Privacy Policy SMB88 – Personal Data Protection for Malaysian Players

This Privacy Policy ("Policy") describes SMB88's ("we", "Platform" or "SMB88") commitment to protecting the privacy of all users and registered members of our Malaysia-based platform. This Policy applies to all personal information we collect through the SMB88 website, mobile app and all related services.

SMB88 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection. As a platform serving over 500,000 members across Malaysia — from Kuala Lumpur, Selangor, Johor Bahru, Penang, Ipoh, Kota Kinabalu to Kuching — we understand that your trust is our most valuable asset.

This Policy takes effect from 1 January 2026 and supersedes all previous versions of SMB88's Privacy Policy. Any changes to this Policy will be communicated via in-platform notifications or email to registered members. Continued use of the SMB88 platform after changes take effect will be considered acceptance of the updated Policy.

SMB88 only collects information that is genuinely necessary to operate the platform and provide the services you request. Below are the categories of information we collect and the purposes for which they are collected:

All personal data collected by SMB88 is used responsibly and solely for legitimate purposes. We do not process your data beyond what is necessary for the stated purposes. The following are the specific purposes for which your data is used at SMB88:

• Account management: Creating and maintaining your SMB88 account, processing registrations, verifying your identity and keeping your account protected from unauthorised access.
• Transaction processing: Processing deposits and withdrawals in Malaysian Ringgit (MYR) via your chosen eWallet or FPX method, resolving transaction disputes, and maintaining accurate financial records.
• VIP Rewards Programme: Calculating and managing your VIP points, determining your VIP tier (Bronze to Elite), crediting weekly cashback and processing exclusive rewards under the SMB88 VIP Rewards Programme.
• Customer support: Providing technical support, resolving complaints and disputes, and communicating with you regarding account or transaction issues via live chat or email.
• Security and fraud prevention: Detecting and preventing fraudulent activity, money laundering, multiple accounts, and any misuse of the platform. This is a legal requirement we are obligated to meet.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and providing timely support to members who may need assistance.
• Marketing (with consent): Sending promotions, bonus offers, and relevant new game information to members who have agreed to receive marketing communications. You may withdraw this consent at any time.
• Legal compliance: Complying with Malaysian legal requirements, regulations and regulatory directives as needed, including mandatory reporting under anti-money laundering laws.

SMB88 does not sell, rent, or disclose your personal data to third parties for their own marketing or commercial purposes. This is a non-negotiable principle for us. However, there are limited situations where we need to share your data with specific parties in order to operate the platform:

• Payment processor: Minimal transaction information is shared with authorised payment gateways (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX) solely to process your deposits and withdrawals in MYR.
• Game provider: Your account username may be shared with licensed game providers (e.g., Evolution Gaming, Pragmatic Play) for technical purposes to enable access to their games. No financial information or full identity details are shared.
• Cloud services and hosting: Your data is stored within secure, certified cloud infrastructure. These service providers are bound by strict confidentiality agreements with SMB88 and may not use your data for their own purposes.
• Legal authorities: SMB88 will disclose personal data when required by Malaysian law, a valid court order, or a directive from an enforcement authority with jurisdiction. We will not disclose data beyond what is legally required.

SMB88 invests heavily in data security infrastructure to ensure your personal and financial information remains protected at all times. The following are the security layers we have in place:

• Data encryption in transit: All communications between your browser or app and SMB88's servers are encrypted using TLS 1.3 with 256-bit key length — the highest industry standard available.
• Data encryption at rest: Sensitive data stored in SMB88's databases — including passwords (stored as one-way hashes that cannot be decrypted) and financial information — is encrypted using AES-256 encryption.
• Internal access controls: Only SMB88 staff with a legitimate business need and who have undergone background checks may access member personal data. All access is automatically logged and regularly audited.
• Two-factor authentication (2FA): SMB88 encourages all members to enable two-factor authentication on their accounts as an additional security layer that guards against unauthorised access even if your password is compromised.
• Regular security audits: SMB88 conducts independent penetration testing and security audits at least twice a year to identify and address any system vulnerabilities.
• Real-time threat monitoring: Our automated threat detection system monitors SMB88 platform activity 24 hours a day to identify anomalies or attempted data breaches.

