Privacy Policy

This Privacy Policy ("Policy") is issued by digi888 ("the Company", "we", "us", "our"), the operator of the online casino and sports betting platform located at digi888.cam ("Platform"). This Policy applies to all registered Players, visitors, and prospective users of the Platform, including those accessing from anywhere across Malaysia — Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and beyond.

digi888 is committed to protecting the privacy and personal data of every individual who interacts with our Platform. We process personal data in accordance with applicable data protection law, including the Personal Data Protection Act 2010 (PDPA) of Malaysia, and all relevant international best practices for data handling in the online gaming industry.

By creating an account, depositing funds, participating in games or sports betting markets, or otherwise using the digi888 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

If you have any questions regarding this Policy or wish to exercise any of your data rights, please contact us using the details provided in Section 14.

The following defined terms are used throughout this Privacy Policy:

• "Personal Data" — any information that identifies or can reasonably be used to identify a living natural person, either directly (e.g., name, identity card number) or indirectly (e.g., device ID, IP address combined with other data).
• "Processing" — any operation performed on Personal Data, including collection, storage, use, disclosure, alteration, combination, and deletion.
• "Data Controller" — digi888, as the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" — a third-party entity that processes Personal Data on behalf of and under the instructions of digi888.
• "Player" / "User" — any registered account holder or visitor accessing the digi888 Platform.
• "KYC" — Know Your Customer; the identity verification procedure required by digi888 prior to processing withdrawals and in compliance with anti-money laundering obligations.
• "Cookies" — small data files stored on your device by the Platform to enable functionality, maintain sessions, and support analytics.
• "PDPA" — the Personal Data Protection Act 2010, the primary data protection legislation applicable in Malaysia.

digi888 collects Personal Data through several channels: directly from you during registration and account use, automatically through your interaction with the Platform, and in limited cases from trusted third-party sources such as payment processors and identity verification services. The categories of Personal Data we collect include:

3.1 Identity & Registration Data

3.2 Financial & Transaction Data

When you make deposits or withdrawals via Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, or cryptocurrency (BTC/USDT), we collect transaction records including amounts, timestamps, payment method identifiers, and processing references. Full payment card or bank account numbers are handled exclusively by our regulated payment processor partners and are never stored on digi888 servers.

3.3 Gaming & Betting Activity Data

We maintain records of your game sessions, bet history, wagering amounts, game outcomes, sports betting selections (including EPL, Liga Super Malaysia, and other markets), bonus usage, and account balance movements. This data is essential for dispute resolution, responsible gambling monitoring, and fraud detection.

3.4 Technical & Device Data

3.5 Communications Data

When you contact our support team via live chat, email, or any other channel, we retain records of those communications — including transcripts, attachments, and resolution outcomes — for quality assurance, training, and dispute handling purposes.

digi888 uses the Personal Data we collect for the following specific purposes. We process only the minimum data necessary for each purpose, in line with the data minimisation principle:

• Account Creation & Management: To register your account, verify your identity, maintain your profile, and enable you to access all Platform features.
• Age Verification (KYC): To confirm that you are aged 21 or above before you can deposit, play, or withdraw, as required by our responsible gambling obligations and applicable law.
• Payment Processing: To facilitate deposits and withdrawals via your chosen Malaysian payment method — FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, or linked bank account — and to maintain accurate transaction records.
• Anti-Money Laundering (AML) Compliance: To monitor transaction patterns, verify the source of funds where required, and report suspicious activity to relevant authorities as mandated by law.
• Fraud Detection & Security: To identify and prevent unauthorised access, account takeover attempts, collusion between players, and any other fraudulent or abusive activity on the Platform.
• Responsible Gambling Monitoring: To detect behavioural patterns that may indicate problem gambling, to enforce deposit limits and self-exclusion requests, and to provide proactive interventions where appropriate.
• Customer Support: To respond to your queries, resolve disputes, and maintain records of support interactions for quality assurance purposes.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to enhance game offerings, improve the user interface, and optimise the overall player experience on mobile and desktop.
• Marketing & Promotions (with consent): To send you relevant promotional offers, bonus notifications, and news about new games or sports betting markets — only where you have explicitly opted in to receive such communications.
• Legal Compliance: To comply with our obligations under Malaysian law, applicable gaming regulations, and court orders or lawful requests from authorised regulatory or enforcement bodies.

