Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how afb88my3 ("the Company", "we", "us", "our"), operator of the online casino and sports betting platform accessible at https://afb88my3.cam ("Platform"), collects, processes, stores, and discloses personal data relating to individuals who access or use the Platform ("you", "your", "the User", "Player").

We are committed to handling your personal data in accordance with internationally recognised data protection standards, including principles derived from the General Data Protection Regulation (GDPR) framework and applicable data protection best practices. While afb88my3 is an internationally operated platform, we recognise that many of our players are based in Malaysia, and we respect the spirit of the Malaysian Personal Data Protection Act 2010 (PDPA) where it is applicable to our processing activities.

This Policy should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy. Capitalised terms not defined in this Policy carry the meanings ascribed to them in our Terms & Conditions.

2. Definitions

• "Data Controller" means afb88my3, the entity that determines the purposes and means of processing your personal data.
• "Data Subject" means any natural person whose personal data is processed by the Company — in this context, any registered or prospective Player.
• "Personal Data" means any information that identifies or can reasonably identify a natural person, including name, email address, date of birth, financial account details, IP address, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, and deletion.
• "Sensitive Personal Data" means personal data that warants a higher standard of protection, including identity documents, payment instrument details, and data concerning health (e.g., problem gambling indicators).
• "Third Party" means any entity other than the Data Subject or afb88my3 that receives personal data in connection with the operation of the Platform.
• "Cookies" means small data files placed on your device by the Platform for functional, analytical, or preference-retention purposes.

3. Data We Collect

3.1 Data You Provide Directly

When you register an account, complete KYC verification, or contact support, we collect:

• Full legal name and date of birth
• Email address and, where provided, mobile number
• Residential address (city, postcode, country — e.g., Kuala Lumpur, Petaling Jaya, Penang)
• Government-issued identity document details (e.g., Malaysian MyKad number, passport number) for KYC purposes
• Payment method details sufficient to verify ownership (e.g., last four digits of bank account, eWallet registered name for Touch'n Go, Boost, or GrabPay accounts)
• Any correspondence or documentation submitted to our support team

3.2 Data Collected Automatically

When you access the Platform, we automatically collect:

• IP address and approximate geolocation data derived from it
• Device type, operating system, browser type, and version
• Session duration, pages visited, game activity logs, and betting history
• Deposit and withdrawal transaction records in MYR
• Login timestamps and authentication logs
• Cookie and tracking pixel data where applicable (see Section 7)

3.3 Data from Third Parties

In limited circumstances, we may receive personal data about you from third parties, including:

• Payment processors (e.g., DuitNow, FPX operators, eWallet providers) confirming transaction completion and payer identity
• Identity verification service providers used for KYC processing
• Fraud prevention and anti-moneylaundering screening services
• Affiliates or referal partners where you have arrived on the Platform via a referral link

4. How We Use Your Data

afb88my3 processes your personal data for the following purposes. The table below maps each processing activity to its primary purpose and the data categories involved:

We do not use your personal data for automated decision-making that produces significant legal or similarly significant effects, without providing you the right to human review. Responsible gambling monitoring systems may flag accounts for manual review by our player protection team based on defined activity thresholds.

5. Legal Basis for Processing

Where data protection frameworks require us to identify a legal basis for processing, afb88my3 relies on the following grounds:

• Contractual Necessity: Processing required to perform the contract with you — i.e., to operate your account, settle bets, and process MYR deposits and withdrawals.
• Legal Obligation: Processing required to comply with our licensing obligations, anti-money-laundering regulations, and age verification requirements.
• Legitimate Interests: Processing for fraud prevention, platform security, analytics, and network abuse protection — provided these interests are not overridden by your fundamental rights.
• Consent: Processing for optional marketing communications. You may withdraw consent at any time by updating your communication preferences within your account settings or by contacting support.
• Vital Interests: Processing in exceptional circumstances to protect the vital interests of a data subject, such as referal to support services in cases of severe problem gambling indicators.

6. Data Sharing & Disclosure

afb88my3 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following limited circumstances:

6.1 Service Providers

We engage trusted third-party service providers to support platform operations. These include payment processors (DuitNow, FPX operators, eWallet providers including Touch 'n Go and Boost integrations), KYC and identity verification providers, cloud hosting and infrastructure providers, customer support software operators, and fraud detection services. All such providers are bound by data processing agreements that restrict their use of your data to the services they provide to us.

6.2 Legal & Regulatory Disclosure

We may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or our licensing obligations. We will endeavour to notify you of such disclosure where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of the Company's assets, player data may form part of the transferred assets. We will notify affected players via email or prominent Platform notice prior to any such transfer.

6.4 Aggregated, Anonymised Data

We may share aggregated statistical data about Platform usage — from which no individual can be identified — with business partners, analytics providers, and the public. This is not considered personal data sharing under applicable privacy standards.

