Privacy Policy digi88 — Member Personal Data Protection

digi88 ("we", "Platform") understand that privacy is a matter of utmost importance to every one of our members. As an online entertainment platform operating in Malaysia, we are bound by the Personal Data Protection Act 2010 (PDPA) and are committed to ensuring your personal data is handled with full responsibility.

This Privacy Policy applies to all information collected through the digi88 website, mobile app, electronic communications, and all service channels we operate. It also applies to all registered members, users browsing our website, and anyone interacting with digi88 services.

We encourage you to read this document carefully. If anything is unclear, our customer support team is available to assist via live chat on the digi88 platform.

Digi88 collects various types of personal data depending on your interaction with our platform. Below is a comprehensive overview of the data that may be collected:

Data is collected directly from you during registration and platform use, automatically via tracking technologies, and in some cases from trusted third-party sources such as identity verification providers.

Digi88 uses collected personal data solely for legitimate and stated purposes. We do not use your data for any unrelated purpose without first obtaining your consent. The primary purposes for which data is used are as follows:

• Account Management: Creating, managing, and maintaining your member account, including processing deposits and withdrawals.
• Identity Verification (KYC): Verifying member identities to meet anti-money laundering compliance requirements.
• Platform Security: Detecting and preventing fraud, hacking, and suspicious activity on the digi88 platform.
• Service Personalisation: Personalising game recommendations, promotional offers, and platform experiences based on your usage habits.
• Service Communications: Sending important account notifications, transaction details, and policy updates via email and SMS.
• Legal Compliance: Fulfilling legal obligations, including reporting to relevant authorities when required.
• Platform Improvements: Analysing usage patterns to improve the performance, interface, and overall experience of the digi88 platform.
• Responsible Gaming: Monitoring wagering patterns to identify early signs of problem gambling and offer appropriate assistance.

Digi88 does not sell or disclose members' personal data to third parties for their own commercial purposes. However, in the course of operating the platform, we may share certain data with the following categories of third parties:

• Payment Service Providers: Financial institutions, digital wallet providers and payment gateways that process your transactions — only data necessary for payment processing is shared.
• Game Software Providers: Game development companies that provide content within the digi88 platform receive only the limited technical data necessary to run the games smoothly.
• KYC Service Providers: Third-party identity verification companies that help us carry out identity checks faster and more accurately.
• Legal Authorities: Government authorities, regulators, or law enforcement agencies when required under applicable Malaysian law.
• Technical Infrastructure Providers: Cloud and hosting service providers that store digi88 platform data in a secure environment compliant with international standards.

All third parties that receive data from digi88 are bound by strict confidentiality and data protection agreements. They are only permitted to use such data for the purposes that have been agreed upon.

The digi88 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions correctly. Cookies are small text files stored on your device when you visit our website.

The types of cookies used by digi88 are as follows:

• Essential Cookies: Required for core platform functions such as login, session management and security. These cookies cannot be disabled.
• Performance Cookies: Collecting information on how you use the platform to help us identify areas for improvement. All data is anonymised.
• Functional Cookies: Saving your preferences such as language, preferred currency, and display settings so you do not need to reconfigure them each time you log in.
• Analytics Cookies: Helping us understand aggregate traffic patterns and platform usage for continuous improvement purposes.

You can manage your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect the functionality of the digi88 platform.

Digi88 implements multiple layers of technical and organisational security measures to protect members' personal data from unauthorised access, loss, misuse, or accidental disclosure.

Key security measures we implement include:

• Encryption of data in transit using TLS 1.3 and SSL 256-bit protocols.
• Encryption of data at rest using the AES-256 standard.
• Two-factor authentication (2FA) for member account access and internal staff systems.
• Continuous security monitoring 24 hours a day, seven days a week.
• Periodic security audits conducted by independent and authorised third parties.
• Mandatory information security training for all digi88 staff.
• Comprehensive and tested incident response procedures.

Digi88 members' personal data is stored on servers protected with enterprise-grade security. Data retention periods depend on the type of data and applicable legal requirements:

• Active account data: Retained for as long as your account remains active and has not been closed.
• Financial records data: Retained for seven years in accordance with Malaysia's tax and anti-money laundering legal requirements.
• Support communications data: Retained for two years for quality control and dispute resolution purposes.
• Data following account closure: Basic data is retained for the period required by law, after which it is securely deleted.

If personal data needs to be transferred outside of Malaysia, digi88 ensures that protection equivalent to PDPA 2010 is in place at the destination through appropriate data transfer agreements.

Under the Personal Data Protection Act 2010, you have the following rights regarding your personal data held by digi88:

To exercise any of the above rights, contact the digi88 support team via live chat. We will process your request within 21 business days. In complex cases, this period may be extended to up to 60 days with prior notice to you.

The digi88 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18.

If we discover that personal data belonging to someone under the age of 18 has been collected without our knowledge, we will take immediate steps to delete that data and terminate the relevant account.

Digi88 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. Each new version will be published on the digi88 website with a clear "Last Updated" date.

When significant changes are made to this Privacy Policy, we will notify registered members via:

• Email to your registered email address.
• Notifications within the digi88 platform when you log in.
• A prominent notice on the platform's home page for a specified period.

Continued use of the digi88 platform after changes take effect will be considered acceptance of the updated Privacy Policy.

If you have any questions, concerns or complaints regarding how digi88 handles your personal data, please contact our Data Protection Officer (DPO) through the following channels:

• Live Chat: Available 24/7 directly within the digi88 platform — the fastest way to get a response.
• Email: [email protected] — for more detailed written enquiries.

We also encourage you to visit the FAQ which contains answers to frequently asked questions about privacy and data security. For more information about your rights, you may also refer to the official website of the Department of Personal Data Protection Malaysia.