digi888 processes your Personal Data on one or more of the following legal bases, consistent with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA):

• Contractual Necessity: Processing required to fulfil the contract between you and digi888 — i.e., to operate your account, process your deposits and withdrawals, and provide access to our games and sports betting markets.
• Legal Obligation: Processing necessary to comply with applicable Malaysian law, including PDPA obligations, AML/CTF requirements, and any lawful regulatory directions.
• Legitimate Interests: Processing that serves digi888's legitimate business interests — such as fraud prevention, platform security, and responsible gambling enforcement — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: For optional processing activities — such as sending you marketing communications — where we rely on your explicit, freely given, and withdrawable consent. You may withdraw your consent to marketing at any time by contacting our support team.

digi888 does not sell, rent, or trade your Personal Data to any third party. We share your data only in the following limited and necessary circumstances:

6.1 Regulated Payment Partners

To process your deposits and withdrawals, we share relevant transaction data with regulated payment service providers including Malaysian FPX network participants (Maybank, CIMB, Public Bank, Hong Leong Connect), DuitNow operators, and licensed e-wallet providers (Touch 'n Go eWallet, Boost, GrabPay). These partners are bound by strict contractual obligations and their own regulatory requirements regarding data protection.

6.2 Identity Verification Services

To fulfil our KYC and age verification obligations, we may share identity document data with licensed third-party KYC verification service providers. These providers operate as Data Processors under our instruction and are prohibited from using your data for any purpose other than the verification service they perform for us.

6.3 Technology & Platform Providers

We work with certified game studios and technology partners who may process limited technical or gaming activity data as part of delivering their services on the Platform. All such partners are required to maintain data protection standards equivalent to those described in this Policy.

6.4 Regulatory & Law Enforcement Authorities

We may disclose Personal Data to competent regulatory authorities, financial intelligence units, or law enforcement agencies in Malaysia where we are legally required to do so — for example, in connection with AML/CTF reporting obligations or pursuant to a valid court order.

6.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving digi888, your Personal Data may be transferred to the successor entity, subject to equivalent data protection obligations. You will be notified of any such transfer that materially affects your privacy rights.

digi888 uses cookies and similar tracking technologies to maintain platform functionality, keep you securely logged in, and understand how players interact with our site. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication tokens and security cookies. They cannot be disabled without breaking core functionality.
• Functional Cookies: Remember your preferences — such as your preferred language (English, Bahasa Melayu, or Chinese), display settings, and last visited game category — to provide a more personalised experience on your next visit.
• Performance & Analytics Cookies: Collect anonymised, aggregated data about how users navigate the Platform — which pages are visited most often, where users drop off, and how long sessions last. This data is used solely to improve Platform performance and user experience.
• Responsible Gambling Cookies: Track session duration data to enable our session time reminder tools and support our responsible gambling monitoring obligations.

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may impair the functionality of the digi888 Platform. We do not use third-party advertising or retargeting cookies.

digi888 retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, and in accordance with our legal obligations. The following retention periods generally apply:

• Active Account Data: Retained for the duration of your account and for a period of 5 years following permanent account closure, in line with AML record-keeping requirements.
• KYC & Identity Documents: Retained for a minimum of 5 years after the end of the business relationship, as required by applicable financial crime legislation.
• Transaction Records: Retained for 7 years to comply with financial reporting and tax record obligations.
• Support Communications: Retained for 2 years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for the duration of your consent and for 1 year thereafter as evidence of that consent.

