Privacy Policy — Alpha888

1 Introduction

This Privacy Policy (the "Policy") sets out the basis on which Alpha888 (hereinafter referred to as "Alpha888", "we", "us", or "our") collects, processes, stores, and shares personal data in connection with the operation of the online casino and sports betting platform accessible at https://alpha888.cam (the "Platform").

Alpha888 takes the privacy of its players seriously. We are committed to handling all personal data responsibly, transparently, and in accordance with applicable data protection legislation. This Policy applies to all users of the Platform, including registered account holders, visitors who browse the Platform without registering, and any person who contacts our support team.

By accessing the Platform or creating an account, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read in conjunction with our Terms & Conditions, which govern your use of the Platform more broadly.

2 Definitions

For the purposes of this Policy, the following terms shall have the meanings set out below:

• "Personal Data" — any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial data, and online identifiers such as IP addresses.
• "Data Controller" — Alpha888, as the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" — any third party that processes Personal Data on behalf of Alpha888 pursuant to a contractual arrangement, including payment processors, KYC verification providers, and cloud hosting providers.
• "Data Subject" — the individual to whom Personal Data relates; in most cases, this will be you as a registered player or visitor to the Platform.
• "Processing" — any operation or set of operations performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Consent" — any freely given, specific, informed, and unambiguous indication of your wishes by which you agree to the processing of your Personal Data.
• "Cookie" — a small text file placed on your device by the Platform for purposes of session management, analytics, or personalisation.
• "KYC" — Know Your Customer; the identity and source-of-funds verification process conducted by Alpha888 in compliance with applicable anti-money laundering regulations.

3 Data We Collect

Alpha888 collects Personal Data through several channels: directly from you during registration and account management, automatically through your use of the Platform, and from third-party service providers where permitted by law and necessary for operational purposes.

3.1 Data You Provide Directly

When you register an account or interact with our support team, you may provide the following categories of Personal Data:

3.2 Data Collected Automatically

When you access the Platform, our systems automatically record certain technical and behavioural data, including:

• IP address, device type, operating system, and browser version.
• Pages visited, time spent on pages, click-path data, and session duration.
• Game activity data, including games played, wager amounts, win/loss outcomes, and session timestamps — retained for regulatory, security, and responsible gambling purposes.
• Login timestamps, geographic location data (derived from IP address), and device identifiers.
• Cookie identifiers and similar tracking data, as further described in Section 9 of this Policy.

3.3 Data Received from Third Parties

In certain circumstances, Alpha888 may receive Personal Data about you from third-party service providers, including:

• KYC and identity verification providers, who return verification results and risk scores to Alpha888 following document checks.
• Payment processors such as FPX, Maybank, CIMB, and Public Bank, who provide transaction confirmation data necessary to credit your account.
• Fraud prevention and anti-money laundering screening providers, who may provide risk indicators linked to your identity or payment method.

4 Legal Basis for Processing

Alpha888 processes Personal Data on one or more of the following legal bases, depending on the specific processing activity in question:

• Contractual Necessity: Processing that is required to perform the contract between you and Alpha888 — including account registration, payment processing, and game delivery — is carried out on the basis that it is necessary to execute or fulfil that contract.
• Legal Obligation: Processing required for compliance with applicable legal and regulatory requirements — including anti-money laundering (AML) regulations, know-your-customer (KYC) obligations, and responsible gambling requirements — is carried out on the basis of legal obligation.
• Legitimate Interests: Alpha888 processes certain data — including fraud detection, platform security, and service improvement analytics — on the basis of legitimate interests, where those interests are not overridden by your rights and freedoms.
• Consent: Where Alpha888 sends you optional marketing communications or deploys non-essential cookies, such processing is carried out on the basis of your freely given consent, which you may withdraw at any time.

