Alpa88 Privacy Policy — Your Personal Data Protection

Alpa88 (hereinafter referred to as "we", "Platform" or "alpa88") is fully committed to protecting the privacy and personal data security of all our members. As an online gaming platform operating in Malaysia, we conduct all data processing activities in compliance with the Personal Data Protection Act 2010 (PDPA) and guidelines issued by the Department of Personal Data Protection Malaysia.

This Privacy Policy ("Policy") is intended to give you a clear and transparent overview of how your personal information is collected, processed, stored and protected by alpa88. We believe that transparency is the foundation of trust, and your trust is the asset we value most.

By registering and using alpa88 services, you give your consent to the processing of your personal data as described in this Policy. If you do not agree with any part of this Policy, please discontinue use of our platform and contact the support team to close your account.

Alpa88 collects various categories of personal information to enable us to provide a secure, seamless, and high-quality service to our members. The following are the main categories of data we collect:

We adhere to the principle of data minimisation — meaning we only collect information that is strictly necessary for the stated purposes. You are not required to provide information that is irrelevant to the service you are using.

Your personal data is collected by alpa88 through several primary channels:

• Account Registration — When you register as a new alpa88 member, you provide basic information such as your name, email, and phone number.
• Identity Verification (KYC) — To meet compliance requirements, we ask you to upload a copy of your identification document during the KYC process.
• Financial Transactions — Your bank account information is collected when you register a payment method for deposits or withdrawals.
• Platform Usage — Usage and technical data are collected automatically via server logs, cookies, and similar tracking technologies while you use our platform.
• Communications with Support — When you contact our customer support team, records of that communication are retained for quality assurance and complaint resolution purposes.
• Authorised Third Parties — In certain cases, we may receive data from third-party payment or identity verification service providers that you have authorised to share data with us.

Alpa88 uses your personal data only for lawful purposes as stated in this Policy. The following are the primary purposes of our data processing:

• Account Management — To create, maintain, and protect your member account, including identity verification and password management.
• Transaction Processing — To process deposits, withdrawals, and all financial transactions quickly and securely.
• Legal Compliance — To fulfil our obligations under applicable Malaysian law, including anti-money laundering (AML) and KYC requirements.
• Fraud Prevention — To identify, investigate, and prevent fraudulent activity, money laundering, and the use of multiple accounts.
• Customer Support — To respond to inquiries, resolve complaints, and provide technical assistance to members.
• Service Communications — To send important notifications regarding your account, transactions, promotions you have subscribed to, and Policy updates.
• Analytics & Improvement — To understand usage patterns and improve the design, performance, and security of the platform.
• Responsible Gaming — To monitor gaming patterns and identify members who may require assistance through the responsible gaming programme.

The security of your personal data is alpa88's highest priority. We implement multiple layers of technical and organisational protection to ensure your data remains safe from unauthorised access, disclosure, alteration or destruction at all times:

• 256-bit SSL Encryption — All data transmitted between your device and alpa88 servers is protected with 256-bit SSL encryption — the same security standard used by leading banking institutions and government agencies.
• Data-at-Rest Encryption — Sensitive data stored in our databases, including financial information and identity documents, is encrypted using AES-256.
• Strict Access Control — Only alpa88 staff who require access to specific data to perform their duties are permitted to do so. All access is logged and continuously monitored.
• Regular Security Scanning — Our platform undergoes regular security audits and penetration testing by independent cybersecurity experts.
• Secure Data Backup — Data is regularly backed up to secure data centres with high-level physical and cyber security measures.

Data Retention Period: alpa88 retains members' personal data for the period necessary to fulfil the purpose of data collection and legal obligations. Generally:

• Active account data — retained for the duration of the active account plus 7 years after account closure (AML requirements).
• Transaction records — retained for 7 years in line with Malaysia's accounting and tax requirements.
• Support communication logs — retained for 3 years from the date of last interaction.
• Technical data and logs — retained for 12 months only.

Alpa88 does not sell or trade your personal data. However, in certain limited situations, we may need to share some of your data with the following parties:

• Payment Service Provider — To process your deposits and withdrawals, we share necessary information with banks, payment gateways, and e-wallet providers used. These providers are bound by strict confidentiality agreements.
• KYC Service Provider — Third-party identity verification providers that assist us in verifying member documents and identities for compliance purposes.
• Game Provider — Gaming software companies that provide game content on the alpa88 platform may receive the minimum game data required for technical functionality.
• Competent Authorities — alpa88 complies with all court orders, regulatory directives, and lawful requests from Malaysian law enforcement agencies. We will not disclose your data to authorities unless required by law.
• Business Transfer — In the event of a merger, acquisition, or sale of alpa88 assets, user data may be transferred as part of the business assets, subject to equivalent privacy protections.

Alpa88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies — Required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled.
• Performance Cookies — Collects information on how you use the platform (pages visited, time spent, errors encountered) to help us improve performance.
• Functional Cookies — Stores your preferences such as language selection, display size, and other personal settings so you do not need to reconfigure them each time you log in.
• Analytics Cookies — Used to understand aggregate platform usage patterns for product improvement purposes.

You can manage or disable non-essential cookies through your web browser settings at any time. However, disabling certain cookies may affect the functionality or your experience on the alpa88 platform.

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data held by alpa88:

To exercise any of the rights above, contact our Data Protection team via email at [email protected] by clearly stating your request. We will respond within 14 business days and complete the request within 30 business days.

The alpa88 platform is exclusively for individuals aged 18 and above. We do not knowingly collect, process, or store personal data of individuals under the age of 18.

All members registering on alpa88 are required to confirm they are aged 18 or above during the registration process. Our KYC process is designed to identify and reject registrations by underage individuals.

Alpa88 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service operations. The date of the most recent update will always be displayed at the top of this document.

For material amendments — changes that significantly affect how we process your data — alpa88 will provide members with advance notice via:

• In-platform notifications when you are logged into your account.
• Email to your registered address at least 14 days before the amendment takes effect.
• Clear announcements on the alpa88 website homepage.

Your continued use of the alpa88 platform after any amendment takes effect constitutes your acceptance of the updated Policy. Members who do not agree with the changes may request account closure before the amendment comes into effect.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how alpa88 handles your personal data, our Data Protection Officer (DPO) team is here to help:

• Data Protection Email: [email protected]
• Live Chat: Available 24/7 within the alpa88 platform — the fastest way to get an immediate response.
• WhatsApp & Telegram: For inquiries that require document attachments or further discussion.

We are committed to responding to all privacy-related inquiries within 3 business days and resolving complaints within 14 business days. If you are not satisfied with our response, you have the right to submit a complaint to the Department of Personal Data Protection Malaysia.