Privacy Policy —
How FAFA888 Protects Your Data

Introduction

This Privacy Policy ("Policy") is issued by FAFA888 ("we", "us", "our", "the Platform") and applies to all individuals ("you", "User", "Player") who access or use our online casino and sports betting platform at https://fafa888.cam, including all associated web pages, mobile-optimised interfaces, and related services offered thereunder.

FAFA888 is committed to protecting the privacy and personal data of all our users, including players based across Malaysia — in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and throughout the country. We process personal data in accordance with applicable data protection principles, including the principles of purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

By registering an account, accessing the Platform, or depositing funds — whether via Touch 'n Go eWallet, Boost, GrabPay, DuitNow QR, FPX banking, Maybank, CIMB, or any other supported payment channel — you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

Definitions

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" — Any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, IP address, and device identifiers.
• "Processing" — Any operation or set of operations performed on Personal Data, including collection, recording, storage, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" — FAFA888, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" — Any third-party service provider that processes Personal Data on behalf of FAFA888, under a binding contractual arrangement and data processing agreement.
• "Consent" — Any freely given, specific, informed, and unambiguous indication of the User's wishes by which they signify agreement to the processing of their Personal Data.
• "KYC Data" — Identity and address verification documents collected as part of the Know Your Customer process, including government-issued identification and proof of residential address.
• "Cookies" — Small text files placed on a User's device by the Platform for the purposes of functionality, analytics, and performance optimisation.

Personal Data We Collect

FAFA888 collects the following categories of Personal Data from Users of the Platform:

How We Collect Your Data

FAFA888 collects Personal Data through the following means:

• Direct provision by you — When you register an Account, complete KYC verification, make a deposit or withdrawal via a Malaysian payment channel (such as FPX, DuitNow QR, or Touch 'n Go eWallet), contact our support team, or respond to a promotion or survey.
• Automated technical collection — When you access and browse the Platform, we automatically collect Technical Data such as your IP address, device identifiers, browser fingerprint, and session behaviour via cookies and server logs.
• Third-party sources — We may receive Personal Data from third-party identity verification service providers, fraud detection platforms, payment processors, and publicly available sources, where such collection is necessary for KYC compliance or fraud prevention.
• Responsible gambling referrals — If you contact us through a responsible gambling support channel or request self-exclusion, we may receive data from third-party welfare organisations to assist in implementing your request.

Purpose of Processing

FAFA888 processes your Personal Data for the following specific and legitimate purposes:

To create, maintain, and administer your FAFA888 Account; to verify your identity and age (21+) in accordance with our KYC obligations; to authenticate your login sessions; and to communicate with you regarding your account status, changes to our Terms, and security alerts.

To process deposits and withdrawals in Malaysian Ringgit (MYR) through your chosen payment method — including Touch 'n Go eWallet, Boost, GrabPay, DuitNow QR, FPX, Maybank, CIMB, Public Bank, Hong Leong Connect, Visa, and Mastercard; to maintain accurate transaction records; and to reconcile financial accounts.

To comply with applicable anti-money laundering (AML) and counter-terrorism financing (CTF) obligations; to conduct enhanced due diligence where required; to file reports with relevant authorities where legally obligated; and to respond to lawful requests from law enforcement or regulatory bodies.

To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct; to protect the integrity of the Platform and the safety of all users.

To analyse anonymised gaming behaviour and platform usage patterns in order to improve the user experience, optimise platform performance, and develop new features suited to Malaysian players' preferences.

To monitor gaming behaviour for indicators of problem gambling; to enforce deposit limits, session limits, and self-exclusion requests; and to deliver responsible gambling communications where appropriate.

To respond to your support queries via live chat, email, and other channels; to maintain records of communications for training, quality assurance, and dispute resolution purposes.

To send you promotional offers, bonus notifications, and platform updates, where you have provided express consent. You may withdraw your marketing consent at any time by contacting our support team or following the unsubscribe instructions in any marketing communication.

Legal Basis for Processing

FAFA888 processes your Personal Data on one or more of the following legal bases:

• Contractual necessity — Processing is required to perform the contract between you and FAFA888, specifically to provide you with gaming and payment services through the Platform.
• Legal obligation — Processing is necessary to comply with our legal and regulatory obligations, including KYC requirements, AML obligations, and financial record-keeping duties.
• Legitimate interests — Processing is necessary for our legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights and freedoms.
• Consent — Where we rely on consent (for example, for marketing communications), we will obtain your express consent prior to processing and will honour any withdrawal of consent promptly.

