Privacy Policy 2888 — Your Personal Data Protection

1Introduction

Welcome to the 2888 Privacy Policy. We, the operators of the 2888 platform at https://2888.cl, understand how important privacy is to every one of our players. As a responsible online gaming platform, we treat the protection of your personal data as our highest priority across every aspect of our operations.

This Privacy Policy explains in detail the types of personal data we collect from you, why we need it, how we use it, who we may share it with, and what steps we take to keep your data safe and protected at all times.

By registering or continuing to use the 2888 platform, you agree to the terms of this Privacy Policy. If you disagree with any part of this policy, we encourage you to contact our support team before continuing to use the platform. We are always ready to address any questions or concerns you may have about privacy in a transparent and honest manner.

2Personal Data We Collect

2888 only collects data that is necessary for legitimate purposes directly related to the provision of our platform services. We do not collect excessive or irrelevant data. Below are the categories of data we collect and the purposes for which they are collected:

All data you provide during registration, KYC verification, or while interacting with the platform is collected directly from you. We may also automatically receive certain technical data when you access our platform through your device.

• MyKad information is used solely for age verification and identity verification purposes.
• Credit or debit card numbers are not stored on 2888 servers — they are processed directly by PCI-DSS certified payment operators.
• Biometric data is not collected by 2888 under any circumstances.
• You may opt out of marketing communications at any time via your account settings.

3How We Use Your Data

The personal data we collect is used exclusively for the following purposes. 2888 will not use your data beyond the scope stated in this Privacy Policy without first obtaining your additional consent:

• Verifying your identity during registration and the KYC process to ensure account security.
• Processing deposit and withdrawal transactions securely and accurately to your bank account or e-wallet.
• Providing effective and personalised customer support whenever you need assistance.
• Monitoring account activity to detect fraud attempts, hacking, or other suspicious activity.
• Complying with legal obligations including anti-money laundering (AML) reporting requirements.
• Analysing aggregate, anonymised usage patterns to improve the overall platform experience.
• Sending important notifications related to your account, security, or changes to the terms of service.
• Supporting responsible gaming programmes by monitoring gameplay patterns that may indicate problem gambling.

4Information Sharing with Third Parties

2888 takes a very careful approach to data sharing. Our core principle is simple: we do not share your personal data with external parties unless it is genuinely necessary and in the situations outlined below:

• Certified Payment Operators: Transaction data that must be shared with payment processors such as FPX, Touch 'n Go, GrabPay, and local banks solely to process your transactions.
• Regulatory Authority: Where required by Malaysian law, we may be obligated to disclose certain information to relevant law enforcement agencies or regulatory bodies.
• Technology Service Providers: Companies that help us run platform operations — such as cloud services, cybersecurity, and analytics — are all bound by strict data protection agreements.
• Game Providers: Game session data required by licensed game providers to ensure game integrity and RNG verification.

In all data sharing situations above, 2888 ensures that the receiving party maintains data protection standards equivalent to or higher than our own. We do not permit any third party to use your data for their own purposes beyond the scope of services they provide to 2888.

5Data Security Measures

Protecting your data is more than an obligation for 2888 — it is a technology priority we invest in continuously. We employ multiple layers of security to ensure your data is protected against unauthorised access, accidental disclosure, or data loss:

• 256-bit SSL/TLS encryption for all data communications between your device and 2888 servers.
• Encryption at rest for all sensitive data stored in our databases.
• Two-factor authentication (2FA) is available and encouraged for all player accounts.
• Continuous 24/7 security monitoring with automated intrusion detection systems.
• Strict internal access controls — only authorised staff may access player data, and every access is logged for audit purposes.
• Regular penetration testing and security audits conducted by independent experts.
• A clear security incident response procedure — in the event of a data breach, you will be notified within 72 hours.

While we take all reasonable precautions, no security system can be guaranteed 100% secure. We encourage you to also help protect your account by using a strong password, enabling 2FA, and never sharing your login credentials with anyone.

6Cookies and Tracking Technologies

2888 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They help us recognise you on return visits and remember your preferences.

• Essential Cookies: Required for core platform functions such as login sessions and security. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information about how you use our platform to help us identify areas for improvement.
• Functional Cookies: Saving your preferences such as language, display settings, and game preferences to deliver a more personalised experience.
• Analytics Cookies: Helping us understand aggregate usage patterns to improve platform design and content.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality of some parts of the 2888 platform. For more information on managing cookies in your browser, please refer to your browser's help documentation.

7Your Rights Regarding Personal Data

In accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection, you have the following rights regarding the personal data held by 2888:

8Data Retention Period

2888 does not retain your personal data longer than is necessary for the relevant processing purposes or legal obligations. Retention periods vary by data type:

• Active Account Data: Retained for the duration your account is active and up to 5 years after account closure for audit and AML compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian financial legal requirements.
• Security & Access Logs: Retained for 12 months for fraud detection and security investigation purposes.
• Support Communication Data: Retained for 2 years for reference and service quality improvement.
• Marketing Data: Deleted within 30 days of you withdrawing your marketing consent.

Once the retention period ends, your data will be securely deleted or permanently anonymised so it can no longer be linked to you as an individual. The data deletion process follows industry-recognised methods to ensure data cannot be recovered.

9Links to Third-Party Sites

The 2888 platform may occasionally contain references or information about third-party game providers. This Privacy Policy applies solely to the 2888 platform. We are not responsible for the privacy practices or content of any third party involved in providing games or support services to our platform.

We encourage you to read the privacy policy of each game provider you choose to play with, particularly for live casino games where third-party providers may have their own session recording systems subject to their own privacy policies.

10Contact Us About Privacy

We welcome any questions, concerns, or feedback you have regarding this Privacy Policy or how we handle your personal data. The 2888 Privacy Team is ready to assist you with all enquiries and to process any data rights requests promptly and professionally.

2888 is committed to responding to all privacy enquiries within 3 business days. For cases requiring further investigation, we will notify you within 3 days with an estimated timeline for resolution.