Bersatu88 Privacy Policy – Your Personal Data Protection

1Personal Information We Collect

To provide a secure, responsible, and high-quality service, bersatu88 collects certain types of information from our members. This information is collected directly from you or automatically as you use our platform.

Information you provide directly:

• Identity information: Full name, date of birth, identity card or passport number, nationality and gender.
• Contact information: Email address, mobile number and current residential address.
• Financial information: Bank account number, bank name, digital wallet numbers (Touch 'n Go, GrabPay, Boost) used for deposits and withdrawals.
• KYC documents: Copies of identity card, passport, utility bill or bank statement for identity verification purposes.
• Account information: Your username, password (stored as an unreadable hash) and account preferences.

Automatically collected information:

• Technical data: IP address, browser type, operating system, device model and screen resolution.
• Usage data: Pages visited, session duration, games played, login timestamps and logout activity.
• Location data: General location based on IP address for compliance and fraud detection purposes.
• Cookie and tracking data: Information collected through session cookies, preference cookies and similar tracking technologies.

2How We Use Your Information

Bersatu88 uses your personal information solely for lawful and clearly stated purposes. We will not use your data for any other purpose without first informing you and, where required, obtaining your consent.

3Sharing Information with Third Parties

Bersatu88 does not sell your personal data to any party for commercial gain. However, in operating a safe and legally compliant platform, we may share certain information with the following parties under limited circumstances:

• Payment providers: Financial information required to process deposits and withdrawals is shared with approved payment providers. All such providers are bound by strict confidentiality agreements.
• Technology service providers: Companies that help us operate the platform, including cloud services, analytics, and security infrastructure, receive only the data necessary for their specific tasks.
• Regulatory body: Information legally required to be shared with regulatory authorities, anti-money laundering agencies or law enforcement bodies.
• Gaming partners: Game software providers may receive technical data necessary to operate their games on the bersatu88 platform; however, your personal identity information is not shared without a legitimate requirement.

4Data Security Measures

Protecting your personal data is a responsibility we take seriously. bersatu88 implements multiple layers of technical and organisational security to ensure your information remains protected at all times:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and bersatu88 servers is encrypted using the highest industry-standard encryption protocols.
• Hashed password storage: Your password is never stored in plain text. We use strong hashing algorithms so that no one — including bersatu88 staff — can read your password.
• Tiered access controls: Only staff who require access to specific data to perform their duties are permitted to do so. All access is logged and monitored.
• Regular security audits: We conduct regular penetration testing and security audits by independent experts to identify and address any vulnerabilities.
• 24/7 Monitoring: Our automated monitoring system detects and alerts on any suspicious activity in real time, around the clock, every day.
• Secure Data Backup: Critical data is regularly backed up to secure, isolated locations to ensure service continuity in the event of an unexpected incident.

While we make every effort to protect your data, no security system is 100% perfect. We therefore encourage you to also safeguard your account by using a strong password and enabling two-factor authentication (2FA).

5Your Rights Regarding Personal Data

As a bersatu88 member, you have certain rights regarding your personal data. We fully respect and facilitate the exercise of these rights:

6Cookie & Tracking Technology Policy

Cookies are small text files stored on your device when you visit the bersatu88 website. We use cookies to ensure the platform functions correctly, enhance your experience and understand how our website is used.

Types of cookies we use:

• Strictly necessary cookies: These cookies are required for core platform functions such as login authentication, session security and language preferences. They cannot be disabled.
• Performance cookies: Collecting information on how visitors use our website, such as the most visited pages and any error messages. This data is used to improve website performance.
• Functional cookies: Allows the website to remember your preferences such as username, preferred language and region to deliver a more personalised experience.
• Analytics cookies: Helps us understand overall user behaviour for product improvement purposes. Data collected is anonymised and cannot be personally identified.

You can manage and delete cookies through your browser settings. However, disabling certain cookies may affect the functionality of some parts of the bersatu88 platform. For more information on managing cookies, please refer to your browser's help documentation.

7Data Retention Period

Bersatu88 does not retain your personal data longer than necessary. Our data retention periods are determined based on operational requirements, legal obligations, and applicable regulatory policies:

• Active account data: Retained for the duration your account is active, plus any period required by law following account closure.
• Financial transaction records: Retained for a minimum of 5 years in accordance with anti-money laundering and financial reporting legal requirements.
• KYC documents: Retained for the period mandated by applicable regulatory requirements, typically 5 years after the end of the business relationship.
• Support communication logs: Retained for 2 years for reference and dispute resolution purposes.
• Analytics and technical log data: Retained for 12 months, then anonymised or deleted.

Once the retention period expires and there is no legal requirement to retain the data, your information will be securely deleted or anonymised in a way that prevents re-identification.

8Changes to the Privacy Policy

Bersatu88 reserves the right to update or amend this Privacy Policy from time to time in response to changes in law, industry practices, or our platform operations. All amendments take effect immediately upon publication on this website.

For changes deemed material or significant, we will notify you through:

• A clear notice on the bersatu88 platform homepage.
• Email to the address registered to your account.
• In-app notifications on the bersatu88 mobile app (where applicable).

We encourage you to review this page periodically to stay informed about how we protect your information. The "Last updated" date at the top of this page indicates when this Privacy Policy was last revised.

9Contact Our Privacy Team

If you have any questions, concerns, or wish to exercise your rights regarding personal data, do not hesitate to contact us. The bersatu88 Privacy and Data Protection Team is here to assist you:

• Privacy Email: [email protected] — for specific enquiries related to privacy and data rights requests.
• General Support: [email protected] — for general enquiries about your account and services.
• Live Chat: Available directly on the bersatu88 platform, 24 hours a day, 7 days a week.

We aim to respond to all privacy-related enquiries within 5 business days. For requests requiring thorough review, such as data access or deletion requests, processing may take up to 30 business days.