5 How We Use Your Data

Alpha888 uses the Personal Data we collect for the following purposes:

• Account Management: To create, maintain, and administer your Alpha888 account, including processing your registration, verifying your identity, managing your balance, and communicating account-related updates.
• Payment Processing: To process deposits and withdrawals through your chosen payment method — whether Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, or USDT TRC20 — and to verify the authenticity of those transactions.
• Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering legislation, including conducting KYC checks, monitoring for unusual transaction patterns, and reporting to relevant authorities where legally required.
• Fraud & Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, collusion, bonus abuse, and other activities that may harm the integrity of the Platform or the interests of other players.
• Responsible Gambling: To monitor player behaviour for signs of problem gambling, to enforce the tools and limits you have set on your account, and to comply with age verification and self-exclusion requirements.
• Customer Support: To respond to your enquiries, resolve disputes, and maintain records of interactions with our support team for quality and training purposes.
• Platform Improvement: To analyse aggregated usage data, game performance, and player feedback in order to improve the features, reliability, and content of the Platform.
• Marketing Communications: Where you have provided consent, to send you promotional offers, bonus notifications, and news about new games or features at Alpha888. You may opt out at any time by contacting our support team.

6 Data Sharing & Disclosure

Alpha888 does not sell, rent, or trade your Personal Data to third-party marketers or data brokers. We share Personal Data only in the following limited circumstances:

6.1 Service Delivery Partners

Alpha888 shares Personal Data with carefully selected third-party service providers that assist in the delivery of our services. These include:

• Payment processing providers (including FPX network banks: Maybank, CIMB, Public Bank, Hong Leong Bank) who process deposits and withdrawals on your behalf.
• E-wallet operators (Touch 'n Go eWallet, Boost, GrabPay) for the purpose of processing electronic wallet transactions.
• KYC and identity verification service providers who verify the authenticity of documents submitted during account verification.
• Cloud hosting, database, and cybersecurity providers that store and protect Platform data under strict data processing agreements.
• Fraud detection and anti-money laundering screening providers that cross-reference transaction data against known risk indicators.

All third-party service providers are contractually bound to process Personal Data only on Alpha888's documented instructions and to maintain appropriate technical and organisational security measures.

6.2 Legal & Regulatory Disclosures

Alpha888 may disclose Personal Data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law — including in connection with anti-money laundering investigations, fraud enquiries, or court orders. In each case, Alpha888 will disclose only the minimum data necessary to satisfy the legal obligation.

6.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of all or part of Alpha888's business assets, Personal Data held by Alpha888 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and any change to the identity of the Data Controller.

7 International Data Transfers

Alpha888 operates internationally, and some of the third-party service providers we engage — including cloud hosting and KYC verification providers — may process your Personal Data in jurisdictions outside of Malaysia. Where such transfers occur, Alpha888 ensures that appropriate safeguards are in place, including:

• Contractual clauses binding recipient parties to data protection standards equivalent to those applicable under the laws governing Alpha888's operations.
• Transfers only to jurisdictions or service providers that have been assessed by Alpha888 as offering an adequate level of data protection.
• Technical and organisational measures — including encryption and access controls — that protect data in transit and at rest regardless of the processing location.

You may request further information about specific international transfers and the safeguards in place by contacting our support team.

8 Data Retention

Alpha888 retains Personal Data only for as long as is necessary for the purposes set out in this Policy, and in accordance with applicable legal and regulatory obligations. The following retention periods apply as general guidelines:

Upon expiry of the applicable retention period, Personal Data will be securely deleted or irreversibly anonymised. Where anonymisation is used, the resulting data may be retained indefinitely for statistical and analytical purposes without further notice.

9 Cookies & Tracking Technologies

Alpha888 uses cookies and similar technologies on the Platform to ensure its proper functioning, to enhance your experience, and to collect analytical data that helps us improve the Platform. A cookie is a small text file placed on your device when you visit a website. Cookies do not contain executable code and cannot be used to access other data on your device.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication cookies that keep you logged in and security tokens that protect against cross-site request forgery. These cookies cannot be disabled.
• Functional Cookies: Used to remember your preferences — such as preferred language, display settings, and responsible gambling tool configurations — to provide a more personalised experience.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate and interact with the Platform. This data helps Alpha888 identify areas for improvement. Analytics data is not linked to your individual identity without your consent.
• Security Cookies: Used to detect and prevent fraudulent activity, including login anomalies, unusual navigation patterns, and automated bot activity.

