Privacy Policy

1 Introduction

This Privacy Policy ("Policy") is published by Proton88 ("Proton88", "we", "us", "our") and applies to all personal data collected, processed, stored, and used in connection with the Proton88 online casino and sports betting platform, accessible at https://proton88.cam and any associated mobile or web-based interfaces (collectively, the "Platform").

This Policy is designed to inform you — as a user, visitor, or registered player ("you", "User", "Player") — of the nature of the personal data we collect, the purposes for which it is processed, the basis upon which it is processed, the parties with whom it may be shared, and the rights available to you under applicable data protection law.

By accessing the Platform, registering an Account, or otherwise interacting with our services, you acknowledge that you have read and understood this Policy. This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy.

2 Definitions

For the purposes of this Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, and behavioural data.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, or deletion.
• "Data Controller" means Proton88, as the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of Proton88 under a written data processing agreement.
• "Cookies" means small text files placed on your device by the Platform for functional, analytical, and preference purposes.
• "KYC Data" means identity and address verification documentation collected as part of the Know Your Customer process.
• "Sensitive Data" means a subset of Personal Data that warrants heightened protection, including government identification numbers and financial account details.

3 Data We Collect

Proton88 collects the following categories of personal data in the course of providing and maintaining our Services:

Data Category	Examples	Purpose
Identity Data	Full name, date of birth, nationality, MyKad / Passport / Driver's Licence number	Account registration, KYC verification, age verification
Contact Data	Email address, mobile phone number, residential address	Account communications, support, identity verification
Financial Data	Bank account details, e-wallet identifiers, transaction history, deposit and withdrawal records	Payment processing, AML compliance, fraud prevention
Technical Data	IP address, device type and model, browser type, operating system, session duration, login timestamps	Platform security, fraud detection, service optimisation
Usage Data	Games played, bet amounts and history, sports markets accessed, pages visited, features used	Platform improvement, responsible gambling monitoring, personalisation
KYC Documentation	Scanned copies of identity documents, proof of address documents, selfie verification images	Regulatory compliance, account verification, withdrawal processing
Communications Data	Support chat transcripts, email correspondence, feedback submissions	Quality assurance, dispute resolution, service improvement

4 How We Collect Data

Proton88 collects personal data through the following means:

4.1 Direct Collection

Data provided directly by you when you register an Account, complete KYC verification, make a deposit or withdrawal, contact customer support, participate in promotions, or otherwise interact with the Platform.

4.2 Automated Collection

Technical and usage data collected automatically as you access and use the Platform, including through cookies, web beacons, server logs, and similar tracking technologies. Please refer to Section 8 for further details on our cookies practices.

4.3 Third-Party Sources

Proton88 may receive supplementary data from third parties in the following limited circumstances:

• Payment service providers (such as Maybank, CIMB, FPX operators, Touch 'n Go eWallet, Boost, and GrabPay) when processing deposits and withdrawals, solely for transaction reconciliation and fraud prevention purposes.
• Identity verification and AML screening service providers engaged to support our KYC process.
• Fraud prevention and risk management databases used to protect the integrity of the Platform.

5 Data Processing & Legal Basis

Proton88 processes your personal data only where a valid legal basis exists for doing so. The legal bases upon which we rely are as follows:

1. Contractual Necessity: Processing required to perform our contract with you — including account management, payment processing, and the delivery of gaming services — constitutes the primary basis for most of our data processing activities.
2. Legal Obligation: Processing necessary to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and record-keeping mandates under applicable law.
3. Legitimate Interests: Processing undertaken for the legitimate interests of Proton88, including fraud prevention, platform security, responsible gambling monitoring, and service improvement — where those interests are not overridden by your data protection rights.
4. Consent: Where we rely on your consent as the legal basis for a specific processing activity (such as optional marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 How We Use Your Data

Proton88 uses the personal data we collect for the following purposes:

• To create, manage, and maintain your Proton88 Account.
• To verify your identity and age in compliance with our KYC obligations and our 21+ age restriction policy.
• To process deposits and withdrawals through your selected payment methods, including DuitNow, FPX, Maybank2u, CIMB Clicks, Touch 'n Go eWallet, Boost, GrabPay, BTC, and USDT.
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities on the Platform.
• To administer bonuses, promotions, VIP tier benefits, birthday rewards, and referral programs in accordance with applicable terms.
• To monitor player activity for responsible gambling purposes, including identifying patterns that may indicate problem gambling behaviour.
• To respond to your customer support enquiries, complaints, and data subject requests.
• To improve the performance, functionality, and user experience of the Platform.
• To communicate service-related updates, security notices, and changes to our policies.
• To comply with applicable legal, regulatory, and reporting obligations.

7 Data Sharing & Disclosure

Proton88 does not sell your personal data. We may share your data with third parties only in the following circumstances and under strict data protection controls:

7.1 Service Providers and Data Processors

We engage trusted third-party service providers to assist in delivering our Services. These providers act as Data Processors under written agreements that prohibit them from using your data for any purpose other than providing services to Proton88. Categories of service providers include: payment processing infrastructure providers, identity verification and KYC service providers, fraud prevention and AML screening services, cloud hosting and data storage providers, and customer support platform operators.

