on88 — Privacy Policy

1 Introduction

This Privacy Policy ("Policy") is published by the operator of the on88 platform ("on88", "we", "us", "our"), accessible at https://on88.buzz and any associated subdomains, mobile interfaces, or digital services operating under the on88 brand. It describes how on88 collects, uses, stores, shares, and protects the personal data of individuals who access or use the Platform ("you", "the User", "the Member").

on88 takes data privacy seriously. We operate the Platform in a manner consistent with internationally recognised principles of personal data protection, including data minimisation, purpose limitation, storage limitation, and accountability. We do not sell, rent, or otherwise commercially exploit the personal data of our Members to third-party advertisers or data brokers.

This Policy should be read in conjunction with on88's Terms and Conditions and Responsible Gambling Policy, both of which are published on this Platform. By registering an Account on on88 or by continuing to use the Platform, you acknowledge that you have read and understood this Policy.

on88 is committed to keeping this Policy accurate and up to date. We will notify Members of material changes via platform announcements or email notification where a valid address is registered. The effective date of the current version is stated at the top of this page.

2 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that directly or indirectly identifies a natural person, including name, identification number, contact details, financial information, device identifiers, and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, organisation, alteration, retrieval, use, disclosure, transfer, restriction, or deletion.
• "Data Controller" means on88, which determines the purposes and means of processing Personal Data in connection with the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of on88, subject to on88's instructions and appropriate data processing agreements.
• "KYC Data" means identity verification documents and associated information submitted by Members in connection with on88's Know Your Customer obligations, including government-issued identification, proof of address, and selfie photographs.
• "Cookies" means small text files placed on a Member's device by the on88 Platform for the purposes of session management, preference storage, analytics, and security.
• "Third-Party Service Providers" means external entities contracted by on88 to perform specific operational functions, including but not limited to payment processing, identity verification, fraud detection, and infrastructure hosting.
• "Platform" means the on88 website at https://on88.buzz and all associated digital interfaces operated under the on88 brand.

3 Personal Data We Collect

on88 collects the following categories of Personal Data in the course of operating the Platform:

on88 does not collect or process special categories of sensitive Personal Data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) except where strictly required for identity verification purposes in accordance with applicable KYC regulations, and only to the minimum extent necessary.

4 How We Collect Personal Data

on88 collects Personal Data through the following mechanisms:

• Direct submission: Information you provide when registering an Account, completing KYC verification, making deposits or withdrawals, contacting customer support, or updating your account preferences.
• Automated collection: Technical and device data collected automatically when you access the Platform, including through cookies, web beacons, server logs, and similar tracking technologies. This data is collected regardless of whether you are logged in to an Account.
• Payment processors: Transaction confirmation data shared by Malaysian payment providers (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong) and cryptocurrency networks upon processing of deposit and withdrawal requests.
• Identity verification services: Where on88 uses third-party identity verification tools to assist with KYC document review, these services may return verification status and risk-scoring data associated with submitted documents.
• Fraud prevention partners: Risk and fraud assessment signals sourced from contracted third-party fraud detection services, which assist on88 in identifying potentially suspicious account activity.

5 Purpose of Data Processing

on88 processes Personal Data only for specific, legitimate, and disclosed purposes. The primary purposes for which your data is processed are as follows:

