Privacy Policy

This Privacy Policy ("Policy") is published by Prepaid888 ("we", "us", "our", "prepaid888", "the Platform") and applies to all personal data collected from users ("you", "your", "the Player") of the prepaid888 website located at https://prepaid888.cam and all associated services, features, and applications accessible through the Platform.

Prepaid888 operates an online casino and sports betting platform serving players across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and nationwide. In the course of providing our services — account registration, payment processing, bonus administration, customer support, and responsible gambling compliance — we necessarily collect and process certain personal information about our players.

This Policy is designed to give you a clear and transparent account of exactly what data we hold, why we hold it, how long we keep it, who can see it, and what you can do about it. We have written it in plain English to ensure it is genuinely readable, not merely a compliance document buried in legal jargon.

By registering an account or otherwise using the prepaid888 platform, you acknowledge that you have read this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree to this Policy, please discontinue your use of the Platform.

The following terms, when used in this Privacy Policy, shall carry the meanings set out below:

Prepaid888 collects personal data through several distinct channels. The categories of data we collect, and the circumstances under which each category is gathered, are set out below.

3.1 Registration Data

When you create a prepaid888 account, we collect: your full legal name, date of birth, email address, mobile phone number, residential address (including city and postcode), preferred username, and account password (stored in hashed, non-reversible form). This information is mandatory for account creation.

3.2 Identity Verification (KYC) Data

To comply with our regulatory obligations and to process withdrawal requests, we may request copies of government-issued identity documents (e.g., MyKad, passport, or equivalent), proof of residential address (e.g., utility bill or bank statement dated within 90 days), and proof of ownership of the payment method(s) used to deposit funds.

3.3 Financial Transaction Data

We record all deposit and withdrawal transactions associated with your account. This includes the payment method used (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX via Maybank, CIMB, Public Bank, Hong Leong Bank, or USDT TRC20), transaction amounts in MYR or cryptocurrency equivalent, timestamps, and transaction reference numbers. We do not store full bank account numbers, full card numbers, or full e-wallet credentials — only masked identifiers necessary for transaction reference.

3.4 Usage and Behavioural Data

We collect technical and behavioural data about how you interact with the Platform, including: IP address, device type and operating system, browser type and version, session duration and timing, pages visited, games accessed and betting activity (game titles, stake amounts, outcomes), and login and logout timestamps. This data is used for security, fraud detection, and platform improvement purposes.

3.5 Communications Data

When you contact our customer support team via live chat or email, we retain records of those communications, including the content of messages, timestamps, and any attachments, for the purposes of quality assurance, dispute resolution, and regulatory record-keeping.

3.6 Responsible Gambling Data

If you make use of our responsible gambling tools — such as setting deposit limits, requesting a cooling-off period, or activating self-exclusion — we record the details of these requests and their current status. This data is retained to ensure compliance with your instructions and to prevent inadvertent reversal of protective measures.

Prepaid888 processes your personal data only for specified, legitimate purposes. We do not process your data in any manner that is incompatible with the purposes described in this section.

Prepaid888 processes your personal data on one or more of the following legal bases, each of which must be applicable in order for any processing to take place:

• Contractual Necessity: Processing is necessary for the performance of our agreement with you — specifically, to operate your account, process deposits and withdrawals, and deliver the gaming and betting services you have contracted with us to receive.
• Legal Obligation: Processing is required for compliance with applicable laws and regulations, including identity verification, age verification, anti-money laundering record-keeping, and regulatory reporting obligations.
• Legitimate Interests: Processing is necessary for the legitimate interests of prepaid888, including fraud detection and prevention, Platform security, responsible gambling compliance monitoring, and aggregated analytics for product improvement — provided that such interests are not overridden by your own rights and freedoms.
• Consent: Where processing is not required by contract or law and is not justified by legitimate interests, we will seek your explicit prior consent. This applies primarily to optional marketing communications. You may withdraw consent at any time by contacting our support team.

Prepaid888 does not sell your personal data to any third party under any circumstances. We share data with external parties only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

6.1 Payment Service Providers

We share transaction data with payment service providers — including the operators of Touch 'n Go eWallet, Boost, GrabPay, FPX-participating Malaysian banks (Maybank, CIMB, Public Bank, Hong Leong Bank), DuitNow, and cryptocurrency processing services — solely to facilitate deposit and withdrawal transactions. These providers process your data under their own privacy policies and in compliance with applicable financial services regulations.

6.2 Identity Verification Services

We may use third-party KYC and identity verification service providers to assist in verifying the documents you submit. These providers have access only to the data necessary to perform the verification function and are contractually prohibited from using that data for any other purpose.

6.3 Game Content Providers

Third-party game studios whose titles are available on the prepaid888 platform may receive anonymised or pseudonymised gameplay data (such as game session identifiers and bet outcomes) for the purposes of game integrity auditing and RNG verification. No directly identifying personal data is shared with game providers.

6.4 Legal and Regulatory Authorities

Prepaid888 may disclose personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or courts where required to do so by applicable law, court order, or in response to a lawful regulatory request. We will notify you of any such disclosure request to the extent permitted by law.

