Privacy Policy spv88 — Member Personal Data Protection

1 Introduction

Spv88 (hereinafter referred to as "we", "our platform", or "spv88") takes the responsibility of protecting members' personal data very seriously. This Privacy Policy has been formulated to comply with applicable data protection laws and to ensure full transparency to members regarding how we manage their personal information.

When you register an account on SPV88, use any of our services, or simply browse our website, you automatically agree to the terms set out in this Privacy Policy. If you disagree with any part of this policy, we encourage you to contact our support team before continuing to use the platform.

This document is clearly structured so you can easily find information on how we collect, use, store, and protect your personal data. We update this policy from time to time to reflect changes in our business practices or applicable legislation.

2 Data We Collect

Spv88 collects two main types of data: data you provide directly to us, and data collected automatically when you use our platform.

We only collect data that is genuinely necessary to operate the platform and deliver the best service to our members. We do not collect sensitive information such as biometric data or medical records unless required by law.

3 How We Use Your Data

The personal data we collect is used solely for legitimate purposes directly related to the provision of SPV88 services. The following are the primary purposes for which your data is used:

• Processing account registration and verifying your identity through the KYC process required by regulatory authorities.
• Processing deposits, withdrawals, and all financial transactions securely and accurately.
• Providing access to all games and services on the spv88 platform, including Live Casino, Fish Shooting Games, Sports Betting, and Slots.
• Managing bonus campaigns and promotions, and ensuring member eligibility is met before any credits are awarded.
• Detecting and preventing fraud, money laundering, and any other illegal activities.
• Delivering fast and effective customer support through multiple communication channels.
• Personalising your gaming experience based on your preferences and game history.
• Sending important notifications related to your account, transactions, promotions, and platform updates.
• Complying with applicable legal and regulatory obligations, including reporting to designated authorities.
• Improving and expanding the spv88 platform, products, and services based on usage patterns and member feedback.

4 Data Sharing With Third Parties

Spv88 does not sell, rent, or disclose members' personal data to third parties for marketing purposes without your explicit consent. However, there are limited situations where we may need to share your data with certain parties:

• Payment Provider: Financial institutions, banks, and e-wallet operators that process your transactions, including DuitNow, FPX, Touch 'n Go, Boost, and GrabPay. Data sharing is limited strictly to information required to complete the transaction.
• Game Service Provider: Game software providers that supply content to our platform. They are bound by strict confidentiality agreements and are not permitted to use your data for any other purpose.
• Regulatory Authority: Regulatory bodies, law enforcement agencies, and judicial authorities when required by law or a valid court order.
• Technical Service Provider: Companies providing IT infrastructure, cloud services, and cybersecurity to spv88. All such providers are subject to strict data protection agreements.
• KYC Service Provider: Third-party identity verification companies that help us verify member identities and comply with anti-money laundering (AML) requirements.

In all data sharing scenarios above, SPV88 ensures that any receiving party is bound by confidentiality and data protection obligations equal to or exceeding our own standards. We will not share your data beyond what is strictly necessary for the stated purposes.

5 Cookies & Tracking Technologies

Spv88 uses cookies and similar tracking technologies to enhance the user experience, analyse usage patterns, and ensure platform security. The following are the types of cookies we use:

• Essential Cookies: These cookies are required for the basic operation of the platform and cannot be disabled. They include login session cookies, security cookies, and language preference cookies. Without these cookies, the platform will not function properly.
• Performance Cookies: Helping us understand how members use the platform, which pages are most frequently visited, and where technical errors occur. This information is used in aggregate and does not personally identify you.
• Functional Cookies: Enabling the platform to remember your preferences such as language, display settings, and game preferences to deliver a more personalised experience.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect your account from unauthorised access.

Spv88 also uses technologies such as web pixels, device fingerprinting, and session tracking for security and fraud detection purposes. This data is processed automatically and is not shared with third parties for marketing purposes.

6 Data Security Measures

The security of your personal data is the absolute top priority for spv88. We continuously invest in the latest security infrastructure to ensure your data is always protected against both internal and external threats.

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption of sensitive data stored in databases using industry-grade encryption algorithms.
• Intrusion detection systems (IDS/IPS) that monitor network traffic in real time.
• Role-based access control (RBAC) ensuring staff can only access data necessary for their specific responsibilities.
• Regular security audits conducted by independent third-party cybersecurity firms.
• An ongoing vulnerability management programme including regular penetration testing.
• Automated data backup procedures with geographically separate storage locations for disaster recovery.
• Mandatory security training for all spv88 staff who handle members' personal data.

While we take all reasonable precautions, no system can be guaranteed 100% secure. You also have a responsibility to keep your account safe by using a strong password, not sharing your login details, and reporting any suspicious activity to us promptly.

7 Your Rights Regarding Personal Data

As a spv88 member and data subject, you have the following rights regarding your personal data. We are committed to making it easy for you to exercise these rights:

To exercise any of the above rights, contact our data protection team via live chat on the platform or by email at [email protected]. We will process your request within 30 business days from the date we receive your complete submission.

8 Children's Data

The spv88 platform is intended exclusively for individuals aged 18 and above. We do not knowingly collect or process personal data of anyone under the age of 18.

If we discover that personal data of a minor has been collected without our knowledge, we will take immediate action to delete that data and close any account registered by an underage individual. Parents or guardians who suspect their child has registered on the spv88 platform should contact us immediately.

We encourage parents and guardians to monitor their children's online activity and make use of parental control tools available on devices used by children.

9 Cross-Border Data Transfers

In operating the SPV88 platform, your personal data may be transferred to, stored in, and processed in countries outside Malaysia. This occurs primarily when we engage cloud service providers or international technical infrastructure.

When transferring your data outside Malaysia, SPV88 ensures equivalent protection is in place through the following mechanisms:

• Data Processing Agreements compliant with international data protection standards.
• Use of internationally recognised standard contractual clauses for data protection in cross-border transfers.
• Selection of service providers operating in jurisdictions with an adequate level of data protection.
• Data Protection Impact Assessment (DPIA) conducted prior to any new transfer of data outside Malaysia.

10 Changes to This Privacy Policy

Spv88 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, new legal requirements, or improvements to our services.

• Any material changes will be communicated to members via in-platform notifications or email at least 7 days before the changes take effect.
• The "Last Updated" date at the top of this document will be updated whenever changes are made.
• Continued use of the platform after the effective date of any changes constitutes acceptance of the updated policy.
• If you do not agree with the changes made, you have the right to close your account before they take effect.

We encourage you to review this page regularly to stay informed of the latest version of our Privacy Policy. An archive of previous versions is available upon request.

11 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how spv88 handles your personal data, please do not hesitate to contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon within the spv88 platform.
• Email: [email protected] — Responses are typically within 1–2 business days.