fifo88 Privacy Policy

Introduction

This Privacy Policy ("Policy") sets out how fifo88 ("fifo88", "we", "us", "our") — the operator of the online gaming and sports betting platform accessible at fifo88.cam (the "Platform") — collects, processes, stores, and discloses personal data relating to users ("Players", "you", "your") of the Platform.

fifo88 is committed to handling personal data with the utmost care, transparency, and in accordance with applicable data protection principles. This Policy applies to all personal data collected through your use of the Platform, including during account registration, identity verification, payment processing, customer support interactions, and general Platform navigation.

By registering an account on fifo88 or by continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and processing of your personal data as described herein. Your continued use constitutes your ongoing acceptance of this Policy.

Definitions

For the purpose of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information that identifies or could reasonably identify a living individual, including names, identification numbers, contact details, financial details, location data, and online identifiers.
• "Processing" — any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — fifo88, the entity that determines the purposes and means of processing personal data collected through the Platform.
• "Data Processor" — a third-party entity that processes personal data on behalf of fifo88, subject to binding contractual obligations and data protection requirements.
• "KYC" — Know Your Customer. The identity and document verification process required to confirm a Player's identity and eligibility before withdrawal privileges are activated.
• "Cookie" — a small data file placed on a user's device by the Platform for the purpose of tracking, session management, analytics, and personalisation.
• "Sensitive Data" — a specific category of personal data warranting heightened protection, including health information, biometric data, and financial account details.

Personal Data We Collect

fifo88 collects personal data from you in several ways — directly from information you provide, automatically through your use of the Platform, and occasionally from third-party verification and payment service providers. The categories of data we collect include:

We do not intentionally collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless required to do so by applicable law or by our regulatory obligations as an online gaming operator.

Legal Basis for Processing

fifo88 processes your personal data only where a lawful basis exists for doing so. We rely on the following legal bases depending on the purpose of the processing activity:

• Contractual Necessity: Processing required to perform our obligations under the Terms and Conditions you accepted at registration — including account management, transaction processing, bonus administration, and withdrawal handling.
• Legal Obligation: Processing required to comply with applicable laws and regulations — including anti-money laundering (AML) obligations, KYC requirements, tax reporting obligations, and fraud prevention requirements.
• Legitimate Interests: Processing carried out in the legitimate interests of fifo88 where those interests are not overridden by your data protection rights — including platform security, fraud detection, responsible gambling monitoring, and service improvement analytics.
• Consent: Processing based on your freely given, informed, and specific consent — such as marketing communications and optional personalisation features. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

How We Use Your Personal Data

fifo88 uses the personal data it collects for the following specific purposes. We do not use your data for any purpose not listed below without providing you with prior notice:

• Account Management: To create, verify, maintain, and administer your fifo88 account, including login authentication and account security.
• Identity Verification (KYC): To verify your identity and age in compliance with our regulatory obligations. Age verification is mandatory — fifo88 strictly enforces the 21+ age requirement for all Malaysian players.
• Payment Processing: To process deposits and withdrawals via your chosen payment method — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, BTC, ETH, and USDT.
• Fraud Prevention & AML Compliance: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct on the Platform.
• Responsible Gambling: To monitor gaming behaviour for indicators of problem gambling and to administer responsible gambling tools including deposit limits, self-exclusion, and session time reminders.
• Customer Support: To respond to your queries, complaints, and requests submitted via live chat or email, and to maintain records of our interactions for quality assurance purposes.
• Platform Analytics: To analyse how the Platform is used — identifying popular features, diagnosing technical issues, and improving the overall player experience.
• Marketing Communications: Where you have given explicit consent, to send you promotional communications about bonuses, new games, and special events. You may opt out at any time.
• Legal Compliance: To meet our obligations under applicable laws and to respond to lawful requests from regulatory authorities, law enforcement agencies, or courts of competent jurisdiction.

Data Sharing & Disclosure

fifo88 does not sell your personal data to any third party. We may share your personal data only with the categories of recipients listed below, and only to the extent necessary for the stated purpose:

• Payment Service Providers: We share transaction data with payment processors and gateway operators (including e-wallet providers and banking partners) to facilitate deposits and withdrawals. These processors are bound by data protection agreements and are not permitted to use your data for their own purposes.
• Identity Verification Providers: We use regulated third-party KYC and AML screening service providers to verify your identity documents and screen against sanctions lists. These providers act as data processors under our instruction.
• Game Software Providers: Certain game-related data (such as session identifiers and gameplay logs) may be shared with the game studios whose software operates on the Platform, solely for the purpose of resolving game disputes and delivering the game service.
• Regulatory Authorities: We are required to disclose player data to relevant regulatory authorities, law enforcement agencies, or government bodies where required by law or court order.
• Fraud Prevention Agencies: We may share data with industry fraud prevention and AML monitoring bodies where we have reasonable grounds to suspect illegal activity.
• Professional Advisers: In limited circumstances, we may share data with legal counsel, auditors, or other professional advisers under appropriate confidentiality obligations.

International Data Transfers

As an online gaming platform serving players across Malaysia, fifo88 may transfer personal data to and from servers and service providers located in jurisdictions outside Malaysia. Where such transfers occur, fifo88 takes appropriate steps to ensure that your personal data receives a level of protection consistent with the principles set out in this Policy.

Appropriate safeguards for international transfers may include: contractual clauses requiring the recipient to apply equivalent data protection standards; transfers to jurisdictions recognised as providing adequate data protection; or consent-based transfers where appropriate and lawful.

If you require further information about the specific safeguards in place for any international data transfer involving your personal data, please contact us using the details in Section 15.

