request to privacy@888r-jit.com with the subject line "Personal Data Access Request." Include your full name, 888r account number, and registered email address for identity verification. 888r will process your request within 21 business days and provide a full report of the personal data we hold in relation to your account. This service is free for the first request made within any 12-month period.

When you close your 888r account, your personal data is not immediately deleted in full — this is because Malaysian law requires us to retain financial and transaction records for a minimum of 7 years. However, your account will be terminated and you will no longer be able to access the platform. Information not subject to legal retention requirements will be deleted within 90 days. After 7 years, all relevant records will be fully deleted or anonymised.

888r works with a select number of trusted third-party services to operate the platform, including game software providers, payment services (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX), and cloud infrastructure services. All third parties are required to sign strict data processing agreements and may only access data genuinely necessary for their functions. 888r does not use any third-party analytics tools that link your gaming activity to your personal profile for advertising purposes.

There are three easy ways to stop receiving marketing emails from 888r. First, click the "Unsubscribe" link at the bottom of any marketing email we send. Second, log in to your 888r account, go to "Profile Settings" then "Communication Preferences", and disable the communication categories you no longer want. Third, contact our customer support via live chat or email at support@888r-jit.com and ask us to update your preferences. Changes will take effect within 10 business days. Note: Unsubscribing from marketing emails does not stop important security or account transaction emails.

If you suspect your account has been accessed without authorisation, take the following steps immediately: First, change your 888r account password right away if you are still able to log in. Second, enable two-factor authentication (2FA) if you have not already done so. Third, contact the 888r support team via 24/7 live chat or email at support@888r-jit.com to report the incident. Our security team will investigate your account activity, suspend the account if necessary for protection, and help you regain control. Do not wait — acting promptly helps minimise any potential loss.

Your Data Is Secure — Play with Peace of Mind

888r takes your privacy seriously. Register for free in 3 minutes, deposit as little as RM10 via Touch 'n Go, GrabPay, or your preferred e-wallet, and enjoy over 500 games with the peace of mind that your personal data is always protected.

256-bit SSL
PDPA Compliance
No Data Selling
24/7 Support
Bahasa Melayu