7.2 Legal and Regulatory Disclosure

Proton88 may disclose personal data to regulatory authorities, law enforcement agencies, or other government bodies where required to do so by applicable law, court order, or regulatory direction — including in connection with AML reporting obligations or investigation of criminal activity.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of Proton88's business, personal data held by us may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Policy that result from it.

7.4 Protection of Rights

We may disclose personal data where we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of Proton88, our users, or the public — including in connection with fraud investigations or the enforcement of our Terms & Conditions.

8 Cookies & Tracking Technologies

The Proton88 Platform uses cookies and similar tracking technologies to provide core functionality, improve user experience, and support platform analytics. The following categories of cookies may be used:

• Strictly Necessary Cookies: Required for the Platform to function. These include session management, authentication, and security cookies. They cannot be disabled without affecting core Platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings, preferred payment method display, and session configuration. These improve your experience but are not essential to Platform operation.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the Platform, enabling us to identify and address usability issues and improve the overall experience.
• Security Cookies: Used to detect and prevent fraudulent access attempts, bot activity, and suspicious session behaviour.

You may adjust your browser settings to refuse or delete cookies; however, doing so may affect the functionality of certain Platform features. Proton88 does not use cookies to track your activity on third-party websites.

9 Data Retention

Proton88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following indicative retention periods apply:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements.
• Financial Transaction Data: Retained for a minimum of seven (7) years following each transaction, consistent with standard financial record-keeping obligations.
• KYC Documentation: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Support Communications: Retained for three (3) years from the date of each interaction, for quality assurance and dispute resolution purposes.
• Technical and Usage Data: Typically retained for thirteen (13) months in identifiable form, after which it is anonymised or deleted.

Upon expiry of the applicable retention period, personal data will be securely deleted, anonymised, or aggregated such that it can no longer be associated with any identifiable individual.

10 Your Rights

Subject to applicable data protection law and any overriding legal obligations, you hold the following rights with respect to the personal data that Proton88 holds about you:

1. Right of Access: You may request a copy of the personal data we hold about you and information about how it is processed.
2. Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
3. Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where we no longer have a lawful basis for retaining it. Note that certain data may be required to be retained under legal or regulatory obligations and cannot be deleted upon request.
4. Right to Restriction of Processing: You may request that we suspend or limit the processing of your personal data in certain defined circumstances.
5. Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, and machine-readable format for transfer to another service provider.
6. Right to Object: You may object to the processing of your personal data where that processing is based on legitimate interests, including profiling for marketing purposes.
7. Right to Withdraw Consent: Where processing is based solely on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact our support team via live chat on the Platform or by email at [email protected]. We will respond to verified requests within 30 days. We may require identity verification before processing any data subject request.

11 Data Security

Proton88 implements comprehensive technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Proton88 Platform.
• Encryption of sensitive data at rest using industry-standard protocols.
• Two-factor authentication (2FA) options for account access.
• Regular security vulnerability assessments and penetration testing of platform infrastructure.
• Role-based access controls limiting internal staff access to personal data on a need-to-know basis.
• Comprehensive audit logging of access to personal data by internal personnel.

Whilst Proton88 takes all reasonable steps to protect your data, no system is entirely immune to risk. We encourage all users to maintain strong, unique passwords for their Proton88 Account and to notify us immediately at [email protected] if they suspect any unauthorised access to their account.

12 International Data Transfers

As an international online gaming platform, Proton88 may transfer certain personal data to servers or service providers located outside of Malaysia. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under the Malaysian PDPA and applicable international data protection principles. These safeguards may include:

• Standard contractual clauses incorporated into agreements with international Data Processors.
• Transfers only to jurisdictions that provide an adequate level of data protection as recognised by applicable regulatory guidance.
• Data minimisation practices ensuring that only the minimum data necessary for the specific international processing purpose is transferred.

13 Minors & Age Restriction

The Proton88 Platform is strictly intended for adults aged 21 years and above. Proton88 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the KYC process for all registered accounts.

If Proton88 becomes aware that personal data has been collected from a person under the age of 21, that account will be suspended immediately, all associated data will be reviewed, and appropriate steps will be taken to delete the data and notify relevant parties as required by law. If you believe that a minor has registered an account on our Platform, please contact us immediately.

14 Amendments to This Policy

Proton88 reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing activities, or our business practices. The "Last Updated" date at the top of this Policy will be revised accordingly whenever material changes are made.

Where changes are material, we will endeavour to notify registered users through their registered email address or via a notice posted on the Platform. Your continued use of the Platform following the publication of an updated Policy constitutes your acknowledgment of and agreement to the updated terms. We recommend reviewing this Policy periodically.

15 Contact Us

For all privacy-related enquiries, data subject access requests, complaints, or concerns, please contact the Proton88 data protection team through the following channels:

• Live Chat Support: Available 24 hours a day, 7 days a week, directly on the Proton88 Platform. Average response time is under 3 minutes.
• Email: [email protected]

When submitting a data subject request by email, please include your registered account username, the nature of your request, and a copy of identity documentation to enable us to verify your identity prior to processing the request. We will acknowledge receipt of your request and provide a substantive response within 30 days.

Our support team is available to assist users across Malaysia — including those based in Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, and Shah Alam — around the clock, every day of the year.

This Privacy Policy was last reviewed and updated on 1 January 2026. Proton88 recommends that all users revisit this document periodically to remain informed of any changes to our data handling practices.