๐Ÿ”’ PRIVACY POLICY โ€“ on88

On88 Privacy Policy โ€“ Personal Data Protection & Information Security for Malaysia Players

Your privacy is on88's priority. This document transparently explains how we collect, use, store, and protect your personal information while you use the on88 platform. By registering for or using on88's services, you agree to the data management practices set out in this Privacy Policy.

Updated: January 2026
SSL 256-bit
Malay Version

on88's Commitment: We do not sell, rent, or share your personal information with any third party for marketing purposes without your explicit consent. Your data is collected solely to operate on88's services safely and efficiently.

Privacy Policy Document
on88 Platform ยท Version 3.1
Updated January 2026
Applies to all registered users


On88's Data Protection Commitment

Six core principles that govern how on88 handles the personal information of our Malaysian members

Banking-Grade 256-bit SSL Encryption

All data transmitted between your browser and on88's servers is protected with 256-bit SSL encryption โ€” the same standard used by Malaysia's leading banking institutions such as Maybank and CIMB. This means your login credentials, payment data, and personal details remain secure at all times during transmission.

No Data Sharing for Marketing

On88 does not sell or share members' personal information with any third-party company for marketing or advertising purposes. Your data is used solely to operate on88's services, process transactions, and comply with applicable legal requirements.

Secure Data Storage

All on88 member data is stored on servers protected by multiple layers of physical and digital security. Access to member data is strictly limited to staff who require it to perform their duties, and all access is logged and audited on a regular basis.

Payment Information Not Stored

On88 does not store your bank account numbers, credit card details, or full e-wallet information on our servers. All financial transactions are processed through authorised third-party payment systems such as DuitNow, FPX, Touch 'n Go, and GrabPay, each of which maintains its own security infrastructure.

Full Member Control

You have the right to access, correct, transfer, or request the deletion of your personal data held by on88. Requests relating to personal data rights can be submitted via email to the on88 privacy team and will be processed within 14 business days.

Data Protection Law Compliance

The on88 privacy policy is built on Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and international best practices. We remain fully compliant with all data protection legal requirements applicable in the jurisdictions where on88 operates.


Types of Data We Collect

Summary of information categories collected by on88 and their purposes

๐Ÿ‘ค
Identity Data

Name, date of birth, IC number, address

๐Ÿ“ฑ
Contact Data

Phone number, email address

๐Ÿ’ฐ
Transaction Data

Deposit history, withdrawals, betting

๐Ÿ–ฅ๏ธ
Technical Data

IP address, device type, browser

๐ŸŽฎ
Gaming Data

Game history, preferences, activity

๐Ÿช
Cookie Data

Session preferences, login authentication

Summary of on88's Key Data Practices

Item On88 Policies
Third-party sharing Not sold or shared for marketing. Shared only with necessary operational partners (payment processors, game providers) under strict confidentiality agreements.
Data retention period Active account data is retained for the duration of active membership. Following account closure, data is kept for 5 years for legal compliance purposes and may be requested for deletion after that period.
Payment information Full payment method details (bank accounts, e-wallets) are not stored on on88 servers. These are processed entirely by certified payment processors.
Member data access rights Members may request a copy, correction, or deletion of their data by emailing support@on88.app. Requests are processed within 14 business days.
Cookie usage Cookies are used for session authentication, user preferences, and platform analytics. Third-party advertising cookies are not used without consent.
Data breach notification In the event of a serious data breach, affected members will be notified within 72 hours via email or in-platform notification.

Your Rights as an on88 Member

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data

Right to Access

You have the right to request a copy of all personal data on88 holds about you at any time. Requests are processed within 14 business days.

Right to Rectification

If any personal data we hold about you is inaccurate or out of date, you have the right to request its correction without delay.

Right to Erasure

You may request the deletion of your personal data after account closure and once the mandatory 5-year retention period has ended.

Right to Object

You have the right to object to the processing of your personal data for direct marketing or profiling purposes at any time.

Right to Data Portability

You have the right to receive your personal data in a machine-readable format for transfer to another service provider, should you wish to do so.

Right to Restrict Processing

In certain circumstances, you may request that on88 restrict the processing of your data while a dispute is being resolved.

To exercise any of the above rights, contact the on88 privacy team at support@on88.app with the subject line "Personal Data Rights Request". All requests will be acknowledged within 3 business days and resolved within 14 business days.


SECTION 1

Introduction & Scope of Privacy Policy

This Privacy Policy ("Policy") describes how on88 collects, uses, discloses, stores, and protects your personal information when you use the on88 platform, including its website, mobile applications, and all related services provided by on88.

