smb888 Privacy Policy

1. Introduction

1.1 This Privacy Policy ("Policy") describes how smb888 ("smb888", "we", "us", "our") collects, uses, stores, discloses, and protects personal data relating to individuals ("you", "Member", "User") who register for, access, or use the smb888 online gambling platform available at smb888.app and all related services.

1.2 smb888 is committed to handling personal data responsibly and in compliance with applicable data protection laws and international gaming authority guidelines under which smb888 operates. This Policy reflects our obligations and your rights regarding personal data.

1.3 This Policy should be read in conjunction with smb888's Terms & Conditions. Defined terms used but not defined in this Policy have the meaning given to them in the smb888 Terms & Conditions.

1.4 By creating an smb888 account or continuing to use smb888.app, you confirm that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

2. Personal Data We Collect

smb888 collects the following categories of personal data:

Category	Examples	Collection Method
Identity Data	Full name, date of birth, gender, government ID number (MyKad)	Registration form, KYC verification
Contact Data	Email address, Malaysian mobile number, residential address	Registration form, account settings
Financial Data	Payment method details (e-wallet account, bank name, account reference), transaction history	Deposit/withdrawal processing
Technical Data	IP address, device type, browser type, operating system, device fingerprint	Automatic collection on login/visit
Usage Data	Games played, bet amounts, session duration, pages visited, login timestamps	Automatic platform logging
Communication Data	Live chat transcripts, support ticket content, email correspondence	Customer support interactions
KYC Data	Copies of MyKad, selfie verification images, proof of payment method	Identity verification process

smb888 does not collect sensitive personal data (such as racial or ethnic origin, religious beliefs, health data, or biometric data) except where expressly required for regulatory compliance and where you have provided explicit consent.

3. How We Use Your Personal Data

smb888 uses collected personal data for the following purposes:

• Account Management: To register and maintain your smb888 account, verify your identity, and process your deposits and withdrawals via Touch n Go eWallet, Boost, GrabPay, and Malaysian FPX banking channels.
• Service Delivery: To provide access to smb888's gambling products including slots, live dealer casino, sportsbook, and football betting features.
• Legal and Regulatory Compliance: To fulfil smb888's obligations under applicable anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, and international gaming authority compliance standards.
• Fraud Prevention and Security: To detect and prevent fraudulent activity, bonus abuse, multi-accounting, unauthorised access attempts, and money laundering. This includes device fingerprinting, IP analysis, and transaction pattern analysis.
• Responsible Gambling: To monitor betting patterns, identify potentially problematic gambling behaviour, apply deposit limits or self-exclusion restrictions, and fulfil smb888's responsible gambling obligations.
• Customer Support: To respond to support inquiries, resolve disputes, and maintain records of communications with smb888's 24/7 live support team.
• Platform Improvement: To analyse usage patterns and technical performance data to improve smb888's platform stability, mobile browser experience, and product offering.
• Marketing Communications: Where you have provided explicit consent, to send promotional offers, bonus notifications, and smb888 news relevant to Malaysian players. You may opt out of marketing communications at any time via Account Settings.

4. Legal Basis for Processing

smb888 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil the smb888 membership agreement, including account management, transaction processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable laws, including AML regulations, KYC requirements, and international gaming authority directives.
• Legitimate Interests: Processing for fraud prevention, security, platform improvement, and responsible gambling monitoring, where smb888's interests do not override your fundamental privacy rights.
• Consent: Processing for direct marketing communications, where you have provided explicit and freely given consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Disclosure

5.1 smb888 does not sell, rent, or trade your personal data to third-party marketers under any circumstances.

5.2 smb888 may share personal data with the following categories of recipients where strictly necessary:

• Payment Processors: Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, Hong Leong Bank, Public Bank, and other payment providers, solely for the purpose of processing your transactions.
• Identity Verification Providers: Third-party KYC and fraud detection service providers engaged to support smb888's compliance processes.
• Game Content Providers: Game software providers whose titles are hosted on smb888, where session data must be shared for game functionality and RTP auditing purposes.
• Regulatory Authorities: Law enforcement agencies, gaming regulatory authorities, and financial intelligence units, where smb888 is legally required to disclose data by applicable law or court order.
• Infrastructure Providers: Cloud hosting, content delivery, and cybersecurity providers who process data on smb888's behalf under strict data processing agreements.

5.3 All third-party service providers engaged by smb888 are contractually bound to process personal data only for the specific purpose for which it was shared, to maintain appropriate security standards, and to not retain data beyond the period required for the stated purpose.

