Privacy Policy grab88 — Trusted Data Security for Malaysian Users

This Privacy Policy ("Policy") is published by grab88 ("we", "Platform", "company") and applies to all users who access or use the grab88 platform via our website, mobile app, or any digital channel we provide.

Grab88 takes privacy protection very seriously. In today's digital world, the trust you place in us by sharing your personal information is something we never take lightly. Every decision about how data is collected, used, and protected is made with the interests and safety of our users at the forefront — particularly the Malaysian online entertainment fans who have become the backbone of the grab88 community.

This Policy clearly outlines your rights as a user, grab88's responsibilities as a data controller, and how we ensure your information remains in safe hands at all times. By using the grab88 platform, you agree to the data protection practices described in this document.

Grab88 collects various categories of data based on the type of interaction you have with the platform. We only collect information that is strictly necessary for the purposes described in this Policy:

Grab88 does not collect information unrelated to the purposes above. We do not request excessive documentation, and every request for additional information will be accompanied by a clear explanation of why it is needed.

Grab88 processes your personal data only for legitimate and relevant purposes. The following are the primary purposes for which collected data is used:

• Identity verification and KYC: Verifying that every user is a real individual, meets the minimum age requirement of 18 years, and complies with anti-money laundering (AML) legal requirements.
• Service provision: Managing your account, processing deposits and withdrawals, crediting bonuses, and maintaining your game records.
• Security and fraud prevention: Detecting and preventing unauthorized access, multiple account ownership, and any suspicious activity on the platform.
• Service communications: Sending important account-related notifications, security updates, and promotional information (with your consent).
• Platform improvements: Analyzing usage patterns in aggregate and anonymized form to enhance user experience and the platform's technical performance.
• Legal compliance: Meeting regulatory obligations, complying with court orders, and cooperating with competent authorities when required by law.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and providing appropriate support when needed.

Grab88 implements comprehensive technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction:

• 256-bit SSL Encryption: All data transmitted between your device and grab88's servers is protected by bank-grade encryption protocols. No sensitive information can be intercepted in transit.
• Data-at-rest encryption: All data stored in grab88's databases is also encrypted, ensuring layered protection even in the event of a physical breach.
• Internal access controls: Only grab88 staff with a legitimate business need are permitted to access user data, and all access is recorded and regularly audited.
• Two-factor authentication (2FA): A multi-layered verification system is available for all grab88 accounts, adding an extra layer of security against unauthorized access.
• Regular security audits: grab88 conducts regular internal and external security assessments to identify and address any system vulnerabilities before they can be exploited.
• Incident response plan: grab88 has clear procedures in place to handle any data security incidents, including procedures for notifying affected users within the stipulated timeframe.

Grab88 never sells, rents, or trades users' personal data to any third party for marketing or commercial purposes. Your data belongs to you, and we act only as its custodian.

However, there are limited situations where grab88 needs to share data with the following parties, solely to enable the service to function:

• Payment processors: Information required to process deposits and withdrawals is shared with approved payment providers, who are bound by strict data protection agreements with grab88.
• Identity verification provider: For KYC purposes, certain user information may be shared with approved third-party identity verification service providers.
• Competent authorities: grab88 will disclose data when required by a valid court order, requests from investigative authorities, or applicable legal obligations.
• Technology providers: Technical infrastructure services such as hosting and data processing may involve third parties, but all such parties are bound by data protection agreements that strictly limit data usage.

In all data sharing scenarios, grab88 ensures that recipient parties maintain data protection standards equal to or higher than grab88's own standards.

Grab88 uses cookies and similar tracking technologies to enhance user experience and platform security. The following are the types of cookies used:

• Session cookies (required): Used to maintain your login status and active game session. Without these cookies, the platform cannot function properly.
• Preference cookies: Saving your chosen settings such as language, time zone, and display preferences for your convenience.
• Analytics cookies: Helping grab88 understand how users interact with the platform in aggregate and anonymized form, enabling continuous improvement.
• Security cookies: Detecting suspicious activity and helping protect your account from unauthorized access.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the grab88 platform. grab88 does not use third-party cookies for advertising purposes.

As a grab88 user, you have the following rights regarding your personal data, which you may exercise at any time by contacting our privacy team:

To exercise any of the rights above, contact the grab88 privacy team via Live Chat or support email. We are committed to responding to all privacy-related requests within 30 days of receipt.

Parents or guardians who discover that their child has registered a grab88 account without their knowledge are urged to contact our support team immediately. grab88 will cooperate fully to resolve the situation and delete all related data as quickly as possible.

The grab88 platform may contain references or information about third-party game providers and services. It is important to understand that grab88's Privacy Policy applies only to data collected and processed directly by grab88.

Every third-party service provider associated with grab88 has its own privacy policy. grab88 has no control over the privacy practices of those third parties and cannot be held responsible for how they handle your data. We encourage you to review the privacy policy of any third party you interact with directly.

Grab88 retains your personal data only for as long as necessary to fulfill the purposes stated in this Policy, or for as long as required by applicable law.

In general, grab88's data retention principles are as follows:

• Active account data: Retained for the duration your account is active and for the required period following account closure to meet legal obligations.
• Financial transaction records: Retained for a minimum of 7 years in accordance with applicable financial and AML compliance requirements.
• Communication logs: Retained for 3 years for customer support reference and dispute resolution purposes.
• Anonymous analytics data: May be retained indefinitely as it contains no personally identifiable information.

Once the relevant retention period has ended, data will be permanently deleted or anonymized as soon as possible.

Grab88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in data processing practices, legal requirements, or platform improvements. Every update will be reflected with a new "Last Updated" date at the top of this document.

For changes considered material — such as changes to how data is shared or significant new processing purposes — grab88 will endeavor to provide users with advance notice via email or in-platform notification at least 14 days before the changes take effect.

Your continued use of the grab88 platform after any Policy amendments are published constitutes your acceptance of the updated terms. If you do not agree with any amendments, please contact our privacy team or discontinue use of the platform.

For any questions, concerns, or requests related to privacy and data protection, you may contact the grab88 privacy and data protection team through the following channels:

• Live Chat: Available 24/7 — click the live chat icon within the grab88 platform and indicate that your inquiry is related to data privacy.
• Email: [email protected] — dedicated to privacy-related inquiries and user rights.
• General support email: [email protected]

Grab88 is committed to responding to all privacy-related inquiries within 72 hours and resolving more complex requests within 30 days. Every inquiry is handled with full professionalism and confidentiality.