Privacy Policy

1. Introduction

coin88 ("coin88," "we," "us," "our") is the operator of the online gaming platform accessible at coin88.club. We are committed to protecting the privacy and personal data of all individuals who use our services, including registered players, prospective players, and visitors to coin88.club.

This Privacy Policy ("Policy") sets out how coin88 collects, uses, stores, shares, and protects personal data in connection with the provision of our services. It applies to all data processing activities conducted by coin88 in relation to the coin88.club platform and any associated communications.

By registering a coin88 account or using any coin88 service, you acknowledge that you have read and understood this Policy. This Policy is incorporated by reference into coin88's Terms & Conditions.

coin88 acts as the data controller in respect of personal data collected from players and visitors. If you have questions about how your data is handled, please contact our Data Protection team at the address set out in Section 13.

2. Data We Collect

coin88 collects personal data in the following categories, depending on your interaction with our platform:

2.1 Registration & Identity Data

When you register a coin88 account, we collect: full legal name; date of birth; residential address (including postcode and country); email address; mobile phone number; username and encrypted password.

2.2 Identity Verification (KYC) Data

To comply with anti-money laundering obligations and age verification requirements, we may request copies of: national identity card (MyKad) or passport; proof of residential address (utility bill, bank statement); source-of-funds documentation. These documents are processed and stored securely and retained only as long as required by law.

2.3 Financial Data

We collect data related to transactions on your coin88 account, including: deposit and withdrawal amounts and timestamps; payment method identifiers (e-wallet account references, bank account references — not full card numbers); transaction history and account balance records.

2.4 Gaming Activity Data

We record all gaming activity associated with your account, including: games played, bet amounts, outcomes, and session durations; sports betting selections and results; Toto 4D ticket purchases and results; bonus and promotion usage history.

2.5 Technical & Usage Data

When you access coin88.club, we automatically collect: IP address; device type, operating system, and browser version; session timestamps and page interaction data; referring URL and navigation path within the site; geolocation data (country/city level, derived from IP address).

2.6 Communications Data

We retain records of communications between you and coin88, including live chat transcripts, email correspondence, and support ticket history, for quality assurance, training, and dispute resolution purposes.

Data Category	Examples	Purpose
Identity	Name, DOB, address, email	Account creation, KYC compliance
Financial	Transaction records, payment references	Deposits, withdrawals, AML compliance
Gaming Activity	Bets, game sessions, winnings	Account management, responsible gaming monitoring
Technical	IP address, device data, session logs	Security, fraud prevention, platform optimisation
Communications	Chat transcripts, emails	Customer support, dispute resolution

3. How We Use Your Data

coin88 uses personal data for the following purposes:

• Account management: Creating, maintaining, and administering your coin88 account, including processing deposits and withdrawals in MYR and managing your game history and balance.
• Identity verification and KYC compliance: Verifying your identity, confirming that you meet our 21+ age requirement, and fulfilling obligations under applicable anti-money laundering regulations.
• Service delivery: Enabling access to all coin88 gaming products — live casino, sports betting, slots, and Toto 4D — and personalising your in-platform experience based on your preferences and activity.
• Responsible gaming monitoring: Identifying patterns of play that may indicate problem gambling behaviour, and applying responsible gaming tools in accordance with our obligations and your preferences.
• Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, and unauthorised account access. This includes automated monitoring of transaction patterns and login behaviour.
• Customer support: Responding to queries, resolving disputes, and improving support quality through review of communication records.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may opt out at any time.
• Legal and regulatory compliance: Meeting reporting obligations to relevant gaming regulators, financial intelligence units, and law enforcement agencies where required by law.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the coin88 platform, identify technical issues, and enhance the player experience.

4. Legal Basis for Processing

coin88 processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the contract between coin88 and the player, including account operation, transaction processing, and game provision.
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering regulations, age verification requirements, and gaming licence obligations.
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where coin88's legitimate interests do not override the player's fundamental rights.
• Consent: Processing for marketing communications, where consent has been expressly given. Consent may be withdrawn at any time by updating your account communication preferences or contacting support.