This policy applies to all individuals who interact with on88 in any capacity โ€“ whether as a registered member, a user browsing the site without an account, or someone contacting our customer support team. This policy should be read together with Terms & Conditions on88, which forms part of the entire agreement between you and on88.

On88 acts as the data controller for personal information collected through our platform. This means on88 determines the purposes and means of processing your personal data, and is responsible for ensuring that such processing is carried out in accordance with applicable data protection laws, including the Personal Data Protection Act 2010 Malaysia.

on88 Core Principles: We only collect data that is strictly necessary to deliver our services, retain it for no longer than required, and protect it with the highest practicable level of security.


SECTION 2

Categories of Personal Data We Collect

On88 collects several categories of personal information depending on how you interact with our platform. Below is a full list of the data categories we may collect:

  • Identity Data: Full name, date of birth, Malaysian identity card number (MyKad/MyPR), gender, and a photo ID (when KYC verification is required).
  • Contact Data: Malaysian mobile number, email address, and current residential address.
  • Account Data: Username, password (stored as an unreadable hash), login history, and account activity.
  • Financial Transaction Data: Deposit and withdrawal history, betting activity, winnings, losses, and account balance. Please note that full payment method details such as bank account numbers or e-wallet information are not stored on on88 servers.
  • Gaming & Activity Data: Gaming history, bet types, sports followed (football, badminton, Live Casino, slots, virtual sports), game preferences, and session duration.
  • Technical Data: IP address, device type (Android, iPhone, desktop), operating system, web browser, screen resolution, and session data.
  • Communication Data: Records of conversations with the on88 customer support team via live chat, email, or WhatsApp.
  • Cookie & Tracking Data: Information collected through cookies, pixels, and other tracking technologies while you browse the on88 platform.

On88 does not collect sensitive data such as health information, religious beliefs, political views, or biometric data unless required by law or with your explicit consent. We do not require you to provide information beyond what is necessary to register for and use our services.


SECTION 3

How We Collect Personal Data

On88 collects personal information through several key channels:

  • Direct account registration: When you complete the on88 registration form, the information you enter is collected and stored.
  • Identity verification (KYC): When you go through the identity verification process for withdrawals or to meet compliance requirements, we collect additional documents and information.
  • Financial transactions: Each time you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, the transaction details (but not your full payment information) are recorded.
  • Platform usage: When you play slots, bet on Super League or EPL football, play baccarat, or use any on88 service, activity data is collected automatically.
  • Customer support communications: When you contact the on88 team, conversations are recorded for service quality and compliance purposes.
  • Cookies and tracking technologies: The on88 website uses session cookies and persistent cookies to maintain login status, language preferences, and a personalised user experience.
  • Third-party sources: In certain cases, on88 may receive information from authorised third-party identity verification partners for KYC purposes.

SECTION 4

How We Use Your Personal Data

On88 uses the personal data collected for the following legitimate and necessary purposes:

  • Member account management: Creating, verifying, and managing your on88 account, including the processing of deposits, withdrawals, and winnings in MYR.
  • Service provision: Ensuring all on88 services โ€“ Live Casino, slots, Sports Betting, virtual sports, and Baccarat โ€“ function properly for you.
  • Security & fraud prevention: Detecting and preventing fraudulent activity, money laundering, unauthorised access, and platform abuse.
  • Legal compliance: To fulfil legal obligations under the Personal Data Protection Act 2010 and other applicable laws.
  • Customer support: Providing effective technical support and Bahasa Malaysia customer service through live chat, email, and WhatsApp.
  • Service communications: Sending important notifications related to your account, transactions, changes to terms or policies, and security-related information.
  • Platform improvements: Analysing usage patterns to improve the interface, performance, and overall user experience of the on88 platform.
  • Responsible gaming: Monitoring gameplay patterns to identify members who may benefit from responsible gaming support.
  • Marketing (with consent): Sending promotional information, bonuses, and special on88 offers โ€“ but only to members who have given consent to receive marketing communications.

Right to Withdraw Consent: You may withdraw your consent to receive on88 marketing communications at any time by clicking the "unsubscribe" link in any of our promotional emails, or by contacting the on88 support team directly.