Once the applicable retention period has expired, your Personal Data will be securely deleted or anonymised so that it can no longer be associated with you.

digi888 implements robust technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. Our security framework includes:

• SSL/TLS Encryption: All data transmitted between your device and the digi888 Platform is protected by 128-bit SSL/TLS encryption. Look for the padlock icon in your browser's address bar when accessing digi888.cam.
• Data-at-Rest Encryption: Sensitive Personal Data stored on our servers — including identity documents and KYC records — is encrypted at rest using industry-standard algorithms.
• Access Controls: Access to Personal Data within digi888 is strictly limited to authorised personnel who require it to perform their job functions. Role-based access controls and audit logs are maintained for all data access events.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their accounts to add an additional layer of security beyond their password.
• Penetration Testing: Our Platform undergoes regular independent security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the unlikely event of a data breach that poses a risk to your rights, digi888 will notify affected Players and relevant regulatory authorities within the timeframes required by applicable law.

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia and applicable data protection principles, you hold the following rights in relation to your Personal Data held by digi888:

• Right of Access: You have the right to request confirmation of whether digi888 processes your Personal Data, and to receive a copy of that data in a clear and understandable format.
• Right of Correction: You have the right to request correction of any inaccurate, incomplete, or outdated Personal Data we hold about you. Some corrections (e.g., name changes) may require supporting documentation.
• Right to Withdraw Consent: Where processing is based on your consent — such as marketing communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing prior to the withdrawal.
• Right to Limit Processing: In certain circumstances, you may request that digi888 restrict the processing of your Personal Data — for example, where you contest the accuracy of the data while we verify it.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purposes it was collected, subject to our legal retention obligations (see Section 8). Note that we are required by law to retain certain records for specified minimum periods.
• Right to Object: You have the right to object to processing based on legitimate interests, including direct marketing. Where you object to direct marketing, we will cease that processing immediately.
• Right to Data Portability: Where technically feasible and legally applicable, you may request that your Personal Data be provided to you in a structured, commonly used, machine-readable format.

To exercise any of the above rights, please contact our Data Protection team using the details in Section 14. We will respond to all valid requests within 21 days. In complex cases, we may extend this period by a further 21 days, in which case we will notify you of the extension and the reason for it.

The digi888 Platform is strictly intended for persons aged 21 years and above. We do not knowingly collect, process, or retain Personal Data from individuals under the age of 21. Age verification is a mandatory step in our registration and KYC process.

If digi888 discovers or is notified that Personal Data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete all related Personal Data to the extent permitted by our legal obligations, and where applicable, report the matter to the relevant authorities.

If you are a parent or guardian and believe that a minor under your care has registered an account with digi888, please contact us immediately at the details provided in Section 14 so we can take prompt remedial action.

The digi888 Platform may contain references to third-party payment providers and game studios whose services are integrated into our platform. While we carefully select our partners, digi888 is not responsible for the privacy practices of any third-party service. We encourage you to review the privacy policies of any third-party providers whose services you use in connection with your digi888 account — including your bank, e-wallet provider (Touch 'n Go eWallet, Boost, GrabPay), and any linked payment service.

This Privacy Policy applies solely to data processed by digi888 in connection with the digi888.cam Platform.

digi888 reserves the right to update or revise this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our business operations, or the services we offer. The "Last Updated" date at the top of this page will be amended accordingly whenever a new version is published.

Where changes are material — meaning they significantly affect how we process your Personal Data or alter your rights — we will notify registered Players via email to the address associated with their account, and/or via a prominent notice displayed on the Platform, at least 14 days before the changes take effect.

Your continued use of the digi888 Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to revisit this page periodically to stay informed of how we protect your data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by digi888, please reach out to our Data Protection team through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the live chat icon on the Platform. Average response time under 5 minutes.
• Support Languages: English, Bahasa Melayu, and Chinese (中文).

When submitting a data rights request, please clearly state your full name, the email address associated with your digi888 account, and the specific right you wish to exercise. We may request additional information to verify your identity before processing the request.

For concerns specifically related to responsible gambling, self-exclusion, or deposit limits, please visit our dedicated Responsible Gambling page for full details on available tools and support resources.