digi888 Privacy Policy — How We Handle Your Personal Data

1. Introduction

This Privacy Policy ("Policy") is published by digi888 ("Company", "we", "us", "our") and applies to all personal data processed in connection with the digi888 platform accessible at digi888.club ("Platform"). This Policy is addressed to registered players, prospective players, and all other individuals whose personal data is processed by digi888 in the course of operating the Platform.

digi888 is committed to processing personal data lawfully, fairly, and transparently in accordance with applicable data protection legislation and the requirements of the international gaming authority under which we operate. We collect only the data necessary to provide the Platform's services and to meet our regulatory obligations.

By accessing the digi888 Platform or registering an account, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any aspect of this Policy, you should refrain from using the Platform. This Policy should be read alongside the digi888 Terms & Conditions.

2. Personal Data We Collect

digi888 collects the following categories of personal data:

2.1 Identity Data

• Full legal name as appearing on government-issued identification
• Date of birth (used to verify the 21+ age requirement)
• Gender (where provided voluntarily)
• Government-issued photo identification (e.g., Malaysian MyKad, passport)
• Proof of address documents

2.2 Contact Data

• Email address (primary communication channel)
• Malaysian mobile phone number
• Residential address

2.3 Financial Data

• Bank account details associated with withdrawal requests (e.g., Maybank, CIMB, Public Bank account numbers)
• eWallet identifiers (Touch n Go eWallet, Boost) where used for deposits or withdrawals
• Cryptocurrency wallet addresses where used for transactions
• Transaction history, deposit records, and withdrawal records

2.4 Technical and Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session logs, login timestamps, and access history
• Pages visited, features used, and time spent on the Platform
• Betting history, game participation records, and wagering activity

2.5 Communications Data

• Live Chat conversation records
• Support ticket content and correspondence
• Email communications with digi888 support

3. How We Collect Your Data

digi888 collects personal data through the following channels:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawal requests, or contacting our support team
• Automated collection: Technical data collected automatically when you access the Platform, including via cookies, server logs, and session tracking technology
• Third-party sources: Identity verification data from KYC service providers; fraud detection signals from payment processors; geolocation data from IP resolution services
• Payment processors: Transaction confirmation data from payment service providers including FPX network, eWallet operators, and cryptocurrency payment gateways

4. How We Use Your Personal Data

digi888 uses personal data for the following purposes:

• Account management: Creating and administering your digi888 account, authenticating your identity at login, and maintaining account security
• Service delivery: Processing bets, settling winnings, operating live casino and slot games, and delivering all Platform functionality
• Payment processing: Processing deposits and withdrawals in MYR via your chosen payment method, including Touch n Go eWallet, Boost, Maybank FPX, CIMB, Public Bank, USDT, and Bitcoin
• Regulatory compliance: Conducting KYC verification, meeting anti-money laundering (AML) obligations, and fulfilling reporting requirements to our licensing authority
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, account takeovers, and other prohibited conduct
• Responsible gaming: Monitoring for indicators of problem gambling and applying player-requested limits, cooling-off periods, or self-exclusion measures
• Customer support: Responding to enquiries, resolving disputes, and maintaining records of support interactions
• Platform improvement: Analysing aggregated usage data to improve the digi888 platform experience for Malaysian mobile users
• Marketing communications: Sending promotional offers and platform updates to players who have not opted out, where permitted

5. Legal Basis for Processing

digi888 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between digi888 and the player (account operation, payment processing, bet settlement)
• Legal obligation: Processing required to comply with KYC, AML, and other regulatory requirements imposed by our licensing authority and applicable law
• Legitimate interests: Processing for fraud prevention, platform security, and improving our services, where these interests are not overridden by your privacy rights
• Consent: Marketing communications and non-essential cookies, where your consent has been obtained and can be withdrawn at any time

6. Data Sharing and Disclosure

digi888 does not sell, rent, or trade personal data. We share personal data only in the following circumstances:

• Service providers: Third-party vendors who process data on our behalf under data processing agreements, including KYC verification providers, payment processors, fraud detection services, and cloud infrastructure providers
• Gaming software providers: Game providers such as Evolution Gaming and Pragmatic Play receive game participation data necessary to operate their games within the digi888 Platform
• Regulatory authorities: Competent authorities, licensing bodies, and law enforcement agencies where disclosure is required by applicable law or a valid legal instrument
• Business transfers: In the event of a merger, acquisition, or sale of all or part of digi888's business, personal data may be transferred as part of the transaction subject to equivalent privacy protections

All third parties who receive personal data from digi888 are contractually required to maintain appropriate data security standards and to process data only for the purposes for which it was disclosed.

