Privacy Policy

Alba88 ("we", "us", "our", "the Platform") respects your privacy and is committed to protecting the personal data you entrust to us when you register an account, make a deposit, place a wager, or otherwise interact with our online casino and sports betting platform at https://alba88.asia.

This Privacy Policy ("Policy") describes the types of personal data we collect from members and visitors, the purposes for which that data is processed, the circumstances under which it may be shared with third parties, and the rights available to you as a data subject.

This Policy applies to all processing activities carried out by Alba88 in connection with the services we provide to Malaysian players and all other users of our platform, regardless of the device or method of access used. It should be read alongside our Terms & Conditions.

Alba88 collects personal data in the categories set out below. We collect only what is necessary for the purposes described in this Policy and do not engage in excessive or speculative data collection.

Alba88 collects personal data through the following channels and methods:

• Direct Registration: Information you provide when creating an account, completing KYC verification, or updating your profile settings.
• Transaction Processing: Data generated when you make deposits or withdrawals via Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, or USDT TRC20.
• Platform Interaction: Gameplay data, betting history, and session logs generated through your use of casino games, live dealer tables, and sports betting markets.
• Customer Support: Information shared during live chat conversations, email correspondence, or support ticket submissions.
• Automated Technologies: Technical data collected automatically via cookies, web beacons, server logs, and similar tracking technologies as described in Section 8.
• Third-Party Sources: Identity verification data from KYC service providers, fraud risk scores from anti-fraud partners, and publicly available sanctions and PEP screening databases where required by AML obligations.

Alba88 processes your personal data for the following specific purposes:

1. Account Management: To create, maintain, and administer your registered member account, including processing login credentials, account preferences, and security settings.
2. Payment Processing: To facilitate MYR deposits and withdrawals via your chosen payment method, reconcile transactions, and maintain accurate financial records.
3. Identity Verification (KYC): To verify your identity and age in accordance with our obligations, prevent underage gambling, and authenticate ownership of payment methods used for withdrawals.
4. Fraud Prevention & AML Compliance: To detect and prevent fraudulent activity, money laundering, multiple account creation, and other prohibited conduct described in our Terms & Conditions.
5. Responsible Gambling: To monitor gaming behaviour for signs of problem gambling, enforce deposit limits and self-exclusion requests, and provide responsible gambling support where appropriate.
6. Customer Support: To respond to your queries, resolve disputes, investigate complaints, and maintain records of support interactions.
7. Platform Security: To protect the integrity of our systems, detect unauthorised access, and investigate security incidents.
8. Personalisation & Marketing: To tailor promotional offers, bonus recommendations, and game suggestions to your preferences — subject to your communication preferences as set in your account.
9. Legal & Regulatory Compliance: To meet our obligations under applicable laws, respond to lawful requests from regulatory or law enforcement authorities, and maintain records as required.

Alba88 processes your personal data on the following legal bases under applicable data protection law, including the Malaysian Personal Data Protection Act 2010 (PDPA):

• Contractual Necessity: Processing required to perform the contract between you and Alba88 — including account creation, payment processing, KYC verification, and game service delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML obligations, age verification requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing carried out in pursuit of Alba88's legitimate business interests — including fraud prevention, platform security, responsible gambling monitoring, and service improvement — where those interests are not overridden by your fundamental privacy rights.
• Consent: Processing for marketing communications and certain personalisation features, which you may withdraw at any time without affecting the lawfulness of prior processing.

Alba88 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the following limited circumstances:

• Payment Processors: We share financial data with licensed payment processing partners — including those handling Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, and USDT TRC20 transactions — strictly for the purpose of executing your payment instructions.
• KYC & Identity Verification Providers: We share identity documentation with regulated KYC service providers to verify your identity and age in accordance with our obligations.
• Fraud Detection & AML Partners: We share technical and transaction data with anti-fraud and AML compliance providers who assist us in identifying and preventing illicit activity.
• Game Software Providers: Game providers whose titles are hosted on the Alba88 platform may receive technical session data necessary to deliver and certify their game outcomes.
• Legal and Regulatory Authorities: We will disclose personal data to competent regulatory bodies, law enforcement agencies, or courts where we are legally compelled to do so or where disclosure is necessary to prevent serious harm.
• Corporate Transactions: In the event of a merger, acquisition, or sale of substantially all of Alba88's assets, member data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third-party data processors are contractually bound to process your data only for the purposes specified by Alba88, to maintain appropriate security standards, and to comply with applicable data protection laws.