SECTION 5

Data Sharing With Third Parties

On88 does not sell members' personal information to any third party. However, in the course of operating the platform, we may share necessary personal information with the following categories of third parties, under strict confidentiality agreements:

  • Payment processors: Providers such as DuitNow, the FPX system, and e-wallet processors including Touch 'n Go, GrabPay, Boost, and ShopeePay receive the information required to process your financial transactions. These providers maintain their own privacy policies and security systems.
  • Game providers: Companies such as Evolution Gaming, Pragmatic Play, PG Soft, and SA Gaming that provide games to on88 may receive the technical data necessary to operate those games correctly.
  • Identity verification service providers: For KYC purposes, on88 uses certified third-party identity verification services that receive your verification documents.
  • IT & security service providers: Companies that assist on88 in operating, maintaining, and securing the platform's technical infrastructure.
  • Legal authorities: on88 will disclose personal information where required by law, court order, or direction from a legitimate regulatory authority.

All of on88's third-party partners are required to comply with data protection standards equivalent to or higher than those practised by on88. We periodically review our data sharing agreements to ensure these standards are upheld.

Important Notice: on88 does not share members' personal information with advertising companies, data brokers, or any entity for third-party marketing purposes. If you receive marketing communications claiming to be from on88 but did not sign up to receive them, please contact us immediately.


SECTION 6

On88 Data Security Measures

On88 implements a range of technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or accidental disclosure. The key security measures we maintain include:

  • 256-bit SSL encryption: All communications between your device and on88 servers are encrypted using 256-bit TLS/SSL protocols โ€“ the same standard used by Malaysia's online banking systems.
  • Secure password storage: Member passwords are never stored in plain text. We use a strong hashing function with a unique salt applied to each password.
  • Role-based access control: on88 staff only have access to the data required to carry out their respective roles. Data access is segmented according to job function.
  • 24/7 system monitoring: The on88 security team continuously monitors systems to detect any suspicious activity or intrusion attempts.
  • Periodic security audits: on88 conducts regular internal and external security audits to identify and address any vulnerabilities.
  • Incident response plan: on88 has a documented incident response procedure to address any data breaches swiftly and effectively.
  • Two-factor authentication (2FA): We provide and encourage the use of 2FA on all member accounts as an additional layer of security.

While on88 takes all reasonable steps to protect your data, no security system can be guaranteed to be 100% secure. We encourage you to take your own protective measures as well โ€” such as using a strong password, enabling 2FA, and never sharing your login credentials with anyone.


SECTION 7

Data Retention & Deletion

On88 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, while complying with applicable legal requirements. on88's general data retention guidelines are as follows:

  • Active accounts: Personal data is retained for the duration of your active membership with on88.
  • After account closure: Data is retained for 5 years following account closure to meet legal compliance obligations, including anti-money laundering (AML) requirements and any applicable tax obligations.
  • Financial transaction records: Deposit, withdrawal, and betting records are retained for 7 years in accordance with Malaysian financial regulatory requirements.
  • Customer support communication logs: Conversations with the on88 support team are retained for 2 years.
  • Technical data and system logs: Technical logs such as IP addresses and session activity are retained for 12 months.

Once the applicable retention period has expired, on88 will securely delete or anonymise your personal data in accordance with our documented data deletion procedures. Anonymised data (from which identifying information has been removed) may be retained for longer periods for analytics and platform improvement purposes.

If you wish to request deletion of your data before the mandatory retention period expires, you may do so by contacting support@on88.app. Please note, however, that on88 may be unable to fulfil such requests where a legal obligation requires the data to be retained.


SECTION 8

Use of Cookies & Tracking Technologies

The on88 platform uses cookies and similar tracking technologies to enhance the user experience and keep platform operations running smoothly. The following are the types of cookies on88 uses:

  • Essential session cookies: These cookies are required for core platform functions such as maintaining your login session, remembering your language preferences, and ensuring session security. They cannot be disabled without affecting the functionality of the platform.
  • Preference cookies: These cookies store your personal preferences, such as game settings, display options, and other information that helps personalise your experience on on88.
  • Analytics cookies: on88 uses analytics cookies to understand how players interact with the platform โ€” which pages are visited most, how long a typical gaming session lasts, and where users encounter difficulties. This helps us continuously improve the platform.
  • Security cookies: These cookies help detect and prevent fraudulent activity, automated bots, and unauthorised access to on88 member accounts.

Cookie Controls: You can control or disable cookies through your web browser settings. Please note, however, that disabling certain cookies may affect the functionality of the on88 platform. Cookies required for security and login cannot be disabled without losing access to your account.

On88 does not use third-party advertising cookies or tracking pixels that allow external ad companies to build marketing profiles based on your activity on the on88 platform.


