Privacy Policy

This Privacy Policy ("Policy") describes how free888 ("the Company", "we", "us", or "our") collects, processes, stores, and protects the personal data of users ("you", "the Player", or "User") who access the free888 online gaming platform at https://free888.cam ("the Platform").

free888 operates a Malaysian-focused online casino and sports betting service, accepting players from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across Malaysia. In delivering this service, we necessarily collect and process certain personal information about our players. We take this responsibility seriously and are committed to handling all personal data in a fair, transparent, and lawful manner.

By registering an Account on the Platform or by continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the Platform.

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" — Any information relating to an identified or identifiable natural person, including name, identification number, location data, or any factors specific to the physical, economic, or social identity of that person.
• "Processing" — Any operation or set of operations performed on personal data, whether or not by automated means, including collection, recording, organisation, storage, adaptation, retrieval, consultation, use, disclosure, erasure, or destruction.
• "Data Controller" — The entity that determines the purposes and means of processing personal data. For the purposes of this Policy, free888 is the Data Controller in respect of player data.
• "Data Processor" — A third party that processes personal data on behalf of the Data Controller under documented instruction.
• "Consent" — A freely given, specific, informed, and unambiguous indication of a data subject's agreement to the processing of their personal data.
• "KYC" — Know Your Customer. The identity verification process required under anti-money laundering obligations.
• "Cookies" — Small text files placed on a user's device by the Platform to enable functionality, remember preferences, and collect analytical data.

free888 collects only the personal data that is necessary to provide its services effectively and to comply with applicable legal and regulatory obligations. The categories of data we collect are detailed in the table below:

free888 collects personal data through the following channels and mechanisms:

• Direct Provision: Data you provide when registering an Account, completing KYC, making a deposit, submitting a withdrawal request, contacting customer support, or participating in a promotion.
• Automated Collection: Technical data collected automatically when you access the Platform, including IP address, device identifiers, session data, and cookies placed on your device as described in Section 7.
• Payment Processors: Financial transaction confirmation data received from payment providers such as those facilitating Touch 'n Go eWallet, DuitNow QR, FPX, Boost, and cryptocurrency gateway transactions.
• Identity Verification Partners: Data returned from third-party KYC and identity verification service providers engaged by free888 to assist with document authentication.
• Fraud Prevention Services: Risk-scoring data and fraud signals provided by specialised third-party fraud detection partners used to protect the integrity of the Platform.

free888 processes your personal data only for specified, explicit, and legitimate purposes. The primary purposes and corresponding legal bases for processing are as follows:

• Contract Performance: Processing necessary to fulfil our contractual obligations to you as a registered player, including account management, game delivery, payment processing, and withdrawal execution.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, responsible gambling legislation, and tax reporting duties. This includes the retention of transaction records and identity documents for the legally mandated period.
• Legitimate Interests: Processing carried out in pursuit of free888's legitimate business interests, including fraud detection and prevention, Platform security monitoring, improving service quality, and internal analytics — provided such interests do not override your fundamental rights.
• Consent: Processing based on your express, freely given consent, including the sending of promotional communications, personalised bonus offers, and marketing materials relating to free888 products and services. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

free888 does not sell, rent, or commercially transfer your personal data to any third party. We disclose personal data to third parties only in the limited circumstances described below, and only to the extent necessary for each purpose:

• Payment Service Providers: We share transaction data with payment processors facilitating your deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Visa/Mastercard, and cryptocurrency gateways. These processors operate under strict data processing agreements and are contractually prohibited from using your data for any purpose beyond completing your transaction.
• Identity Verification Partners: We engage licensed KYC and AML service providers to assist in verifying your identity. Document data shared with these providers is processed solely for verification purposes and is not retained by them beyond the period required for verification completion.
• Fraud Prevention & Security Services: We share technical and behavioural data with fraud detection platforms to protect against account takeover, payment fraud, and platform abuse. These services process data on our behalf and are bound by data processing agreements.
• Legal and Regulatory Authorities: We may disclose personal data to regulatory bodies, law enforcement agencies, or courts where required by applicable law, pursuant to a court order, or where such disclosure is necessary to protect the legal rights of free888 or comply with our regulatory obligations.
• Professional Advisors: Data may be shared with legal counsel, auditors, and compliance consultants on a strictly confidential, need-to-know basis in connection with our operational and legal obligations.

All third parties to whom personal data is disclosed are required to maintain appropriate technical and organisational security measures and are prohibited from using such data for any purpose inconsistent with the basis on which it was originally shared.

The free888 Platform uses cookies and similar tracking technologies to provide essential functionality, improve user experience, and support our security and analytics operations. By continuing to use the Platform, you consent to the use of cookies in accordance with this section.

The categories of cookies used by free888 are as follows:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They enable secure login sessions, maintain your authenticated state, and support core security features such as CSRF protection. These cookies cannot be disabled without rendering the Platform inoperable.
• Functional Cookies: These cookies remember your preferences, such as your preferred language, display settings, and notification configurations, to provide a more personalised experience on return visits.
• Analytical Cookies: We use first-party analytical cookies to understand how players interact with the Platform, identify areas for improvement, and monitor platform performance. This data is aggregated and does not identify individual users by name.
• Security Cookies: These are used to detect and prevent fraudulent access attempts, bot activity, and unusual session behaviour. They contribute to the integrity and security of the Platform and your account.

