Privacy Policy alpa88 —
Protection of Your Personal Data

1 Introduction

Alpa88 ("we", "Platform", or "alpa88.pro") is fully committed to protecting the privacy and security of the personal data of every individual who uses our platform. This Privacy Policy explains in detail the types of information we collect, how it is used, who it is shared with, and the measures we take to ensure its protection.

This document applies to all users of the alpa88 platform — including website visitors, registered members, and any individual who interacts with our services via mobile app, live chat, or any other communication channel we provide.

By using the alpa88 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our platform and contact us if you have any questions.

2 Information We Collect

Alpa88 collects various types of information depending on how you interact with our platform. The following are the main categories of information we collect:

a) Registration & Identity Information

• Full name as shown on your official identification document.
• Date of birth for age verification (18 years and above).
• Active email address and mobile phone number.
• Current residential address.
• Copy of identity document (national ID, passport, or driving licence) for the KYC process.

b) Financial Information

• Bank account number or e-wallet registered for deposits and withdrawals.
• Transaction records including deposit history, withdrawals, and wagering activity.
• Information related to the payment methods used (FPX, DuitNow, TNG eWallet, Boost, GrabPay).

c) Platform Usage Information

• IP address, browser type, and device information used to access the platform.
• Gaming activity history, login records, and session duration.
• Game preferences, account settings, and interactions with platform features.
• Communication records with our customer support team.

3 Purpose of Data Collection

Every piece of information we collect has a clear and lawful purpose. alpa88 uses your personal data for the following purposes:

• Account Management: Registering, verifying and managing your player account, including mandatory KYC processes.
• Transaction Processing: Processing deposits, withdrawals and all financial transactions on the platform securely and accurately.
• Security & Fraud Prevention: Detecting, investigating and preventing fraudulent activity, money laundering or other security threats.
• Customer Support: Providing technical assistance, answering enquiries and resolving complaints effectively.
• Legal Compliance: Meeting reporting and compliance obligations to the relevant authorities in Malaysia.
• Service Improvement: Analysing usage patterns to improve platform performance, user interface and overall experience.
• Service Communications: Sending important notifications regarding your account, platform updates and relevant promotional information (subject to your preferences).
• Responsible Gaming: Monitoring gameplay patterns to identify players who may require responsible gaming support.

4 Legal Basis for Data Processing

Alpa88 processes your personal data on valid legal bases in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). These bases include:

• Consent: You provide explicit consent when registering an account and agreeing to this Privacy Policy.
• Contract Fulfilment: Data processing is required to fulfil the service agreement between you and alpa88, including transaction processing and account management.
• Legal Obligation: Certain data processing is required by law, such as compliance with anti-money laundering (AML) and Know Your Customer (KYC) requirements.
• Legitimate Interest: alpa88 processes certain data based on legitimate business interests, such as fraud detection and platform security, provided these interests do not override your privacy rights.

5 Sharing Information with Third Parties

Alpa88 does not sell or disclose your personal data to third parties for marketing purposes. However, there are certain situations where we need to share your information with trusted parties:

• Payment Service Providers: Transaction information is shared with authorised payment processors (such as FPX and DuitNow providers) solely for the purpose of processing your financial transactions.
• Game Service Providers: Our game software providers may receive the minimum technical data required to run games smoothly.
• Relevant Authorities: alpa88 will disclose information to government authorities or regulatory bodies when required by law or court order.
• Fraud Prevention: We may share information with fraud prevention agencies to protect the platform from illegal activities.
• Business Transfer: In the event of a merger, acquisition, or asset sale, user data may be transferred as part of that business transaction.

All third parties that receive your data are bound by strict data protection agreements and are prohibited from using that information for any purpose other than what has been specified.

6 Data Security

Alpa88 continuously invests in the latest security infrastructure to ensure your personal data is always protected. The key security measures we implement include:

• End-to-End Encryption: All data communications are secured with TLS 1.3 protocol and 256-bit SSL encryption.
• Two-Factor Authentication (2FA): Additional security options are available for all accounts to prevent unauthorized access.
• Firewall & IDS: A multi-layered firewall system and Intrusion Detection System (IDS) monitor network traffic in real time.
• Regular Security Audits: Internal and external security assessments are conducted periodically to identify and address any system vulnerabilities.
• Data Backup: Data is automatically backed up to secured servers to ensure rapid recovery in the event of any technical disruption.
• Staff Training: All staff with access to personal data undergo regular data protection training.

7 Data Retention Period

Alpa88 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by Malaysian law. Our general data retention guidelines are as follows:

• Active Account Data: Retained for as long as your account is active and for a reasonable period following account closure.
• Financial Transaction Records: Retained for a minimum of seven years in accordance with Malaysia's accounting and anti-money laundering legal requirements.
• KYC Documents: Retained for a minimum of five years after the business relationship ends, as required under the Anti-Money Laundering Act 2001.
• Support Communication Logs: Retained for three years for dispute resolution and service quality improvement purposes.
• Technical Data & System Logs: Retained for twelve months and then automatically deleted or anonymised.

When data is no longer needed, we ensure it is securely deleted or anonymised using approved methods so that it cannot be recovered by any party.

8 Cookies & Tracking Technologies

Alpa88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session verification and security. These cookies cannot be disabled.
• Performance Cookies: Collecting information on how visitors use our platform to help us improve it. All information is anonymous.
• Functional Cookies: Saving your preferences such as language, display settings and login information for ease of use.
• Analytics Cookies: Helping us understand platform usage patterns in aggregate for service improvement purposes.

You can control and manage cookie settings through your browser preferences. Please note that disabling certain cookies may affect the functionality of some parts of the platform.

9 Your Rights Under PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights, which you may exercise at any time:

10 Children's Data Protection

The alpa88 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from children under the age of 18. If you believe a child has registered an account on our platform, please contact us immediately so we can take appropriate action, including deletion of the account and associated data.

Parents and guardians are advised to monitor their children's online activity and use appropriate parental control software to prevent unintended access to online gambling platforms. alpa88 takes child protection seriously and cooperates fully with the relevant authorities on all related matters.

11 Changes to the Privacy Policy

Alpa88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform operations. Any significant changes will be communicated to you via:

• In-platform notifications while you are logged in.
• Email to the address registered in your account.
• Updates the "Last Updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically. Your continued use of the platform after changes take effect constitutes your acceptance of the revised policy. Where changes require your renewed consent, we will request it explicitly before processing your data under the new terms.

12 Contact Us

If you have any questions, concerns, or wish to exercise your privacy rights, please contact the alpa88 Data Protection Officer through the following channels:

• Privacy Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 via the chat icon within the platform.
• Response Time: Privacy-related requests are processed within 21 business days.

If you believe that the processing of your personal data violates any provision of Malaysia's PDPA, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia. However, we encourage you to contact us first so that we may address any concerns directly and promptly.