gg288 Privacy Policy — Your Data, Handled Responsibly

1. Introduction

This Privacy Policy describes how gg288, operated under international online gaming licensing, collects, uses, stores and protects personal information provided by individuals who visit or register on the platform at gg288.casa. It applies to players registered in Malaysia, including residents of Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam and other locations.

gg288 processes personal data in its role as the entity responsible for account management, identity verification, payment facilitation and responsible-gambling compliance. Where third-party service providers assist in data processing, they do so under contractual obligations consistent with the principles of this policy.

This policy should be read together with the gg288 Terms & Conditions. Capitalised terms not defined here carry the meaning given in the Terms & Conditions.

2. Definitions

For the purposes of this Privacy Policy:

• Personal Data means any information relating to an identified or identifiable individual, including name, contact details, identity documents, payment information and device identifiers.
• Processing means any operation performed on Personal Data, including collection, storage, use, transmission, deletion and anonymisation.
• Data Controller means the entity that determines the purposes and means of processing Personal Data in connection with gg288.
• Data Processor means a third party that processes Personal Data on behalf of the Data Controller under a written agreement.
• KYC means Know Your Customer verification, comprising identity, age, address and payment ownership checks required for compliance and security.
• Cookies means small data files placed on a device by a website to record preferences, session information or analytical metrics.

3. Data We Collect

The categories of personal data collected through your use of gg288 are set out below.

gg288 does not intentionally collect sensitive personal data such as medical records, political views or biometric identifiers unless required by a specific legal obligation.

4. How We Use Your Data

gg288 processes personal data only where reasonably necessary to provide, secure and improve its services. The principal purposes include:

• Creating, administering and authenticating your gg288 account.
• Confirming identity, age, address and payment-method ownership.
• Processing MYR deposits and withdrawals through supported payment channels.
• Recording casino wagers, sports bets, bonuses, winnings and account balances.
• Detecting fraud, duplicate accounts, money laundering, account misuse and security threats.
• Applying deposit limits, cooling-off periods, self-exclusion and other responsible-gambling controls.
• Responding to support requests, transaction disputes and account enquiries.
• Maintaining platform performance, preventing technical abuse and diagnosing faults.
• Meeting legal, regulatory, licensing, accounting and record-keeping obligations.

gg288 may use aggregated or anonymised information to understand general platform activity, such as interest in EPL markets, Liga Super Malaysia events, live dealer games or mobile access. Information used in this form is not intended to identify an individual player.

5. Legal Basis for Processing

Depending on the purpose and applicable data protection requirements, gg288 relies on one or more lawful grounds when processing personal data.

Contractual Necessity

Account details, transaction records and wagering information are processed where necessary to provide services requested by the player and to administer the agreement established under the gg288 Terms & Conditions.

Legal and Regulatory Obligations

Identity records, KYC documents and transaction histories may be processed and retained to satisfy anti-fraud, anti-money laundering, licensing, tax, accounting or other lawful obligations that apply to the service.

Legitimate Interests

gg288 may process technical, security and usage data to protect accounts, prevent abuse, improve navigation and maintain reliable platform operation. These interests are assessed against the privacy rights and reasonable expectations of users.

Consent

Where consent is required, gg288 will request it clearly. Consent may be withdrawn for future processing, although withdrawal does not invalidate processing completed before the request or processing required on another lawful basis.

6. Sharing and Disclosure

gg288 does not sell personal data. Information may be disclosed only where necessary for service delivery, security, legal compliance or the protection of legitimate rights. Recipients may include:

• Identity-verification and KYC service providers.
• Payment processors, banks and e-wallet providers involved in a requested transaction.
• Hosting, cybersecurity, fraud-prevention and technical support providers.
• Professional advisers, auditors and compliance specialists subject to confidentiality duties.
• Competent regulators, courts or law-enforcement bodies where disclosure is legally required.
• A lawful successor in connection with a merger, restructuring or transfer of the relevant business.

Service providers receive only the information reasonably required for their assigned function. gg288 expects processors to apply appropriate confidentiality, access control, retention and security measures. They must not use player information for unrelated independent purposes.

Personal data may be processed outside Malaysia where platform infrastructure or specialist providers are located internationally. Where such transfers occur, gg288 takes reasonable steps to require contractual and technical safeguards appropriate to the information and destination.

7. Payment and Transaction Data

When a player requests an MYR deposit or withdrawal, gg288 may process the account holder's name, transaction value, payment reference, account identifier and verification status. Depending on availability, this may involve Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong or another supported provider.

