alpa88 Privacy Policy

1 Introduction

alpa88 ("we", "us", "our") operates the online platform accessible at https://alpa88.cam and its associated subdomains (the "Platform"). We are committed to protecting the personal data of all individuals who interact with the Platform, including registered users, visitors and applicants for account registration from Malaysia and internationally.

This Privacy Policy ("Policy") explains what personal data alpa88 collects, why we collect it, how it is processed, with whom it may be shared, and what rights you have in relation to your data. This Policy forms part of, and should be read alongside, the alpa88 Terms & Conditions.

By registering an account or continuing to use the Platform after the effective date stated above, you acknowledge that you have read and understood this Policy and that you consent to the data practices described herein, to the extent that consent is the applicable lawful basis for the relevant processing activity.

2 Definitions

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly, including name, identity document number, email address, device identifiers and payment reference data.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transfer or deletion.
• "Data Subject" means the individual to whom personal data relates — in this context, an alpa88 registered user or site visitor.
• "Controller" means the entity that determines the purposes and means of processing personal data. alpa88 is the data controller for personal data collected through the Platform.
• "Processor" means a third party that processes personal data on behalf of the Controller, such as payment gateway operators, KYC verification providers and cloud infrastructure suppliers.
• "KYC" (Know Your Customer) means the identity and payment verification process alpa88 uses to comply with anti-money-laundering and age verification obligations.
• "Sensitive Data" means a subset of personal data deserving heightened protection, including government-issued identity document numbers (e.g., MyKad) and bank account details.

3 Data We Collect

3.1 Data You Provide Directly

alpa88 collects personal data that you provide voluntarily when you register an account, complete KYC verification, make a deposit or withdrawal, or contact customer support. This includes:

• Full legal name and date of birth;
• Residential address (including city — e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam);
• Email address and, where applicable, mobile number;
• Government-issued identity document details (e.g., MyKad number for Malaysian nationals);
• Payment method reference data associated with supported Malaysian payment methods;
• Support correspondence and chat transcripts.

3.2 Data Collected Automatically

When you visit or use the alpa88 Platform, we automatically collect certain technical data, including:

• IP address and approximate geographic location;
• Browser type, version and operating system;
• Device identifiers and screen resolution;
• Pages visited, session duration and clickstream data;
• Referring URL and search query (where applicable).

3.3 Data from Third Parties

alpa88 may receive supplementary personal data from third-party providers engaged to support KYC verification, fraud detection, payment processing and responsible gambling screening. Such data is received only where you have authorised the relevant third party to share information with us, or where we are required to collect it to comply with applicable legal obligations.

4 Data Processing

alpa88 processes personal data for the following purposes:

5 Lawful Basis for Processing

alpa88 processes personal data under one or more of the following lawful bases, depending on the specific processing activity:

• Contractual necessity: Processing required to register your account, fulfil payment transactions and provide platform services you have requested;
• Legal obligation: Processing required for anti-money-laundering (AML) compliance, KYC verification, age verification (21+) and any applicable regulatory reporting obligations;
• Legitimate interests: Processing undertaken to prevent fraud, maintain platform security, improve service quality and conduct responsible gambling monitoring, where such interests are not overridden by your fundamental rights;
• Consent: Processing for optional marketing communications, where you have provided explicit, freely given and revocable consent.

6 Payment Data

alpa88 supports a range of Malaysian Ringgit (MYR) payment channels, including Maybank2u, CIMB Clicks, Public Bank Online, Hong Leong Connect, DuitNow, FPX, Touch 'n Go eWallet, Boost and GrabPay. The processing of financial transactions through these channels involves the handling of payment reference data — including partial account identifiers and transaction confirmation codes — by alpa88 and its authorised payment service providers.

6.1 What alpa88 Stores

alpa88 retains transaction records including the payment method type, transaction amount in MYR, timestamp, transaction reference number and the outcome (successful, pending, reversed). Full bank account numbers, full card numbers and e-wallet PINs are never stored on alpa88 servers.

6.2 Payment Processor Responsibility

Where payments are processed through third-party payment gateways, those providers are independent data controllers for the payment authentication and execution stages of a transaction. alpa88 is not responsible for the data practices of payment providers once a transaction is forwarded to their systems. Users are encouraged to review the privacy policies of their respective bank or e-wallet provider.

7 Cookies & Tracking Technologies

7.1 Types of Cookies Used

The alpa88 Platform uses the following categories of cookies and similar tracking technologies:

• Strictly Necessary Cookies: Required for secure login sessions, account authentication and prevention of cross-site request forgery. These cannot be disabled without impeding core Platform functionality.
• Functional Cookies: Used to remember language preferences, region settings and display options that improve your experience when returning to the Platform.
• Analytical Cookies: Collect anonymised usage data — including pages visited, session duration and error events — to help alpa88 identify performance issues and improve navigation.
• Security Cookies: Used to detect and prevent fraudulent login attempts, bot activity and suspicious transaction patterns.