You may manage cookie preferences through your browser settings. Please note that disabling certain categories of cookies may limit the functionality of the Platform or result in you being logged out of your session.

free888 retains personal data only for as long as is necessary for the purposes for which it was collected or as required by applicable legal and regulatory obligations. The following general retention guidelines apply:

• Active Account Data: Retained for the full duration of your account registration plus a minimum period of five (5) years following account closure, to satisfy AML record-keeping requirements.
• Transaction Records: Financial transaction data, including deposit and withdrawal history, is retained for a minimum of seven (7) years in compliance with financial record-keeping obligations.
• KYC Documents: Identity documents submitted during the verification process are retained for a minimum of five (5) years following account closure, or longer if required by applicable law.
• Support Communications: Customer support records are retained for three (3) years from the date of the last communication for quality assurance, dispute resolution, and compliance purposes.
• Marketing Consent Records: Records of your consent to receive marketing communications are retained for as long as the consent remains active plus three (3) years following withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

free888 implements comprehensive technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes, but is not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and the Platform;
• AES-256 encryption for sensitive personal and financial data stored in our databases;
• Multi-factor authentication options for player accounts and mandatory for internal administrative access;
• Regular independent security audits and penetration testing of Platform infrastructure;
• Role-based access controls limiting employee access to personal data strictly on a need-to-know basis;
• Automated intrusion detection and real-time monitoring of all Platform systems;
• Segregation of player funds from operational accounts to protect against financial risk.

While we take every reasonable precaution to protect your data, no method of transmission over the internet or electronic storage is entirely infallible. In the event of a data breach that is likely to result in a risk to your rights and freedoms, free888 will notify affected players and relevant authorities within the timeframe required by applicable law.

The operation of the free888 Platform may necessitate the transfer of your personal data to servers or service providers located outside of Malaysia. When such transfers occur, free888 ensures that appropriate safeguards are in place to protect the security and integrity of your data, including:

• Requiring all recipient third parties to adhere to contractual data protection obligations equivalent in standard to those applicable under Malaysian data protection principles;
• Engaging only service providers and data processors that maintain internationally recognised security certifications and data protection practices;
• Conducting due diligence assessments of international partners prior to commencing any data-sharing arrangement.

By using the Platform, you acknowledge and consent to the transfer of your personal data to entities located outside Malaysia where such transfers are necessary for the delivery of the services you have requested.

free888 respects your right to control your personal data. Subject to applicable law and legitimate operational constraints, you hold the following rights with respect to the personal data we hold about you:

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request" and include your registered email address and account identifier. We will acknowledge your request within 5 business days and provide a substantive response within 30 days. Where requests are complex or numerous, we may extend this period by a further 60 days with notification.

free888 will not charge a fee for exercising your rights unless a request is manifestly unfounded, excessive, or repetitive, in which case a reasonable administrative fee may be applied.

The free888 Platform is strictly intended for persons aged 21 years and above. We do not knowingly collect or process the personal data of individuals under the age of 21. Account registration requires confirmation of age, and identity verification procedures are in place to enforce this restriction.

If free888 becomes aware that personal data has been collected from an individual under the age of 21 without parental or guardian consent, we will take immediate steps to delete such data and close the associated account. Any deposits made by a person below the minimum age requirement will be reviewed in accordance with our Terms and Conditions.

If you are a parent or guardian and believe your child may have accessed or registered on the Platform, please contact us immediately at [email protected] so that we may investigate and take the appropriate remedial action.

The Platform does not contain links to third-party websites other than those strictly necessary for the operation of payment services. However, in the event that any third-party payment provider interface is accessed through the Platform during a transaction, please be aware that those third-party environments operate under their own privacy policies and data processing practices.

free888 accepts no responsibility for the privacy practices or content of any third-party platforms accessed in connection with your use of our payment methods, including but not limited to the apps and portals of Touch 'n Go eWallet, Boost, DuitNow, Maybank, CIMB, or any other financial service provider. We encourage you to review the relevant privacy notices of those services independently.

free888 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. When material changes are made, we will notify registered players via the email address associated with their Account and by displaying a notice on the Platform prior to the changes taking effect.

The effective date of the current version of this Policy is indicated at the top of this page. We encourage you to review this Policy periodically. Your continued use of the Platform following notification of any amendments constitutes your acceptance of the updated Policy. If you do not accept the amended terms, you should cease using the Platform and request account closure.

If you have any questions regarding this Privacy Policy, wish to exercise your data rights, or have concerns about how free888 handles your personal data, please contact us using the details below:

free888 is committed to resolving all privacy-related concerns promptly and fairly. If you are not satisfied with our response, you retain the right to escalate your complaint to the appropriate data protection authority in your jurisdiction. Malaysian players may refer to the Department of Personal Data Protection (JPDP) for guidance on regulatory remedies available under the Personal Data Protection Act 2010.