smart888 Privacy Policy

1. Introduction

Smart888 ("smart888", "we", "us", "our") operates the online gaming platform accessible at smart888.club. We are committed to protecting and respecting your privacy. This Privacy Policy ("Policy") sets out the basis on which personal data we collect from you, or that you provide to us, will be processed by us. Please read this Policy carefully to understand our practices regarding your personal data and how we will treat it.

This Policy applies to all personal data processed in connection with your registration, use of, and interaction with smart888.club and any related customer support, marketing, or responsible gaming communications. By registering an account or using our platform, you acknowledge that you have read and understood this Policy.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming policies, which together form the complete framework governing your relationship with smart888.

2. Data Controller

Smart888 is the data controller in respect of personal data collected through smart888.club. As data controller, smart888 determines the purposes and means of processing your personal data in accordance with applicable data protection laws, including the Malaysian Personal Data Protection Act 2010 (PDPA) and any other applicable legislation in the jurisdictions in which we operate.

References to "personal data" in this Policy mean any information that identifies or could reasonably be used to identify you as an individual. This includes your name, phone number, financial account information, identification documents, IP address, and device identifiers.

3. Data We Collect

3.1 Registration and Account Data

When you register a smart888 account, we collect the information you provide, which includes your preferred username, password (stored only in hashed form), Malaysian phone number, and your confirmation of eligibility (including date of birth or age confirmation).

3.2 Identity Verification (KYC) Data

As required by our licensing obligations and anti-money laundering (AML) procedures, we collect identity documents from members prior to processing their first withdrawal. This may include a copy of your MyKad (Malaysian National Identity Card), passport, or other government-issued photo identification, as well as proof of your registered payment method. KYC documents are processed and stored securely and are used only for the purposes of identity verification and regulatory compliance.

3.3 Transaction and Financial Data

We collect details of all deposits, withdrawals, and bets placed on smart888, including transaction amounts, timestamps, payment method identifiers, and associated wallet or bank account references. We do not store full payment card numbers; where card payment is used, tokenisation is applied by our payment processor.

3.4 Technical and Device Data

When you access smart888.club, we automatically collect certain technical data, including your IP address, device type, operating system, browser type and version, screen resolution, time zone, and referring URL. This data is collected via server logs and analytics technologies and is used to maintain platform security, diagnose technical issues, and improve the user experience.

3.5 Behavioural and Usage Data

We collect data about how you interact with smart888, including the games you play, bets you place, session durations, pages visited, and features used. This data is used to personalise your experience, identify responsible gaming concerns, detect fraud, and improve our platform.

3.6 Communications Data

If you contact our customer support team, we retain records of those communications, including live chat transcripts, support ticket history, and any information you share during a support interaction. These records are retained for quality assurance, training, and dispute resolution purposes.

4. How We Use Your Data

Smart888 uses your personal data for the following purposes:

• Account management: To create, maintain, and manage your smart888 account, including authenticating your identity at login and enabling account recovery.
• Service delivery: To process your deposits and withdrawals, credit winnings to your account, settle bets, and provide access to all gaming products on the platform.
• Legal and regulatory compliance: To verify your identity and age (21+), comply with our licensing conditions, perform anti-money laundering and counter-terrorism financing (AML/CTF) screening, and respond to lawful regulatory requests or court orders.
• Fraud prevention and security: To detect and prevent fraudulent activity, unauthorised account access, bonus abuse, and prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming: To monitor your gaming activity for patterns that may indicate problem gambling, apply responsible gaming tools you have set, and contact you if we identify serious concerns about your welfare.
• Customer support: To respond to your enquiries, resolve complaints, and provide assistance with account or technical issues.
• Platform improvement: To analyse aggregated usage data, identify areas for improvement, conduct A/B testing, and develop new features.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates, where you have not opted out of such communications.

5. Legal Basis for Processing

Smart888 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you, including account management, payment processing, and bet settlement.
• Legal obligation: Processing required to comply with applicable law, including AML/CTF obligations, licensing conditions, and responses to regulatory or law enforcement authorities.
• Legitimate interests: Processing carried out for our legitimate business interests, including fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring, where such interests are not overridden by your rights and interests.
• Consent: Processing of personal data for marketing communications and non-essential cookies, where your consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Data Sharing and Disclosure

Smart888 does not sell your personal data to any third party. We may share your personal data with third parties only in the following limited circumstances:

• Payment processors: To process deposits and withdrawals, we share necessary transaction data with our contracted payment service providers (including e-wallet operators such as Touch 'n Go eWallet, Boost, and GrabPay, and FPX-connected banking institutions). These providers receive only the data necessary to complete the transaction and are bound by data processing agreements.
• Game providers: Game providers whose titles appear on smart888 may receive anonymised session and bet data necessary for game delivery, RNG auditing, and technical support. No personally identifiable information is shared with game providers beyond what is technically required.
• Identity verification services: To facilitate KYC verification, we may share your identification documents with contracted third-party identity verification providers. These providers are contractually obligated to process your data only for KYC purposes and to maintain equivalent data security standards.
• Regulatory and law enforcement authorities: We may be required to disclose your personal data to gaming regulatory bodies, financial intelligence units, law enforcement agencies, or courts where such disclosure is required by applicable law or a valid legal instrument.
• Group companies and service providers: We may share personal data with companies within the smart888 corporate group and with contracted service providers (such as cloud hosting, analytics, and customer support platform providers) who process data on our behalf under data processing agreements.

