Rujukan Laman

Your legal rights and how we handle your account data

We outline every policy that governs your account, from deposit records and withdrawal verification to data retention and contact routes.

Account data controlWithdrawal verification logsRequest changes any time
888login Your legal rights and how we handle your account data
POLICY HELP

Contact us about data requests or legal questions

If you need to request your account data, ask for deletion, or clarify any policy detail, we have three direct routes.

Live policy chat Open the chat widget in your lobby for real-time answers about data requests, withdrawal…
Formal request email Send data-access or deletion requests to our compliance inbox.
In-account help desk Log in and head to the help section for a searchable library of policy…
DATA & SECURITY

How we handle your data, who can access it, and how to request changes

We store transaction records, login history, and identity verification documents according to local legal requirements.

What we store

Every deposit via Touch 'n Go, GrabPay, Boost dan FPX is logged with timestamp, amount, and payment reference. Withdrawals include verification checks and approval timestamps. We also store login IPs, device fingerprints for fraud detection, and identity documents you submit during KYC. Game-session logs are anonymized after ninety days but financial records stay longer to meet audit obligations.

Retention periods

Identity documents and transaction records are kept for five years after your last activity or as required by Malaysia financial-record rules, whichever is longer. Login logs expire after one year. Marketing preferences and cookie consents stay active until you revoke them. When retention expires, we purge data from live systems and backups within thirty days.

Who accesses your data

Our compliance team sees identity documents for KYC. Payment processors handle deposit and withdrawal instructions but never see your full identity. Support staff see transaction logs when you open a ticket. Third-party fraud-detection tools get anonymized device fingerprints. We never sell or share player lists with marketing partners outside our own platform.

Cookie policy

We use session cookies to keep you logged in, analytics cookies to measure lobby traffic, and preference cookies to remember language and display settings. Marketing cookies track which promo banners you click so we can show relevant offers. You can disable non-essential cookies in your account settings without losing access to deposits or withdrawals.

Security practices

Account passwords are hashed with bcrypt and never stored in plain text. Deposit and withdrawal requests go through two-factor verification when you enable it in settings. Our servers run behind DDoS protection and encrypt data in transit with TLS. Payment details are tokenized by the processor so we never store card numbers or e-wallet credentials on our side.

Request changes or export

Log in and visit the privacy section to request a full data export in JSON format, covering transactions, login history, and documents. Deletion requests pause your account immediately and purge data within fourteen days, except records we must keep for legal reasons. Use the formal request email listed in the support section for GDPR-style requests or appeals.

Your legal rights and data requests explained

Yes. Log in, head to the privacy section in settings, and click request data export. We will email you a JSON file within three business days containing all transactions, login records, identity documents, and marketing preferences tied to your account.

We retain identity documents for five years after your last activity or as required by Malaysia financial-record rules, whichever is longer. After that period expires we purge them from live systems and backups within thirty days.

We pause your account immediately and purge all data we are allowed to delete within fourteen days. Financial records and identity documents required by law stay in a restricted archive until the retention period expires, then they are purged automatically.

Our compliance team reviews flagged transactions for fraud checks. Payment processors handle the actual transfer but only see amount and reference, not your full identity. Support staff see logs when you open a ticket about a payment. We never share transaction history with third-party marketing partners.

Yes. Session cookies are required to stay logged in, but you can disable analytics and marketing cookies in your account settings without affecting deposits, withdrawals, or game access. Preference cookies are optional and only remember language or display choices.

Use the formal request email listed in the support section above. Include your account ID, the decision you want to appeal, and any supporting documents. Our compliance team will review it within five business days and reply with a detailed explanation or a revised outcome.

We will notify you by email and pause account access. You can still log in to request a data export or withdraw any remaining balance. Deposits will be disabled but withdrawals stay open for ninety days so you have time to collect funds.