Digi888 Privacy Policy – Our Commitment to Protecting Malaysian Players' Data

1 Personal Data We Collect

digi888 only collects data that is strictly necessary to operate our services properly and securely. We do not collect data that is irrelevant or beyond what is required for the stated purposes. The categories of data we collect are as follows:

• Account registration data: Full name, mobile number, email address, date of birth, and encrypted password.
• Identity verification data: National identification number (MyKad) or passport required for age and identity verification for withdrawals exceeding a certain limit.
• Financial data: Bank account numbers, e-wallet phone numbers (Touch 'n Go, GrabPay, Boost, ShopeePay), account holder names, and records of deposit and withdrawal transactions in Malaysian Ringgit (RM).
• Gaming activity data: Gaming session records, types of games played (slots, live casino, football betting, roulette), bet amounts, wins and losses, and session duration.
• Technical data: Device IP address, web browser type, operating system, device type, session cookies, and platform access logs.
• Communication data: Records of conversations with our customer support team via live chat or email, complaints filed, and feedback submitted.
• Preference data: Account settings, language preferences, favourite games and notification preferences that you configure within your account.

We do not collect sensitive data such as health information, religion, political affiliations, or biometric data except in very limited circumstances and with your explicit consent.

2 Purposes for Using Personal Data

The personal data we collect is used solely for legitimate purposes directly related to the provision of our services. digi888. We do not use your data for any other purpose without informing you in advance. The primary purposes for which we use your data are as follows:

• Account management: Creates, verifies, and manages your account on the digi888, including a secure login process and two-factor authentication.
• Transaction processing: Processing deposits and withdrawals via Malaysian payment methods such as Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay and FPX internet banking.
• Identity and age verification: Ensuring all users meet the minimum age requirement of 18 years and that the identity provided is genuine, in order to prevent fraud.
• Fraud prevention and anti-money laundering: Monitors suspicious transaction patterns and ensures compliance with applicable anti-money laundering (AML) legal requirements.
• Service improvements: Analyzing aggregated platform usage patterns to understand player preferences and pain points, for the purpose of product improvement.
• Service communications: Sends important account-related notifications covering transactions, terms updates, VIP status, and relevant security information.
• Customer support: Handling enquiries, complaints and requests for assistance that you submit to our support team digi888.
• Legal compliance: Fulfils the legal and regulatory obligations imposed on digi888 as the platform operator.

3 Data Sharing with Third Parties

digi888 does not sell your personal data. However, there are limited circumstances where we need to share certain information with selected third parties — solely to enable us to deliver our services to you effectively. These circumstances are as follows:

• Payment service providers: Transaction information required is shared with the payment gateways that process your deposits and withdrawals — Touch 'n Go eWallet, GrabPay, DuitNow, FPX, and others. These are certified third parties bound by strict data protection agreements.
• Game providers: Usernames and game records may be accessed by game providers such as Pragmatic Play, PG Soft or Evolution Gaming solely for the purpose of running the games and technically verifying results.
• Legal authorities: digi888 will disclose data as lawfully required by Malaysian authorities when mandated by court order or legal obligation, including for financial crime investigations or anti-money laundering purposes.
• Technical infrastructure services: Cloud computing providers, server hosting services, and cybersecurity providers engaged by digi888 may have limited technical access to data within the framework of strict confidentiality agreements.

All third parties working with digi888 are required to meet the same or higher data protection standards as this policy, and are not permitted to use your data for their own purposes.

4 Cookies & Tracking Technologies

Platform digi888 uses cookies and similar tracking technologies to ensure the platform functions properly and to enhance your experience. This is standard industry practice and does not compromise your privacy when managed responsibly, as we do.

• Session cookies: Required to keep you logged in during your gaming session and to maintain transaction security. These cookies are automatically deleted when you close your browser or log out.
• Preference cookies: Saves your language settings, display theme, and other preferences so you do not have to reconfigure them each time you log in to digi888.
• Analytics cookies: Helps us understand which pages are visited most frequently, how long players spend on each page and where they encounter issues. This data is collected in aggregate and is not linked to any individual's identity.
• Security cookies: Helps detect suspicious login attempts, bot activity, and cyberattacks targeting player accounts.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality of the platform digi888, including the ability to log in and play.

5 Your Rights as a digi888 User

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the internal policies of digi888, you hold the following rights regarding your personal data. We respect and facilitate the exercise of these rights:

To exercise any of the rights above, please contact us by email at support@digi888.best by stating the right you wish to exercise and providing the required identity verification details. We will respond within the timeframe stated above.

6 digi888 Data Security Measures

Protecting your personal data from unauthorised access, loss, alteration or disclosure is our highest priority. digi888 continuously invests in security infrastructure to ensure consistently high protection standards are maintained.

• Data encryption in transit: All communications between your device and our servers digi888 encrypted using TLS 1.3 with a 256-bit SSL certificate that is updated on a regular basis.
• Encryption of data at rest: Sensitive data such as financial information and passwords are stored in encrypted format on our servers. Passwords are never stored in plain text.
• Internal access controls: Access to user data within internal systems digi888 is restricted to staff who require access to carry out their duties. All access is logged and monitored.
• Regular security testing: System digi888 undergoes regular security assessments and penetration testing by independent third parties to identify and remediate vulnerabilities before they can be exploited.
• Incident response plan: digi888 has a detailed incident response plan to address any data security breach promptly. In the event of a breach involving user data, we are committed to notifying affected users within the timeframe required by law.
• Security awareness training: All staff digi888 undergoes regular data security training to ensure they understand their responsibilities in protecting user data.

7 Child Protection & Age Restrictions

Platform digi888 is intended for individuals aged 18 and above only. We do not knowingly collect or process personal data from minors. This is a commitment we take very seriously.

• Registration process digi888 requires verification that you are 18 years of age or older. Providing false information about your age is a violation of the terms of use.
• Should we discover that personal data collected belongs to a minor, we will immediately take steps to delete that data and close the account in question.
• Parents or guardians who suspect their child has registered an account with digi888 are requested to contact us at support@digi888.best immediately so that appropriate action can be taken.

8 Changes to This Privacy Policy

digi888 reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or service improvements. When material changes occur:

• The "Last Updated" date at the top of this page will be revised to reflect the most current version of this document.
• In-account notifications will be sent to all active users at least 7 days before any changes take effect.
• For highly material changes, an additional email notification will be sent to your registered email address.
• Continued use of the platform digi888 after any changes take effect will be considered acceptance of the revised policy.

We encourage you to review this page periodically to stay informed about how we handle your data. If you disagree with any changes made, you may close your account before those changes take effect by contacting our support team.