Grab888 Privacy Policy – Our Commitment to Protecting Malaysian Users' Personal Data

1Introduction and Scope of This Policy

Grab888 ("we", "Platform", or "grab888") is committed to protecting the privacy and security of every user's personal data on our platform. This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when you register, log in, or use any service provided on the grab888 website.

This policy applies to all grab888 users regardless of how you access the platform — whether via a web browser on a desktop, an iOS or Android mobile app, or any other digital interface provided by grab888.

By registering or using grab888's services, you confirm that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to help you close your account and delete your data.

2Types of Personal Data We Collect

Grab888 only collects data that is strictly necessary to provide a safe, fair, and fully functional service. Below are the categories of data we collect and their purposes:

We do not collect sensitive data such as health information, religious beliefs, or political affiliations unless required by applicable law. All data collected is directly relevant to the provision of grab888's services and compliance with regulatory requirements.

3How grab888 Uses Your Personal Data

The data we collect is used for specific and legitimate purposes. grab888 will not use your data for any purpose other than those stated here without obtaining your consent first.

• Account Management: Verify your identity, create and manage your grab888 account, and securely process registration and login.
• Service Provision: Enables you to play games, make deposits and withdrawals, and access all features of the grab888 platform.
• Security & Fraud Prevention: Detect and investigate suspicious activity, protect your account from unauthorised access, and ensure platform integrity.
• Legal Compliance: Fulfil KYC, AML (Anti-Money Laundering), and applicable regulatory reporting obligations.
• Service Improvements: Analyse usage patterns in aggregate and anonymised form to improve user experience and platform performance.
• Communications: Send important account-related notifications, security updates, and relevant promotions (if you have consented to receive them).
• Customer Support: Resolve enquiries, complaints, and support requests you submit to the grab888 support team.

4Data Sharing and Disclosure to Third Parties

Grab888 does not sell or rent your personal data to any third party for marketing purposes. However, in the course of platform operations, there are certain situations where we need to share data with trusted parties:

• Payment Processing Providers: Transaction information is shared with approved payment providers such as partner banks and digital wallet providers to process your deposits and withdrawals.
• Game Software Providers: Minimum technical data required to run games may be shared with grab888's authorised game providers.
• Identity Verification Providers: KYC documents may be processed through authorised third-party identity verification systems to meet legal compliance requirements.
• Relevant Authorities: grab888 will disclose user data to competent authorities when required by law, court order, or in the context of fraud investigations and financial crime.

All third parties working with grab888 are required to comply with data protection standards equal to or stricter than grab888's own. We ensure every data sharing arrangement is covered by a legally binding data protection agreement.

5grab888 Data Security Measures

Protecting your personal data is a core technical and operational priority at grab888. We continuously invest in the latest security infrastructure to keep your data safe from both external and internal threats.

The security measures we implement include:

• Data Encryption: All data transmitted between your device and grab888's servers is protected using 256-bit SSL/TLS encryption — the same standard used by international banking institutions.
• Strict Access Controls: Access to user data within grab888's internal systems is strictly limited on a "need-to-know" basis. All access is logged and audited.
• Two-Factor Authentication (2FA): grab888's internal systems use 2FA for all staff with access to user data.
• 24/7 Monitoring: Security monitoring systems operate around the clock to detect and respond to any anomalies or intrusion attempts.
• Regular Security Audits: Independent security assessments are conducted periodically by third-party security experts to identify and address any vulnerabilities.

While grab888 takes all reasonable steps to protect your data, no system can be guaranteed 100% secure. We encourage users to also take precautions such as using a strong, unique password and never sharing your login credentials with anyone.

6Cookies and Tracking Technologies

Grab888 uses cookies and similar tracking technologies to enhance the user experience, analyse platform traffic, and support security functions. Cookies are small text files stored on your device when you visit the grab888 platform.

Types of cookies used by grab888:

• Essential Cookies: Required for core platform functions such as login authentication and session management. These cookies cannot be disabled as they are critical to your account security.
• Performance Cookies: Collect aggregate and anonymised data on how users interact with the platform to help us identify issues and improve performance.
• Functional Cookies: Store your preferences such as language, display settings, and login information (if you choose to be remembered) to streamline your experience.
• Analytics Cookies: Helps us understand the overall user journey for product improvement purposes. This data is processed in aggregate and is not linked to any individual identity.

You may control or delete cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality or user experience on the grab888 platform.

7User Rights Relating to Personal Data

As a grab888 user, you have strong rights regarding your personal data. grab888 respects and facilitates the exercise of these rights in accordance with Malaysia's PDPA Act:

8Data Retention Period

Grab888 does not retain your personal data longer than necessary for the stated purpose or as required by law. Retention periods vary by category:

• Active Account Data: Retained for the duration your account remains active on grab888, plus any additional period required by law following account closure.
• Financial Transaction Records: Retained for a minimum of seven (7) years in accordance with Malaysia's accounting and anti-money laundering legal requirements.
• Security Logs: Retained for 12 months for the purpose of security incident investigation and fraud prevention.
• Customer Support Data: Support interaction records are retained for three (3) years to enable resolution of any related disputes.
• Marketing Data: Retained until you withdraw consent or your account is closed, whichever comes first.

When data is no longer needed and there is no legal obligation to retain it, grab888 will securely delete or anonymise that data using industry-recognised methods.

9Changes to This Privacy Policy

Grab888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or service improvements. Any material changes will be communicated to you via:

• A prominent notification on the grab888 platform when you log in after an update has been implemented.
• An email will be sent to your registered address at least 7 days before any changes take effect.
• Updates the "Last Updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of the grab888 platform following any changes constitutes acceptance of the updated privacy terms.

10Contact the grab888 Privacy Team

If you have any questions, concerns, or requests regarding this Privacy Policy or how we process your personal data, grab888's Data Protection team is ready to assist you.