While SMB88 takes all reasonable precautions, no internet security system can be guaranteed to be 100% secure. You also play an important role in keeping your SMB88 account safe by using a strong, unique password and never sharing your login credentials with anyone.

SMB88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website. They help us recognise you, maintain your login session and understand how you use our platform.

• Session cookies: Temporary cookies that keep you logged in during your gaming session on SMB88. They are automatically deleted when you close your web browser.
• Preference cookies: Saves your language preference, display settings, and gaming preferences so you do not need to reconfigure them each time you log in to SMB88.
• Analytics cookies: Helping us understand which areas of the SMB88 platform are most used, average session duration and navigation patterns for platform improvement purposes. This data is collected in aggregate and does not identify you individually.
• Security cookies: Used to detect suspicious activity, protect your SMB88 account against CSRF (Cross-Site Request Forgery) attacks, and keep your session secure.

You can manage or block cookies through your browser settings. However, blocking certain cookies may affect the functionality of the SMB88 platform — for example, you may be required to log in again each time you access the site. Security cookies and session cookies are essential to platform operations and cannot be disabled without impacting SMB88's usability.

SMB88 retains your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy or as required by Malaysian law. The following are the data retention guidelines we adhere to:

• Active account data: For as long as your SMB88 account remains active, we retain all profile information, transaction records and gaming history.
• Financial transaction data: Deposit and withdrawal transaction records in RM are retained for 7 years from the transaction date in accordance with Malaysian tax and anti-money laundering legal requirements.
• Closed account data: After your SMB88 account is closed at your request, basic profile information is retained for 5 years to meet legal compliance requirements before being permanently deleted from our systems.
• Security logs: Access logs and security activity records are retained for 12 months for security investigation and potential dispute resolution purposes.
• Marketing data: Records of your marketing consent and communication preferences are retained for as long as you remain an SMB88 member, or until you withdraw that consent.

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to you personally. SMB88's data deletion procedures comply with industry-recognised security standards to ensure that deleted data cannot be recovered.

Under Malaysia's Personal Data Protection Act 2010 and SMB88's commitment to privacy, you have the following rights regarding the personal data we hold:

To exercise any of the above rights, contact the SMB88 support team via live chat or email at support@smb88.best. Please include your account number and specific details of your request. We are committed to responding to all privacy rights requests within 14 business days.

The SMB88 platform is strictly intended for individuals aged 18 and above. SMB88 does not knowingly collect, store or process any personal data from individuals under the age of 18.

If we discover that personal data of a minor has been collected without our knowledge — for example, through a fraudulent registration using someone else's details — we will take immediate steps to delete that data and terminate the associated account. Parents or guardians who suspect a minor in their household has an SMB88 account should contact us immediately at support@smb88.best for prompt action.

SMB88 reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or technological developments. When material changes are made to this Policy, we will notify you via:

• A prominent notice on the SMB88 platform's main page
• Email to the address registered with your SMB88 account
• An in-account notification upon login after the changes take effect

The "Updated" date at the top of this page reflects the date of the latest version of this Privacy Policy. We encourage you to review this page periodically, especially when you receive a change notification from us. Your continued use of the SMB88 platform following any changes to this Policy taking effect will be considered acceptance of those changes.

If you have any questions, concerns or complaints regarding SMB88's Privacy Policy or how we handle your personal data, please contact us through the following channels:

• Live chat: The fastest channel — available 24/7 within the SMB88 platform. Typical response time is within 3 minutes.
• Email: support@smb88.best — for privacy inquiries requiring a detailed written response. We are committed to replying within 2 business days.

For specific requests relating to personal data rights (access, correction, deletion or data portability), please clearly state the type of request and include your SMB88 account number to expedite processing. SMB88 will acknowledge receipt of your request within 24 hours and resolve it within 14 business days.

SMB88 takes every privacy complaint seriously. If you are not satisfied with our response, you have the right to file a complaint with the Department of Personal Data Protection Malaysia (JPDP), the regulatory body responsible for enforcing the Personal Data Protection Act 2010.