Privacy Policy Super 88 –
Malaysian User Data Protection

Welcome to the Super 88 Privacy Policy. This document transparently explains how Super 88 ("we", "the platform", or "Super 88"), accessible at https://super88.plus, collects, uses, processes, and protects your personal data as a user of our platform.

We understand that your personal data is both valuable and sensitive. The trust you place in us when sharing that information is something we take seriously. This policy is designed to ensure you have a full understanding of your rights and how we handle your personal information.

This Privacy Policy applies to all users of the Super 88 platform — including visitors without an account, registered members, and anyone who interacts with our website, mobile app, or customer support services.

Super 88 collects several categories of personal data depending on how you interact with our platform. Below is a full list of the data types we may collect:

We affirm that we do not collect more information than is necessary to provide the Super 88 platform's services effectively and securely.

Your personal data is collected through several different channels as you interact with Super 88:

• During account registration: You provide your identity and contact information directly through the registration form.
• During financial transactions: Information related to deposits and withdrawals via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX is collected for payment processing purposes.
• During identity verification (KYC): Documents such as a copy of your MyKad or passport submitted for eligibility verification.
• Automatically: Technical data such as IP address, device type, and platform activity is collected automatically via cookies and other tracking technologies.
• Via customer support: Information you share when contacting the Super 88 support team via live chat, email, or other channels.
• From authorised third parties: In certain cases, we may receive information from payment service providers or identity verification agencies for KYC purposes.

Super 88 uses your personal data for clearly defined and legitimate purposes. We will not use your data for any other purpose without informing you in advance. The primary purposes for which we use your data are as follows:

• Identity and eligibility verification: Verifying that you meet the minimum age requirement (18 years old) and are resident in Malaysia.
• Account management: Managing your account, processing logins, and maintaining account security.
• Payment processing: Verifying and processing deposits and withdrawals in MYR (RM) via your preferred Malaysian payment method.
• Betting service provision: Gives you access to everything Super 88 has to offer, including slots, Live Casino, poker, Sports Betting (Liga Super Malaysia, EPL), badminton, e-sports, and more.
• Customer support: Addressing your enquiries and resolving any issues you report.
• Fraud prevention: Detecting and preventing fraudulent activity, money laundering, or misuse of the platform.
• Marketing communications: Sending you information about promotions, bonuses, and service updates – you may unsubscribe at any time.
• Legal compliance: Meeting the reporting and regulatory requirements of the relevant Malaysian authorities.

Super 88 does not sell your personal data to any third party for commercial purposes. We only share data in limited situations where there is a legitimate basis for doing so:

• Payment service providers: Required data is shared with payment processors such as Touch 'n Go, GrabPay, Boost, DuitNow, and banks to process your transactions.
• Technology providers: Software and infrastructure companies we use to operate the platform – all of whom are bound by strict confidentiality agreements.
• Legal authorities: When required by court order, official investigation, or applicable Malaysian law.
• Identity verification: Approved third-party KYC services to verify user identity in accordance with regulatory requirements.

Super 88 takes the security of our data infrastructure seriously. The following are the key security measures we have implemented to protect your data:

• 256-bit SSL/TLS encryption for all data transmission between your device and our servers.
• User passwords are encrypted using the bcrypt algorithm, which is irreversible.
• Two-factor authentication (2FA) is available for all member accounts.
• Round-the-clock security monitoring, 24/7, by our dedicated cybersecurity team.
• Independent security audits are conducted periodically by qualified third-party security firms.
• Internal staff access to user data is strictly controlled on a need-to-know basis.
• An active intrusion detection system (IDS) that continuously monitors for suspicious activity.

Super 88 uses cookies and other tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you browse our website.

We use several types of cookies:

• Essential Cookies: Required for core platform functions such as login and session security. Cannot be disabled.
• Performance Cookies: Collecting anonymised, aggregate data on how users interact with the platform to help us improve our services.
• Preference Cookies: Saving your preferences such as language and display settings for your convenience.
• Analytics Cookies: Helps us understand usage patterns to improve platform quality — this data is not linked to your personal identity.

You can manage or delete cookies through your web browser settings. However, disabling certain cookies may affect the functionality of the Super 88 platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international privacy principles, you have the following rights regarding the personal data we hold:

Super 88 does not retain your personal data longer than necessary for the stated purposes or as required by Malaysian law. The following are general data retention guidelines:

• Active account data: Retained for as long as your account remains active and for a reasonable period after account closure.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian financial regulatory requirements.
• Customer support communication logs: Retained for 2 years for reference and dispute resolution purposes.
• KYC data (identity verification): Retained for 5 years after account closure in accordance with regulatory compliance requirements.
• Cookie and analytics data: Reset or deleted according to a set schedule (typically 90–365 days).

When data is no longer needed and there is no legal obligation to retain it, Super 88 will securely delete or anonymise the data.

Super 88 is a platform intended exclusively for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18.

If you are a parent or guardian and have discovered that your child has registered an account on Super 88 or provided us with their personal information, please contact us immediately at support@super88.plus. We will take immediate action to delete the information and close the associated account.

Super 88 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or service improvements. When amendments are made:

• The "Last Updated" date at the top of this page will be revised accordingly.
• For material (significant) amendments, a notification will be sent to all registered members via email or an in-platform notification.
• Minor (non-material) amendments may be made without specific notification, though the latest version will always be available on this page.

We encourage you to review this Privacy Policy page periodically. Continued use of the Super 88 platform after any amendments take effect will be considered acceptance of the revised terms.

If you have any questions, concerns, or complaints regarding Super 88's Privacy Policy or the way we handle your personal data, please do not hesitate to get in touch:

• Privacy Email: support@super88.plus (include "Privacy Complaint" in the email subject line)
• Live Chat: Available 24/7 within the platform after logging in
• Response Time: Privacy-related requests will be responded to within 14 business days

We are committed to resolving all privacy complaints fairly, promptly, and in good faith. Your trust is our priority, and we will do what it takes to maintain it.