Data Retention

fifo88 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulatory obligation. The general retention periods we apply are set out below:

• Account and Identity Data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, as required for AML compliance and regulatory audit purposes.
• Transaction Records: Retained for a minimum of seven (7) years from the date of each transaction, in accordance with financial record-keeping obligations.
• KYC Documents: Retained for the duration of your active account plus a minimum of five (5) years post-closure. Original document images are deleted as soon as verification is confirmed, and only verification records are retained thereafter.
• Support Communications: Retained for a maximum of three (3) years from the date of the interaction, unless the record is relevant to an open dispute or regulatory investigation.
• Technical and Usage Data: Retained in aggregated or pseudonymised form for up to two (2) years for analytics and security purposes.
• Marketing Consent Records: Retained for the duration of the marketing relationship plus three (3) years to demonstrate consent compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised using industry-standard procedures. Anonymised data that can no longer be linked to any individual may be retained indefinitely for statistical or analytical purposes.

Cookies & Tracking Technologies

fifo88 uses cookies and similar tracking technologies (collectively "Cookies") on the Platform. Cookies are small text files stored on your device when you visit the Platform. They help us deliver a consistent, secure, and personalised experience.

The types of cookies we use include:

• Strictly Necessary Cookies: Essential for core Platform functionality including login sessions, account security, and navigation. These cookies cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: Remember your preferences (such as language settings, preferred payment method, and game interface settings) to provide a more personalised experience.
• Analytics Cookies: Collect anonymised usage data — pages visited, session duration, error reports — to help us understand how the Platform is used and improve its performance.
• Session Security Cookies: Used to detect and prevent session hijacking, CSRF attacks, and other security threats.

Your Rights Over Your Personal Data

You hold a number of rights over the personal data that fifo88 holds about you. These rights are described below. To exercise any of these rights, please contact us using the details provided in Section 15. fifo88 will respond to all verified data rights requests within thirty (30) calendar days of receipt, unless an extension is required due to complexity, in which case you will be notified accordingly.

• Right of Access: You have the right to request a copy of the personal data we hold about you and to receive information about how it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may update certain account details directly through your account dashboard.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent. Note that this right is subject to our legal and regulatory retention obligations — we cannot delete data that we are required by law to retain.
• Right to Restrict Processing: You may request that we restrict our processing of your data in certain circumstances, such as while a correction request is pending or where processing is based on legitimate interests you wish to contest.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on our legitimate interests where you believe your interests, rights, or freedoms override those interests. You may also object to direct marketing processing at any time without providing justification.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Minors & Age Verification

fifo88 does not knowingly collect personal data from individuals under the age of 21. The Platform is strictly intended for players aged 21 and above, consistent with responsible gambling standards applicable to Malaysian users. fifo88 employs automated and manual age verification procedures as part of its registration and KYC processes to enforce this requirement.

If fifo88 discovers or has reasonable grounds to believe that personal data has been collected from an individual below the age of 21, we will take immediate steps to close the associated account, forfeit any balance derived from gameplay, and securely delete all associated personal data unless we are required by law to retain certain records.

If you believe that a minor has registered an account on fifo88, please notify us immediately at the contact details provided in Section 15. We take all such reports seriously and will investigate promptly.

Data Security

fifo88 implements a comprehensive range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, destruction, or alteration. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the fifo88 Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Two-Factor Authentication (2FA): Available for login and withdrawal authorisation, providing an additional layer of account security beyond passwords alone.
• Encrypted Data Storage: Sensitive personal data, including identity document information and financial details, is stored using encryption at rest.
• Access Controls: Access to personal data within fifo88 is strictly limited on a need-to-know basis. Staff with data access are subject to confidentiality obligations and regular security awareness training.
• Real-Time Fraud Monitoring: Automated systems continuously monitor account activity for suspicious patterns, flagging potential fraud or account compromise for immediate review.
• Regular Security Audits: fifo88 conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities proactively.

Notwithstanding these measures, no data transmission over the internet or electronic storage system is completely immune to risk. fifo88 cannot guarantee absolute security but is committed to maintaining security standards proportionate to the sensitivity of the data we process. In the event of a data breach that poses a risk to your rights, fifo88 will notify affected individuals and relevant authorities as required by applicable law.

Third-Party Links & Services

The fifo88 Platform may contain references to or integrations with third-party services, including payment processors, game software providers, and identity verification services. These third-party services are governed by their own privacy policies, which are separate from and independent of this Policy.

fifo88 is not responsible for the data handling practices of third-party services accessed through the Platform. We encourage you to review the privacy policies of any third-party service provider before submitting personal data directly to them. Where fifo88 shares data with third-party data processors, we ensure contractual data protection obligations are in place as described in Section 6.

Amendments to This Policy

fifo88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or Platform features. The date of the most recent update is displayed at the top of this page.

Where amendments are material — meaning they meaningfully affect the way we collect or process your personal data — fifo88 will provide reasonable advance notice through a Platform notification or by email to your registered address. Your continued use of the Platform following publication of an updated Policy constitutes your acceptance of the revised terms.

We recommend reviewing this Privacy Policy periodically — particularly before any significant Platform activity such as making a first withdrawal or updating your account details — to remain fully informed of how your data is handled.

Contact Us — Data Privacy Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or your personal data held by fifo88, please contact us through one of the following channels:

• 24/7 Live Chat: The fastest channel for all account-related and support queries — accessible directly from your fifo88 account dashboard.
• Email: [email protected] — for data rights requests, please use the subject line "Data Privacy Request" and include your registered username and a clear description of your request. We aim to acknowledge all privacy requests within 24 hours and provide a substantive response within 30 calendar days.

fifo88 treats all data privacy requests confidentially and will verify your identity before processing any request involving access to, correction of, or deletion of personal data. We will never charge a fee for processing legitimate data rights requests unless the request is manifestly unfounded or excessive.