Privacy Policy ABF88 – User Personal Data Protection

01Personal Information We Collect

ABF88 collects user personal information solely to ensure the platform operates smoothly, securely, and in compliance with relevant legal requirements. There are two main categories of information we collect: information you provide directly, and information collected automatically while you use our platform.

Information You Provide Directly:

• Full name as shown on a valid identity card or passport.
• Identity card number (MyKad) or passport number for foreign nationals.
• Date of birth for the purpose of verifying the minimum age requirement of 18 years.
• Full current residential address including postcode and state.
• Active mobile number used for OTP verification.
• A valid and active email address for official account communications.
• Bank account or digital wallet details for processing deposits and fund withdrawals.
• KYC supporting documents such as MyKad images (front and back) and a verification selfie.

Automatically Collected Information:

• Device IP address and general geographic location data.
• Device type, operating system, and web browser version used.
• Game activity history includes game type, date, time, and betting amount.
• Financial transaction logs including deposits, withdrawals, and bonuses received.
• Login session data including access timestamps, session duration, and in-platform activity.
• Cookie and platform usage data as described in Section 5.

02How We Use Your Information

All information collected by ABF88 is used based on the principle of data minimisation — meaning we only use information that is strictly necessary for the defined purposes. Below is a complete list of the purposes for which user personal data is used on our platform:

• Identity Verification and KYC: Personal information is used to verify user identity in compliance with applicable anti-money laundering (AML) and counter-terrorism financing (CFT) legal requirements in Malaysia.
• Financial Transaction Processing: Bank account and digital wallet data is used solely to accurately and securely process incoming deposits and outgoing withdrawals from user accounts.
• User Account Management: Contact information is used to send important account-related notifications, including transaction confirmations, security alerts, and platform policy updates.
• Fraud Detection and Prevention: Technical data and activity logs are used by our security systems to identify and block suspicious activity, multi-account usage, and bonus abuse.
• Regulatory Compliance: Certain information is retained for a specified period to meet reporting requirements to relevant authorities under applicable Malaysian law.
• Service Improvement: Non-personally identifiable usage data is used to analyse usage patterns, improve platform performance, and develop better new features.
• Customer Support: Account information is used by our support team when you contact us for assistance or to resolve any account-related issues.
• Responsible Gaming: Game activity history is used to monitor wagering patterns and suggest self-control tools to users who may need support.

03Data Storage and Security

ABF88 continuously invests in the latest security infrastructure to ensure user personal data is protected at every stage — during transmission, processing, and storage. The following are the key security measures we have implemented:

• End-to-End Encryption: All data is transmitted using TLS 1.3 protocol with AES-256 encryption. Sensitive data such as identification card numbers and banking information is stored in an encrypted format that is unreadable even to internal staff without multi-level authorization.
• Layered Access Controls: Access to user data is restricted based on the principle of least privilege. Only staff who require access to perform specific duties are granted permission, and all access is automatically logged.
• Secure Data Centers: User data is stored in data centres equipped with physical security, environmental controls, uninterruptible power supply (UPS) systems, and high-grade fire protection.
• Regular Backups: Full data backups are performed daily and incremental backups are performed hourly. Backup data is stored at geographically separate locations to ensure rapid recovery in the event of any incident.
• Independent Security Audit: The abf88 platform undergoes periodic independent third-party security audits to identify and address any vulnerabilities before they can be exploited.
• Retention Period: Active user data is retained for as long as the account remains active. Following account closure, data is retained for a minimum of 7 years in accordance with Malaysia's AML legal requirements, after which it is securely deleted.

While ABF88 takes all reasonable steps to protect your data, no system can guarantee 100% absolute security. We therefore encourage users to play an active role in securing their own accounts by using strong passwords and enabling two-factor authentication (2FA).

04Sharing Information with Third Parties

ABF88 maintains a strict policy on user data sharing. We do not sell, rent, or transfer your personal data to any third party for commercial purposes. However, there are limited circumstances where data sharing may occur, and it is always carried out under strict controls:

• Payment Service Providers: Required transaction information is shared with payment service providers such as DuitNow, FPX, Touch 'n Go eWallet, and GrabPay solely for the purpose of processing your financial transactions.
• KYC Verification Service Providers: Required identity data is shared with approved third-party identity verification service providers for the KYC process. All such providers are bound by strict confidentiality agreements.
• Authorities and Regulatory Agencies: ABF88 will fully comply with any lawful request from relevant Malaysian authorities, including police, courts, or financial regulatory agencies, when required to do so by law.
• Technical Infrastructure Providers: Cloud and hosting service providers used by abf88 may have technical access to data, but they are bound by strict data processing agreements and are not permitted to use the data for any other purpose.

05Cookies and Tracking Technology

ABF88 uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small text files stored on your device when you visit our website. The following are the types of cookies we use:

• Essential Cookies: These cookies are required for core platform functions such as login session management, security, and navigation. Without these cookies, the platform will not function properly. These cookies cannot be disabled.
• Performance Cookies: These cookies collect information on how users interact with our platform, such as the most frequently visited pages and page load times. This information is used to improve platform performance.
• Functional Cookies: These cookies allow the platform to remember your preferences, such as selected language, display settings, and saved login information (if you choose to do so).
• Analytics Cookies: We use analytics data to understand aggregate and anonymised usage patterns for product improvement purposes. This data cannot be linked to individual users.

You can control cookie usage through your web browser settings. Most modern browsers allow you to block or delete cookies. Please note, however, that blocking essential cookies may affect platform functionality. For more information on how to manage cookies, please refer to your web browser's help guide.

06User Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and ABF88's internal policies, you as a user have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you at any time. Such requests will be processed within 14 business days.
• Right to Rectification: If you find that any personal data we hold is inaccurate or outdated, you have the right to request immediate correction. You may also update basic information such as your address and phone number directly through your account settings.
• Right to Erasure: You may request deletion of your personal data subject to applicable legal retention requirements. Deletion requests will be processed after the mandatory 7-year retention period expires.
• Right to Object: You have the right to object to the processing of your personal data for specific purposes, particularly for marketing communications you did not request.
• Right to Data Portability: You may request your personal data in a machine-readable format for transfer to another service of your choice.
• Right to Withdraw Consent: You may withdraw your consent to data processing at any time, although this may affect our ability to provide certain services to you.

To exercise any of the above rights, please contact the ABF88 support team via live chat on the platform or by email at [email protected]. Please include your account ID and a clear description of your request to help us process it faster.

07Amendments to This Privacy Policy

ABF88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or service improvements. The following outlines our commitments regarding any such amendments:

• Any material amendments to this Privacy Policy will be communicated to active users via an in-platform notice at least 14 days before the changes take effect.
• The "Last Updated" date at the top of this document will be updated each time an amendment is made, allowing you to identify whether the document has changed since you last read it.
• For non-material amendments or amendments required urgently by law, we may not be able to provide lengthy advance notice, but we will make every effort to inform users as promptly as possible.
• Continued use of the abf88 platform after amendments take effect is considered your acceptance of the updated terms.

This Privacy Policy document is written in Bahasa Melayu as the official language. Should any translated version in another language exist, the Bahasa Melayu version shall take precedence and be considered the valid and binding version in any dispute.