Privacy Policy viral88 – How We Protect Your Data

1 Introduction & Scope of Privacy Policy

This Privacy Policy is issued by viral88 and applies to all individuals using the viral88.best platform — whether via a web browser on a laptop, an Android or iOS smartphone, or any other digital device. It describes viral88's privacy practices with respect to the collection and management of our Malaysian players' personal information.

Viral88 takes its responsibilities as a personal data controller seriously. We comply with Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and all applicable subsidiary regulations. This commitment goes beyond a legal obligation — it is part of our promise to players to always act with transparency, fairness, and accountability in every aspect of our operations.

This Privacy Policy covers all viral88 services, including slots, live casino, blackjack, baccarat, roulette, lottery, progressive jackpots, Sports Betting, match odds, promotional programmes and all customer support interactions. Any new services added to the viral88 platform in the future will also be subject to this Privacy Policy unless otherwise stated.

2 Types of Personal Data We Collect

Viral88 collects players' personal information through several means — directly from you during registration and platform use, automatically through platform technologies, and in limited circumstances from verified third parties. Below are the full categories of data we may collect:

The most sensitive data — including copies of identity documents and bank account information — is only collected during the KYC (Know Your Customer) process, which is required for legal compliance and identity verification prior to withdrawal processing. viral88 does not store full credit or debit card numbers in our systems.

3 Purpose of Personal Data Use

Viral88 uses the personal data it collects solely for legitimate purposes that are necessary for the operation of the platform and the fulfilment of our obligations to you as a player. The primary purposes are as follows:

• Account Management: Creating and managing your player account, verifying your identity, processing logins and maintaining account security.
• Financial Transaction Processing: Processing deposits via FPX (Maybank2u, CIMB Clicks), DuitNow, Touch 'n Go eWallet, GrabPay, Boost and ShopeePay, and processing winning withdrawals to your designated destination.
• Gaming Services Provision: Running and recording all slots, live casino, blackjack, Sports Betting and other entertainment service sessions you use on viral88.
• Legal & Regulatory Compliance: Fulfilling KYC, AML (Anti-Money Laundering), tax compliance, and other reporting obligations required under applicable Malaysian law.
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, multiple account usage, bonus abuse, and any conduct that violates viral88's Terms & Conditions.
• Customer Support: Enabling the viral88 support team to assist you effectively with any technical issues, account enquiries or transaction disputes.
• Platform Improvements: Analysing usage patterns in aggregate (not at an individual level) to improve the user experience, identify technical issues, and optimise platform performance.
• Important Communications: Sending account security notifications, transaction confirmations, important terms updates and relevant promotional information (where you have consented to receive them).
• Responsible Gaming: Monitoring gameplay patterns to identify players who may need responsible gaming support and to enforce limits set by the players themselves.

4 Data Sharing with Third Parties

Viral88 does not sell, rent or share your personal data with third parties for commercial marketing purposes. However, there are limited circumstances where viral88 needs to share certain data with carefully selected third parties in order to provide our services to you:

• Payment Service Providers: Transaction information that must be shared with payment providers such as FPX, DuitNow, Touch 'n Go eWallet, GrabPay, Boost, and ShopeePay to process your deposits and withdrawals. These providers are bound by strict confidentiality obligations.
• Game Providers: Game session data that must be shared with licensed game providers such as Evolution Gaming, Pragmatic Play and PG Soft to enable proper game functionality. Only the minimum necessary technical data is shared.
• KYC & Identity Verification Services: Identity information shared with licensed third-party KYC service providers to verify your identity during the account verification process.
• Regulatory Bodies & Law Enforcement: viral88 will disclose personal data to regulatory bodies, law enforcement, or courts when required to do so by applicable Malaysian law, court order, or valid legal process.
• Aggregate Analytics Services: Anonymised and aggregated statistical data (containing no individually identifiable information) may be used for platform performance analysis. This data cannot be traced back to any individual.

All third parties receiving data from viral88 are required to enter into binding data processing agreements to: use the data solely for the stated purpose, protect the data to a security standard equivalent to or higher than that applied by viral88, and not disclose the data to any other party without viral88's consent.

5 Data Security Measures

Viral88 continually invests in security infrastructure to ensure our players' personal data is protected to the highest achievable standard. The key technical and organisational security measures we have implemented are:

• 256-bit SSL Encryption: All data transmitted between your device and viral88's servers is encrypted using the latest Transport Layer Security (TLS). viral88's SSL certificate is validated by a recognised certificate authority and renewed on a regular basis.
• Secure Data Storage: Personal data is stored in databases protected with storage-level encryption. Access to these databases is strictly limited to authorised personnel through role-based access controls.
• Two-Factor Authentication: All viral88 internal systems containing player data are secured with two-factor authentication (2FA). We encourage players to enable 2FA on their own accounts for an added layer of protection.
• Continuous Security Monitoring: An intrusion detection system and anomaly monitoring operate around the clock to identify and block any unauthorised attempts to access player data.
• Regular Security Audits: viral88 undergoes independent security audits at least once every six months, conducted by accredited third-party cybersecurity firms, to identify and address any potential vulnerabilities.
• Financial Data Segregation: Player funds are held in accounts separate from viral88's operational accounts, ensuring your money remains safe even in exceptional circumstances involving the company.

While viral88 takes all reasonable steps to protect your data, no security system can guarantee complete 100% protection in every situation. In the rare event of a data breach affecting your personal information, viral88 is committed to notifying you within the timeframe required by law and taking immediate action to contain and remediate the situation.

