AFB88 Privacy Policy

This Privacy Policy ("Policy") is issued by AFB88 ("the Company", "we", "us", "our") and governs the collection, use, storage, disclosure, and protection of personal data belonging to users ("you", "your", "the Player") of the AFB88 online gaming platform accessible at https://afb88.cam (the "Platform").

AFB88 is an internationally licensed online gaming operator providing sports betting, live casino, slots, lottery, and related services primarily to players in Malaysia and the broader South-East Asian region. All financial transactions on the Platform are conducted in Malaysian Ringgit (MYR) via local payment methods including Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX.

By registering an account, accessing the Platform, or transacting with AFB88 in any capacity, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you must cease using the Platform immediately.

The following terms carry the meanings set out below throughout this Policy:

• "Personal Data" means any information that identifies or can be used to identify a natural person, directly or indirectly — including but not limited to name, identification number, email address, contact number, financial account details, and IP address.
• "Processing" means any operation performed on Personal Data — including collection, recording, storage, use, disclosure, transmission, deletion, or destruction.
• "Data Controller" means AFB88, which determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party engaged by AFB88 to process Personal Data on our behalf, under written data processing agreements.
• "Consent" means a freely given, specific, informed, and unambiguous indication of the data subject's agreement to the processing of their Personal Data for a stated purpose.
• "KYC" means Know Your Customer — the identity verification process conducted by AFB88 prior to processing withdrawals, consistent with international anti-money laundering (AML) obligations.
• "Cookies" means small text files stored on your device by the AFB88 Platform for functional, analytical, or marketing purposes.

AFB88 collects Personal Data from you through several channels, as detailed below. We collect only what is necessary for the stated purpose.

• IP address and approximate geolocation (used for fraud prevention and access control);
• Device type, operating system, browser type and version;
• Session data including login timestamps, pages visited, and time spent on each section of the Platform;
• Betting and gaming activity including wagers placed, games accessed, and transaction history;
• Cookie identifiers and tracking pixels where consent has been obtained.

AFB88 may receive limited Personal Data from trusted third parties including payment processors (such as Maybank, CIMB, DuitNow, FPX), identity verification service providers, fraud detection partners, and, where applicable, marketing affiliates who have obtained your consent to share your contact details with us.

AFB88 processes your Personal Data strictly for the following purposes:

• Account Management: To create, maintain, and secure your AFB88 account, including authentication, password management, and account recovery;
• Transaction Processing: To process deposits and withdrawals in MYR via Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and cryptocurrency;
• Regulatory Compliance: To fulfil KYC/AML obligations, including identity verification before processing withdrawals and reporting obligations under applicable regulations;
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, and other security threats;
• Responsible Gambling: To enforce responsible gambling tools including deposit limits, loss limits, self-exclusion, and to identify players who may be at risk of gambling-related harm;
• Customer Support: To respond to your enquiries, resolve disputes, and improve our customer service quality;
• Platform Improvement: To analyse usage data and improve the design, functionality, and performance of the AFB88 Platform;
• Marketing Communications: To send you promotional offers, bonus notifications, and relevant platform updates — only where you have provided explicit consent to receive such communications, with a clear opt-out mechanism in every message.

AFB88 processes your Personal Data on the following legal bases:

• Contractual Necessity: Processing required to perform our contractual obligations to you under our Terms & Conditions — including account operation, transaction processing, and game provision;
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations — including KYC verification, AML reporting, and data retention mandates;
• Legitimate Interests: Processing conducted in pursuit of AFB88's legitimate business interests — including fraud prevention, platform security, and analytics — where those interests are not overridden by your fundamental rights and freedoms;
• Consent: Processing carried out based on your freely given, specific, and informed consent — primarily for marketing communications and non-essential cookies. You may withdraw consent at any time without detriment to your account.

AFB88 does not sell your Personal Data. We share Personal Data with third parties only in the following limited circumstances:

We engage trusted third-party service providers to process Personal Data on our behalf. These include: payment processing partners (Maybank, CIMB, Public Bank, Hong Leong, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX operators); identity verification and KYC service providers; fraud detection and cybersecurity vendors; cloud hosting infrastructure providers; and customer support platforms. All service providers are bound by written data processing agreements that prohibit use of your data for any purpose other than providing services to AFB88.

