888sama Privacy Policy

1. Introduction

888sama is committed to protecting the privacy and personal data of all players. This Policy is intended to be transparent, straightforward, and fully compliant with the data protection obligations arising from 888sama's international gaming authority licence. We process personal data only to the extent necessary to deliver our services, fulfil our legal obligations, and maintain the security and integrity of the platform.

This Policy applies to all personal data collected through the 888sama website, account registration process, customer support interactions, payment transactions, and any other interaction you have with the 888sama platform.

2. Data Controller

For the purposes of applicable data protection law, 888sama is the data controller responsible for your personal data. Our designated Data Protection contact is reachable at: [email protected]

For all data subject requests, privacy concerns, or complaints, please direct your enquiry to the above address with the subject line "Privacy Request — [Your Account Username]".

3. Data We Collect

888sama collects the following categories of personal data:

888sama does not collect sensitive personal data (such as racial or ethnic origin, political opinions, health data, or biometric data) except where strictly required by KYC obligations, in which case such data is handled with enhanced security measures and retained only for the minimum necessary period.

4. How We Use Your Data

888sama processes your personal data for the following purposes:

• Account Management: Creating and maintaining your 888sama account, verifying your identity, processing deposits and withdrawals, and providing access to all platform features.
• Service Delivery: Enabling participation in sports betting, live casino games, slots, lottery, and the rewards programme.
• Legal and Regulatory Compliance: Fulfilling KYC, Anti-Money Laundering (AML), and responsible gaming obligations under our international gaming authority licence. This includes monitoring for unusual betting patterns, verifying source of funds where required, and maintaining transaction records for the legally mandated period.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, multi-accounting, and other breaches of the 888sama Terms & Conditions.
• Customer Support: Responding to your enquiries, resolving disputes, and processing complaints.
• Responsible Gaming: Monitoring gameplay data to identify potential problem gambling indicators and providing appropriate intervention tools or support information where warranted.
• Communications: Sending transactional emails (e.g., deposit confirmations, withdrawal notifications), account security alerts, and where you have opted in, promotional communications about 888sama offers and products.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the 888sama user experience, identify technical issues, and develop new features.

5. Legal Basis for Processing

888sama processes personal data on the following legal bases:

• Contractual Necessity: Processing required to provide the services you have registered for under the 888sama Terms & Conditions (e.g., account creation, payment processing, game delivery).
• Legal Obligation: Processing required to comply with KYC, AML, and responsible gaming requirements under our gaming licence and applicable law.
• Legitimate Interests: Processing for fraud prevention, platform security, and platform improvement where our legitimate interests are not overridden by your fundamental rights.
• Consent: Processing for optional marketing communications, where you have provided explicit opt-in consent. You may withdraw consent at any time by updating your communication preferences in Account Settings.

6. Data Sharing

6.1 888sama does not sell, rent, or trade your personal data to third-party advertisers or data brokers under any circumstances.

6.2 888sama may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment Processors: Touch n Go, Boost, Maybank, CIMB, and Public Bank, for the purpose of processing deposits and withdrawals.
• Identity Verification Providers: Third-party KYC service providers for document verification and identity authentication.
• Game Software Providers: Game studios and live casino operators who supply game content to 888sama, to the extent necessary for gameplay integrity and dispute resolution.
• Regulatory Authorities: Gaming regulatory bodies, law enforcement agencies, and other competent authorities where disclosure is required by law, court order, or our licence obligations.
• IT Infrastructure Providers: Hosting, cloud storage, and security service providers operating under strict confidentiality and data processing agreements.

7. International Data Transfers

Some of the third parties with whom 888sama shares data may process data outside Malaysia. Where such transfers occur, 888sama ensures that appropriate safeguards are in place, including data processing agreements incorporating standard contractual clauses or equivalent protections recognised under our licence jurisdiction's data protection framework.

8. Data Retention

888sama retains personal data for the following minimum periods, after which data is securely deleted or anonymised unless a longer retention period is required by law:

• Account and Identity Data: 5 years from account closure, as required by our gaming licence AML obligations.
• Financial Transaction Data: 7 years from the date of the transaction, as required under applicable financial record-keeping requirements.
• Customer Support Records: 3 years from the date of the interaction.
• Technical and Usage Data: 13 months from collection, unless aggregated and anonymised for analytical purposes.
• Marketing Consent Records: Until you withdraw consent, plus 1 year.

Where a legal hold is placed on data (e.g., active litigation or regulatory investigation), retention will be extended until the hold is lifted.

9. Cookies and Tracking Technologies

9.1 888sama uses cookies and similar tracking technologies for the following purposes:

• Essential Cookies: Session management, authentication, and security. These are strictly necessary and cannot be disabled without impairing platform functionality.
• Functional Cookies: Remembering your language preferences, display settings, and recent game history for a smoother experience.
• Analytics Cookies: Collecting anonymised usage statistics to understand how the platform is used and where improvements are needed. Data is aggregated and not linked to individual accounts.

9.2 Third-party analytics services used by 888sama process only anonymised, aggregated data. No personally identifiable information is shared with analytics providers.

9.3 You may manage cookie preferences through your browser settings. Disabling essential cookies will affect your ability to log in to and use the 888sama platform.

10. Your Data Rights

Subject to applicable law and our licence obligations, you have the following rights in respect of your personal data held by 888sama:

• Right of Access: You may request a copy of the personal data 888sama holds about you.
• Right of Rectification: You may request correction of inaccurate or incomplete personal data.
• Right of Erasure: You may request deletion of your personal data, subject to overriding legal retention obligations (e.g., AML record-keeping requirements).
• Right to Restrict Processing: You may request that we restrict processing of your data in certain circumstances.
• Right to Data Portability: You may request a machine-readable copy of the personal data you have provided to 888sama.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact 888sama at [email protected] with the subject line "Data Subject Request". We will respond within 30 days. Complex requests may require an additional 60-day extension, in which case we will notify you of the delay and reason.

11. Children's Privacy

The 888sama platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from an underage individual, we will take immediate steps to delete that data and close the associated account. If you believe an underage individual has registered on 888sama, please contact us immediately at [email protected].

12. Security Measures

888sama implements the following technical and organisational security measures to protect your personal data:

• 256-bit SSL/TLS encryption for all data in transit;
• AES-256 encryption for data at rest in our databases;
• bcrypt password hashing with unique per-account salts;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular third-party security audits and penetration testing;
• Intrusion detection systems and 24/7 security monitoring;
• Data breach response procedures with regulatory notification obligations.

Notwithstanding these measures, no transmission over the internet or electronic storage system is 100% secure. 888sama cannot guarantee absolute security and accepts no liability for data breaches caused by circumstances beyond its reasonable control.

13. Changes to This Privacy Policy

888sama may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or service offerings. Material changes will be communicated to registered players via email or in-platform notification at least 7 days before taking effect. The "Last updated" date at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 888sama, please contact us at:

Email: [email protected]

Please mark privacy-related correspondence with "Privacy" in the subject line to ensure it is routed to our Data Protection team. 888sama aims to acknowledge all privacy enquiries within 2 business days and to provide a substantive response within 30 days.