6 Cookies & Tracking Technologies

Viral88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the viral88 website. The following are the types of cookies we use:

• Essential Cookies (Required): These cookies are required for the platform to function properly — including maintaining your login session, saving your game preferences and securing transactions. Disabling them will significantly impair platform functionality.
• Performance Cookies: Collects information about how you use the viral88 platform — such as pages visited, time spent, and errors encountered. This data is used in aggregate form to improve platform performance.
• Functionality Cookies: Saving your preferences such as selected language, display settings and stored login details (if you choose to save them), so you don't have to re-enter them on every visit.
• Analytics Cookies: Helps viral88 understand how players interact with the platform as a whole. This data is anonymised and cannot be linked to any specific individual.

You can manage cookie settings through your web browser preferences. However, disabling essential cookies may affect the functionality of the viral88 platform. For more information on how to manage cookies in your browser, please refer to your browser's help documentation.

7 Cross-Border Data Transfers

In the course of operating its platform, viral88 may need to store or process your personal data on servers located outside Malaysia — particularly for services provided by international-standard game providers and technology infrastructure partners that we engage.

Whenever personal data of Malaysian players is transferred overseas, viral88 ensures that:

• The recipient country or region offers a level of data protection equivalent to or greater than Malaysia's PDPA requirements
• Data transfers are carried out under appropriate protection mechanisms such as standard data processing agreements or binding corporate rules.
• Recipient providers are bound by confidentiality and security obligations no less stringent than those applicable to viral88 itself.
• Transfers involve only the minimum data necessary for the relevant service purpose

Your personal data will not be transferred to any region that lacks an adequate data protection framework without your explicit consent or appropriate protective safeguards in place.

8 Data Retention Period

Viral88 does not retain your personal data longer than necessary for the purposes it was collected, unless a longer retention period is required by law. Below are general guidelines on data retention periods by category:

• Active Account Data: Retained for the duration of your active account plus any additional period required to fulfil legal obligations following account closure.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian tax and financial legal requirements, including the Income Tax Act 1967 and AML obligations.
• KYC Records & Identity Documents: Retained for a minimum of 7 years following the end of the business relationship, or as required by applicable Malaysian tax and financial legislation, including the Income Tax Act 1967 and AML requirements.
• Support Communication Logs: Retained for 2 years from the date of last interaction for quality control and dispute resolution purposes.
• Technical Data & System Logs: Retained for 90 days for security and technical troubleshooting purposes, after which it is automatically deleted.
• Marketing Data (if you have consented): Retained until you withdraw consent or close your account, whichever comes first.

Once data is no longer needed and the applicable legal retention period has expired, viral88 will securely delete or anonymise that data using methods that ensure it cannot be recovered or re-linked to any individual.

9 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 and the privacy principles practised by viral88, you have the following rights in relation to your personal data:

• Right of Access: You have the right to request a copy of the personal data viral88 holds about you. Access requests will be processed within 21 business days from the date of receipt.
• Right to Rectification: If the personal data we hold about you is inaccurate or out of date, you have the right to request a correction. You can update most profile information directly from your viral88 account settings.
• Right to Erasure: You may request the deletion of your personal data in certain situations — for example, when the data is no longer needed for its original purpose, or when you withdraw the consent on which processing was based. This right is subject to applicable legal retention obligations.
• Right to Object to Processing: You may object to the processing of your personal data for specific purposes such as direct marketing. Objections to direct marketing will be actioned immediately.
• Right to Withdraw Consent: Where data processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the validity of any processing carried out prior to the withdrawal.
• Right to Lodge a Complaint: If you believe viral88 has violated your privacy rights, you have the right to file a complaint with the Personal Data Protection Commissioner of Malaysia.

To exercise any of the rights above, contact the viral88 privacy team by email at support@viral88.best, including your full name, registered account number, and the specific right you wish to exercise. We may need to verify your identity before processing the request to protect the security of your account.

10 Children's Privacy & Minors

The viral88 platform is unsuitable for and expressly not intended for individuals under the age of 21. viral88 does not knowingly collect personal data from minors.

All players are required to confirm they are at least 21 years of age at the point of registration. Our KYC process includes age verification based on official identification documents. Any account found to have been registered by an underage individual will be closed immediately, and all associated data will be deleted once any legal obligations have been fulfilled.

If you believe that viral88 may have inadvertently collected personal data of an individual under the age of 21, please contact our team at support@viral88.best immediately so that prompt action can be taken to delete the data and close the account in question.

Parents and guardians concerned about their children potentially accessing the viral88 platform are advised to make use of parental control tools available on devices used at home, and to have open conversations with their children about the risks of online gaming for minors.

11 Privacy Policy Amendments & How to Contact Us

Viral88 reserves the right to amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or technological developments. For any material changes to how we handle your personal data, viral88 will:

• Displaying a prominent notice on the viral88 platform homepage for at least 14 days before the changes take effect
• Sending email notifications to all registered players with an active email address
• Updating the "Last Updated" date at the top of this document

Continued use of the viral88 platform after the effective date of any amendment constitutes acceptance of the updated policy. If you do not agree with the changes, you have the right to close your account and request deletion of your data before the amendments take effect.

For any enquiries, complaints or requests relating to this Privacy Policy and the management of your personal data at viral88, please reach us through the following channels:

• Privacy Email: support@viral88.best (please state "Privacy Enquiry" in the subject line)
• Live Chat: Available 24 hours a day on the viral88 platform — average response time under 3 minutes

Our team will respond in Bahasa Melayu to all enquiries received in Bahasa Melayu. We are committed to resolving all privacy-related enquiries within 14 working days from the date of receipt.