smart888 Privacy Policy

This Privacy Policy ("Policy") is issued by smart888 ("smart888", "we", "us", "our") and governs the collection, processing, storage, and disclosure of personal data obtained through the smart888 platform, website at smart888.co, and all related services (collectively, the "Platform"). This Policy applies to all registered users, visitors, and any other individuals whose personal data is processed in connection with the Platform.

Smart888 is committed to handling personal data responsibly and in accordance with applicable data protection legislation, including the Personal Data Protection Act 2010 of Malaysia ("PDPA"). By registering an account or using the Platform, you acknowledge that you have read, understood, and agreed to the practices described in this Policy.

Smart888 collects personal data in the following categories:

Smart888 does not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) except where strictly required by applicable law or for responsible gaming compliance purposes with your explicit consent.

Smart888 uses your personal data for the following purposes:

• To create and maintain your smart888 account and verify your identity.
• To process deposits, withdrawals, and all financial transactions in MYR.
• To comply with anti-money laundering ("AML") and know-your-customer ("KYC") regulatory requirements.
• To provide customer support and respond to your enquiries.
• To personalise your experience on the Platform, including game recommendations based on your activity.
• To detect, investigate, and prevent fraudulent activity, abuse, and security incidents.
• To send service-related communications including transaction confirmations, security alerts, and policy updates.
• To send promotional communications where you have provided consent and not subsequently opted out.
• To monitor compliance with our responsible gaming obligations, including age verification and self-exclusion management.
• To analyse Platform performance and improve our services.

Smart888 does not use automated decision-making or profiling that produces legal or similarly significant effects without human review, except as required by our AML/KYC compliance processes.

Smart888 processes your personal data on the following legal bases under applicable data protection law:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you have accepted, including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML, KYC, and responsible gaming obligations.
• Legitimate interests: Processing for fraud prevention, security monitoring, Platform improvement, and analytics, where our interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications and certain non-essential cookies, where you have provided explicit, freely given consent.

Smart888 does not sell or trade your personal data. We may disclose your personal data to the following categories of recipients, solely to the extent necessary and under appropriate data protection agreements or legal obligations:

• Payment processors: Local and international payment service providers (including those facilitating Maybank, CIMB, Touch n Go eWallet, and Boost transactions) to process your financial transactions.
• Identity verification providers: Third-party KYC and AML compliance service providers engaged to verify your identity and assess risk.
• Game providers: Software studios (such as Pragmatic Play, Evolution Gaming) that deliver games on the Platform may receive technical session data necessary for game operation.
• IT and infrastructure providers: Cloud hosting, data backup, and cybersecurity service providers operating under strict confidentiality and data processing agreements.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory directive.
• Responsible gaming bodies: In connection with self-exclusion programme administration or harm prevention obligations where required.

The smart888 Platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and gather analytical data about Platform usage. Cookies are small text files stored on your device by your browser when you access the Platform.

Smart888 uses the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function correctly, including session authentication, security tokens, and load balancing. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Used to remember your preferences such as language settings, game filters, and display preferences across sessions.
• Analytics cookies: Used to collect aggregated, anonymised data about how users navigate the Platform to help us improve performance and content.
• Marketing cookies: Used, with your consent, to deliver relevant promotional content. You may withdraw consent at any time via your browser settings or by contacting support.

You may control or disable non-essential cookies through your browser's cookie settings. Please note that disabling certain cookies may affect the functionality of the Platform.

Smart888 implements a layered approach to data security, combining technical, organisational, and procedural controls to protect your personal data against unauthorised access, disclosure, alteration, or destruction.

• All data in transit between your device and our servers is encrypted using 256-bit SSL/TLS encryption.
• Personal and financial data is stored in encrypted form on access-controlled servers.
• Player funds and personal account data are held in segregated systems.
• Access to personal data within smart888 is restricted to authorised personnel on a need-to-know basis.
• Regular security audits and penetration testing are conducted on Platform infrastructure.
• A documented incident response procedure is maintained for data breach scenarios.

Whilst smart888 employs commercially reasonable security measures, no method of electronic storage or internet transmission is completely secure. You are encouraged to use a strong, unique password for your smart888 account and to enable two-factor authentication to further protect your account.

Smart888 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required or permitted by applicable law. The following general retention periods apply:

• Account data: Retained for the duration of your account and for a period of five (5) years following account closure, to comply with AML and regulatory record-keeping requirements.
• Transaction records: Retained for a minimum of seven (7) years in accordance with financial record-keeping obligations.
• KYC documents: Retained for five (5) years following account closure or the date of the last transaction, whichever is later.
• Support communications: Retained for two (2) years following the resolution of the support interaction.
• Technical and usage logs: Typically retained for thirteen (13) months for security and fraud detection purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with smart888's data disposal procedures.

Subject to applicable law, you have the following rights in respect of your personal data held by smart888:

• Right of access: You may request a copy of the personal data smart888 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to restrict processing: You may request that smart888 restrict the processing of your personal data in certain circumstances.
• Right to data portability: You may request that your personal data be provided to you in a structured, commonly used, machine-readable format.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact smart888 customer support via the live chat facility available on the Platform. Smart888 will respond to verified requests within the timeframes required by applicable law. We may require proof of identity before processing a data rights request.

The smart888 Platform is strictly intended for individuals aged 21 years and above. Smart888 does not knowingly collect personal data from any person under the age of 21. If smart888 discovers or is made aware that personal data has been collected from a person under the age of 21, that data will be deleted from our systems promptly and the associated account will be closed.

If you have reason to believe that a minor has registered an account on smart888 or that their personal data has been collected, please contact our support team immediately via live chat.

Smart888 reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered users via email or an in-platform notification prior to the change taking effect. The "Last updated" date at the top of this page will reflect the date of the most recent revision. Continued use of the Platform following publication of an updated Policy constitutes your acceptance of the revised terms.

We encourage you to review this Policy periodically to remain informed of how smart888 handles your personal data. If you disagree with any revision, you may exercise your right to close your account as described in the Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or smart888's data processing practices, please contact our customer support team via live chat, available on the Platform from 8 AM to 12 AM (MYT) every day of the week. You may also reach us by email — our contact details are published in the footer of this website.

Smart888 is committed to resolving privacy queries promptly and transparently. If you are not satisfied with our response to a data-related concern, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.