Alba88 uses cookies and similar tracking technologies to operate and improve our platform. The types of cookies we use are as follows:

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use key platform features. Alba88 does not use third-party advertising cookies or retargeting pixels.

Alba88 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account and Identity Data: Retained for the duration of your membership plus a minimum of five (5) years following account closure, in compliance with AML record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of seven (7) years from the date of transaction, in accordance with standard financial record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years following account closure or the date of the last transaction, whichever is later.
• Gaming and Betting History: Retained for a minimum of three (3) years for dispute resolution and responsible gambling monitoring purposes.
• Customer Support Records: Retained for three (3) years from the date of the support interaction.
• Marketing Communication Preferences: Retained until you withdraw consent, plus a reasonable period to process opt-out requests.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data destruction procedures.

Alba88 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our platform
• Encrypted storage of sensitive personal data and payment credentials at rest
• Hashed and salted storage of account passwords — we never store passwords in plain text
• Two-factor authentication (2FA) available for all member accounts
• Regular penetration testing and vulnerability assessments by independent security specialists
• Role-based access controls ensuring staff access only the data necessary for their specific role
• Comprehensive audit logging of all access to sensitive member data

Under applicable data protection law, including the Malaysian PDPA, you hold the following rights with respect to your personal data held by Alba88. You may exercise any of these rights by contacting us at [email protected]:

We will respond to all valid data subject requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it. There is no charge for submitting a data subject request. We may ask you to verify your identity before processing your request.

The Alba88 platform is strictly for individuals aged 21 years and above. We do not knowingly collect or process personal data from individuals under the age of 21, and we do not permit minors to register accounts or access our gaming services.

All registration attempts are subject to age verification. Where we discover that personal data has been collected from a person under the age of 21, that data will be deleted immediately, the associated account will be permanently closed, and any deposits made will be returned in accordance with our responsible gambling obligations.

If you are a parent or guardian and believe that a person under your care has registered on the Alba88 platform, please contact us immediately at [email protected] so that we may take appropriate action.

As an online platform serving Malaysian players, Alba88 may process or store personal data using infrastructure or third-party processors located in jurisdictions outside Malaysia. Where such transfers occur, Alba88 takes the following steps to ensure your data remains adequately protected:

• Transfers are limited to countries or organisations that provide an adequate level of data protection as assessed by applicable legal standards
• Where transfers are made to processors in other jurisdictions, appropriate contractual safeguards (such as data processing agreements containing standard contractual clauses) are put in place
• We conduct due diligence on all international data processors to verify their security practices and legal compliance before engagement

By using the Alba88 platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Malaysia, in accordance with the protections described above.

Alba88 reserves the right to update or amend this Privacy Policy at any time. Material changes — particularly those affecting how we use your personal data or the rights available to you — will be communicated to registered members via email to the address on file or via a prominent notice on the platform, at least 14 days before the changes take effect.

The "Last Updated" date displayed at the top of this Policy reflects the date of the most recent revision. We recommend reviewing this Policy periodically to remain informed of how we handle your personal data.

Your continued use of the Alba88 platform following the effective date of any amended Policy constitutes your acceptance of the revised terms. If you object to any changes, please contact us before the effective date to discuss your options, including account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by Alba88, please contact our Data Protection team through the following channels:

• Live Chat: Available 24/7 directly within the Alba88 platform
• Email: [email protected] — please mark your subject line "Privacy Request" or "Data Subject Request" for prioritised routing

Our Data Protection team is available to assist members from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across all Malaysian states with privacy-related enquiries in English. We aim to acknowledge all privacy correspondence within 2 business days and to respond substantively within 30 calendar days.