At Asia888, your privacy is not an afterthought — it is a core operating principle. This Policy explains what personal data we collect from Malaysian players and visitors, why we collect it, how we use and protect it, and what rights you hold over your information at all times.
Six commitments that define how Asia888 handles every piece of personal information it holds.
We collect only the personal data that is strictly necessary for operating your account, processing payments in MYR, and meeting our legal obligations — nothing more.
Asia888 does not sell, rent, or trade your personal information to external parties for marketing or commercial purposes, under any circumstances.
All data transmitted between your device and Asia888 servers is encrypted using 256-bit TLS. Stored personal data and payment credentials are held in encrypted form at rest.
You may access, correct, or request erasure of your personal data at any time by contacting our support team. We process all valid data rights requests within 30 days.
Personal data is not held indefinitely. We apply structured retention schedules — keeping data only as long as legally required or operationally necessary, after which it is securely deleted.
In the unlikely event of a data breach that creates a material risk to your rights, Asia888 will notify affected Members promptly and take immediate remediation steps.
A plain-English overview of the four stages your personal data moves through on Asia888.
You provide data during registration (name, IC/passport, email, contact number) and through your activity on the platform (bets placed, payment methods used, device information).
Data is processed on secure servers to verify your identity (KYC), process MYR deposits and withdrawals, detect fraud, and personalise your platform experience.
Data is stored in encrypted form on access-controlled servers. Financial transaction records are retained for the minimum period required under applicable AML and gaming compliance obligations.
When data is no longer required — and no regulatory retention obligation applies — it is securely and permanently deleted from all Asia888 systems within 30 days of the scheduled deletion date.
Asia888 ("we", "us", "the Company", or "Asia888") is committed to protecting the privacy and personal data of all individuals who interact with our online sportsbook and live casino platform at asia888.cam (the "Platform" or "Website"). This Privacy Policy (the "Policy") sets out in clear and accessible language how we collect, process, store, share, and ultimately delete personal data relating to registered members ("Members"), prospective members, and general visitors to the Platform.
This Policy has been prepared with particular regard to the personal data protection obligations applicable to operators holding international gaming licences, and reflects the standards of responsible data stewardship expected by regulatory authorities overseeing online gaming operations. Members based in Malaysia should note that we also take into account the principles of the Personal Data Protection Act 2010 (PDPA) as a relevant framework for the handling of personal data concerning Malaysian residents.
This Policy is incorporated by reference into the Asia888 Terms & Conditions and forms part of the overall legal agreement between you and Asia888. Capitalised terms used but not defined in this Policy have the meanings given to them in the Terms & Conditions.
For the purposes of this Privacy Policy, the following terms shall bear the meanings set out below:
Asia888 is the sole Data Controller for all personal data collected through the asia888.cam website and associated mobile experiences. All data processing activities described in this Policy are conducted under Asia888's direct supervision and in accordance with the principles and obligations set out herein.
For all data protection enquiries, access requests, or complaints, Members may contact Asia888 through the channels described in Section 15 of this Policy. Asia888 designates a responsible data protection function within its compliance team to oversee adherence to this Policy and to respond to data subject requests.
Asia888 collects personal data through multiple touchpoints across the Platform. The categories of data we collect, and the specific data elements within each category, are set out in the table below:
| Category | Data Elements | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, Malaysian IC (MyKad) number or passport number, photograph (for KYC) | Registration form; KYC document upload |
| Contact Data | Email address, mobile number, residential address (city/state) | Registration form; account settings |
| Financial Data | Deposit and withdrawal transaction records (amount, date, method), payment method identifiers (e.g., last 4 digits of account, registered e-wallet reference) | Payment gateway interactions; transaction logs |
| Behavioural Data | Betting history, game play records, session duration, wagering patterns, bonus usage | Platform activity logs (automatic) |
| Technical Data | IP address, device type and OS, browser type and version, screen resolution, geolocation (country/region level) | Automated collection via server logs and cookies |
| Communications Data | Records of live chat conversations, support email correspondence, complaints and responses | Customer support interactions |
| Preference Data | Responsible gambling settings (deposit limits, self-exclusion status, session reminders), language and display preferences | Account settings; responsible gambling tool activations |
Asia888 processes your personal data only for specified, explicit, and legitimate purposes. The primary purposes for which we process Member data are as follows:
Asia888 relies on the following legal bases when processing your personal data:
Asia888 does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. We may share personal data with the following categories of third parties, strictly on a need-to-know basis and subject to contractual data protection obligations:
As an internationally licensed online gaming operator serving the Malaysian market, Asia888 may process or store certain categories of personal data on servers located outside of Malaysia. Where personal data is transferred internationally, Asia888 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to or exceeding the protections available under Malaysian data protection law.