Data Sharing & Third Parties

FAFA888 does not sell, rent, or trade your Personal Data to third parties for commercial purposes. We may share your Personal Data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual safeguards:

• Payment service providers — Malaysian payment processors and financial institutions (including FPX operators, e-wallet providers such as Touch 'n Go and Boost, and banks such as Maybank and CIMB) for the purpose of processing your transactions.
• Identity verification providers — Third-party KYC and AML compliance service providers who assist in verifying your identity and detecting fraudulent activity.
• Technology service providers — Cloud hosting providers, cybersecurity partners, and platform infrastructure vendors who process data on our behalf under binding data processing agreements.
• Game content providers — Aggregated, anonymised gaming data may be shared with our game studio partners for RTP audit and platform optimisation purposes. No identifiable personal data is shared with game providers without your knowledge.
• Regulatory authorities and law enforcement — Where required by applicable law, court order, or regulatory direction, we will disclose Personal Data to relevant authorities. We will notify you of any such disclosure unless we are legally prohibited from doing so.
• Professional advisers — Lawyers, accountants, and auditors acting as service providers to FAFA888, subject to confidentiality obligations.

International Data Transfers

Your Personal Data may be transferred to and processed in countries outside of Malaysia in connection with the operation of our platform infrastructure, third-party service providers, or game content delivery systems. FAFA888 takes reasonable steps to ensure that any such international transfers are subject to appropriate contractual safeguards and that recipient entities maintain data protection standards consistent with those applied by FAFA888.

Where Personal Data is transferred to a country that does not provide an equivalent level of data protection, FAFA888 will implement appropriate safeguards, such as standard contractual clauses or binding corporate rules, to protect your information throughout the transfer and processing lifecycle.

Data Retention

FAFA888 retains Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised in a manner that prevents re-identification.

Security Measures

FAFA888 implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:

• SSL/TLS 256-bit encryption on all data transmitted between your device and the Platform.
• Encrypted storage of sensitive Personal Data, including financial information and KYC documents, at rest.
• Role-based access controls limiting internal access to Personal Data to only those employees and contractors who require it to perform their duties.
• Multi-factor authentication for internal administrative systems that access Personal Data.
• Regular penetration testing and security audits conducted by independent cybersecurity professionals.
• Incident response procedures to detect, contain, and report data breaches in accordance with applicable notification obligations.

Cookies & Tracking Technologies

FAFA888 uses cookies and similar tracking technologies to operate the Platform, enhance user experience, and analyse platform performance. The categories of cookies we use are as follows:

• Strictly Necessary Cookies — Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without impairing core Platform functionality.
• Performance & Analytics Cookies — Used to collect anonymised information about how Users interact with the Platform, which pages are visited most frequently, and how Players navigate between sections. This data helps us improve Platform performance and usability for Malaysian users.
• Functionality Cookies — Enable the Platform to remember your preferences, such as language settings, display preferences, and previously set responsible gambling limits.
• Session Management Cookies — Maintain your login state during an active session and support responsible gambling session-time tracking features.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. We do not use third-party advertising cookies or cross-site tracking technologies.

Your Data Rights

As a User of the FAFA888 Platform, you have the following rights in relation to your Personal Data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond to all verified requests within 30 calendar days.

Minors & Age Restriction

The FAFA888 Platform is strictly for individuals aged 21 and above. We do not knowingly collect, process, or retain Personal Data from persons under the age of 21. If we become aware that Personal Data has been provided by an individual under the age of 21, we will take immediate steps to delete such data and close the associated Account in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that your child may have registered an Account on the Platform, please contact our support team immediately at [email protected] so we can take appropriate action.

Amendments to This Policy

FAFA888 reserves the right to amend, update, or revise this Privacy Policy at any time. Where material changes are made, we will notify registered Users via email or a prominent notice on the Platform prior to the changes taking effect. The "Last Updated" date at the top of this Policy will be revised accordingly.

Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Policy. If you do not agree with the revised Policy, you should cease using the Platform and may request the closure of your Account by contacting our support team.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact FAFA888 through any of the following channels. All data-related requests will be acknowledged within 3 business days and resolved within 30 calendar days.

• Email: [email protected] — for data subject requests, erasure requests, and privacy queries (plain text — not a clickable link)
• Live Chat: Available 24/7 via the Platform — average response time 3–5 minutes
• Support Languages: English, Bahasa Melayu, Mandarin Chinese