Privacy Policy Cekap88 —
Malaysian User Data Protection

Welcome to cekap88's Privacy Policy page. This document explains in detail how cekap88 ("we", "our platform" or "cekap88.bet") collects, processes, stores and protects your personal information as a user of our online casino and betting platform in Malaysia.

Cekap88 understands that privacy is not merely a legal obligation — it is a fundamental right of every individual. As such, we have built our data protection framework not only to meet the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA), but to go beyond the minimum standards set by law.

By registering a cekap88 account, making a deposit via Touch 'n Go eWallet, GrabPay, DuitNow or FPX, or simply browsing our website, you consent to the collection and use of your personal information as described in this Privacy Policy. If you do not agree with any part of this Policy, we encourage you to contact our team at support@cekap88.bet for further discussion before continuing to use the platform.

Cekap88 only collects data that is strictly necessary to provide a safe, fair and efficient service to users in Malaysia. Below are the categories of data we collect:

Your personal data is collected through various channels as you interact with the Cekap88 platform. The following are the primary data collection methods we use:

Directly From You:

• Account registration form — when you fill in your name, phone number, email address, and other basic details.
• Identity verification process (KYC) — when you submit a copy of your MyKad or other supporting documents.
• Deposit and withdrawal process — when you enter your payment method details such as your TnG eWallet, GrabPay, Boost, or FPX bank account.
• Communications with our support team via live chat, email or other communication channels.
• Participation in promotions, contests or surveys that we organise.

Automatically During Platform Use:

• Cookie and session technology that records your browsing activity on the Cekap88 platform.
• Server logs recording IP addresses, device types, and access times.
• An internal analytics system that monitors usage patterns and platform performance.
• A fraud detection tool that automatically monitors transactions for suspicious activity.

From Trusted Third Parties:

• Payment service providers (payment gateways, FPX processors) for the purpose of verifying transactions.
• An identity verification agency that helps us authenticate the validity of submitted documents.
• Any information you share publicly through social platforms linked to your Cekap88 account (where applicable).

Cekap88 uses collected personal data solely for the following legitimate and transparent purposes. We will not use your data for any other purpose without obtaining your consent first:

Account Management & Core Services:

• Processing new account registrations and verifying the identity of new users.
• Managing login sessions, account security, and user settings.
• Processing deposits (TnG, GrabPay, ShopeePay, DuitNow, FPX) and withdrawals to your bank account or e-wallet.
• Managing account balances, transaction history, and game records.
• Providing customer support and resolving complaints or enquiries.

Security & Legal Compliance:

• Conducting Know Your Customer (KYC) and Anti-Money Laundering (AML) checks.
• Detecting and preventing fraud, multi-account usage, or activity that violates our Terms & Conditions.
• Fulfilling reporting obligations to Malaysian legal authorities as required by law.
• Verifying that all users are 18 years of age or older.

Product Improvement & Marketing Communications:

• Analysing usage patterns to improve the user experience on the cekap88 platform.
• Sending notifications about promotions, bonuses, or special offers — only if you have consented to receive marketing communications.
• Notifying you of system updates, changes to terms or important information relating to your account.

Cekap88 does not sell or trade your personal data. However, under certain limited circumstances, we may need to share your data with trusted third parties. All such data sharing is subject to strict confidentiality agreements:

All third parties we work with are required to maintain data protection standards equivalent to or higher than those of Cekap88. We conduct thorough due diligence assessments before engaging any new service provider that will have access to our users' data.

Cekap88 invests seriously in data security infrastructure to ensure your personal information is always protected against unauthorised access, loss, alteration or disclosure. The following are the security layers we employ:

• 256-bit SSL/TLS Encryption: All communication between your browser and cekap88's servers is encrypted using the same 256-bit SSL/TLS protocol used by Malaysia's major banking institutions.
• Encrypted Password Storage: Your password is never stored in plain text. We use a strong one-way hashing algorithm (bcrypt) to store passwords securely.
• Two-Factor Authentication (2FA): Cekap88 offers two-factor authentication via SMS or an authenticator app to provide an extra layer of security for your account.
• 24/7 Monitoring: Our cybersecurity team continuously monitors our systems to detect any suspicious activity, intrusion attempts or transaction anomalies.
• Internal Access Control: Access to users' personal data among Cekap88 staff is restricted to those who genuinely require it to perform their duties, based on the principle of least privilege.
• Regular Data Backups: Your data is regularly backed up to a secure, separate server location to prevent data loss due to system failure or technical disaster.
• Penetration Testing: Cekap88 conducts regular penetration testing through independent cybersecurity firms to identify and address any vulnerabilities before they can be exploited.

Cekap88 uses cookies and similar tracking technologies to enhance the user experience, maintain session security and understand how our platform is used. The following are the types of cookies we use:

Essential Cookies (Required):

• Session cookies — maintain your logged-in status while using the platform.
• Security cookies — help detect suspicious activity and protect your account.
• Preference cookies — store settings such as your preferred language and display preferences.

Analytics Cookies (Optional):

• Performance cookies — collect anonymous data on how users interact with the platform to help us improve our services.
• Marketing cookies — allow us to display more relevant ads based on your interests and activity (only with your consent).

You can manage your cookie settings through your web browser or via our cookie consent management panel. Please note that disabling essential cookies may affect certain functions of the Cekap88 platform and could prevent you from logging in or completing transactions properly.

Cekap88 also uses pixel technology and analytics tags to measure the effectiveness of our marketing campaigns. All data collected through these technologies is aggregated and not linked to your personal identity without your consent.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and Cekap88's voluntary commitments that go beyond the minimum requirements of the law, you have the following rights with respect to your personal data:

Cekap88 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or to comply with applicable legal obligations. The following are the general retention period guidelines we follow:

• Active Account Data: Retained for as long as your account is active and for 7 years after account closure to meet financial regulatory requirements.
• Transaction Records: Retained for 7 years from the transaction date in accordance with Malaysian financial compliance and taxation requirements.
• KYC Documents: Retained for 5 years after account closure or the document's expiry date, whichever is later.
• Communication Logs: Live chat transcripts and support emails are retained for 2 years for quality control and dispute resolution purposes.
• Analytics Data: Usage data is aggregated and anonymised after 13 months; anonymised data may be retained longer for long-term analytics purposes.
• Cookies: Session cookies expire when you close your browser; persistent cookies expire after a set period (typically 30 to 365 days).

Once the relevant retention period has ended, Cekap88 will securely delete or anonymise your personal data using methods that ensure the data cannot be recovered.

Cekap88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements or the expansion of platform services. Any changes we make will be posted on this page with the most recent updated date.

For changes deemed material — meaning changes that significantly affect your privacy rights or how we use your data — Cekap88 will notify you via:

• A prominent notice on cekap88's main platform page at least 14 days before the changes take effect.
• A notification email sent to your registered email address.
• A notification pop-up will appear at your next login after the changes take effect.

Your continued use of Cekap88 services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account before they take effect.

If you have any questions, concerns or requests regarding this Privacy Policy or how Cekap88 handles your personal data, please contact us through the following channels:

• Privacy Email: privacy@cekap88.bet
• General Support Email: support@cekap88.bet
• Live Chat: Available 24/7 via the chat icon at the bottom corner of the Cekap88 platform

Our Data Protection Officer (DPO) will endeavour to respond to all privacy-related enquiries within 3 business days. For formal requests such as data access or data deletion, please submit a written request to our privacy email along with a copy of your identification for identity verification purposes.