AFB88 may disclose Personal Data to regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where required to do so by applicable law, court order, or regulatory directive. This includes mandatory AML reporting obligations and compliance with requests from financial intelligence units.

In the event of a merger, acquisition, restructuring, or sale of all or part of AFB88's business assets, your Personal Data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and any changes to this Privacy Policy that result from it.

AFB88 retains your Personal Data for only as long as is necessary for the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations.

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

AFB88 implements a comprehensive array of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport Security: All data transmitted between your device and the AFB88 Platform is encrypted using 256-bit SSL/TLS protocols. Our website operates exclusively over HTTPS;
• Data at Rest: Personal Data stored on AFB88 servers is encrypted at rest using industry-standard encryption algorithms;
• Access Controls: Access to Personal Data is restricted to AFB88 personnel and authorised service providers who require it to perform their roles. All staff undergo data protection training;
• Two-Factor Authentication: AFB88 recommends and supports two-factor authentication (2FA) on all player accounts. We use 2FA internally for all staff access to systems containing Personal Data;
• Fraud Detection Systems: Automated transaction monitoring and anomaly detection systems are deployed to identify and respond to suspicious account activity in real time;
• Penetration Testing: Our infrastructure undergoes regular third-party security assessments and penetration testing.

AFB88 uses cookies and similar tracking technologies on the Platform. Cookies are small data files stored on your device that help us remember your preferences, analyse usage patterns, and deliver relevant content.

You can control non-essential cookies through our on-site cookie preference centre, accessible via the cookie banner displayed on first visit. You may also control cookies through your browser settings. Note that disabling strictly necessary cookies will impair Platform functionality and may prevent you from accessing certain features, including your account and deposit/withdrawal functions.

Subject to applicable law and certain limited exceptions, you hold the following rights with respect to your Personal Data held by AFB88:

The AFB88 Platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect, process, or store Personal Data belonging to individuals under 21 years of age.

During the registration process, all users are required to declare that they are at least 21 years of age and to submit date-of-birth information that is subject to verification. Where AFB88 has reason to believe that Personal Data has been provided by an individual under 21 — whether through our automated checks, KYC review, or a third-party report — we will take the following steps without delay:

• Immediately suspend the associated account pending investigation;
• Void all bets and gaming activity associated with the account;
• Delete all Personal Data associated with the account within 30 days, except where legal retention obligations apply;
• Refund any real-money deposits made to the account where fraud was not involved.

As an internationally licensed gaming operator, AFB88 may transfer certain Personal Data to countries outside Malaysia for processing by our service providers — for example, cloud hosting infrastructure, identity verification platforms, or fraud detection systems that operate internationally.

Where Personal Data is transferred outside Malaysia to jurisdictions that may not offer an equivalent level of data protection, AFB88 will ensure that appropriate safeguards are in place prior to the transfer. These safeguards may include:

• Standard contractual clauses (SCCs) approved by relevant data protection authorities;
• Data processing agreements that impose equivalent data protection obligations on the receiving party;
• Transfers to jurisdictions recognised as providing adequate data protection under applicable frameworks.

For further information regarding the safeguards applied to international data transfers from AFB88, please contact us at [email protected].

AFB88 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where changes are material — meaning they significantly affect how we collect, use, or share your Personal Data — we will provide advance notice through one or more of the following channels:

• A prominent notice on the AFB88 homepage or Platform;
• An email notification to your registered email address at least 14 days before the changes take effect;
• An in-platform notification displayed upon your next login.

Your continued use of the AFB88 Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the amended Policy, you must cease using the Platform and request account closure.

For any questions, concerns, complaints, or data rights requests related to this Privacy Policy or the processing of your Personal Data by AFB88, please contact us through the following channels:

• Email: [email protected] — include "Privacy Enquiry" in the subject line for prompt routing to our data protection team
• Live Chat: Available 24/7 through the AFB88 website — ask to be connected to our data protection team for privacy-related matters
• Response Time: We aim to acknowledge all privacy requests within 3 business days and resolve them within 30 days. Complex requests may take longer, in which case we will keep you informed of progress.

Our support team serves players across Malaysia — including Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, Johor Bahru, and all other regions — 24 hours a day, seven days a week, including all Malaysian public holidays.