SECTION 9

Children's Data Protection

The on88 platform is strictly for adults aged 18 and above. on88 does not knowingly collect or process personal data from individuals under 18 years of age under any circumstances.

Should on88 discover that we have inadvertently collected data from a person under the age of 18, we will take immediate action to delete that data and close the account in question. Parents or guardians who become aware that a child in their care has registered an on88 account without authorisation should contact us immediately at support@on88.app.

Child Protection: If you suspect someone under the age of 18 is using the on88 platform, please contact our support team immediately. on88 takes child protection seriously and will act swiftly on any such report.


SECTION 10

Your Data Protection Rights

Under Malaysia's Personal Data Protection Act 2010 and on88's own policies, you have the following rights with respect to your personal data:

  • Right to be informed: The right to know how your personal data is collected and used by on88 โ€” which is precisely what this Privacy Policy sets out.
  • Right to access: The right to request a copy of the personal data that on88 holds about you.
  • Right to rectification: The right to request correction of personal data that is inaccurate or incomplete.
  • Right to erasure: The right to request the deletion of your personal data under certain circumstances.
  • Right to restrict processing: The right to request that on88 restrict the processing of your data under certain circumstances.
  • Data portability rights: The right to receive your data in a structured, machine-readable format.
  • Right to object: The right to object to the processing of your personal data for direct marketing purposes.
  • Right to withdraw consent: The right to withdraw consent you have given to on88 to process your data at any time.

To exercise any of these rights, email support@on88.app with the subject line "Personal Data Rights Request", along with your full name, on88 username, and specific details of your request. on88 will acknowledge your request within 3 business days and resolve it within 14 business days of receipt.


SECTION 11

Data Breach Response Procedure

On88 maintains a documented incident response procedure to address any data breaches promptly and effectively. In the event of a data breach that may affect your rights and freedoms, on88 is committed to:

  • Identifying and containing any breach as quickly as possible.
  • Notifying affected members within 72 hours of detecting a breach, where that breach poses a high risk to your rights.
  • Reporting to the relevant authorities as required by applicable law.
  • Providing clear information to affected members about the nature of the breach, the data involved, and the steps being taken.
  • Conducting a thorough investigation and implementing preventive measures to avoid similar breaches in the future.

Data breach notifications will be sent to a member's registered email address and via in-platform notifications on on88. on88 encourages all members to ensure their registered email address is current and active.


SECTION 12

Privacy Policy Amendments & Updates

On88 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or changes to the services we offer. The "Updated" date at the top of this page indicates when the latest version was published.

For material changes to this Privacy Policy โ€“ particularly those affecting how we use your personal data โ€“ on88 will endeavour to notify active members by email or in-platform notification at least 14 days before the changes take effect. This gives you sufficient time to review the updates and make an informed decision about your continued use of the on88 platform.

Continued use of the on88 platform after any amendments to the Privacy Policy take effect will be considered acceptance of the updated policy. If you do not agree with any changes, you should stop using the platform and request account closure.


SECTION 13

Contact the on88 Privacy Team

If you have any questions, concerns, or complaints regarding this Privacy Policy or how on88 handles your personal data, please reach out to us through the following channels:

  • Privacy Email: support@on88.app (use the subject line "Privacy Policy Inquiry")
  • Live Chat: Available 24 hours a day, 7 days a week via the on88 platform โ€“ average response time under 5 minutes
  • Service language: Bahasa Malaysia and English

We take all privacy-related enquiries and complaints seriously. on88 is committed to responding within 3 business days and resolving privacy issues within 14 business days from the date the request is received. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

Frequently Asked Questions: For quick answers to common questions about your account, transactions, and on88 policies, please visit the Frequently Asked Questions which contains a comprehensive guide for Malaysia players.


Cookies & Tracking Technologies We Use

An overview of on88's tracking technologies and how they work

Session Security Cookies User Preference Cookies Platform Analytics Cookies Fraud Prevention Cookie Language Preference Cookie

On88 does not use third-party advertising cookies or tracking pixels that allow external marketing companies to build ad profiles based on your activity. All tracking technologies we use are strictly for platform operations and security purposes.


Your Data Is Safe with on88 โ€” Join Us Today

Your privacy and data security are a top priority at on88. Register for free and enjoy over 1,200 games โ€“ Live Casino, slots, Sports Betting, virtual sports, and Baccarat โ€“ on a secure, transparent platform built specifically for Malaysian players.

Touch 'n Go GrabPay DuitNow FPX

256-bit SSL Encryption  |  Data never sold to third parties  |  24/7 privacy support


Bahasa Melayu