Privacy Policy

1. Data Controller

For the purposes of applicable data protection law, the data controller responsible for your personal data is the operator of the alpha888 platform at https://alpha888.co ("alpha888", "we", "us", "our"). alpha888 operates the Platform under international gaming authority licensing and is subject to the data protection obligations that attach to licensed online gaming operators.

References to "you" or "your" in this Privacy Policy refer to any individual who accesses, browses, or registers an account on the alpha888 platform, whether as a registered Player or an unregistered visitor.

2. Personal Data We Collect

alpha888 collects personal data through several channels in the course of operating the Platform and fulfilling our legal obligations. The categories of data we collect include:

Registration and Account Data:

• Full legal name as it appears on your government-issued identification;
• Date of birth (for age verification — all Players must be 21 or older);
• Email address and account username;
• Residential address and, where provided, contact telephone number.

Identity Verification (KYC) Data:

• Copies of government-issued photo identification (e.g., Malaysian MyKad, passport);
• Proof of residential address (e.g., utility bills, bank statements, dated within three months);
• Proof of payment method ownership where required to process a withdrawal.

Financial and Transaction Data:

• Deposit and withdrawal history, including amounts, timestamps, and payment method identifiers;
• Wallet balance and transaction logs within your alpha888 account;
• Payment method type (e.g., Touch n Go eWallet, Boost, Maybank FPX, CIMB FPX, cryptocurrency wallet address).

Usage and Technical Data:

• IP address, device type, browser type and version, operating system;
• Pages visited, session duration, navigation paths, and game interaction data;
• Login timestamps, locations, and device fingerprints for fraud prevention purposes.

Communications Data:

• Records of support interactions via live chat or email, including the content of those communications;
• Feedback, complaints, and dispute correspondence.

3. How We Use Your Personal Data

alpha888 uses the personal data described above for the following purposes:

• Account management: Creating, maintaining, and securing your alpha888 account, including authentication and session management;
• Age and identity verification: Confirming that all registered Players meet the minimum age requirement of 21 years and verifying identity prior to withdrawal processing;
• Payment processing: Facilitating deposits and withdrawals in MYR through supported payment methods;
• Regulatory compliance: Fulfilling anti-money laundering (AML), counter-terrorism financing (CTF), and know-your-customer (KYC) obligations required under international gaming authority licensing conditions;
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, account compromise, and platform abuse;
• Customer support: Responding to your queries, resolving disputes, and maintaining support records;
• Platform improvement: Analysing aggregated usage data to improve the performance, design, and functionality of the alpha888 platform;
• Responsible gaming: Monitoring for indicators of problem gambling behaviour and administering self-exclusion, deposit limits, and other responsible gaming tools at your request or as required by regulation;
• Marketing communications: Sending promotional communications where you have opted in to receive them. You may opt out at any time via your account settings.

4. Legal Basis for Processing

alpha888 processes personal data on the following legal bases:

• Contract performance: Processing necessary to provide the services you have requested by creating an alpha888 account and accepting our Terms & Conditions;
• Legal obligation: Processing required to comply with AML, KYC, CTF, responsible gaming, and data protection laws applicable to our licensed operations;
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, freely given consent that can be withdrawn at any time.

5. Cookies & Tracking Technologies

The alpha888 platform uses cookies and similar tracking technologies to maintain session state, prevent fraud, analyse performance, and personalise your experience. The categories of cookies in use include:

• Strictly necessary cookies: Essential for platform operation. These cannot be disabled without preventing core functionality such as login, session retention, and wallet access;
• Analytics cookies: Used to collect aggregated, anonymised data about how Players interact with the Platform, enabling us to improve navigation, performance, and game discoverability;
• Fraud prevention cookies: Used to detect suspicious access patterns, multiple account creation attempts, and other security threats;
• Preference cookies: Used to remember your language, display, and communication preferences between sessions.

Non-essential cookies are set only with your consent. You may review and update your cookie preferences at any time through your browser settings. Note that disabling cookies may affect the functionality of certain alpha888 features.

