FL88 Privacy Policy

01 Introduction

FL88 ("FL88", "we", "us", "our") operates the online gaming and sports betting platform accessible at fl88.casa (the "Website" or "Platform"). We are committed to protecting the privacy and personal data of every individual who registers an account, visits the Website, or otherwise interacts with our services ("Player", "User", "you").

This Privacy Policy ("Policy") sets out in clear and transparent terms how FL88 collects, receives, stores, processes, uses, shares, and protects personal data in connection with the provision of our services. It also explains the rights you hold in relation to your personal data and how to exercise those rights.

This Policy applies to all personal data collected by FL88 through the Website, mobile interfaces, live chat support interactions, email correspondence, and any other channel through which you interact with us. It should be read in conjunction with our Terms & Conditions and Responsible Gambling Policy.

02 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, identification number, contact details, IP address, and financial information.
• "Processing" — any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — FL88, as the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" — any third-party service provider that processes personal data on behalf of FL88 pursuant to a written data processing agreement.
• "KYC Data" — identity verification documentation including government-issued identification (MyKad, passport), proof of address, and payment method verification provided during the Know Your Customer process.
• "Cookies" — small text files placed on your device by the Website for the purposes of session management, personalisation, and analytics.

03 Data We Collect

FL88 collects personal data across several categories, depending on how you interact with the Platform. The following table provides a structured overview of the data categories collected, the source of each, and the primary purpose.

3.1 Data We Do Not Collect

FL88 does not collect, store, or process full payment card numbers. Payment card transactions, where applicable, are processed directly by PCI DS-compliant payment processors. FL88 does not collect biometric data, health data, or sensitive personal data beyond what is strictly required for identity verification and responsible gambling compliance.

04 How We Use Your Data

FL88 uses your personal data for the following purposes:

1. Account Management: To create, verify, maintain, and administer your FL88 player account, including authentication and password recovery.
2. Service Delivery: To provide access to games, sports betting markets, live casino tables, bonuses, VIP programmes, and all other platform features.
3. Payment Processing: To facilitate deposits and withdrawals via Malaysian payment channels including Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX.
4. Identity Verification (KYC): To verify your identity and age (21+ requirement) as mandated by our international gaming licence obligations and responsible gambling standards.
5. Anti-Money Laundering (AML) Compliance: To screen transactions, monitor account activity, and report suspicious behaviour to relevant authorities in accordance with applicable financial crime prevention requirements.
6. Responsible Gambling: To monitor player behaviour for indicators of problem gambling, apply self-imposed limits, and enforce self-exclusion requests.
7. Customer Support: To respond to your enquiries, complaints, and support requests submitted via live chat or email.
8. Communications: To send transactional communications (deposit confirmations, withdrawal notifications, account alerts) and, where you have consented, promotional communications regarding bonuses and offers.
9. Platform Improvement: To analyse usage patterns, troubleshoot technical issues, and improve the quality, performance, and security of the FL88 platform.
10. Legal Compliance: To comply with applicable laws, regulatory requirements, court orders, and the directives of competent authorities.

05 Legal Basis for Processing

FL88 processes your personal data one or more of the following legal bases, depending on the nature and purpose of the processing activity:

• Contractual Necessity: Processing required to perform the contract between you and FL88 — i.e., to provide the gaming services you have registered to use.
• Legal Obligation: Processing necessary to comply with our obligations under applicable laws, including KYC/AML requirements and licensing conditions.
• Legitimate Interests: Processing in pursuit of FL88's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where you have provided express consent to a specific processing activity — for example, receipt of promotional communications. You may withdraw consent at any time by contacting our support team, without affecting the lawfulness of processing conducted prior to withdrawal.

06 Data Sharing & Disclosure

FL88 does not sell your personal data to third parties. Personal data is shared only in the following circumstances and only to the extent strictly necessary:

6.1 Service Providers

FL88 engages third-party service providers to support platform operations, including payment processors (handling MYR transactions via FPX, DuitNow, and e-wallet networks), game content providers, cloud hosting infrastructure providers, identity verification (KYC) service providers, and customer support platform vendors. All service providers are bound by contractual data processing agreements and are prohibited from using your data for any purpose other than the specific service they are contracted to deliver.

6.2 Legal and Regulatory Authorities

FL88 may disclose personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or courts where required to do so by law, court order, or where we reasonably believe disclosure is necessary to prevent fraud, financial crime, or harm to persons.

6.3 Business Transfers

In the event of a merger, acquisition, reorganisation, or sale of FL88 assets, personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection undertakings.

07 Cookies & Tracking Technologies

The FL88 platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure user experience. Cookies are small data files stored on your device by your browser.

7.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for platform functionality, including session authentication and security token management. These cannot be disabled without impairing platform use.
• Performance & Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate and use the platform, enabling us to identify technical issues and improve service quality.
• Functional Cookies: Used to remember your preferences such as language settings, game display options, and responsible gambling reminders.
• Marketing Cookies: Used to deliver relevant promotional communications where you have consented to receive them. These may track visits across sessions.