7. International Data Transfers

Some of the third parties with whom we share your personal data may be located in, or operate infrastructure in, jurisdictions outside Malaysia. Where personal data is transferred outside Malaysia, smart888 takes appropriate measures to ensure that such transfers are carried out in compliance with applicable data protection law, including through the use of contractual safeguards equivalent to those required under the Malaysian PDPA.

By using smart888, you acknowledge that your personal data may be transferred to, stored in, and processed in jurisdictions outside Malaysia in accordance with this Policy.

8. Data Retention

Smart888 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention requirements:

• Account data and KYC documents are retained for a minimum of five (5) years following account closure, in compliance with AML/CTF record-keeping obligations.
• Transaction records (deposits, withdrawals, bet history) are retained for a minimum of five (5) years following the date of the transaction.
• Customer support communications are retained for three (3) years following the resolution of the relevant matter.
• Technical and device data collected via server logs is retained for a rolling period of up to twelve (12) months.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised. Anonymised data (from which you cannot be identified) may be retained indefinitely for statistical and analytical purposes.

9. Data Security

Smart888 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and smart888.club.
• Encryption at rest for sensitive data including KYC documents and password hashes.
• Access controls limiting personal data access to authorised personnel on a need-to-know basis.
• Regular security assessments and penetration testing of our platform infrastructure.
• Two-factor authentication (2FA) availability for all member accounts.
• Monitoring of account activity for suspicious access patterns and automated alerts for anomalous behaviour.

While smart888 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and any relevant regulatory authority as required by applicable law.

10. Cookies and Tracking Technologies

Smart888 uses cookies and similar tracking technologies to operate and improve the platform. The cookies we use fall into the following categories:

• Strictly necessary cookies: Required for the platform to function, including session management, login authentication, and security features. These cookies cannot be disabled without impairing platform functionality.
• Performance and analytics cookies: Used to collect aggregated data about how members use smart888, enabling us to identify technical issues and improve the user experience. These cookies do not collect personally identifiable information in isolation.
• Functional cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalised experience.
• Marketing cookies: Used to track your interaction with smart888 promotional content, including promotional emails. Marketing cookies are only set where you have provided consent.

You can control and manage cookies via your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling cookies may affect the functionality of smart888.club. For more information about managing cookies, refer to your browser's help documentation.

11. Your Data Protection Rights

Subject to applicable law, you have the following rights in relation to your personal data held by smart888:

• Right of access: You have the right to request a copy of the personal data we hold about you.
• Right to correction: You have the right to request that inaccurate or incomplete personal data be corrected.
• Right to erasure: In certain circumstances, you have the right to request that we delete your personal data. Note that we may be required to retain certain data for legal or regulatory reasons even following a deletion request.
• Right to restrict processing: You have the right to request that we restrict processing of your personal data in certain circumstances, for example while a correction request is pending.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object to marketing: You may opt out of receiving marketing communications from smart888 at any time by contacting our customer support team.

To exercise any of the above rights, please contact smart888 customer support via live chat on smart888.club. We will respond to verified data subject requests within 30 days. We may require you to verify your identity before processing a data rights request.

12. Children and Minors

Smart888 is strictly for persons aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that we have collected personal data from a person under 21, we will take immediate steps to close the relevant account, void all bets, return any verified balance, and delete the personal data in question.

If you have reason to believe that a person under 21 has registered an account on smart888, please contact our customer support team immediately. Smart888 takes underage gambling extremely seriously and will act on all credible reports without delay.

13. Changes to This Privacy Policy

Smart888 reserves the right to update this Privacy Policy at any time. When we make material changes to this Policy, we will update the "Last updated" date at the top of this page and, where the changes significantly affect how we process your personal data, we will use reasonable efforts to notify you via your registered phone number or through a notice on smart888.club.

Your continued use of smart888 following the publication of an updated Privacy Policy constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically to stay informed about how we protect your personal data.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, or have a concern about how your personal data is being handled by smart888, please contact our Data Protection team via the following channel:

• Live chat: Available 24/7 at smart888.club
• Email: [email protected] (plain text — not a clickable link)

Smart888 aims to acknowledge all data protection enquiries within 5 business days and to provide a substantive response within 30 days. For complex requests, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reasons for it.

If you are not satisfied with our response to a data protection concern, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.