Privacy Policy
How S88Play Handles Your Data

This Privacy Policy ("Policy") is issued by s88play ("we", "us", "our", "the Platform"), the operator of the online gaming and sports betting platform accessible at https://s88play.cam. This Policy describes how s88play collects, processes, stores, protects, and in certain circumstances discloses the personal data of individuals who use or interact with our platform ("Users", "Players", "you", "your").

S88play is committed to safeguarding the privacy of all registered users, including Malaysian players accessing the platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and throughout Malaysia. We handle all personal data in accordance with applicable data protection principles and industry best practices for online gaming operators.

By registering an account, depositing funds, placing bets, or otherwise using any s88play service, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein.

For the purposes of this Privacy Policy, the following terms are defined as follows:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly. This includes name, identification number, contact information, financial data, and device identifiers.
• "Processing" means any operation performed on personal data, including but not limited to collection, recording, storage, modification, retrieval, use, disclosure, transmission, and deletion.
• "Data Controller" refers to s88play as the entity that determines the purposes and means of processing personal data collected through the platform.
• "Data Processor" refers to any third-party service provider that processes personal data on behalf of s88play in accordance with our instructions.
• "KYC" (Know Your Customer) refers to the identity verification process required under our compliance obligations prior to enabling full account functionality and withdrawal privileges.
• "Consent" means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
• "Cookies" means small text files stored on your device by your web browser for session management, preference retention, and security purposes.

S88play collects the following categories of personal data in connection with the operation of the platform and the provision of gaming and betting services:

We collect only the personal data that is reasonably necessary for the purposes described in this Policy. We do not collect sensitive categories of data such as racial or ethnic origin, religious beliefs, or health information unless explicitly required by law or regulation.

S88play collects personal data through the following channels and mechanisms:

• Account Registration: When you complete the s88play registration form, you provide your name, date of birth, email, phone number, and residential address directly to us.
• KYC Verification: When you submit identity documents (MyKad, passport, address proof) to complete the Know Your Customer verification process.
• Deposits and Withdrawals: When you make a financial transaction using Touch 'n Go eWallet, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank online banking, Hong Leong Connect, Boost, GrabPay, or any other supported payment method.
• Platform Activity: Through automated logging of your betting decisions, game selections, session duration, page views, and platform interactions as you use s88play.
• Device and Technical Data: Through cookies, web beacons, and server logs that capture technical information about the devices and networks used to access the platform.
• Customer Support: When you contact our support team via live chat, WhatsApp, or email, the content and context of those communications are recorded for quality assurance and compliance purposes.
• Promotional Participation: When you opt into promotions, refer friends, or respond to surveys, you may provide additional personal information voluntarily.

S88play processes personal data collected from users for the following specific, legitimate, and documented purposes:

1. Account Management: Creating, maintaining, authenticating, and administering your s88play user account.
2. Service Delivery: Processing deposits, settling withdrawals, executing bets, managing bonus accounts, and delivering all platform services to you.
3. Identity Verification (KYC): Verifying your identity and age (minimum 21 years) to comply with applicable gaming regulations and anti-fraud obligations.
4. Anti-Money Laundering (AML) Compliance: Monitoring transactions and account activity for indicators of money laundering, fraud, or other financial crime as required by applicable law.
5. Responsible Gambling: Monitoring gaming patterns to identify potential problem gambling behaviour, operating deposit limit and self-exclusion systems, and maintaining records related to voluntary exclusion requests.
6. Customer Support: Responding to your queries, resolving account issues, and maintaining the quality of our support operations.
7. Security and Fraud Prevention: Detecting, investigating, and preventing unauthorised account access, bonus abuse, collusion, and other forms of platform fraud.
8. Platform Improvement: Analysing aggregated and anonymised user behaviour data to improve the platform's functionality, game selection, and user interface.
9. Legal and Regulatory Compliance: Retaining records as required by applicable law, responding to lawful requests from regulatory authorities, and fulfilling our licensing obligations.

S88play relies on the following legal bases for processing your personal data:

• Contractual Necessity: Processing that is required to perform the contract formed when you register an account and accept our Terms and Conditions — including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC, AML, and responsible gambling obligations.
• Legitimate Interests: Processing carried out in s88play's legitimate interests where those interests are not overridden by your rights — including fraud prevention, platform security, and service improvement.
• Consent: For processing activities not covered by the above legal bases, s88play will seek your explicit consent. You may withdraw consent at any time by contacting our support team, though this may affect your ability to use certain features.