• Account administration: Creating, maintaining, and managing your on88 Member Account, including authentication, account recovery, and preference management.
• Identity verification (KYC): Verifying your identity and age in accordance with responsible gambling standards and anti-money laundering obligations. on88 is required to confirm that all Members are aged 21 or above and that funds are legitimately sourced.
• Payment processing: Processing deposit and withdrawal transactions via Malaysian payment methods (e-wallets, FPX, DuitNow, bank transfers) and cryptocurrency networks. Transaction records are maintained for financial integrity and dispute resolution purposes.
• Service delivery and improvement: Operating the betting and gaming functions of the Platform, maintaining platform performance, identifying technical issues, and continuously improving the user experience for Malaysian players.
• Customer support: Responding to account queries, resolving disputes, processing complaints, and providing assistance through the on88 live chat and email support channels.
• Responsible gambling: Monitoring account activity to identify patterns that may indicate problem gambling behaviour, enforcing self-exclusion and deposit limit configurations set by Members, and complying with responsible gambling obligations.
• Security and fraud prevention: Detecting, investigating, and preventing unauthorised account access, fraudulent transactions, money laundering, bonus abuse, and other prohibited conduct as defined in on88's Terms and Conditions.
• Legal and regulatory compliance: Meeting obligations under applicable anti-money laundering, counter-terrorism financing, and other regulatory frameworks that apply to online gaming and financial services operations.
• Communications: Sending transactional notifications (deposit confirmations, withdrawal updates, KYC status), service announcements, and where consent has been provided, promotional communications about on88 offers.

6 Legal Basis for Processing

on88 processes Personal Data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between on88 and the Member, including account operation, payment processing, KYC verification, and service delivery.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering laws, counter-terrorism financing obligations, and age verification requirements.
• Legitimate interests: Processing carried out in pursuit of on88's legitimate business interests, including fraud prevention, platform security, responsible gambling monitoring, and service quality improvement, where these interests are not overridden by the Member's fundamental rights and freedoms.
• Consent: Where on88 seeks to process data for purposes not covered by the above bases — such as sending optional marketing communications — we will request your explicit consent and provide a clear mechanism to withdraw that consent at any time.

7 Data Sharing & Disclosure

on88 does not sell, rent, or commercially trade your Personal Data. Data is shared only with the following categories of recipients and only to the extent necessary for the disclosed purposes:

• Payment service providers: Malaysian payment processors and e-wallet providers (including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and partnered banks including Maybank, CIMB, Public Bank, and Hong Leong) receive transaction data necessary to process your deposits and withdrawals.
• Identity verification services: Third-party KYC and document verification providers receive copies of identity documents and associated data for the purpose of confirming Member eligibility.
• Fraud prevention and risk management partners: Contracted fraud detection services receive device, IP, and behavioural data signals to assist in identifying and preventing fraudulent activity on the Platform.
• Cloud infrastructure and hosting providers: on88's Platform is hosted on secure cloud infrastructure. Hosting providers may have access to server-level data as part of infrastructure operations, subject to appropriate contractual data protection obligations.
• Customer support tools: Support platform providers may process communications data (live chat transcripts, email correspondence) in the course of delivering customer service functionality.
• Regulatory and legal authorities: on88 will disclose Personal Data to competent legal authorities, regulatory bodies, or law enforcement agencies where required to do so by applicable law, court order, or regulatory instruction — without prior notification to the Member where disclosure is legally mandated.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or substantially all of on88's assets, Personal Data held by on88 may be transferred to the acquiring entity, subject to appropriate confidentiality obligations and continuity of data protection standards.

All third-party Data Processors engaged by on88 are bound by data processing agreements that require them to process Personal Data only in accordance with on88's instructions and to maintain appropriate security standards.

8 Cookies & Tracking Technologies

on88 uses cookies and similar technologies to operate and improve the Platform. The following categories of cookies are used:

• Essential cookies: Required for the Platform to function. These include session cookies that maintain your login state, security tokens that protect against cross-site request forgery, and cookies that store your language and currency preferences. These cannot be disabled without impairing core Platform functionality.
• Analytics cookies: Used to collect anonymised data about how Members interact with the Platform, including pages visited, session duration, and navigation patterns. This data helps on88 identify usability issues and improve the player experience. Analytics data is aggregated and does not identify individual Members.
• Functional cookies: Store your preferences such as display settings, deposit limit reminders, and notification configurations, enabling a more personalised experience on return visits.
• Security cookies: Support fraud detection and account security functions, including risk scoring based on device consistency and login pattern analysis.