6. Sharing of Personal Data with Third Parties

alpha888 does not sell personal data to third parties. We may share personal data with third parties only in the following circumstances:

• Payment processors: Touch n Go, Boost, Maybank, CIMB, Public Bank FPX, and cryptocurrency network service providers, as necessary to process deposits and withdrawals;
• KYC and identity verification providers: Regulated third-party services engaged to verify your identity and age in compliance with our licensing obligations;
• Fraud prevention and AML screening services: Third-party providers engaged to screen transactions and Player profiles against sanctions lists and fraud databases;
• Game software providers: Game studios whose titles are available on the alpha888 platform may receive anonymised session data for technical support and RNG audit purposes;
• Regulatory and law enforcement authorities: Where we are legally compelled to disclose data by court order, regulatory requirement, or applicable law.

All third-party service providers engaged by alpha888 are subject to data processing agreements requiring them to handle your personal data in accordance with applicable data protection law and solely for the purposes specified.

7. International Data Transfers

Where personal data is transferred to service providers or infrastructure located outside Malaysia, alpha888 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable Malaysian data protection law. These safeguards may include standard contractual clauses, adequacy decisions, or other legally recognised transfer mechanisms.

8. Data Retention

alpha888 retains personal data for as long as your account is active and for a defined period thereafter, in accordance with the following guidelines:

• Account and KYC data: Retained for a minimum of five years following account closure, in line with AML regulatory requirements;
• Transaction records: Retained for a minimum of five years for financial audit and regulatory compliance purposes;
• Support communications: Retained for two years following the closure of the relevant support case;
• Marketing consent records: Retained for the duration of your consent and for one year following withdrawal, for compliance demonstration purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

9. Your Data Rights

Subject to applicable law and our legal retention obligations, you have the following rights in relation to your personal data held by alpha888:

• Right of access: You may request a copy of the personal data alpha888 holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data where we no longer have a lawful basis for retaining it;
• Right to restriction: You may request that we restrict processing of your data in certain circumstances while a dispute is resolved;
• Right to data portability: You may request a machine-readable copy of personal data you have provided to alpha888 for transfer to another service;
• Right to object: You may object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact the alpha888 support team via live chat. We will respond to all verifiable requests within 30 days. Where a request is complex or voluminous, we may extend this period by up to a further 60 days with notice.

10. Children's Privacy

The alpha888 platform is strictly restricted to individuals aged 21 and above. We do not knowingly collect personal data from persons under the age of 21. If we become aware that an account has been registered by an underage individual, the account will be immediately closed, all data associated with it will be deleted (subject to our legal retention obligations), and any funds will be handled in accordance with our Terms & Conditions and applicable law.

If you believe a minor has registered an account on the alpha888 platform, please contact our support team immediately via live chat.

11. Security Measures

alpha888 implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the alpha888 platform;
• Encryption of personal data at rest within our secure infrastructure;
• Role-based access controls restricting employee access to personal data on a strict need-to-know basis;
• Regular security audits and penetration testing of platform infrastructure;
• Two-factor authentication available to all registered Players for account login protection;
• Automated suspicious login detection and alerting systems.

Notwithstanding these measures, no internet transmission is entirely secure. You are responsible for maintaining the confidentiality of your alpha888 login credentials and for notifying us promptly of any suspected unauthorised access.

12. Changes to This Privacy Policy

alpha888 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform services. Where changes are material, we will notify registered Players via email or a prominent notice within the platform at least 14 days before the changes take effect.

The date of the most recent revision is displayed at the top of this page. Continued use of the alpha888 platform following notification of changes constitutes acceptance of the updated Policy. If you do not agree with any changes, you must discontinue use of the platform and may request account closure.

13. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by alpha888, please contact our support team through the following channels:

• Live Chat: Available 24/7 directly on the alpha888 platform — average first response time 3–5 minutes.
• Email: [email protected] — please include "Privacy Request" in the subject line for data rights enquiries.

Do not transmit sensitive personal data (such as copies of identification documents) via email. All document submissions for KYC purposes must be made through the secure upload facility within your authenticated alpha888 account.

For more information about your rights under applicable data protection law, you may also contact the relevant data protection supervisory authority in your jurisdiction.