9.2 Managing Cookies

You may control the use of non-essential cookies through your browser settings. Most modern browsers allow you to refuse, delete, or restrict cookies. Please note that disabling strictly necessary cookies will impair the functionality of the Platform and may prevent you from accessing your account. Your cookie preferences can also be managed by contacting our support team.

10 Data Security

Alpha888 implements appropriate technical and organisational measures to protect Personal Data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your browser and our servers.
• Encryption at rest for all sensitive Personal Data stored on our servers, including financial data and KYC documentation.
• Strict access controls limiting access to Personal Data to authorised Alpha888 personnel on a need-to-know basis, enforced through role-based access management.
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity professionals.
• Two-factor authentication options for player accounts to reduce the risk of unauthorised access.
• Segregated storage environments that separate player financial data from operational systems, reducing the surface area for potential data breaches.

Notwithstanding these measures, no data transmission or storage system is entirely secure. Alpha888 cannot guarantee the absolute security of your Personal Data. In the event of a data breach that is likely to result in a risk to your rights and freedoms, Alpha888 will notify the relevant regulatory authority and affected individuals in accordance with applicable law.

11 Your Rights as a Data Subject

Subject to applicable law, you have the following rights with respect to the Personal Data we hold about you:

• Right of Access: You may request a copy of the Personal Data Alpha888 holds about you, together with information about how it is processed.
• Right to Rectification: Where the Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to Erasure: In certain circumstances — for example, where Personal Data is no longer necessary for the purpose for which it was collected — you may request that we delete your data. This right is subject to our legal and regulatory data retention obligations.
• Right to Restriction: You may request that we restrict the processing of your Personal Data in certain circumstances, such as where you contest the accuracy of the data or where processing is unlawful.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you may request that we provide your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your Personal Data where that processing is based on legitimate interests, including for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the rights listed above, please contact Alpha888 via live chat or by emailing our support team. We will respond to all data subject requests within 30 calendar days of receipt. Where a request is particularly complex or we receive a high volume of requests, we may extend this period by a further 60 days, in which case we will notify you accordingly.

Alpha888 will not charge a fee for processing data subject requests unless a request is manifestly unfounded, excessive, or repetitive, in which case a reasonable administrative fee may be applied.

12 Children & Minors

Alpha888 strictly prohibits the use of the Platform by individuals under the age of 21 years. We do not knowingly collect, process, or store the Personal Data of any person under this age threshold.

All registration applications are subject to mandatory age verification checks. Where Alpha888 discovers or has reasonable grounds to believe that Personal Data has been collected from a person under 21 years of age, we will immediately close the relevant account, delete the associated Personal Data to the extent permitted by law, and report the matter to the appropriate authorities where required.

If you are a parent or guardian and believe that a minor in your care has attempted to or successfully registered an account with Alpha888, please contact our support team immediately via live chat. We will investigate and take appropriate action without delay.

13 Policy Amendments

Alpha888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. The revised Policy will be published on the Platform with an updated "Last Updated" date at the top of the document.

Where a material change is made — for example, a change in the categories of data collected, the legal basis for processing, or the identity of significant third-party processors — Alpha888 will notify registered players via the email address associated with their account, providing at least 14 days' notice before the change takes effect.

Your continued use of the Platform following the effective date of an updated Policy constitutes your acceptance of the changes. If you do not agree to the updated Policy, you should cease use of the Platform and request account closure by contacting our support team.

14 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have concerns about how Alpha888 has handled your Personal Data, please contact us using one of the methods below. Our support team is available 24 hours a day, 7 days a week.

Alpha888 aims to resolve all privacy-related complaints promptly and fairly. If you are not satisfied with our response, you may escalate your complaint to the relevant data protection supervisory authority in your jurisdiction. Details of the applicable authority are available upon request from our support team.

For concerns specifically related to responsible gambling data or self-exclusion records, please refer to our Responsible Gambling page for dedicated guidance and contact information.