5. Data Sharing

coin88 does not sell personal data to third parties. We share personal data only in the following circumstances:

5.1 Service Providers

We engage third-party service providers who process data on our behalf under strict data processing agreements. These include: payment processors and e-wallet operators (Touch 'n Go, Boost, GrabPay, DuitNow, FPX-connected banks); identity verification and KYC service providers; game software providers (who receive only the minimum technical data necessary to deliver games); cloud hosting and infrastructure providers; customer support platform operators.

5.2 Regulatory and Legal Disclosures

We may disclose personal data to gaming regulators, financial intelligence units, law enforcement agencies, or courts where required by applicable law, court order, or regulatory directive. coin88 will notify affected players of such disclosures where permitted by law.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of coin88's assets, personal data held by coin88 may be transferred to the acquiring entity. Affected players will be notified prior to such a transfer where practicable, and the acquiring entity will be required to honour this Privacy Policy or provide an equivalent level of protection.

5.4 Aggregated Data

We may share aggregated, fully anonymised statistical data with analytics partners or publish such data for research or marketing purposes. This data cannot be used to identify individual players.

6. Cookies & Tracking Technologies

coin88.club uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your session after login, and collect anonymous analytics data.

We use the following categories of cookies:

• Essential cookies: Required for the platform to function. These cannot be disabled. They include session management cookies that keep you logged in to your coin88 account during a visit.
• Analytics cookies: Collect anonymised data about how players navigate the platform. Used to identify technical issues and improve the user experience.
• Preference cookies: Remember your settings, such as language preference and display options.

You can manage cookie preferences through your browser settings. Disabling essential cookies will impair your ability to use the coin88 platform. Disabling analytics or preference cookies will not affect core platform functionality.

7. Data Retention

coin88 retains personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following retention standards:

• Active accounts: Data is retained for the duration of the account's active status plus a minimum of five years following account closure, in accordance with applicable AML retention requirements.
• KYC documents: Retained for a minimum of five years from the date of the last transaction on the account, as required by anti-money laundering regulations.
• Transaction records: Retained for a minimum of seven years for accounting and tax compliance purposes.
• Marketing data: Retained until consent is withdrawn or for two years following the last marketing interaction, whichever is earlier.
• Technical logs: Retained for up to 12 months for security and platform monitoring purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

8. Data Security

coin88 employs industry-standard technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL encryption and TLS 1.3 for all data in transit between your device and coin88 servers
• Encryption of sensitive data fields (including KYC documents and payment identifiers) at rest
• Role-based access controls limiting staff access to personal data to those with a legitimate operational need
• Regular security audits and penetration testing of platform infrastructure
• Two-factor authentication requirements for all internal systems access
• Incident response procedures for data breaches, including regulatory notification obligations

Despite these measures, no data transmission over the internet is completely secure. Players are encouraged to use strong, unique passwords for their coin88 accounts and to enable two-factor authentication where available.

9. Your Rights

Subject to applicable data protection law, you have the following rights in respect of your personal data held by coin88:

• Right of access: You may request a copy of the personal data coin88 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data in certain circumstances, subject to legal retention obligations that may prevent full erasure.
• Right to restriction of processing: You may request that coin88 restrict processing of your data in certain circumstances, for example while a dispute regarding the accuracy of your data is resolved.
• Right to data portability: You may request that we provide your personal data in a structured, machine-readable format.
• Right to object: You may object to processing of your data for direct marketing purposes at any time. You may also object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact coin88's Data Protection team using the contact details in Section 13. coin88 will respond to verified requests within 30 days. We may require identity verification before processing a data rights request.

10. Children's Privacy

coin88's services are strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If coin88 becomes aware that an account has been registered by or personal data has been collected from a person under 21, we will immediately close the account, void all associated funds, and delete the personal data. If you believe that a minor has registered a coin88 account, please contact us immediately at [email protected].

11. International Data Transfers

coin88 may transfer personal data to service providers located outside Malaysia in connection with the operation of our platform. Where such transfers occur, coin88 ensures that appropriate safeguards are in place, including contractual protections equivalent to those required under applicable data protection law. We do not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing compensating safeguards.

12. Changes to This Policy

coin88 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via their registered email address or by a prominent notice on coin88.club prior to the changes taking effect. The "Last updated" date at the top of this Policy reflects the date of the most recent revision. Continued use of coin88 services following the effective date of any update constitutes acceptance of the revised Policy.

13. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or coin88's data processing practices, please contact us: