Grab88 Privacy Policy for Malaysian Players

1 Introduction and Scope

Grab88 respects the privacy of every player, visitor, and account holder. This Privacy Policy describes the information Grab88 may process when you visit the website, create an account, complete identity verification, deposit or withdraw funds, contact support, claim a promotion, or use casino and sports betting features.

By using Grab88, you acknowledge that certain processing is necessary to provide the requested services. This includes verifying that players are aged 21 and above, maintaining account security, settling wagers, managing payments, and detecting suspicious activity. If you do not provide information that is essential for these purposes, Grab88 may be unable to open or maintain your account.

This policy applies to information obtained directly from you, generated through your use of Grab88, or received from service providers supporting identity verification, payments, fraud prevention, technical hosting, and customer support.

2 Definitions

For this Privacy Policy, the following terms have the meanings set out below:

• Personal data means information that identifies you or can reasonably be linked to you.
• Processing means collecting, recording, organising, storing, using, sharing, correcting, restricting, or deleting information.
• Account data means registration details, profile settings, account status, login history, and communications connected with your Grab88 account.
• KYC data means identity and age verification records, such as a MyKad or passport image, proof of address, and verification results.
• Transaction data means deposit, withdrawal, bonus, wallet, and payment records expressed in MYR, cryptocurrency, or another supported value.
• Technical data means device, browser, IP address, security log, cookie, and session information produced when Grab88 services are used.

3 Information We Collect

Grab88 collects only the categories of information reasonably required to operate and secure the platform. The precise information collected depends on the services you use and whether additional checks are needed.

Grab88 does not require your online banking password, e-wallet PIN, or full card security code. You should never disclose these credentials to Grab88 support personnel or any person claiming to represent the platform.

4 How Personal Data Is Collected

Grab88 receives information directly when you enter registration details, upload a verification document, make a payment, contact customer support, change a responsible gambling limit, or participate in a promotion. Information is also generated automatically as you navigate the platform, sign in, place wagers, or use features such as live football and casino games.

Selected information may be received from payment processors, banks, e-wallet services, identity verification providers, game suppliers, and fraud prevention partners. For example, Grab88 may receive confirmation that an FPX transfer was successful without receiving the login credentials used for Maybank2u, CIMB Clicks, Public Bank, or Hong Leong Connect.

5 Purposes and Legal Basis for Processing

Grab88 processes personal data for the following operational, contractual, security, and compliance purposes:

• Creating, administering, securing, and closing a Grab88 account.
• Confirming that each player is aged 21 or above and completing KYC checks.
• Accepting deposits, processing withdrawals, reconciling balances, and keeping transaction records.
• Providing slots, live casino, EPL, Liga Super Malaysia, UFC, lottery, and other betting services.
• Applying bonus rules, wagering requirements, VIP benefits, and account limits.
• Detecting account takeover, payment fraud, duplicate accounts, collusion, money laundering risks, and prohibited activity.
• Answering questions, resolving complaints, and maintaining support records.
• Implementing deposit limits, cooling-off periods, self-exclusion, and other responsible gambling controls.
• Maintaining website performance, service availability, security logs, and aggregated analytics.
• Sending service messages and, where permitted, promotional communications based on your preferences.

Depending on the circumstances and applicable law, Grab88 relies on performance of a service contract, compliance with legal obligations, legitimate interests in security and platform administration, or consent where consent is specifically required. You may withdraw consent for optional processing without affecting processing already carried out lawfully.

6 KYC, Age Verification, and Player Protection

Grab88 is intended exclusively for players aged 21 and above. Identity verification supports age enforcement, payment security, fraud prevention, and responsible gambling controls. Grab88 may request a clear copy of a government-issued identity document, proof of residential address, a payment ownership record, or a verification image where reasonably necessary.

Verification information is reviewed only by authorised personnel or approved verification providers. Grab88 may compare details across records to confirm that a payment method belongs to the account holder and that one person is not operating multiple accounts. An account may be restricted while checks are incomplete or where submitted information cannot be verified.

Self-exclusion records may be retained after account closure where necessary to prevent a self-excluded player from opening another Grab88 account. This protective processing supports the player's expressed choice and the platform's responsible gambling responsibilities.

7 Payments and Financial Information

Grab88 supports Malaysian payment options such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Bank. Transaction records may include the payment method, transaction time, amount in MYR, masked account details, status, and payment reference.

Payments may be completed through specialist payment providers. Those providers process information under their own operational and legal responsibilities. Grab88 receives only the information required to confirm, reconcile, refund, or investigate a transaction. Full card numbers and bank login credentials should not be stored in ordinary Grab88 account records.

Transaction history is retained for account administration, disputes, fraud prevention, financial reporting, and compliance purposes. Grab88 may request proof that a bank account or e-wallet belongs to the registered player before approving a withdrawal.

8 Cookies and Similar Technologies

Grab88 may use cookies, local storage, session identifiers, and similar technologies to keep users signed in, remember settings, protect account sessions, measure website performance, and understand how features are used. Essential technologies are required for security and basic operation.

Cookie Categories

• Strictly necessary cookies support authentication, security, payment flows, and page navigation.
• Preference cookies remember choices such as display settings and selected currency.
• Performance cookies help Grab88 identify errors, slow pages, and frequently used features.
• Marketing cookies may be used only where permitted and subject to available consent controls.

You may control non-essential cookies through available browser settings. Blocking essential cookies may prevent account login, payment processing, or other Grab88 features from working correctly.

9 Disclosure to Service Providers

Grab88 does not sell personal data. Information may be disclosed to carefully selected service providers when necessary to operate the platform. These providers may include hosting companies, payment processors, identity verification specialists, game suppliers, security vendors, customer support systems, professional advisers, and analytics providers.

Grab88 requires service providers to use information only for authorised purposes and to apply appropriate confidentiality and security measures. Information may also be disclosed where required by a valid legal process, to investigate suspected unlawful activity, to protect players or the public, or to establish and defend legal claims.

If Grab88 undergoes a legitimate merger, restructuring, financing, or transfer of business assets, relevant data may be transferred subject to confidentiality measures and applicable legal requirements.

10 International Data Transfers

Grab88 operates in an international online environment. Personal data may be processed or stored outside Malaysia by approved technology, payment, security, or verification providers. Privacy laws in another jurisdiction may differ from Malaysian law.

Where applicable, Grab88 uses contractual restrictions, access controls, security reviews, and other appropriate safeguards for international transfers. Grab88 seeks to limit each transfer to the information reasonably necessary for the relevant service.

11 Data Security

Grab88 applies administrative, technical, and organisational safeguards designed to protect personal data against unauthorised access, accidental loss, alteration, misuse, or disclosure. Measures may include encrypted communications, access permissions, system monitoring, secure backups, staff confidentiality obligations, and account verification controls.

No internet-based system can guarantee absolute security. Players must use a strong, unique password, keep account credentials private, sign out on shared devices, and notify Grab88 promptly if suspicious activity is detected. Grab88 support will never ask for your complete banking password, e-wallet PIN, or one-time authentication code.

If a personal data incident presents a material risk, Grab88 will investigate, contain the issue, take appropriate remedial action, and provide notices where required by applicable law.

12 Data Retention

Grab88 retains personal data only for as long as reasonably necessary for the purposes described in this policy. Retention periods vary according to the type of record, account status, dispute risk, responsible gambling requirements, payment obligations, and applicable legal duties.

Account, KYC, transaction, complaint, and security records may be retained after an account closes where required to prevent fraud, honour self-exclusion, resolve disputes, maintain financial records, or respond to lawful requests. When information is no longer required, Grab88 will delete, anonymise, or securely isolate it in accordance with applicable retention procedures.

13 Your Privacy Rights

Subject to applicable law, identity verification, and relevant exemptions, Grab88 players may exercise rights concerning their personal information. A request may be limited where fulfilling it would interfere with fraud investigations, legal obligations, another person's rights, or the integrity of financial and gaming records.

Grab88 may request proof of identity before responding to a privacy request. This protects account information from disclosure to an unauthorised person. Requests will be addressed within a reasonable period, subject to complexity and applicable law.

14 Marketing Communications

Where permitted, Grab88 may send information about bonuses, casino games, sports markets, VIP benefits, and platform updates. Marketing preferences can be changed through available account settings or by contacting support. Withdrawing from marketing does not prevent Grab88 from sending essential service messages about account security, verification, withdrawals, policy changes, or responsible gambling.

Grab88 does not knowingly send gambling promotions to persons under 21 or to players whose accounts are subject to active self-exclusion. Marketing suppression information may be retained to ensure that an opt-out request continues to be respected.

15 Responsible Gambling and Privacy

Grab88 may process information about deposit limits, session reminders, cooling-off requests, account restrictions, and self-exclusion to support safer gambling. Access to this information is limited to personnel and service providers who require it for player protection, compliance, or account administration.

A responsible gambling request will not be used to pressure a player to continue gambling. Grab88 may retain exclusion and restriction records even after account closure to help prevent re-registration. More information about these controls is available on the Responsible Gambling page.

16 Changes to This Privacy Policy

Grab88 may update this Privacy Policy to reflect changes in services, technology, security practices, or applicable requirements. The revised version will display a new “Last updated” date. Material changes may also be communicated through an account notice or another appropriate channel.

Players should review this page periodically. Continued use of Grab88 after an update means that subsequent processing will be governed by the revised policy, subject to any consent that applicable law requires.

17 Contact Us