7.2 Managing Cookies

You may control or delete cookies through the settings of any browser or device used to access the Platform. Disabling strictly necessary cookies will prevent you from logging in or using account features. Disabling analytical or functional cookies will not affect access to the Platform but may reduce personalisation features. Instructions for managing cookies are available in the help documentation of all major browsers.

8 Data Sharing

alpa88 does not sell, rent or trade your personal data to third-party advertisers or data brokers. Personal data is shared only in the following circumstances:

• Service Providers: We share data with third-party processors engaged to provide KYC verification, fraud detection, payment gateway services, cloud infrastructure and customer support tooling. All such processors are bound by data processing agreements that restrict them from using your data for purposes other than those specified by alpa88.
• Legal Compliance: alpa88 may disclose personal data to regulatory authorities, law enforcement agencies or courts where required by applicable law, valid legal process or to protect the rights and safety of the Platform and its users.
• Business Transfers: In the event of a merger, acquisition or sale of substantially all alpa88 assets, personal data held at the time of the transaction may form part of the transferred assets. Affected users will be notified via the email address on file.
• User Consent: alpa88 may share data with additional third parties where you have provided explicit, informed consent for that specific sharing purpose.

9 Retention & Deletion

alpa88 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to overiding legal, regulatory and contractual retention obligations. Specific retention periods are set out in the Data Processing table in Section 4 above.

Following the expiry of the applicable retention period, personal data is securely deleted or rendered permanently anonymous. Users who request account closure may request confirmation that their data has been deleted, subject to mandatory retention obligations (for example, AML records retained for seven years cannot be deleted at the user's request).

10 Data Security

alpa88 implements technical and organisational security measures proportionate to the nature and sensitivity of the personal data processed. These measures include:

• TLS/SSL encryption for all data transmitted between your device and alpa88 servers;
• Hashed storage of authentication credentials — passwords are never stored in recoverable plain text;
• Access controls restricting personal data access to authorised personnel only;
• Regular internal security reviews and vulnerability assessments;
• Incident response procedures for identifying, containing and reporting data breaches.

Notwithstanding these measures, no internet-based system can guarantee absolute security. Users are encouraged to use strong, unique passwords for their alpa88 account and to contact[email protected] (plain text, not a link) immediately if they suspect unauthorised access.

11 User Rights

Subject to applicable law and the limitations described below, you have the following rights in relation to the personal data alpa88 holds about you:

• Right of Access: You may request a copy of the personal data alpa88 holds about you, together with information about how it is used.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. Some fields — such as name and date of birth — may require supporting documentation before correction is applied.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to mandatory retention obligations.
• Right to Restrict Processing: You may request that alpa88 restrict the processing of your data in certain circumstances, such as while a data accuracy dispute is being resolved.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request a structured, machine-readable copy of your personal data.
• Right to Withdraw Consent: Where processing is based on consent — such as receiving marketing communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Object: You may object to processing based on legitimate interests where you consider your fundamental rights to override those interests.

To exercise any of the above rights, please contact the alpa88 data team at [email protected]. alpa88 will respond to verified requests within 30 calendar days. Identity verification may be required before a request is actioned.

12 Minors & Age Policy

The alpa88 Platform is strictly intended for individuals aged21 years and above. alpa88 does not knowingly collect personal data from persons under the age of 21. If alpa88 discovers that a minor has provided personal data or accessed Platform features, the relevant account will be suspended immediately, all associated data will be deleted, and any deposited funds will be returned to the source payment method.

Parents and guardians who believe a minor may have registered on the Platform should contact [email protected] immediately so that the account can be investigated and closed.

13 International Data Transfers

alpa88 operates under an international licensing framework and may use cloud infrastructure, KYC verification services and payment processors located outside Malaysia. Where personal data is transferred to countries that do not provide a level of data protection equivalent to the standards applicable in your jurisdiction, alpa88 ensures appropriate safeguards are in place through contractual arrangements with the relevant data processors.

Malaysian users whose data may be processed internationally retain all rights described in this Policy. International transfers do not affect your right to access, correct or request deletion of your personal data.

14 Changes to This Policy

alpa88 may update this Privacy Policy at any time to reflect changes in data processing practices, operational requirements or applicable law. The effective date at the head of this document will be revised accordingly. Continued use of the Platform after a Policy update constitutes acceptance of the revised terms. Where changes materially affect your rights or the basis on which we process your data, alpa88 will notify registered users by email where reasonably practicable.

15 Contact Us

For any questions, concerns or requests relating to this Privacy Policy or the personal data alpa88 holds about you, please contact the alpa88 data and support team through the following channels:

• Email: [email protected] (plain text only — not a clickable link)
• Live Chat: Available24 hours a day, 7 days a week via the Platform
• Response Target: Within 5 minutes via live chat; within 12 hours by email for general enquiries; within 30 calendar days formal data subject rights requests

For responsible gambling concerns, self-exclusion requests or deposit limit queries, please visit the Responsible Gambling page or raise a request directly with the support team.

For general legal questions about our Terms of Service, please refer to the Terms & Conditions page.