Aone88 Privacy Policy – Member Personal Data Protection

Aone88 ("we", "Platform", "company") values the privacy of every individual who interacts with our services. This Privacy Policy explains in detail how we collect, use, store, protect, and in certain circumstances share your personal data when you use the aone88 platform.

This policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and global data security best practices. We are committed to ensuring your personal data is handled with full integrity, transparency, and accountability.

The scope of this policy covers all data collected through:

• Member registration and account management process
• Use of the aone88 website and mobile app
• Financial transactions including deposits and withdrawals
• Interactions with our customer support team
• Use of gaming and betting features within the platform
• Visits to the aone88 website even without creating an account

If you disagree with any part of this policy, you may stop using our platform and contact us to close your account. Continued use of the aone88 platform following any amendments to this policy will be considered acceptance of the updated terms.

Aone88 only collects data that is genuinely necessary to provide a quality, secure, and legally compliant service. The following are the categories of data we collect:

Data You Provide Directly:

• Identity information: Full name, identification card number (MyKad), date of birth and gender during the KYC process.
• Contact information: An active Malaysian mobile number and a valid email address.
• Financial information: Bank account number, bank name, e-wallet account number (TNG, GrabPay) for deposit and withdrawal purposes only.
• Password: Stored in encrypted hash form — we do not store passwords in plain text.

Automatically Collected Data:

• Technical data: IP address, browser type, operating system, screen resolution, and device language settings.
• Usage data: Pages visited, session duration, games played, betting history, and transaction records.
• Location data: General location based on IP address for compliance and security purposes. We do not track precise GPS location.
• Cookie data: Session information, user preferences and analytics data — further details in Section 05.

Every piece of data we collect has a clear and legitimate purpose. aone88 uses your personal data for the following purposes:

For marketing communications, you may withdraw your consent at any time by contacting our customer support team or using the unsubscribe link in any promotional email we send.

Aone88 does not sell, rent, or transfer your personal data to any third party for their own marketing purposes. However, in the course of operating the platform, we share limited data with the following parties on a lawful basis:

• Payment service providers: FPX, Touch 'n Go, GrabPay, Visa/Mastercard card processors, and USDT providers receive only the minimum transaction data required to complete your deposits and withdrawals.
• Technical service providers: Hosting, CDN and security services that process data on our behalf under strict data protection agreements.
• Licensed game providers: Username and account balance required to provide access to third-party games within our platform.
• Regulatory authorities and governing bodies: When required by Malaysian law or a valid court order.
• Parties in the context of a business transfer: In the event of a merger, acquisition, or asset sale, data may be transferred with equivalent privacy protections in place.

Aone88 uses cookies and similar tracking technologies to enhance user experience, maintain session security, and understand how our platform is used. The following are the types of cookies we use:

• Essential cookies: Required for core platform functions such as secure login, session verification, and transaction security. These cookies cannot be disabled without affecting platform functionality.
• Preference cookies: Save your personal settings such as preferred language, display theme and game settings so your experience is more comfortable every time you use the platform.
• Analytics cookies: Help us understand platform usage patterns such as frequently visited pages and session duration. This information is collected in aggregate and does not personally identify you.
• Security cookies: Used to detect suspicious activity, unauthorized login attempts, and unusual usage patterns to protect your account.

You can manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies may affect certain functions of the aone88 platform.

Aone88 continually invests in the latest security infrastructure to ensure your personal data remains protected at all times. The security measures we implement include:

• Encryption of data in transit: TLS 1.3 and 256-bit SSL protocols for all communications between your device and our servers.
• Encryption of data at rest: Sensitive data such as banking information and verification documents is stored in encrypted form using AES-256 standards.
• Multi-layered access control: Only authorized personnel with a legitimate work requirement may access member data, and every access is logged for audit purposes.
• Two-factor authentication (2FA): Available and encouraged for all member accounts to prevent unauthorised access.
• 24/7 security monitoring: Threat detection and intrusion monitoring systems operating around the clock with immediate response to any detected threats.
• Regular security audits: Vulnerability assessments and penetration testing are conducted periodically by independent security experts.
• Data backup: Data is backed up regularly to secure, separate locations to ensure service continuity.

As an aone88 member based in Malaysia, you have the following rights regarding your personal data under Malaysia's PDPA:

To submit any personal data rights request, please contact our privacy team via email or live chat. We will process your request within 21 working days in accordance with PDPA requirements. In certain circumstances, we may require identity verification before processing your request to ensure data security.

Aone88 does not retain your personal data longer than necessary for the purposes stated in this policy or as required by Malaysian law. Our data retention guidelines are as follows:

• Active account data: Retained for as long as your account is active and for the required period following account closure.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Tax Act requirements and anti-money laundering laws (AMLA).
• KYC documents: Retained for 5 years after the business relationship ends or as required by relevant regulatory requirements.
• Customer support communication logs: Retained for 2 years for reference and dispute resolution purposes.
• Marketing data (with consent): Retained until you withdraw consent or cease using the platform.
• Security and audit logs: Retained for 1 year for security investigation purposes if required.

Upon expiry of the retention period, data will be securely deleted or anonymised so that it can no longer be personally attributed to you.

The aone88 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.

Should we discover that we have collected data from an individual under the age of 18 without proper age verification, we will immediately:

• Close the relevant account without any penalty to the original owner.
• Delete all personal data collected from that individual.
• Process withdrawals for any legitimate balance through the appropriate verification process.

If you believe that your child or any minor has registered an account with aone88, please contact us immediately at [email protected] so we can take the appropriate action.

The aone88 platform may contain links to third-party game provider websites or services. This Privacy Policy applies solely to the aone88 platform and does not cover the privacy practices of any third-party websites or services.

We encourage you to read the privacy policy of every third-party site or service you visit. aone88 is not responsible for the privacy practices or content of any third party.

Aone88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or improvements in how we handle personal data.

When we make material amendments, we will:

• Update the "Last Updated" date at the top of this page.
• Send notifications to active members via email or in-platform notifications at least 7 days before changes take effect.
• In cases of material amendments that affect your rights, we may request your renewed consent before continuing to process your data.

We encourage you to check this page regularly to stay updated on how we protect your information. The latest version of this Privacy Policy is always available at /privacy-policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the aone88 privacy team is here to help:

• Privacy Email: [email protected] (please indicate "Privacy Inquiry" in the email subject line)
• Live Chat: Available 24/7 within the platform after login — the fastest way to get a response.
• Telegram: Official aone88 support channels — check within the platform for the latest links.

We aim to respond to all privacy inquiries within 3 business days. For formal requests relating to personal data rights under the PDPA, our response period is within 21 business days as prescribed by law.

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia — the authority responsible for enforcing the PDPA in Malaysia.