7. Data Retention

digi888 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following:

• Active account data is retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML and regulatory record-keeping requirements
• Transaction and financial records are retained for a minimum of five (5) years from the date of each transaction
• KYC identity documents are retained for the period required by the applicable licensing authority, which is typically five (5) years from the end of the business relationship
• Support communications are retained for up to three (3) years following resolution of the relevant matter
• Technical and log data is retained for up to twelve (12) months unless required for an ongoing investigation or legal proceeding

Where retention is required by law or regulation, digi888 cannot honour deletion requests for the relevant data until the mandatory retention period expires.

8. Cookies and Tracking Technologies

The digi888 Platform uses the following types of cookies and similar technologies:

• Essential cookies: Required for the Platform to function, including session management, login state persistence, and load balancing. These cannot be disabled without impairing Platform functionality
• Performance cookies: Used to collect anonymised data about how players use the Platform, enabling digi888 to improve page performance and navigation — particularly important for optimising the experience for Malaysian mobile users on 4G connections
• Functional cookies: Used to remember your preferences, such as language settings and last-visited game categories

digi888 does not use third-party advertising cookies or cross-site tracking technologies. You may control non-essential cookies through your browser settings; however, disabling essential cookies will prevent you from accessing your digi888 account.

9. Data Security

digi888 implements appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• TLS/SSL encryption for all data transmitted between your device and digi888 servers
• Encryption of sensitive data at rest, including financial information and identity documents
• Role-based access controls limiting internal access to personal data to personnel with a legitimate need
• Regular security assessments and penetration testing of the digi888 Platform
• Multi-factor authentication requirements for administrative system access

Despite these measures, no internet-based service can guarantee absolute security. You are responsible for maintaining the security of your digi888 login credentials and for notifying us immediately if you suspect your account has been compromised.

10. Your Data Rights

Subject to applicable law and regulatory limitations, you have the following rights regarding your personal data held by digi888:

• Right of access: You may request a copy of the personal data digi888 holds about you
• Right to rectification: You may request correction of inaccurate or incomplete personal data
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to regulatory retention obligations
• Right to restriction: You may request that digi888 restrict processing of your data in certain circumstances, such as while a dispute is being investigated
• Right to data portability: You may request a copy of your personal data in a structured, machine-readable format where technically feasible
• Right to object: You may object to processing based on legitimate interests, and you may withdraw consent for marketing communications at any time

To exercise any of these rights, contact the digi888 support team via Live Chat or at the support email address. digi888 will respond to data rights requests within a reasonable timeframe consistent with applicable regulatory requirements. Identity verification will be required before processing any data rights request.

11. Children and Minors

The digi888 Platform is strictly for individuals aged 21 years and above. digi888 does not knowingly collect personal data from individuals under the age of 21. If digi888 becomes aware that personal data has been collected from an individual who did not meet the age requirement at the time of registration, the account will be immediately closed, all data associated with the account will be deleted (subject to mandatory regulatory retention requirements), and any funds will be returned to the depositing payment method.

If you believe a minor has registered an account on digi888, please contact our support team immediately via Live Chat.

12. International Data Transfers

digi888 may transfer personal data to servers or service providers located outside of Malaysia. Where such transfers occur, digi888 ensures that appropriate safeguards are in place to protect the data, including contractual data processing agreements with receiving parties that impose data protection obligations equivalent to those under this Policy.

Game providers such as Evolution Gaming operate streaming infrastructure in multiple jurisdictions. Game participation data is transmitted to these providers' servers in the course of game delivery. By using these games on the digi888 Platform, you acknowledge that your game activity data will be processed by these providers in accordance with their own applicable data protection commitments.

13. Contact Us & Policy Updates

If you have any questions, concerns, or requests relating to this Privacy Policy or digi888's data processing practices, please contact our support team via Live Chat available 24/7 on the digi888 Platform, or by email at [email protected].

digi888 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via their registered email address and/or via a prominent notice on the Platform. The "Last Updated" date at the top of this page indicates the date of the most recent revision. Continued use of the digi888 Platform following notification of changes constitutes acceptance of the revised Policy.