Ali88 Privacy Policy — Malaysia Member Personal Data Protection

1 Introduction

Welcome to the ali88 Privacy Policy. This document clearly explains how the ali88 platform, operating under the domain ali88.wine collecting, using, storing, and protecting your personal information as a registered member or visitor to our website.

Your privacy is not merely a legal obligation to us — it is a core value that shapes how we design our systems, train our staff, and make operational decisions. By registering an account or continuing to browse the ali88 platform, you agree to the data handling practices described in this document.

This Privacy Policy should be read together with Terms and Conditions ali88, which forms part of the overarching agreement between you and our platform.

2 Data We Collect

Ali88 collects your personal information through several channels as you interact with our platform. The types of data collected are as follows:

Ali88 does not collect sensitive information such as medical data, religious beliefs, political views, or biometric information, unless specifically required by applicable law.

3 How We Use Your Data

Every piece of data collected by ali88 is used for a legitimate and specific purpose. We do not process your data beyond the scope of the purposes stated below:

• Account Management — To create, verify, and manage your member account.
• Transaction Processing — To process deposits, withdrawals, and all financial transactions on the platform.
• Identity Verification (KYC) — To verify that member identities are legitimate for security and compliance purposes.
• Customer Support — To handle inquiries, complaints, and assistance requests from members.
• Platform Security — To detect and prevent fraud, money laundering, and other unlawful activities.
• Service Improvement — To analyse usage patterns in order to improve user experience and platform quality.
• Marketing Communications — To send promotional information and exclusive offers to members who have given their consent.
• Legal Compliance — To fulfil reporting and compliance obligations under applicable Malaysian law.

4 Legal Basis for Data Processing

Ali88 only processes your personal data when there is a valid legal basis for doing so. The bases we rely on are:

• Contract Performance — Data processing is necessary to provide the services you request, including account management and transaction processing.
• Your Consent — For specific purposes such as marketing communications, we only process data with your explicit consent.
• Legitimate Interest — For security, fraud prevention, and platform improvement purposes where our interests do not override your privacy rights.
• Legal Obligation — Where data processing is required to comply with legal obligations such as the Anti-Money Laundering Act 2001.

5 Data Sharing with Third Parties

Ali88 does not sell or rent members' personal data to any third party. However, in certain limited situations, we may share your data with the following parties for legitimate operational purposes:

• Payment Processing Provider — Financial institutions and payment processors that assist us in securely managing your deposit and withdrawal transactions.
• KYC Service Provider — Trusted identity verification companies to assist with the member identity verification process.
• Game Provider — Third-party game developers may receive game session data required to operate the games you play.
• Relevant Authorities — Law enforcement agencies or regulatory bodies when required by law or court order.

All third parties who receive member personal data are bound by strict confidentiality agreements and are permitted to use that data only for the specified purposes. ali88 ensures that these third parties adhere to data protection standards equivalent to our own.

6 Data Security Measures

Ali88 implements a comprehensive range of technical and organisational measures to protect members' personal data from unauthorised access, loss, misuse, or disclosure:

• Data Encryption in Transit — All communications between your device and our platform use 256-bit SSL/TLS encryption.
• Data Encryption at Rest — Sensitive data stored in our databases is encrypted using industry-grade encryption algorithms.
• Role-Based Access Control — Access to member data is restricted to staff with a legitimate operational need and is controlled through multi-factor authentication systems.
• Regular Security Audits — ali88 conducts regular penetration testing and security audits carried out by independent experts.
• Incident Response Plan — We have tested incident response procedures in place to address any data breach swiftly and effectively.

While we take all reasonable steps to protect your data, no security system can guarantee 100% absolute protection. We encourage members to help keep their accounts secure by using strong passwords and not sharing login credentials.

7 Data Retention Period

Ali88 retains members' personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law:

• Active Account Data — Retained for the duration that your account remains active and in use.
• Transaction & Financial Data — Retained for a minimum of 7 years after a transaction occurs, in line with legal requirements for financial records in Malaysia.
• KYC Records — Retained for a minimum of 5 years after account closure, in accordance with anti-money laundering compliance requirements.
• Security Log — Retained for 12 months for investigation and threat detection purposes.
• Marketing Data — Retained until you withdraw consent or request deletion.

When data is no longer needed and there is no legal obligation to retain it, ali88 will securely delete or anonymise that data using appropriate methods.

8 Your Rights Under PDPA

As an ali88 member subject to Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data: