Rujukan Laman

Your account rights and the policy that shapes them

We've built our legal framework around transparency and control so you know exactly how your data is used, who can access it, and what choices you have.

Clear policy wordingUser rights documentedData-access controlsContact channels openJurisdiction-aware terms
on88asia Your account rights and the policy that shapes them
POLICY CONTACT

Reach our compliance and data-protection team

If you have a question about our legal terms, want to exercise a data right, or need clarification on jurisdiction rules, three direct channels connect you to the team that handles policy…

Live chat Open the chat widget in your account dashboard and select the Legal & Privacy topic from the dropdown menu. An agent trained in data-protection requests will join within a few minutes during office hours to guide you through document access, correction, or deletion steps.
Policy email Send your request to the dedicated compliance inbox listed in the account-settings Legal tab. Include your registered email, account ID if you have one, and a description of the information or action you need. Expect a reply within two business days acknowledging receipt and outlining next steps.
Document library Download the current versions of our Terms of Service, Privacy Policy, Cookie Policy, and Age-Verification Protocol from the Legal section of the site footer. Each document is timestamped so you know which version was in effect when you registered, and change logs highlight updates between revisions.
DATA GOVERNANCE

Security measures, retention rules, and your control over information

We handle every piece of personal data with encryption, access controls, and audit logs so that only authorised staff can view records for legitimate support and compliance purposes.

Encryption standards

All sensitive fields — including your name, contact details, and payment history — are encrypted with AES-256 when stored in our database and transmitted over TLS 1.3 or higher. Encryption keys are rotated quarterly and held in a separate vault that requires multi-factor authentication for access.

Access controls

Internal access to personal data is role-based: customer-support agents see only the minimum fields needed to answer your query, finance staff can view wallet transactions for reconciliation, and compliance officers review identity documents during verification. Each access event is logged with a timestamp and staff identifier.

Retention periods

We keep your account data for as long as your profile is active plus the minimum period set by anti-money-laundering regulations in the jurisdiction we serve. After that window closes, records are either anonymised so they cannot be traced back to you or securely deleted from live and backup storage.

Cookie policy

Session cookies remember your login state and language preference; analytics cookies measure page-load speed and lobby feature usage. You can block or delete cookies in your browser settings at any time, though doing so may require you to log in more frequently and may prevent some dashboard features from saving your layout choices.

Right to access

Request a machine-readable export of your personal data by opening a ticket in the Legal & Privacy section of your account dashboard. We deliver the file within seven business days and include every field we hold: registration details, deposit and withdrawal logs, game-session timestamps, support-chat transcripts, and verification documents.

Right to correction

If any personal detail on file is incorrect — a misspelled name, outdated address, or wrong phone number — submit a correction request through live chat or the policy email listed in the support section above. Attach proof of the correct information, and we will update the record within two business days and confirm the change by email.

Common questions about legal terms and data rights

Players in Melaka, Petaling Jaya, and across Malaysia often ask the same handful of questions when they review our legal framework. These answers cover account eligibility, data handling, cookie settings, withdrawal of consent, and how to reach the compliance team if something is unclear.

Eligibility depends on the regulations in your location. We serve regions where local law permits participation; by registering you confirm that you meet the minimum age and that using the platform is lawful where you reside. If you are uncertain, consult local legal advice before opening an account.

We collect your name, email address, phone number, date of birth, and residential address to verify your identity and comply with anti-money-laundering requirements. Payment details — such as the Touch 'n Go, GrabPay, Boost or FPX account you use — are tokenised by the payment provider and we store only a reference identifier, not the full account number.

Active account data is retained indefinitely while your profile remains open. Once you request closure, we anonymise or delete records after the mandatory retention period set by financial regulations in the jurisdiction we serve, usually between five and seven years from the date of your last transaction.

Yes, though some features depend on cookies to work smoothly. Session cookies keep you logged in; blocking them means you will need to re-enter your credentials on every visit. Analytics cookies measure performance; disabling them has no effect on gameplay, deposits, or withdrawals, but prevents us from tailoring dashboard recommendations.

Open a ticket in the Legal & Privacy section of your account dashboard and select Data Export from the request-type menu. We will send a machine-readable file to your registered email within seven business days, containing registration details, transaction logs, session history, and support correspondence.

Use live chat and choose the Legal & Privacy topic, or send an email to the compliance inbox listed in the account-settings Legal tab. Include proof of the correct detail — such as a utility bill for an address change — and we will update your record within two business days.

No. We share data only with payment processors to clear deposits via Touch 'n Go, GrabPay, Boost and FPX, with fraud-prevention services to screen transactions, and with regulators when required by law. We do not sell or rent personal information to advertisers, data brokers, or any other third party.