Privacy Policy 88good – Protection of Our Members' Personal Data

1. Introduction

88good ("we", "the platform") is committed to protecting the privacy of all members and users on our platform. This Privacy Policy explains in detail how we manage your personal data — from the point of collection through to storage and deletion.

We recognize that your personal data belongs to you, and we only use it for purposes you have consented to or that are legally required to operate the platform. Every decision involving your personal data is made with your interests and security as the priority.

This policy applies to all users who access the 88good website, use our mobile app, or interact with any of our services. Please read this document carefully in its entirety and contact us if any section is unclear.

2. Personal Data We Collect

88good only collects data that is necessary to operate the platform safely and efficiently. Below is a summary of the types of data we collect:

2.1 Data You Provide Directly

This includes information you provide when registering an account, completing the KYC process, contacting customer support, or updating your profile. We require this data to verify your identity and ensure account security.

2.2 Automatically Collected Data

When you use the 88good platform, our system automatically records technical information such as your IP address, device type, operating system, and session activity. This data is used solely to detect suspicious activity and improve platform performance.

3. How We Use Your Data

88good uses your personal data solely for the following purposes:

• Account Management — Creating, managing, and securing your account on the platform.
• KYC Compliance — Verifying your identity and age as required by the platform's security procedures.
• Transaction Processing — Processing deposits, withdrawals, and other financial transactions you carry out.
• Customer Service — Responding to inquiries, complaints, and support requests you submit.
• Platform Security — Detecting and preventing fraud, money laundering, and account misuse.
• Service Communications — Sending important account notifications, policy updates, and relevant promotions (where you have given consent).
• Platform Improvement — Analyzing usage patterns to improve the overall user experience.
• Legal Compliance — Fulfilling applicable legal and regulatory obligations.

4. Data Sharing with Third Parties

88good does not sell, rent, or disclose your personal data to third parties for marketing purposes. However, in certain limited situations, we may need to share your data with the following parties:

4.1 Payment Service Providers

To process deposits and withdrawals, relevant financial information is shared with verified payment service providers such as bank gateways and digital wallet operators. All such providers are bound by strict confidentiality agreements and are not permitted to use your data for any other purpose.

4.2 Technical Service Providers

Companies that assist us in managing the platform's technical infrastructure — including server hosting, cloud services, and cybersecurity providers — may have limited access to certain data in the course of their work. This access is strictly controlled and subject to confidentiality agreements.

4.3 Legal Compliance

We may be required to disclose your personal data to competent authorities if mandated by law, court order, or official investigation. In such cases, we will notify you in advance unless prohibited from doing so by law.

5. Data Security

We implement comprehensive technical and organizational security measures to protect your personal data from unauthorized access, loss, misuse, or disclosure.

5.1 Technical Measures

• Data encryption in transit using 256-bit SSL/TLS protocol.
• Encryption of data stored in the database using industry-standard encryption algorithms.
• Intrusion detection system (IDS) and firewall monitored 24/7.
• Two-factor authentication (2FA) available for all member accounts.
• Regular security assessments including penetration testing.

5.2 Organisational Measures

• Principle of least privilege — staff may only access the data required for their specific role.
• Mandatory cybersecurity training for all staff who handle personal data.
• A clear and tested security incident response procedure.
• Regular internal security reviews and audits.

6. Cookies and Tracking Technologies

88good uses cookies and similar tracking technologies to enhance the user experience and maintain the security of your session. Below are the types of cookies we use:

6.1 Essential Cookies

These cookies are required for the platform to function properly. They manage your login session, retain language preferences, and ensure the security of each session. They cannot be disabled without affecting core platform functionality.

6.2 Performance and Analytics Cookies

We use analytics cookies to understand how members use the platform — which pages are visited most frequently, how much time is spent, and where members encounter difficulties. This helps us continuously improve the platform. Analytics data is collected in aggregate and is not linked to your personal identity.

6.3 Managing Cookies

You can control and delete cookies through your web browser settings. However, disabling essential cookies may affect platform functionality. For more information on managing cookies, please refer to your browser's help guide.

7. Data Retention Period

88good retains your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, subject to applicable legal and regulatory requirements.

• Active Account Data — Retained for as long as your account is active and for a specified period following account closure.
• Financial Transaction Records — Retained for a minimum of 7 years as required by Malaysian financial law.
• Security Logs — Retained for 12 months for security investigation purposes if required.
• KYC Data — Retained for the period required by anti-money laundering regulatory requirements.

When your personal data is no longer needed, we will securely delete it using methods that ensure it cannot be recovered.

8. Your Rights Over Personal Data

As a 88good platform user, you have the following rights regarding your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA):

• Right of Access — You have the right to know what personal data we hold about you and to request a copy of it.
• Right to Rectification — You have the right to correct any personal data that is inaccurate or out of date.
• Right to Erasure — You may request the deletion of your personal data in certain circumstances, subject to our legal obligations.
• Right to Object — You have the right to object to the processing of your personal data for direct marketing purposes.
• Right to Withdraw Consent — You may withdraw any consent you have given at any time, without affecting the validity of processing that has already taken place.

To exercise any of the rights above, please contact our privacy team via customer support. We will process your request within 14 working days. For complex cases, this period may be extended to 30 days, with prior notice to you.

9. Children's Privacy

The 88good platform is strictly for individuals aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18.

If you are a parent or guardian and believe your child under the age of 18 has registered an account on our platform, please contact us immediately. We will take prompt action to close the account and delete all associated data.

All registration applications go through a rigorous age verification process to ensure only adults are permitted to use our platform.

10. Changes to the Privacy Policy

88good reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Any significant changes will be communicated to you via:

• Email notification to the address registered to your account.
• A prominent notice on the platform's home page at least 7 days before changes take effect.
• Last updated on the date shown in the "Last Updated" field at the top of this document.

We encourage you to review this page periodically to stay informed about how we protect your information. Continued use of the platform after changes take effect constitutes your acceptance of the updated policy.

11. Contact Us About Privacy

If you have any questions, concerns, or wish to exercise your privacy rights, our privacy team is here to help:

• Live Chat: Available 24 hours a day, 7 days a week — the fastest way to get a response.
• Privacy Email: [email protected]
• General Support: [email protected]

Please clearly state the nature of your enquiry or request and include your account number (if applicable) so we can process it more efficiently. All privacy-related complaints will be taken seriously and resolved within a reasonable timeframe.

For more information about your rights under Malaysian law, you may refer to the official website of the Department of Personal Data Protection Malaysia.