Prepaid888 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law, whichever period is longer.

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised, provided that no ongoing legal proceedings, regulatory investigations, or contractual obligations require its continued retention.

Prepaid888 maintains a comprehensive information security programme designed to protect personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• Transport Layer Security: All data in transit between your device and prepaid888's servers is encrypted using TLS 1.2 or above, equivalent to 256-bit SSL encryption.
• At-Rest Encryption: Sensitive data stored on prepaid888's servers — including identity documents and financial records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Internal staff access is controlled through role-based permissions, multi-factor authentication, and comprehensive access logging.
• Password Security: Account passwords are stored using one-way cryptographic hashing with per-account salting. Prepaid888 staff cannot view or retrieve your password in plaintext.
• Regular Security Audits: Our platform undergoes periodic penetration testing, vulnerability assessments, and security code reviews conducted by qualified independent security professionals.
• Incident Response: We maintain a documented data breach response procedure. In the event of a breach that is likely to result in a risk to your rights and freedoms, we will notify affected players promptly and take immediate containment measures.

Prepaid888 uses cookies and similar tracking technologies on the Platform to ensure the site functions correctly, to maintain your logged-in session, to remember your preferences, and to help us understand how players navigate and use the Platform.

9.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the Platform to operate. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences — such as language settings and interface customisations — to provide a more personalised experience across sessions.
• Analytical Cookies: Track aggregated, anonymised usage data to help us understand which parts of the Platform are most visited and where improvements should be made. No individually identifying data is processed via analytical cookies.
• Security Cookies: Used to detect and prevent fraudulent login attempts, unauthorised access, and other security threats. These are essential to protecting your account and cannot be disabled.

9.2 Managing Cookies

You can control and manage cookies through your browser's settings. Most modern browsers allow you to block or delete cookies. Please note that blocking strictly necessary cookies may prevent you from logging in or using core features of the Platform. Analytical and functional cookies can be disabled without material impact on your ability to use prepaid888.

Prepaid888 does not use third-party advertising or tracking cookies. We do not serve targeted advertisements via the Platform, and no third-party ad network has access to your behavioural data through the prepaid888 website.

Depending on the data protection laws applicable to your circumstances, you may hold some or all of the following rights in respect of your personal data held by prepaid888. All rights-related requests should be submitted to our support team using the contact details in Section 14.

We will respond to all data subject rights requests within 30 calendar days of receipt. In cases of complexity or high volume, we may extend this to 60 days and will notify you accordingly. There is no charge for making a rights request unless the request is manifestly unfounded or excessive.

If you are the parent or guardian of a minor and believe that your child may have accessed the prepaid888 Platform or submitted personal data, please contact our support team immediately using the details in Section 14. We will investigate and take appropriate action promptly.

Prepaid888 employs age verification controls during the registration process and at the point of first withdrawal. These controls are designed to detect and prevent access by individuals under the minimum age of 21.

Prepaid888 operates as an internationally licensed platform. In the course of delivering our services, your personal data may be transferred to, stored on, or processed by servers or service providers located outside Malaysia. Such transfers may occur, for example, when data is processed by our cloud infrastructure provider or by a third-party KYC verification service.

Where personal data is transferred internationally, prepaid888 ensures that appropriate safeguards are in place to protect your data to a standard that is at least equivalent to the protections described in this Policy. These safeguards may include contractual clauses requiring the recipient to handle data in accordance with applicable data protection standards, or the use of providers who have obtained relevant data protection certifications.

By using the prepaid888 Platform and providing your personal data, you consent to the transfer of your data to jurisdictions outside Malaysia where necessary for the operation of our services, subject to the safeguards described in this section.

Prepaid888 may revise this Privacy Policy from time to time to reflect changes in our data processing practices, applicable legal requirements, or improvements to our Platform. The "Last updated" date at the top of this page will be revised to indicate the date of each amendment.

Where any amendment materially changes the way in which we process your personal data — particularly where such changes may affect your rights or the basis upon which we process your data — we will provide reasonable advance notice via email to your registered address or via a prominent notification on the Platform. For non-material amendments, such as clarifications of existing practices or updates to contact details, publication of the revised Policy on this page constitutes sufficient notice.

Your continued use of the prepaid888 Platform following the publication of a revised Privacy Policy constitutes your acceptance of the amended terms. If you object to any revision, please contact our support team to discuss your options, including account closure if you no longer wish to use the Platform.

For any queries, concerns, or requests relating to this Privacy Policy or the processing of your personal data by prepaid888, please contact our Data Protection team using any of the following channels:

• Live Chat Support: Available 24 hours a day, 7 days a week via the chat widget accessible on all pages of the prepaid888 Platform. For data protection matters, please indicate "Privacy / Data Request" at the start of your message so that your query is directed to the appropriate team.
• Email (non-clickable): [email protected] — please use the subject line "Privacy Policy Query" or "Data Subject Request" as appropriate. We aim to respond within 5 business days for general queries and within 30 calendar days for formal data subject rights requests.

Prepaid888 serves Malaysian players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and nationwide. All privacy-related correspondence is handled by our dedicated compliance and player relations team.