S88play does not sell, rent, or otherwise commercially transfer your personal data to any third party. We may, however, share specific personal data with trusted third parties in the following limited circumstances:

• Payment Processing Partners: We share the minimum necessary transaction data with payment service providers — including the operators of Touch 'n Go eWallet, DuitNow, FPX-connected banks, and other supported payment rails — solely for the purpose of processing deposits and withdrawals.
• Identity Verification Providers: KYC documents may be shared with approved third-party identity verification service providers operating under confidentiality agreements.
• Game Content Providers: Aggregated, non-identifiable gameplay data may be shared with our licensed game content providers for compliance and audit purposes.
• Regulatory and Law Enforcement Authorities: We will disclose personal data to competent authorities when required to do so by law, court order, or the terms of our operating licence. We will endeavour to notify you of such disclosure where we are legally permitted to do so.
• Fraud Prevention and Security Services: We share relevant data with specialist fraud detection partners to protect the integrity of the platform and safeguard user funds.

All third parties with whom s88play shares personal data are required to maintain appropriate data protection standards and to use the shared data solely for the purpose for which it was disclosed.

S88play retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulation. The following general retention principles apply:

• Active Account Data: Personal data associated with an active s88play account is retained for the duration of the account relationship.
• Closed Account Data: Upon account closure, personal data is retained for a minimum period of five (5) years to satisfy AML, fraud prevention, and regulatory record-keeping obligations.
• KYC and Identity Documents: Verification documents are retained for a minimum of five (5) years following the end of the account relationship, or for longer periods where required by applicable regulatory mandates.
• Transaction Records: Financial transaction records are retained for a minimum of seven (7) years for accounting and regulatory compliance purposes.
• Support Communications: Customer support correspondence is retained for a minimum of two (2) years following the close of the relevant support case.

Following the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be associated with any individual user.

S88play uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files that are placed on your device by your web browser when you access the s88play website. They allow us to recognise your browser, maintain your session, and remember your preferences.

S88play uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the operation of the s88play platform. They enable core functions such as user authentication, session management, and security verification. These cookies cannot be disabled without significantly impairing your ability to use the platform.
• Functional Cookies: These cookies remember your preferences — such as your selected language, display settings, and previously viewed game categories — to provide a more personalised experience.
• Analytical Cookies: These cookies collect anonymised information about how users interact with the platform, such as which pages are visited most frequently and where users encounter errors. This data is used to improve the platform's performance and usability.
• Security Cookies: These cookies support s88play's fraud detection and account security systems by helping identify unusual access patterns or suspicious login activity.

S88play does not use third-party advertising cookies or cross-site tracking technologies. You may manage cookie preferences through your browser settings, though disabling certain cookies may affect the functionality of the platform.

As a data subject, you hold the following rights with respect to personal data processed by s88play. To exercise any of these rights, please contact our support team using the details provided in Section 14 of this Policy.

S88play implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and s88play's servers is encrypted using industry-standard SSL/TLS protocols.
• Encrypted Data Storage: Personal data and KYC documents stored on s88play's servers are encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorised s88play personnel and Data Processors who have a legitimate operational need. All internal access is logged, monitored, and audited.
• Multi-Factor Authentication: Sensitive internal systems that hold personal data are protected by multi-factor authentication requirements for all staff access.
• Penetration Testing: S88play's platform and infrastructure undergoes regular third-party security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident Response: S88play maintains a documented data breach response procedure. In the event of a data breach that is likely to result in a high risk to your rights, we will notify affected users without undue delay.

Whilst s88play takes all reasonable steps to protect your data, no online platform can guarantee absolute security against all forms of cyber threats. You are encouraged to use a strong, unique password for your s88play account and to enable any additional security features available on the platform.

S88play is strictly an adult platform. Services are available exclusively to individuals who are at least 21 years of age. The collection of personal data from individuals under the age of 21 is strictly prohibited, and we take proactive steps to detect and prevent underage registration.

All accounts are subject to age verification as part of the KYC process. Where s88play has reasonable grounds to suspect that an account holder is under the age of 21, the account will be suspended pending verification, and any funds deposited by a confirmed minor will be returned to the original payment source.

S88play reserves the right to update or revise this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, platform functionality, or our data processing practices. The date of the most recent update is displayed at the top of this page.

Where changes to this Policy are material — that is, where they significantly affect how we collect, use, or share your personal data — we will notify registered users via the email address associated with their account and/or via a prominent notice on the platform prior to the changes taking effect.

Your continued use of s88play following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should cease using the platform and may request account closure by contacting our support team.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how s88play handles your personal information, please contact our support team. Our agents are available 24 hours a day, seven days a week, and can communicate in English, Bahasa Melayu, and Mandarin Chinese.

For general enquiries, you may use the live chat function on the s88play platform or contact us via WhatsApp. For formal data protection requests — including access requests, rectification requests, or erasure requests — please contact us by email to ensure your request is properly documented and tracked:

When submitting a data rights request by email, please include your registered account username (never your password), the nature of your request, and any relevant context that will help us locate your records efficiently. S88play will acknowledge receipt of your request within three (3) business days and will provide a substantive response within thirty (30) calendar days.

S88play processes all data-related correspondence with the same standard of care and confidentiality that we apply to all personal data on our platform. Your request will not be shared beyond the team members who are operationally required to action it.