9 Data Retention

on88 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Active account data: Retained for the duration of your active membership on the on88 Platform.
• KYC documentation: Retained for a minimum period following account closure as required by applicable anti-money laundering record-keeping standards (typically five years or as otherwise required by regulation).
• Transaction records: Financial transaction data (deposits, withdrawals, bet records) is retained for a minimum period in accordance with applicable financial record-keeping requirements.
• Communications data: Customer support records are retained for a reasonable period to facilitate dispute resolution and quality monitoring.
• Inactive account data: Where an account has been inactive for a period of 12 consecutive months, on88 may initiate data minimisation procedures, retaining only data required for legal compliance and dispute resolution purposes.

Upon expiry of applicable retention periods, Personal Data is securely deleted or anonymised in accordance with on88's internal data deletion procedures.

10 Data Security

on88 implements a comprehensive set of technical and organisational security measures to protect Personal Data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the on88 Platform is encrypted in transit using industry-standard SSL/TLS protocols.
• Encrypted data storage: Sensitive data — including passwords (stored as salted cryptographic hashes), KYC documents, and financial information — is encrypted at rest in on88's secure storage systems.
• Access controls: Access to Personal Data within on88's systems is restricted on a strict need-to-know basis. Staff access is logged, audited, and governed by internal data access policies.
• Multi-factor authentication: Internal system access for on88 personnel with access to Personal Data is protected by multi-factor authentication requirements.
• Security monitoring: on88 maintains continuous security monitoring of Platform infrastructure to detect and respond to anomalous activity, potential intrusions, and security incidents.
• Third-party security assessments: on88 periodically conducts or commissions security assessments of its Platform infrastructure and data handling processes.

While on88 implements robust security measures, no system is entirely immune from security risks. In the event of a data breach that affects your Personal Data in a manner that poses a material risk to your rights, on88 will notify you in accordance with applicable notification obligations.

You are responsible for maintaining the security of your own Account credentials. on88 will never ask for your password via email or chat.

11 Your Data Rights

on88 respects your rights in relation to your Personal Data. The following rights are available to Members:

12 Children & Minors

The on88 Platform is strictly intended for adults aged 21 years and above. on88 does not knowingly collect Personal Data from individuals under the age of 21. Age verification is a mandatory component of the Account registration and KYC process.

Where on88 discovers or is informed that Personal Data has been collected from an individual who is under the age of 21, all such data will be deleted from on88's systems as promptly as practicable, and the associated Account will be closed permanently. Any funds deposited by an underage user will be handled in accordance with applicable legal requirements.

If you believe that on88 may have inadvertently collected Personal Data from a person under the age of 21, please contact us immediately via live chat or at [email protected].

13 Third-Party Links & Services

The on88 Platform does not contain links to external third-party websites as part of its standard navigation. However, where any third-party service integrations exist (such as payment gateway interfaces), please be aware that those services operate under their own privacy policies and data handling practices, which are independent of on88's Privacy Policy.

on88 is not responsible for the data practices of third-party payment providers or other service integrations. We encourage Members to review the privacy notices of payment service providers used in connection with on88 transactions, including relevant terms from providers such as Touch 'n Go eWallet, Boost, GrabPay, and the major Malaysian banks.

14 Amendments to This Policy

on88 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — including changes to the categories of data collected, the purposes of processing, or the rights available to Members — on88 will notify active Members via platform announcement or email notification where a valid address is registered on the account.

Non-material amendments (such as corrections to formatting, clarifications of existing practices, or updates to contact information) may be made without individual notification. The date displayed at the top of this page reflects the most recent effective version of this Policy.

Your continued use of the on88 Platform following the publication of any amended Policy constitutes your acceptance of the revised terms. If you do not accept the amended Policy, you should contact on88 support to request Account closure.

15 Contact Us

For all privacy-related enquiries, data rights requests, or concerns regarding on88's handling of your Personal Data, please contact us through the following channels:

This Privacy Policy was last updated on 1 January 2026. It supersedes all previous versions of the on88 Privacy Policy.