Privacy Policy BR88
— Your Privacy, Our Priority

BR88 ("us", "BR88" or "Platform") respects the privacy of every individual who uses our services. This Privacy Policy is crafted to transparently explain how we handle your personal information — from the moment you register an account until you stop using our platform.

As an online entertainment platform operating in the Malaysian market, we understand that member trust is our most valuable asset. That trust cannot be built without full transparency about how your data is managed. That is why we take a "privacy-first" approach — meaning every new platform feature and every internal process is designed with data protection as a primary consideration, not an afterthought.

This Privacy Policy applies to all members and visitors who access the BR88 website, use the BR88 mobile app, or interact with any of the services we offer. By using our platform, you confirm that you have read and understood this policy.

This policy should be read together with Terms and Conditions and Responsible Gaming Policy BR88.

BR88 collects various types of personal data to enable the platform to operate securely and efficiently. Below is a comprehensive overview of the data we collect and the reasons for collecting it:

We also collect data you provide voluntarily, such as account preference information and feedback you send to us. In all cases, we aim to collect the minimum data necessary for the stated purpose.

The data we collect is used exclusively for purposes related to BR88 platform operations and the delivery of services to you. Below is a detailed breakdown of how we use each category of data:

• Account management: Processing registrations, verifying your identity at login, managing account settings, and enabling two-factor authentication for added security.
• Transaction processing: Processing deposits and withdrawals securely, verifying financial transactions, and maintaining accurate financial records for each account.
• KYC and AML compliance: Meeting legal requirements related to Know Your Customer (KYC) and anti-money laundering (AML) obligations binding on the br88 platform.
• Platform security: Detecting and preventing fraudulent activity, multiple account usage, bonus abuse, and other security threats to the platform and other members.
• Personalise experience: Personalising game recommendations, relevant promotions, and marketing communications based on your preferences and usage history — only if you have consented to receive them.
• Customer support: Resolving complaints, responding to enquiries, and providing effective technical assistance based on your account records.
• Responsible gaming: Monitoring gameplay patterns to detect signs of problem gambling and reaching out if we identify anything concerning, as part of our commitment to member wellbeing.
• Platform improvement: Analysing aggregated data (without personal identification) to understand how members use the platform and improve the overall user experience.

BR88 does not use your data for any third-party advertising purposes, does not sell user profiles to advertisers, and does not use your data for purposes unrelated to platform operations.

BR88 does not share, sell, or rent your personal data to any third party for marketing or commercial purposes. Your data is only shared in the following limited circumstances:

• Payment service providers: Information required to process your deposits and withdrawals is shared with approved payment providers (such as FPX, DuitNow, Touch 'n Go eWallet). These providers are bound by strict confidentiality agreements.
• Licensed game providers: Minimum session data required to run Live Casino games is shared with providers such as Evolution Gaming. This data does not include your personal financial information.
• Statutory authorities: BR88 will disclose data to legitimate authorities (such as law enforcement, courts, or regulatory bodies) when required by law, court order, or financial crime investigation requirements.
• Auditors and professional advisors: In the context of financial audits or compliance assessments, necessary data may be shared with independent auditors who are bound by professional confidentiality.

All third parties we work with have undergone thorough security assessments and are required to comply with data protection standards equal to or higher than those we maintain ourselves.

Your data security is a responsibility we take very seriously. br88 continually invests in security infrastructure and applies multiple layers of protection to keep your data safe at all times.

Technical security measures we use:

• 256-bit SSL encryption: All communications between your browser and br88 servers are fully encrypted using the latest TLS protocols, ensuring no data can be intercepted in transit.
• Data encryption at rest: Sensitive data such as financial information and KYC documents are encrypted at rest in our database using industry-leading encryption algorithms.
• Two-factor authentication (2FA): We offer two-factor authentication for all accounts to provide an added layer of protection against unauthorised access.
• 24/7 monitoring: Our automated monitoring system runs around the clock to detect any unusual activity or unauthorised access attempts on your account.
• Layered access controls: Members' personal data may only be accessed by specifically authorised personnel, and every access is automatically logged and audited.
• Regular security testing: The br88 platform undergoes regular penetration testing and vulnerability assessments by independent security experts.

BR88 uses cookies and similar tracking technologies to ensure the platform functions correctly and to enhance your experience. The following are the types of cookies we use:

• Essential cookies: Required for core platform operations such as maintaining your login session and enabling security functions. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Helping us understand how members use the platform — such as the most visited pages and time spent in each section. This data is used in aggregate form without identifying individuals.
• Functional cookies: Saving your preferences such as language selection, display settings, and account configurations so you do not need to reset them each time you log in.
• Security cookies: Used to detect and prevent fraudulent activity, including identifying suspicious login attempts from unrecognised devices.

You can manage cookies through your browser settings. However, disabling certain cookies may affect platform functionality and your user experience. Our session cookies expire automatically when you close your browser, while persistent cookies are stored for a defined period for functional purposes.

As a br88 member, you have the following rights regarding your personal data. We are committed to making it easy for you to exercise these rights:

BR88 retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by law. The following are our general data retention guidelines:

• Active account data: Retained for the duration your account is active plus an additional period as defined by regulatory requirements.
• Financial transaction records: Retained for a minimum of 7 years after a transaction is made, in line with accounting and AML legal requirements.
• KYC Documents: Retained for a minimum of 5 years after the business relationship ends, in accordance with international compliance standards.
• Support communication logs: Retained for 3 years for reference and dispute resolution purposes.
• Technical data (access logs): Retained for 12 months for security and fraud detection purposes.

Once the designated retention period expires, your data will be securely deleted or fully anonymised so that it can no longer be linked to your identity. The deletion process uses methods that ensure the data cannot be recovered.

BR88 reserves the right to update this Privacy Policy from time to time in line with changes to platform operations, legal requirements, or industry best practices. When significant changes occur, we will:

1. Displaying clear notices on the br88 homepage and within the mobile app.
2. Sending notification emails to all registered members at least 7 days before the changes take effect.
3. Updating the "Last Updated" date shown at the top of this document.

You are encouraged to review this Privacy Policy periodically to stay informed about how we manage your data. Continued use of the BR88 platform after changes take effect constitutes acceptance of the updated privacy terms.

If you disagree with any changes, you have the right to close your account before the changes take effect and request data erasure as outlined under your rights in Section 7.