Privacy Policy Super 88 — Our Commitment to Protecting Your Information

This Privacy Policy is published by Super 88 ("we," "platform," or "super 88") and applies to all individuals who register, browse, or use any services provided through our website and mobile application. By using the super 88 platform, you agree that your personal data will be processed in accordance with the terms set out in this document.

We take our responsibilities as a data controller seriously and are committed to ensuring that all personal data processing is carried out in a lawful, fair, and transparent manner, in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and any other applicable data protection legislation.

If you do not agree with any aspect of this Privacy Policy, we recommend that you refrain from using the super 88 platform and contact us for further information or to close your account.

Super 88 collects personal data necessary to provide our members with a secure, efficient, and high-quality service. The data we collect can be grouped into three main categories:

We collect only the data genuinely needed for the stated purposes and follow the principle of "data minimisation" — meaning we do not collect more than is necessary. Sensitive data such as identity card numbers is collected only when required to fulfil anti-money laundering (AML) obligations and identity verification (KYC) requirements.

The personal data we collect is used only for legitimate and specific purposes. Super 88 does not use your data for purposes unrelated to our services without your prior consent. The primary purposes for which your data is used are as follows:

• Account management: Creating and maintaining your member account, processing registrations, and securely handling login requests
• Transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, Maybank2u, CIMB Clicks, and FPX, as well as managing your winnings withdrawals
• Gaming service provision: Enabling you to enjoy Sports Betting such as Malaysia Super League and EPL football, live Baccarat, jackpot slots, Badminton, and all other games offered on the platform
• Security and fraud prevention: Identifying and preventing fraudulent activity, money laundering, and platform abuse
• Legal compliance: Fulfilling reporting and compliance obligations to the relevant authorities
• Customer support: Providing support and effectively resolving disputes or complaints
• Platform improvement: Analysing usage patterns to improve service quality, interface, and user experience
• Marketing communications: Sending notifications about promotions, new bonuses, and exclusive offers — only where you have given your consent to receive such communications

All data processing at super 88 is grounded in a valid legal basis — whether for the performance of a contract with you, compliance with legal obligations, our legitimate interests as a platform operator, or explicit consent provided by you.

Super 88 maintains a strict policy on the sharing of members' personal data. In summary: we do not sell your data to anyone. However, there are limited situations where we may need to share your data with certain parties in order to deliver our services effectively:

• Payment service providers: Payment gateways and e-wallet providers such as Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and FPX banking institutions receive only the minimum transaction data required to process your payments
• Game software providers: Live casino and slots providers receive an anonymous member ID (not personal identity data) for game session management purposes
• IT service providers: Cloud hosting and cybersecurity companies that help us maintain the super 88 platform infrastructure, subject to strict data protection agreements
• Regulatory authorities: Law enforcement agencies, financial regulatory bodies, or courts where we are required to do so by law

In the event that super 88 undergoes a merger, acquisition, or sale of business assets, members' personal data may be transferred as part of those business assets. In such circumstances, we will notify you in advance and ensure your data continues to be protected at the same or a higher standard.

Protecting your personal data from unauthorised access, disclosure, alteration, or destruction is super 88's highest priority. We continuously invest in the latest security infrastructure to ensure your data remains protected at all times. Key security measures we employ include:

• Data transmission encryption: TLS 1.3 and SSL 256-bit protocols for all communications between your device and our servers
• Data storage encryption: All sensitive data stored in our databases is encrypted using AES-256 standard
• Two-factor authentication (2FA): Available and strongly encouraged for all super 88 member accounts
• 24/7 Security Monitoring: Intrusion detection systems (IDS) and continuous network monitoring by our security team
• Internal access controls: Only super 88 staff with a legitimate and authorised business need are permitted to access members' personal data, with all access logged and audited regularly
• Regular penetration testing: Independent security audits and penetration testing are conducted periodically by certified third-party security firms

While we take all reasonable precautions, no security system can guarantee absolute 100% protection. We recommend that you also play your part in keeping your account secure by using a strong password, enabling 2FA, and never sharing your login details with anyone.

Super 88 uses cookies and similar tracking technologies to enhance your experience on our platform, understand usage patterns, and deliver more relevant content. The following are the types of cookies we use:

You can control and delete cookies through your web browser settings. However, disabling essential cookies may affect core functions of the super 88 platform, such as the ability to log in and run your gaming sessions.

As a super 88 member whose personal data we process, you hold rights protected under data protection law. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, please contact our Data Privacy Officer by email at support@super88.cash stating the type of request and your identity verification details. We will process your request within 30 calendar days of receipt.

Super 88 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. The following are general data retention guidelines for the key categories:

• Active account data: For the duration that your super 88 account remains active
• Financial transaction records: Minimum 7 years after the transaction date, in line with Malaysian financial and tax legal requirements
• Support communication records: 3 years after the last interaction
• Identity verification (KYC) data: 5 years after account closure
• Access logs and security data: 12 months for security threat analysis
• Closed account data (no fraud): 2 years after closure for compliance purposes

When data is no longer needed and there is no legal obligation to retain it, super 88 will delete or anonymise it in a secure and irreversible manner. Anonymised data is no longer considered personal data and is not subject to this Privacy Policy.

The super 88 platform is for individuals aged 18 and above only without exception. We do not knowingly collect, store, or process the personal data of any individual under the age of 18.

Should we discover that personal data of a minor or underage individual has been collected without their knowledge or without valid consent, we will immediately take the following steps:

• Suspend and close the relevant account
• Delete all data associated with the account
• Returning any outstanding financial balance to the original source
• Reporting the situation to the relevant authorities where required

Super 88 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, newly enacted legal requirements, or improvements to our services. When significant changes are made, we will:

• Updating the "Last Updated" date at the top of this document
• Sending notifications to all active members via email and/or in-app notifications
• Displaying a clear notice on the super 88 platform homepage at least 14 days before the changes take effect
• For significant material changes, we may seek your renewed consent

Your continued use of the super 88 platform after any changes to the Privacy Policy take effect will be considered your acceptance of the latest version of this policy. We encourage you to revisit this page periodically to stay informed about how we protect your privacy.

If you have any questions, concerns, or complaints regarding how super 88 handles your personal data, or if you wish to exercise any of the rights set out in this Privacy Policy, please contact us through the following channels:

If you are dissatisfied with our response to your privacy complaint, you have the right to lodge a complaint with the Malaysian Communications and Multimedia Commission (MCMC) or the relevant regulatory body in Malaysia.