Privacy Policy Habibi88 – Our Commitment to Data Protection for Malaysian Players

Habibi88 collects various types of personal information across different contexts throughout your interactions with our platform. We only collect information that is genuinely necessary for the stated purposes and do not gather any excessive or irrelevant data.

Information you provide directly to us:

• Account Registration Information: Full name, national identity card number (MyKad), date of birth, mobile number, email address, and account password.
• Profile Information: Username, language preference, communication preferences, and gaming preference information.
• Identity Verification (KYC) Information: A copy of your identity card, recent proof of address (utility bill or bank statement), and in some cases a selfie for verification purposes.
• Payment Information: Details of the payment method used – whether Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, or FPX – including the associated account number. We do not store credit or debit card information directly.
• Communications: Messages you send to our customer support team via live chat, email, or WhatsApp.

Information collected automatically when you use the platform:

• Log & Activity Data: IP address, web browser type, device operating system, pages visited, time of visit, and actions taken within the platform.
• Game Data: A record of each gaming session, including start and end times, games played, total bets placed, winnings, and losses.
• Transaction Data: Complete deposit and withdrawal history, including timestamps, amounts, payment methods, and transaction status.
• Device Data: Information about the mobile device or computer used to access the platform, including device model, operating system, and unique device identifier.
• Cookie Data: Information stored via cookies and similar tracking technologies — explained further in Section 5.

Habibi88 uses the information collected for several clear and legitimate purposes. Each use of data has a defensible legal basis, whether grounded in contract, legitimate interest, legal obligation, or your consent.

Habibi88 will not use your data for purposes other than those stated above without informing you in advance and, where necessary, obtaining your fresh consent. If you would like to know more about the legal basis for any specific data use, please contact us through the channels set out in Section 8.

Habibi88 does not sell, rent, or trade your personal data to any third party. However, there are limited situations where your data may need to be shared with other parties to enable us to provide the services you use.

Third parties that may receive your data under limited circumstances:

• Payment Service Providers: Payment gateways handling Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and FPX transactions require access to relevant transaction information in order to process payments. These providers are bound by strict confidentiality obligations.
• Gaming Service Providers: Third-party game providers may receive anonymised player identifiers to enable seamless game integration. Data shared is kept to a minimum and does not include any personally identifiable information.
• Identity Verification Services: KYC service providers who assist us in verifying member identities may process your verification information under strict data processing agreements.
• Regulatory Authorities & Law Enforcement: Habibi88 will disclose required information to the relevant authorities when mandated by law, court order, or for fraud investigation and anti-money laundering purposes.
• Affiliated Companies: Within the Habibi88 group of companies, data may be shared among related entities for internal administrative purposes; however, all such entities are bound by the same privacy policy.

In the event of a change in Habibi88's business structure — such as a merger, acquisition, or asset sale — member personal data may be transferred as part of that transaction. You will be notified in advance and given the option to withdraw your data if required.

Habibi88 continuously invests in security technologies and procedures to protect our members' personal data from unauthorised access, disclosure, alteration, or destruction. Data security is not merely a box to tick – it is an operational commitment we take seriously every day.

Technical security measures we have implemented:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or app and Habibi88's servers is encrypted using 256-bit SSL/TLS protocols — the same security standard used by Malaysia's leading banks.
• Stored Data Encryption: Sensitive data stored in our databases, including passwords and financial information, is encrypted using one-way hashing algorithms that cannot be decrypted.
• Layered Access Controls: Access to members' personal data within our internal systems is restricted to staff with a legitimate business need. All access is logged and monitored automatically.
• 24/7 Security Monitoring: Our systems are continuously monitored for suspicious activity, intrusion attempts, and data anomalies. Our cybersecurity team responds promptly whenever a threat is identified.
• Regular Security Testing: Habibi88 conducts regular penetration testing and security audits by independent third parties to identify and address potential vulnerabilities.
• Two-Factor Authentication (2FA): You are encouraged to enable two-factor authentication on your Habibi88 account as an additional layer of protection.

While Habibi88 takes all reasonable steps to protect your data, no system can be guaranteed 100% secure against every threat. You also play an important role in keeping your account safe – use a strong password, never share your login details, and report any suspicious activity to our support team immediately.

Habibi88 uses cookies and similar tracking technologies to enhance your experience on our platform, understand how the platform is used, and deliver more relevant content to you. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

You can control and manage cookies through your web browser settings. Most browsers allow you to view, delete, or block cookies. Please note, however, that blocking essential cookies may affect the functionality of the Habibi88 platform and prevent you from logging in or using certain features.

As a Habibi88 member and data subject under applicable data protection laws, you have several important rights regarding the personal information we hold about you. Habibi88 is committed to respecting and facilitating the exercise of these rights.

Your rights include:

• Right of Access: You have the right to request a copy of the personal information we hold about you. We will provide your data in a readable format within 30 days of receiving your request.
• Right to Rectification: If any personal information we hold about you is inaccurate or out of date, you have the right to request a correction. You can also update much of your profile information directly through your Habibi88 account settings.
• Right to Erasure ("Right to be Forgotten"): Under certain circumstances, you have the right to request deletion of your personal information. Please note that this right is not absolute and may not apply where we are required to retain data to comply with legal obligations or regulatory requirements.
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances – for example, while you dispute the accuracy of your data or while a complaint investigation is ongoing.
• Data Portability Rights: You have the right to receive your personal data in a structured, portable format (such as a CSV or JSON file) for transfer to another service provider if you wish.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests in certain circumstances.
• Right to Withdraw Consent: Where data processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of any processing carried out prior to the withdrawal.

Habibi88 retains your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by law and regulatory obligations. We do not keep data longer than necessary.

Data retention periods by category:

• Active Account Data: For as long as your account remains active with Habibi88. Data is continuously updated in line with your interactions on the platform.
• Transaction & Financial Data: Minimum 7 years from the transaction date, in accordance with applicable Malaysian tax and anti-money laundering legal requirements.
• KYC & Identity Verification Data: Minimum 5 years after account closure or the end of the last business relationship, as required by regulatory obligations.
• Communication & Customer Support Logs: 3 years from the date of communication, for dispute resolution and service improvement purposes.
• Platform Log Data: 12 months from the date of record, for security and analytics purposes.
• Game Data: 5 years from the date of the gaming session, for audit, dispute resolution, and regulatory compliance purposes.

Once the retention period expires or when you request data deletion (and the request is approved), Habibi88 will securely delete or anonymise your data so that it can no longer be linked to you. This deletion process is irreversible.

Habibi88 takes all privacy-related concerns very seriously. If you have any questions, concerns, or complaints about how we handle your personal data, we encourage you to reach out to us directly first so we can work to resolve the matter promptly and effectively.

How to reach the Habibi88 privacy team:

• Privacy Email: support@habibi88.biz – please include "Privacy Complaint/Inquiry" in your email subject line to ensure it is routed to the appropriate privacy officer.
• Live Chat: Contact our customer support team via 24/7 in-platform live chat — mention "I have a question about data privacy" to be directed to the appropriate team.
• Via Account: Log in to your Habibi88 account, go to Settings, and select "Privacy & Data" to submit data-related requests directly.

We will respond to all privacy enquiries and complaints within 14 business days. For more complex cases, we may require additional time – in such situations, we will inform you within those 14 days of the estimated timeframe needed.

This Privacy Policy may be updated from time to time to reflect changes in our privacy practices, technological developments, or legal requirements. The "Last Updated" date at the top of this document will always reflect the most recent revision. For material changes, we will notify you via email or in-account notification at least 7 days before those changes take effect.