Safeguards employed for international transfers include standard contractual clauses in contracts with data processors, ensuring recipient parties are bound to process data only as directed by Asia888 and to implement appropriate technical and organisational security measures.
Asia888 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention periods apply:
Upon expiry of the applicable retention period, personal data is securely and permanently deleted or anonymised in accordance with Asia888's data disposal procedures.
Cookies are small text files that are placed on your device (computer, smartphone, or tablet) when you visit the Asia888 website. They allow the Platform to recognise your device, remember your preferences, and collect anonymised analytical data about how you interact with the site.
You may manage or disable non-essential cookies through your browser settings. Please note that disabling functional cookies may impair your experience of the Platform. Strictly necessary cookies cannot be disabled as they are essential to Platform operation. Asia888 does not use third-party advertising cookies or cross-site behavioural tracking technologies.
Asia888 implements a layered approach to data security, combining technical, organisational, and procedural controls to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures in place include:
While Asia888 employs robust security measures, no online system can provide an absolute guarantee of security. Members are strongly encouraged to use a strong, unique password for their Asia888 Account and to enable any available two-factor authentication options to maximise account security.
As a Data Subject whose personal data is processed by Asia888, you hold the following rights with respect to your personal information. These rights may be exercised by contacting Asia888 through the channels described in Section 15.
Request a copy of the personal data we hold about you, along with information about how it is being processed.
Request correction of any inaccurate or incomplete personal data held on your Account or in our records.
Request deletion of your personal data where it is no longer needed for the purposes for which it was collected, subject to overriding legal retention obligations.
Request that we restrict processing of your data in certain circumstances — for example, while an accuracy dispute is being resolved.
Request a structured, machine-readable copy of personal data you have provided to us, for transfer to another service provider.
Object to processing of your personal data carried out on the basis of legitimate interests, including for direct marketing purposes.
Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
Lodge a complaint with the relevant data protection regulatory authority if you believe your rights have not been respected by Asia888.
The Asia888 Platform and all associated gambling Services are strictly and exclusively intended for adults aged 21 years and above. Asia888 does not knowingly collect, process, or retain personal data from individuals below this minimum age threshold.
During the registration process, Asia888 requires all applicants to confirm that they are aged 21 or above and to provide date of birth information. Age verification is further enforced through the KYC document verification process, which requires submission of a valid government-issued photo ID confirming the Member's date of birth.
If Asia888 becomes aware, or has reasonable grounds to suspect, that an Account has been created by or for an individual below the age of 21, Asia888 will immediately suspend the Account, void all associated transactions, and delete or anonymise any personal data collected from that individual, subject to any overriding legal obligation to report the matter to relevant authorities.
Parents and guardians who believe their minor child may have registered on the Platform are asked to contact Asia888 immediately at the contact details provided in Section 15. We will prioritise such reports and take immediate action.
Asia888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable legal requirements, or regulatory guidance. The "Effective Date" and "Last Reviewed" fields at the top of this document will be updated to reflect the date of any material change.
Where changes are material — meaning they substantively affect how we collect, use, or share your personal data — Asia888 will provide advance notice to active Members via the registered email address and/or a prominent notification on the Platform, at least 14 days prior to the changes taking effect.
Your continued use of the Asia888 Platform after the effective date of any amended Policy constitutes your acknowledgement of the changes. We encourage you to review this Policy periodically to stay informed of how your data is being handled.
For any questions, concerns, or formal requests relating to this Privacy Policy or to the personal data Asia888 holds about you, please contact us through the following channels:
Live Chat: Available 24/7 on the Platform — average response time 3–5 minutes. Available in English, Bahasa Melayu, and Mandarin.
Email — General Support: [email protected] (plain text — not a clickable link)
Data Protection Enquiries: Please mark your email subject line "Data Protection Request — [Your Name / Account ID]" for routing to our compliance team.
Asia888 will acknowledge receipt of all formal data protection requests within 5 business days. Substantive responses are provided within 30 calendar days unless the complexity of the request requires a reasonable extension, of which you will be notified in advance.
If you are not satisfied with Asia888's response to a data protection complaint, you have the right to escalate the matter to the relevant data protection regulatory authority in your jurisdiction, or to the gaming regulatory authority under whose licence Asia888 operates.
If you have questions about how Asia888 handles your personal data, or wish to exercise any of your data rights, our 24/7 trilingual support team is here to assist. You may also visit our FAQ for quick answers.
For players aged 21 and above only. Read our Terms & Conditions and Responsible Gambling page for full platform policies.