How smart888 Handles and Protects Your Personal Information

1 Definitions and Scope

“Personal information” means information relating to an identified or reasonably identifiable person. It may include direct identifiers, account records, online identifiers and information linked to gaming or payment activity. “Processing” includes collecting, recording, organising, storing, reviewing, using, sharing, restricting or deleting information.

References to “you”, “your”, “player” or “user” mean a person accessing smart888. References to “we”, “us”, “our” or the “platform” mean smart888. This policy applies to website-related processing and does not replace the separate privacy practices of a bank, eWallet provider, card network or other service you independently use.

2 Information We Collect

The information collected by smart888 depends on how you use the platform. Relevant categories may include:

• Identity information: full legal name, date of birth, nationality, identification details and verification images.
• Contact information: Malaysian residential address, email address and telephone number.
• Account information: username, encrypted or protected credentials, security settings and communication preferences.
• Financial information: selected payment details, masked account references, transaction amounts and withdrawal records.
• Gaming information: casino activity, sports selections, stake values, MYR balances, bonus use and session history.
• Technical information: IP address, device type, browser, operating system, language, timestamps and security logs.
• Communication information: enquiries, complaints, account notes and records of support interactions.
• Responsible gambling information: limits, cooling-off requests, self-exclusion status and relevant player-protection indicators.

smart888 may also derive risk indicators from account, device, transaction or usage information to identify fraud, unusual access, duplicate accounts or signs that responsible gambling intervention may be appropriate.

3 Sources of Information

smart888 collects information directly when you register, verify an account, select a payment method, place a wager, adjust a limit or communicate with support. Technical information may be generated automatically when your device interacts with the website.

Information may also be received from identity-verification services, payment processors, fraud-prevention providers and publicly available sources where such collection is lawful and relevant. For example, a transaction made through Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank or Hong Leong may generate a confirmation reference without requiring smart888 to receive your complete banking credentials.

4 How Information Is Used

smart888 may process personal information for the following purposes:

• Creating, administering and securing user accounts.
• Confirming identity, age, address and payment ownership through KYC checks.
• Processing deposits, withdrawals, refunds and transaction enquiries.
• Providing casino, live dealer, sports betting and bonus functions.
• Displaying relevant MYR balances, wager histories and account records.
• Detecting fraud, account misuse, collusion, money laundering and technical abuse.
• Applying deposit limits, cooling-off periods and self-exclusion controls.
• Answering questions, resolving complaints and maintaining service quality.
• Meeting legal, security, audit and record-keeping obligations.
• Improving the reliability, accessibility and relevance of smart888 for Malaysian users.

Information about interest in EPL football, Liga Super Malaysia, UFC, live dealer games or slots may be used to organise the user experience, provided any optional personalised communication is handled in accordance with applicable requirements and user choices.

5 Grounds for Data Processing

Depending on the circumstances, smart888 may process information because it is necessary to provide requested services or administer the user agreement; because a legal or regulatory obligation applies; because processing supports legitimate interests such as security, fraud prevention and platform improvement; or because the user has provided consent for a specific optional purpose.

Where processing depends on consent, you may withdraw that consent for future activity. Withdrawal does not invalidate processing already completed and may not affect information that smart888 must retain or use on another lawful ground.

smart888 seeks to balance legitimate interests against user privacy. Additional safeguards may be applied where information is particularly sensitive, including responsible gambling records and identity documents.

6 KYC and Financial Information

Account verification helps smart888 confirm that a user is aged 21 or above, prevent identity misuse and establish whether a payment method belongs to the registered account holder. Requested documents may include identification, proof of address, payment evidence or information reasonably needed to understand a transaction.

Financial records may show payment type, amount, currency, date, status and a masked reference. smart888 does not need your online banking password and will not request it. Users should never disclose full passwords or one-time security codes in ordinary communications.

7 Cookies and Similar Technologies

smart888 may use cookies, local storage and similar technologies to maintain sessions, remember preferences, support security and understand general website performance. Necessary technologies may be essential for login, fraud prevention and account continuity.

Analytics or preference technologies may help smart888 understand which sections are useful to visitors from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam and other locations. Such information should be assessed in aggregate where practical.

