Privacy Policy fafa88 – Member Personal Data Protection

1Introduction and Scope of the Privacy Policy

Fafa88 ("we", "Platform", "company") values the privacy of every individual who interacts with our platform. This Privacy Policy is designed to provide full transparency on how we handle your personal information, in line with internationally recognised data protection principles.

This policy covers all personal data we collect through the fafa88 website, mobile app, email communications, customer support live chat, and any other interactions you have with us. It also applies to data we obtain from trusted third parties in connection with the services we offer.

We respect your privacy rights and are committed to ensuring your personal data is managed in a responsible, transparent, and secure manner. If you have any questions about this Privacy Policy, do not hesitate to contact our privacy team through the channels stated at the end of this document.

2Types of Personal Data We Collect

Fafa88 only collects data that is strictly necessary to provide a safe, efficient, and responsible platform service. The following are the categories of data we collect:

We also collect data you provide voluntarily, such as feedback through customer satisfaction surveys or participation in promotional campaigns. Such data is used solely for the purposes stated at the time of collection.

3How We Use Your Personal Data

The personal data we collect is used exclusively for legitimate purposes directly related to the provision of fafa88 services. We do not use your data for any purpose you have not consented to.

• Account management: Creating and maintaining your member account, processing registrations, and ensuring the security of your login at all times.
• Transaction processing: Processing deposits, withdrawals, and any financial transactions related to your account quickly and securely.
• Identity verification: Conducting required KYC checks to meet anti-money laundering requirements and to verify that you are an eligible individual to use our platform.
• Security and fraud prevention: Monitoring account activity to detect and prevent unauthorized access, identity fraud, and any suspicious activity.
• Customer support: Helping you resolve any issues related to your account, transactions, or gaming experience more efficiently and effectively.
• Important communications: Sending account-related notices, Privacy Policy updates, Terms and Conditions changes, and security alerts you need to be aware of.
• Responsible Gaming: Analyzing usage patterns to identify members who may need assistance and offering appropriate self-control tools.
• Platform improvement: Using aggregated usage data (without personal identifiers) to improve overall functionality, performance, and user experience.

For marketing communications such as the latest promotions and special offers, we will obtain your explicit consent beforehand. You may withdraw that consent at any time through your account settings or by contacting our support team.

4Data Sharing with Third Parties

Fafa88 does not sell, rent, or disclose member personal data to third parties for marketing or commercial purposes. However, there are limited situations where we need to share data with certain parties to ensure the platform operates smoothly:

• Trusted payment processors: FPX, DuitNow, Touch 'n Go eWallet, and cryptocurrency processor service providers require limited access to transaction data to enable deposits and withdrawals to be processed securely.
• Technology service providers: The cloud infrastructure and cybersecurity companies we use are subject to strict confidentiality agreements and may only access data required for their technical duties.
• Law enforcement authorities: In situations where we receive lawful instructions from authorities, courts, or regulatory bodies, we are legally required to disclose the relevant data.
• KYC service providers: The third-party identity verification platform we use to conduct background checks and document verification to meet compliance requirements.

5Data Security Measures

Fafa88 invests seriously in robust security infrastructure to ensure that member personal data is always protected against cyber threats, unauthorised access, and data loss. The following are the key security measures we implement:

• 256-bit SSL/TLS Encryption: All communications between your browser and the fafa88 server are encrypted using the highest industry standards, ensuring that data in transit cannot be intercepted or read by third parties.
• Encrypted password storage: Member passwords are never stored in plain text. We use a one-way hashing algorithm (bcrypt) that cannot be decrypted even by our own internal staff.
• Two-factor authentication (2FA): An additional security layer we strongly recommend for all members to prevent unauthorized access even if your password is compromised.
• 24/7 Monitoring: Our automated security system monitors all account activity in real time and will immediately block or flag any unusual activity.
• Regular penetration testing: fafa88 conducts regular security testing by independent cybersecurity experts to identify and patch any vulnerabilities before they can be exploited.
• Internal access controls: Access to member data among fafa88 staff is granted strictly on a "need-to-know" basis — only personnel who require access to perform their duties are authorised.

While we take all reasonable precautions, no system can be guaranteed 100% secure against ever-evolving cyber threats. We encourage you to also take personal protective measures, such as using a strong and unique password and never sharing your login credentials with anyone.

6Use of Cookies and Tracking Technologies

Fafa88 uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyse platform performance. The following are the types of cookies we use:

• Essential cookies: Required for core platform functions such as maintaining your login session and remembering language preferences. These cookies cannot be disabled as the platform cannot function without them.
• Performance cookies: Helping us understand how members use the platform by collecting anonymous usage data — most frequently visited pages, time spent, and technical issues encountered.
• Functional cookies: Storing your personal preferences such as interface layout, wagering limits you have set, and notification preferences to provide a more personalized experience.
• Security cookies: Used to detect and prevent fraudulent activity, verify the identity of devices used to log in, and protect your account from unauthorised access.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect platform functionality. For more information on managing cookies, refer to your web browser's help section.

7Your Rights Regarding Personal Data

As a fafa88 member, you have clear and meaningful rights over your personal data. We fully respect these rights and will handle every request carefully and in a timely manner.

8Data Retention Period

Fafa88 retains member personal data only for as long as it is needed for the purposes stated in this Privacy Policy or as required by applicable law. The general principles of our retention periods are as follows:

• Active account data: Retained for the entire duration your account remains active on the fafa88 platform, plus any additional period required by law.
• Financial transaction records: Retained for a minimum of 7 years after a transaction occurs, in line with applicable financial and tax legal requirements.
• KYC documents: Retained for 5 years after the business relationship ends, in accordance with anti-money laundering legal requirements.
• Support communication logs: Retained for 2 years for reference and service improvement purposes, then deleted or anonymised.
• Cookie and session data: Most session cookies expire automatically when you close your browser. Persistent cookies are stored for no more than 12 months.

When data is no longer needed, we will securely delete it using methods that ensure it cannot be recovered by any party. Data that cannot be immediately deleted (e.g. in backup systems) will be isolated and protected until secure deletion can be carried out.

9International Data Transfers

In the context of fafa88's global operations, your personal data may be transferred to, and processed in, countries outside Malaysia. This includes countries where our technology infrastructure providers operate or where our backup data centres are located.

We ensure that all international data transfers are carried out with adequate safeguards, including:

• Transfers only to countries with equivalent or higher data protection standards
• Use of internationally recognized standard data transfer agreements
• Data protection impact assessment before any new transfer is approved
• Continuous monitoring of data protection conditions in the destination country

You have the right to obtain further information about the protection mechanisms we use for international data transfers by contacting our privacy team.

10Policy Amendments and How to Contact Us

Fafa88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service improvements. For significant amendments, we will provide clear notice at least 14 days before the changes take effect via email or an in-platform notification.

The "Updated" date at the top of this page reflects the date of the latest amendment. Continued use of the fafa88 platform after the amendment's effective date is considered acceptance of the updated policy.

If you have any questions, concerns, or wish to exercise your privacy rights, please contact us via:

• In-platform live chat (available 24 hours a day, 7 days a week)
• Email: [email protected]
• Page FAQ for frequently asked questions

We are committed to responding to all privacy-related inquiries within 5 business days. For more complex requests such as data access or deletion applications, the full process may take up to 30 business days.