7. Cookies & Tracking Technologies

The afb88my3 Platform uses cookies and similar technologies to ensure core functionality, remember your preferences, and analyse usage patterns. The categories of cookies we use are:

• Strictly Necessary Cookies: Required for the Platform to function. These cannot be disabled without impairing your ability to use core features such as login, account navigation, and game loading.
• Functional Cookies: Remember your preferences, language settings, and session data to improve your experience across visits.
• Analytical Cookies: Collect anonymised usage data to help us understand how players interact with the Platform. This data informs product improvements and is not used for individual profiling.
• Preference Cookies: Store your marketing communication preferences and whether you have acknowledged certain notices on the Platform.

You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair Platform functionality. We do not use third-party advertising or retargeting cookies that track you across external websites.

8. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Indicative retention periods are as follows:

• Account & KYC data: Retained for a minimum of five (5) years following account closure, as required by our licensing obligations and anti-money-laundering standards.
• Transaction records: Retained for a minimum of five (5) years in accordance with financial record-keeping requirements.
• Communication logs (support tickets, live chat): Retained for two (2) years.
• Gaming activity logs: Retained for five (5) years to support responsible gambling monitoring and dispute resolution.
• Marketing preferences: Retained until you withdraw consent or close your account.
• Analytical data: Retained in anonymised form indefinitely for product improvement purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be associated with any individual.

9. Data Security

afb88my3 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit TLS/SSL encryption for all data transmitted between your device and our servers
• AES-256 encryption for personal data at rest in our databases
• Password hashing using industry-standard cryptographic algorithms (no plain-text password storage)
• Two-factor authentication (2FA) available for all player accounts
• Regular independent penetration testing and vulnerability assessments
• Strict role-based access controls limiting staff access to personal data on a need-to-know basis
• Continuous automated monitoring for suspicious access patterns or data exfiltration attempts

Despite these measures, no online platform can guarantee absolute security. We encourage you to use a strong, unique password for your afb88my3 account and to enable2FA. Immediately report any suspected unauthorised access to [email protected].

10. Your Rights

Subject to applicable law and the restrictions of our licensing obligations, you hold the following rights in respect of your personal data:

To exercise any of the above rights, please contact us via the details in Section 15. We will respond within thirty (30) days of receiving a verified request. We may need to verify your identity before processing a rights request.

11. International Data Transfers

afb88my3 operates on an international basis. Your personal data may be transferred to and processed in countries outside Malaysia — including those where our servers, KYC providers, or payment processing partners are located. Where such transfers occur, we ensure appropriate safeguards are in place, including contractual clauses that impose data protection obligations on the receiving parties equivalent to those we apply ourselves.

Malaysian players should be aware that data protection laws in other countries may differ from the Malaysian Personal Data Protection Act 2010. By using the Platform, you acknowledge and consent to such transfers where necessary for the performance of your account contract and our operational requirements.

12. Minors & Age Verification

The afb88my3 Platform is strictly for persons aged21 years and above. We do not knowingly collect personal data from anyone under the age of 21. As part of our registration and KYC process, we take active steps to verify the age of all players before real-money account activation.

If we discover or have reasonable grounds to believe that a registered account is held by a person under 21, we will immediately suspend the account, complete an age verification review, and — if the minor status is confirmed — close the account and return any real-money funds to the original payment source, net of any winings.

If you believe that a minor has accessed or registered an account on the Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

13. Third-Party Services

The Platform may contain functional references to third-party payment services such as Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, and DuitNow. These services are governed by their own privacy policies and terms of service. afb88my3 is not responsible for the privacy practices of third-party service providers once you leave our Platform or interact directly with those providers' own systems.

Game content displayed on the Platform may be provided by third-party game studios operating under separate contractual arrangements. These studios do not receive your personal data beyond what is technically necessary for game delivery (e.g., session tokens), and are contractually bound to process such data only for the purpose of delivering the game service.

14. Policy Amendments

afb88my3 reserves the right to update this Privacy Policy at any time. Material changes — such as new categories of data being collected, new disclosure recipients, or changes to your rights — will be communicated via email to your registered address and via a prominent notice on the Platform at least fourteen (14) days before taking effect.

Non-material updates (such as clarifications of existing text, formatting changes, or contact detail corrections) may be made without prior notice. The "Effective Date" displayed at the top of this Policy reflects the date of the most recent revision. Continued use of the Platform after the effective date of any amendment constitutes acceptance of the updated Policy.

15. Contact Us

For any queries, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the afb88my3 Data Protection team through the following channels:

• Live Chat: Available24/7 via the chat icon on the Platform. Average response time under 90 seconds. Malaysia Standard Time (UTC+8), 365 days a year. For privacy-related enquiries, please identify your query as "Privacy / Data Request" at the start of the conversation.
• Email (plain text — not a link): [email protected] — please use the subject line "Privacy Policy Enquiry" and include your registered username.

We aim to acknowledge all privacy-related requests within five (5) business days and provide a full response within thirty (30) days. Where requests are complex or numerous, we may extend this period by a further thirty (30) days and will notify you accordingly.