Complete card credentials, online banking passwords and e-wallet login details should never be sent through ordinary support messages. Payment providers may collect information directly under their own operational and legal requirements. gg288 generally receives the details required to confirm, reconcile or investigate the transaction.

Transaction information may be reviewed to verify payment ownership, prevent fraud, identify unusual activity and meet compliance obligations. Withdrawal checks may require additional identity or source-of-funds evidence even where an earlier deposit was accepted.

8. Cookies and Similar Technologies

gg288 may use cookies, local storage and comparable technologies to maintain secure sessions, remember user preferences, support navigation and measure general website performance. Some technologies are necessary for login security and cannot be disabled without affecting account functions.

Cookies may be grouped into the following categories:

• Essential cookies support authentication, security and core platform operation.
• Preference cookies remember language, display and account choices.
• Performance cookies help identify loading issues, navigation errors and general usage patterns.
• Security cookies assist with fraud detection, session integrity and unauthorised-access prevention.

Browser settings may allow users to block or delete cookies. Doing so can cause sign-in, payment or preference features to operate incorrectly. gg288 does not use this policy to authorise unrelated third parties to track users across external websites.

9. Data Retention

gg288 retains personal data only for as long as necessary to fulfil the purpose for which it was collected and to satisfy lawful operational, licensing, dispute-resolution, accounting and compliance requirements.

Retention periods vary according to the nature of the information. Basic account, KYC and transaction records may need to remain available after account closure to address fraud, payment disputes or legal obligations. Temporary security logs and technical diagnostics are generally retained for shorter periods unless linked to an active investigation.

When information is no longer required, gg288 will take reasonable steps to delete it securely or convert it into an anonymised form that no longer identifies the player. A deletion request cannot override a mandatory retention requirement or an ongoing lawful investigation.

10. Security Measures

gg288 applies proportionate technical and organisational safeguards designed to protect personal data against accidental loss, unlawful access, alteration, disclosure or destruction. These safeguards may include encrypted connections, role-based permissions, account monitoring, secure backups and staff confidentiality controls.

No internet transmission or storage system can be guaranteed to be completely secure. Players also have an important role in protecting their information. A strong, unique password should be used for gg288, verification codes must not be shared, and accounts should not be accessed through untrusted devices or unsecured public networks.

Any suspected unauthorised access should be reported promptly. gg288 may temporarily restrict an account, require password changes or request fresh identity verification where necessary to protect the player and investigate the incident.

11. Your Data Rights

Subject to applicable law, identity verification and legitimate exemptions, users may exercise the following rights concerning personal data held by gg288:

gg288 may request sufficient information to verify the identity of the person making a privacy request. This protects account data from unauthorised disclosure. Requests may be limited or refused where they are manifestly unfounded, conflict with another person's rights or cannot lawfully override compliance and record-keeping duties.

12. Minors and Age Verification

gg288 is strictly intended for individuals aged 21 and above. The platform does not knowingly permit minors to register, deposit or gamble. Age information and identity documents may be checked before account functions or withdrawals are approved.

If gg288 has reasonable grounds to believe that an account belongs to a person under 21, access may be suspended immediately while verification takes place. Personal data associated with an ineligible account will be handled according to applicable legal, security and retention requirements.

A parent or guardian who believes that a minor has provided personal information to gg288 should contact the privacy team using the details below. Sufficient information should be supplied to identify the relevant account without sending unnecessary sensitive data.

13. Changes to This Privacy Policy

gg288 may amend this Privacy Policy when its services, security practices, payment arrangements or legal obligations change. The revised version will be published on this page with an updated effective date.

Where a change materially affects how existing personal data is used, gg288 will take reasonable steps to provide an appropriate notice before the change takes effect. Continued use of the platform after publication indicates acknowledgement of the revised policy, but consent will be requested separately where applicable law requires it.

Users are encouraged to review this Privacy Policy periodically together with the Terms & Conditions and Responsible Gambling information.

14. Contact Us

Questions about this Privacy Policy, the handling of personal data or a request to exercise an eligible privacy right may be directed to the gg288 privacy team.

Privacy email: [email protected]

The email address above is displayed as plain text and is not a clickable link. When making a request, include the registered account name, a clear description of the matter and enough information for gg288 to verify identity securely. Do not include passwords, full card credentials or online banking login details.

gg288 will review valid requests within a reasonable period. Additional time may be required for complex matters, payment investigations or requests involving archived records, and users will be informed where appropriate.