Browser controls may allow you to remove or block cookies. Disabling necessary technologies can prevent login, disrupt account functions or reduce website reliability.

8 Disclosure and Data Sharing

smart888 does not disclose personal information without a relevant purpose. Information may be shared with selected service providers that support identity checks, payments, security, hosting, customer service, game operation, analytics, auditing or responsible gambling controls.

Providers should receive only information reasonably required for their assigned function and should be subject to appropriate confidentiality, data-use and security requirements. smart888 may also disclose information where necessary to establish, exercise or defend legal rights; investigate suspected fraud; protect users; comply with a lawful request; or support a business reorganisation subject to suitable safeguards.

A payment provider may independently process information under its own terms. Users should review the privacy information presented by their chosen bank, card or eWallet provider.

9 International Data Transfers

Some technology, verification, payment or support services may operate outside Malaysia. As a result, personal information may be processed in another jurisdiction with privacy rules that differ from those in Malaysia.

Where an international transfer occurs, smart888 seeks to use appropriate contractual, technical or organisational safeguards having regard to the nature of the information and the receiving location. Access should remain limited to authorised purposes.

10 Information Security

smart888 applies reasonable administrative, technical and organisational measures designed to protect information against unauthorised access, loss, alteration, misuse or disclosure. Measures may include access restrictions, credential protection, activity monitoring, secure transmission, staff controls and incident procedures.

No website or storage method can guarantee absolute security. Users also have an important role: choose a strong unique password, protect devices, sign out after using a shared computer and report suspicious account activity promptly.

If smart888 identifies a personal-data incident, it may investigate the cause, limit further exposure, restore secure operation and provide notice where appropriate or required.

11 Data Retention

smart888 retains personal information for as long as reasonably required to provide services, maintain security, resolve disputes, support responsible gambling controls and satisfy legal, accounting, fraud-prevention or record-keeping obligations.

Retention periods vary according to information type and purpose. KYC and transaction records may need to be held after account closure, while temporary technical records may be kept for a shorter period. A self-exclusion record may be retained where necessary to prevent the creation or use of another account.

When information is no longer required, smart888 may securely delete, anonymise or isolate it in accordance with applicable procedures and technical capability.

12 Your Privacy Rights and Choices

Subject to applicable rules, verification and lawful exceptions, you may ask smart888 to take certain actions regarding your personal information. Available rights depend on the circumstances and may include:

smart888 may request information sufficient to verify identity before acting on a privacy request. This protects account records from unauthorised disclosure. A request may be limited or refused where another user’s rights, fraud prevention, legal privilege, security or mandatory retention requirements apply.

13 Responsible Gambling Data

smart888 may review activity patterns, deposit frequency, session duration, attempted limit changes and communications to support responsible gambling measures. This information may be used to provide reminders, apply restrictions, conduct a welfare review or implement a cooling-off or self-exclusion request.

Responsible gambling records are handled carefully because they may reveal sensitive personal circumstances. However, smart888 may retain and use an exclusion record even after account closure when necessary to honour the user’s request and prevent further access.

14 Age Restriction and Minors

smart888 is for eligible adults aged 21 and above only. The platform does not knowingly permit minors to register, gamble or provide personal information for account use. Age verification may occur during registration, KYC review, payment processing or withdrawal.

A parent or guardian who reasonably believes that a minor has provided information to smart888 should contact the platform using the website email below. Relevant information may be restricted or deleted after appropriate investigation, subject to fraud, safety and legal record requirements.

15 Changes to This Privacy Policy

smart888 may update this Privacy Policy to reflect service changes, security practices, legal requirements or clearer explanations. The effective date identifies the current version. Material amendments may be highlighted on the website where appropriate.

Users should review this page periodically. Continued use of smart888 after an update acknowledges receipt of the revised policy, but any consent required for a new optional purpose will be requested separately where necessary.

16 Contact Us

To ask a privacy question or request access, correction or another available action, contact smart888 using the website email: [email protected]. The address is displayed as plain text and is not a clickable link.

State the nature of your request and provide enough information to identify the relevant account. Do not include your password, full payment credential or one-time security code. smart888 may request additional proof of identity before disclosing or changing personal information.

A privacy concern will be reviewed using the information available, the nature of the request and any applicable security, retention or legal requirement.