7.2 Managing Cookies

You may configure your browser settings to refuse or delete cookies. Please be aware that disabling certain cookies may impair the functionality of the FL88 platform, including session persistence and security features. Instructions for managing cookies are available in your browser's help documentation.

08 Data Retention

FL88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention principles apply:

• Active Account Data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, to meet AML/KYC record-keeping requirements.
• Transaction Records: Financial transaction records (deposits, withdrawals, wagering history) are retained for a minimum of seven (7) years in accordance with standard financial record-keeping obligations.
• Communications Data: Live chat and email support records are retained for a minimum of two (2) years from the date of the interaction.
• Marketing Consent Records: Records of your marketing consent preferences are retained for as long as necessary to demonstrate compliance with applicable rules.
• Self-Exclusion Records: Records of self-exclusion or responsible gambling interventions are retained permanently to prevent re-registration during an active exclusion period.

When personal data is no longer required, it is securely deleted or anonymised in accordance with FL88's data disposal procedures.

09 International Data Transfers

FL88 operates internationally and may transfer your personal data to service providers and infrastructure located in jurisdictions outside Malaysia. Where such transfers occur, FL88 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection law.

Safeguards employed for international transfers include contractual data processing clauses, data transfer agreements, and selection of service providers that maintain internationally recognised security certifications. FL88 does not transfer personal data to jurisdictions lacking adequate data protection frameworks without ensuring compensatory safeguards are in place.

10 Your Rights

As a data subject, you hold the following rights in relation to the personal data FL88 holds about you. Requests to exercise these rights should be submitted to our support team and will be processed within 30 days, subject to identity verification.

10.1 Right of Access

You have the right to request a copy of the personal data FL88 holds about you, along with information about how it is processed. A Subject Access Request (SAR) can be submitted via email to our support address. We will provide the requested information within 30 days of verifying your identity.

10.2 Right to Rectification

If any personal data FL88 holds about you is inaccurate or incomplete, you have the right to request correction. Minor corrections (e.g., contact details) may be made directly through your account settings. Corrections to KYC identity data require submission of updated supporting documentation.

10.3 Right to Erasure

You may request that FL88 delete your personal data. This right is subject to overiding legal retention obligations — for example, transaction records required to be retained under AML regulations cannot be deleted on request. Where erasure is not possible in full, FL88 will anonymise data to the extent permissible.

10.4 Right to Withdraw Marketing Consent

If you have consented to receive promotional communications from FL88, you may withdraw this consent at any time by contacting our support team or using the unsubscribe mechanism in any marketing email. Withdrawal of marketing consent does not affect the lawfulness of prior processing or the continued delivery of transactional communications.

11 Data Security

FL88 implements a comprehensive set of technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures include:

• 256-bit Transport Layer Security (TLS/SSL) encryption across all data communications between your device and the FL88 platform.
• Encrypted storage of sensitive personal and financial data at rest using industry-standard encryption algorithms.
• Strict role-based access controls limiting employee access to personal data to the minimum necessary for their role.
• Multi-factor authentication requirements for staff accessing administrative systems containing personal data.
• Regular internal and third-party security audits, penetration testing, and vulnerability assessments.
• Incident response procedures including prompt notification processes in the event of a data breach that poses a risk to your rights and freedoms.

While FL88 takes all reasonable precautions, no electronic transmission or data storage system can be guaranteed to be 100% secure. You are responsible for maintaining the security of your own Account credentials and for notifying us promptly of any suspected unauthorised access.

12 Children's Privacy

The FL88 platform is strictly for individuals who are 21 years of age or older. FL88 does not knowingly collect or process personal data from individuals under the age of 21. If we become aware that personal data has been collected from an underage individual, we will take immediate steps to delete that data and close the relevant account.

Parents or guardians who have reason to believe that their child (under 21) has registered an account or submitted personal data to FL88 should contact our support team immediately at [email protected] (plain text — not a clickable link).

13 Amendments to This Policy

FL88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or platform functionality. Material changes will be communicated to registered players via the email address associated with their account, and/or by a prominent notice on the Website, prior to the changes taking effect.

We encourage you to review this Policy periodically. The "Last Updated" date at the top of the table of contents indicates the most recent revision. Continued use of the FL88 platform following the effective date of any updated Policy constitutes your acceptance of the revised terms.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy, the personal data FL88 holds about you, or your data rights, please contact us through any of the following channels:

• 24/7 Live Chat: Available directly within your member dashboard at any time after logging into your FL88 account.
• Email (plain text — not a link): [email protected]

When submitting a data rights request, please include your full registered name, the email address associated with your FL88 account, and a clear description of your request. Identity verification will be required before any data is disclosed, corrected, or deleted.

FL88 serves players across Malaysia including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and East Malaysian states. Our support team operates24 hours a day, seven days a week, and will acknowledge your privacy-related request within 48 hours.