Privacy Policy Bersatu88 –
Your Personal Data Protection

1. Introduction

Bersatu88 ("We", "Platform") is committed to protecting the privacy of every individual who interacts with our services. This Privacy Policy is provided to help you clearly understand what information we collect, why we collect it, how we use it, and your rights regarding that data.

We take a transparent and responsible approach to personal data management. This policy is established in accordance with the provisions of Personal Data Protection Act 2010 (PDPA) Malaysia and international best practices in data protection.

If you have any questions about how we handle your data, our dedicated data protection team is available at any time through the channels listed at the end of this document.

2. Information We Collect

Bersatu88 collects information from various sources when you interact with our platform. The following are the main categories of information collected:

In addition to information you provide directly, we also collect data automatically as you browse our platform, including details about your device, internet connection and usage patterns via cookie technology and analytics tools.

3. How We Use Your Data

Every piece of information we collect is used for a clear and lawful purpose. bersatu88 uses your personal data for the following:

• Creating and managing your member account and processing registrations.
• Verifying your identity through the KYC process to meet regulatory requirements.
• Processing deposits, withdrawals, and all financial transactions securely.
• Sending account-related notifications, transaction updates, and promotions you have subscribed to.
• Detecting and preventing fraud, money laundering, and platform abuse.
• Improving service quality, interface design, and overall user experience.
• Ensuring compliance with applicable laws and regulations.
• Supporting responsible gaming programs by identifying patterns of at-risk behavior.

We will not use your data for any purpose beyond those stated above without first obtaining your consent.

4. Sharing Information With Third Parties

Bersatu88 does not sell or trade your personal data. However, in certain situations, we may need to share your information with trusted parties as follows:

• Payment Service Providers — to securely process deposits and withdrawals via FPX, DuitNow, Touch 'n Go and other supported payment channels.
• Game Providers — limited information required to manage game sessions and ensure game integrity.
• Authorities & Regulatory Bodies — when required by law, court order or official request from a regulatory authority.
• KYC Service Providers — trusted third parties that assist with legally mandated identity verification processes.
• Analytics Partners — aggregated and anonymised data that helps us understand usage patterns and improve the platform.

All third parties we work with are bound by strict confidentiality agreements and are only permitted to use your data for the specified purposes.

5. Data Security

Protecting your personal data from unauthorized access, loss, or disclosure is a core responsibility of bersatu88. The technical and organizational security measures we implement include:

• 256-bit SSL encryption for all data in transit between your device and our servers.
• Data encryption at rest (at-rest encryption) for all sensitive information stored in our database.
• Intrusion detection system (IDS) operating 24 hours a day, 7 days a week.
• Role-based access control (RBAC) — staff can only access the data required for their specific duties.
• Regular security audits by independent third parties to identify and address system vulnerabilities.
• Mandatory cybersecurity awareness training for all bersatu88 staff.

6. Cookies & Tracking Technologies

The bersatu88 platform uses cookies and similar tracking technologies to enhance user experience and ensure smooth platform functionality. The types of cookies we use:

• Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
• Performance Cookies: Collecting information on how you use the platform to help us identify technical issues and improve performance.
• Functional Cookies: Saving your preferences such as language, display theme, and other settings so you don't need to reconfigure them each time you log in.
• Analytics Cookies: Helping us understand aggregate and anonymized traffic patterns and site usage for continuous improvement.

You can manage cookie settings through your web browser preferences. However, disabling certain cookies may affect platform functionality and your user experience.

7. Data Retention

Bersatu88 retains your personal data for as long as your account is active or as long as necessary to provide services to you. Our data retention periods are as follows:

• Active Account Data: Retained for the entire duration your account remains active on the Bersatu88 platform.
• Financial & Transaction Data: Stored for a minimum of 7 years after the last transaction, in line with Malaysia's financial regulatory requirements.
• KYC Data: Stored for a minimum of 5 years after account closure, in compliance with the Anti-Money Laundering Act.
• Communication Logs: Stored for 2 years for dispute resolution and customer support purposes.

Once the retention period expires or upon your request for data deletion (subject to legal requirements), your data will be securely deleted or anonymised.

8. Your Rights Over Personal Data

As a data subject under Malaysia's PDPA, you have the following rights, which you may exercise at any time:

To exercise any of the above rights, please contact our Data Protection team via email or live chat. Your request will be acknowledged within 3 business days and resolved within 14 working days. In more complex cases, this period may be extended up to 30 days, with notification provided to you.

9. Cross-Border Data Transfers

In the course of its operations, Bersatu88 may transfer your personal data to servers or processing facilities located outside Malaysia. Any such transfer is only carried out when:

• The recipient country has an equivalent or higher level of data protection than Malaysia.
• Binding data transfer agreements have been signed with recipient parties.
• You have given explicit consent for the transfer, or the transfer is necessary to fulfil a contract with you.

We ensure that all cross-border data transfers are carried out with adequate safeguards to protect your rights and interests.

10. Child Protection

The bersatu88 platform is strictly for users aged 18 and above. We do not intentionally collect or process personal data of individuals under the age of 18. Should we discover that a child's data has been collected without our knowledge, immediate action will be taken to delete that data and close the associated account.

If you are a parent or guardian and believe your child has registered on our platform, please contact us immediately so we can take the appropriate action.

11. Amendments to This Privacy Policy

Bersatu88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Any amendments will take effect immediately upon publication on this page.

For significant amendments, we will notify you via your registered email or a prominent notice on the platform before changes take effect. The latest update date will always be displayed at the top of this page for your reference.

12. Contact Our Data Protection Officer

Bersatu88 has appointed a Data Protection Officer (DPO) responsible for ensuring PDPA compliance and handling all privacy-related enquiries. You may contact us via:

• Data Protection Email: [email protected]
• Live Support: 24/7 live chat via the bersatu88 platform or mobile app.
• Response Time: Within 3 working days for all privacy enquiries.

For more information about your rights or how we manage the platform overall, please also refer to the Terms and Conditions and FAQ us.