6. Data Retention

6.1 smb888 retains personal data for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law.

6.2 Account data and transaction records are retained for a minimum of 5 years following account closure to comply with AML and gaming authority record-keeping obligations.

6.3 KYC documents are retained for the duration of your smb888 membership and for 5 years following account closure or the conclusion of any associated regulatory investigation.

6.4 Marketing consent records are retained for the duration of your membership and for 1 year following withdrawal of consent, for compliance audit purposes.

6.5 Upon expiry of the applicable retention period, smb888 will securely delete or anonymise your personal data in accordance with its data destruction procedures.

7. Data Security

7.1 smb888 implements industry-standard technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and smb888.app
• Encryption at rest for sensitive personal data and financial records stored in smb888's databases
• Access controls and role-based permissions limiting staff access to personal data on a strict need-to-know basis
• Regular security penetration testing and vulnerability assessments conducted by independent third parties
• Incident response procedures for detecting, investigating, and notifying affected parties of any personal data breach

7.2 While smb888 takes reasonable steps to protect your personal data, no internet transmission or digital storage system is entirely immune to security risks. You are responsible for maintaining the confidentiality of your smb888 login credentials and for notifying smb888 immediately if you suspect any unauthorised access to your account.

8. Cookies and Tracking Technologies

8.1 smb888 uses cookies and similar technologies on smb888.app for the following purposes:

• Essential Cookies: Required for core platform functionality including session management, login persistence, and account security. These cannot be disabled without impairing platform functionality.
• Analytics Cookies: Used to collect aggregated, anonymised data about how visitors use smb888.app, enabling smb888 to improve platform performance and user experience.
• Preference Cookies: Used to remember your platform preferences such as language settings and display options across sessions.

8.2 smb888 does not use third-party advertising cookies or cross-site tracking technologies. smb888 does not share cookie data with advertising networks.

8.3 You may manage cookie preferences through your browser settings. Disabling essential cookies will impair your ability to use smb888.app, including the smb888 login function.

9. Your Data Protection Rights

As an smb888 member, you have the following rights in respect of your personal data:

• Right of Access: You may request a copy of the personal data smb888 holds about you.
• Right of Rectification: You may request correction of inaccurate or incomplete personal data.
• Right of Erasure: You may request deletion of your personal data, subject to smb888's legal retention obligations. Data required for AML and regulatory compliance cannot be erased prior to the expiry of mandatory retention periods.
• Right to Restrict Processing: You may request that smb888 restrict processing of your personal data in certain circumstances.
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format.
• Right to Object: You may object to processing of your personal data based on legitimate interests, including for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact smb888 via the official live support channel at smb888.app or by email to [email protected]. smb888 will respond within 30 days of receiving a verified request.

10. Children's Privacy

10.1 smb888 is strictly for adults aged 21 and above. smb888 does not knowingly collect, process, or retain personal data from individuals under the age of 21.

10.2 If smb888 becomes aware that personal data has been collected from an individual under 21 years of age, that account will be immediately suspended, all data deleted, and any funds handled in accordance with smb888's Terms & Conditions and applicable regulations.

10.3 If you believe a person under 21 has registered an smb888 account, please contact smb888 live support immediately.

11. International Data Transfers

11.1 smb888 primarily processes personal data within secure data centre infrastructure. In certain circumstances, personal data may be transferred to, or processed by, service providers located outside Malaysia, including cloud infrastructure providers and KYC verification partners.

11.2 Where personal data is transferred internationally, smb888 ensures that appropriate safeguards are in place, including contractual data protection clauses, to ensure that your data receives an equivalent level of protection to that afforded under applicable data protection standards.

12. Changes to This Privacy Policy

12.1 smb888 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, smb888's data practices, or the services offered on smb888.app.

12.2 Updated versions of this Policy will be published on this page with a revised effective date. Where changes are material, smb888 will notify registered members via the email address associated with their account or via an in-platform notification.

12.3 Your continued use of smb888.app following publication of a revised Privacy Policy constitutes your acceptance of the updated terms.

13. Contact Information

13.1 For all privacy-related inquiries, data subject rights requests, or concerns about how smb888 handles your personal data, please contact the smb888 Data Protection team via:

• Live chat support: available 24/7 on smb888.app
• Email: [email protected]

13.2 Please include "Privacy Request" in the subject line of your email and provide your registered smb888 username or email address to allow us to process your request efficiently.