Privacy Policy

888sama ("we", "us", "our") operates the online casino and sports betting platform accessible at https://888sama.cam (the "Platform"). We understand that your personal data is important to you, and we are committed to handling it with transparency, integrity, and in accordance with applicable data protection principles.

This Privacy Policy ("Policy") describes the categories of personal data we collect from players and visitors to the Platform, the purposes for which that data is processed, the legal bases on which we rely, how long we retain it, the circumstances under which we may share it with third parties, and the rights you have in relation to your personal data.

This Policy applies to all registered players, prospective players, and visitors to the 888sama Platform, whether accessing it via desktop browser, mobile browser, or any other supported access method. It applies irrespective of the jurisdiction in which you are located, although specific additional rights may apply depending on your location.

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly. This includes name, email address, payment details, IP address, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, transfer, deletion, or any combination thereof.
• "Data Controller" means 888sama, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" means any third party that processes personal data on behalf of 888sama under a data processing agreement.
• "Sensitive Data" means categories of personal data that require heightened protection, including identity documents, financial account details, and any information relating to responsible gambling measures applied to your Account.
• "KYC Documents" means identity and payment verification documents submitted by a Player to satisfy Know Your Customer compliance requirements.
• "Cookies" means small text files stored on your device by the Platform for the purposes of functionality, analytics, and session management.

888sama collects the following categories of personal data from players and Platform visitors:

888sama collects personal data through the following channels and methods:

• When you complete the account registration form and submit your personal details;
• When you upload KYC verification documents (identity documents, proof of payment method);
• When you make a deposit or request a withdrawal using any approved payment method;
• When you contact our support team via live chat, email, or any other communication channel;
• When you configure responsible gambling settings such as deposit limits or self-exclusion;
• When you respond to surveys, promotions, or opt in to marketing communications.

• Through session cookies and local storage, which track your login state and preferences;
• Through analytics tools that record page views, navigation paths, session duration, and feature usage;
• Through server logs that capture IP addresses, access times, and browser information for security and fraud detection purposes;
• Through game servers that record betting activity, wager amounts, and game outcomes in real time.

• From payment processing partners (e.g., FPX, DuitNow) who confirm the status of transactions;
• From identity verification service providers engaged to assist with KYC processing;
• From fraud prevention services that cross-reference registration data against known fraud indicators;
• From responsible gambling databases where applicable, to identify players subject to active exclusion arrangements.

888sama relies on one or more of the following legal bases when processing your personal data:

• Contractual Necessity: Processing that is necessary to fulfil our obligations under the Terms & Conditions you accepted upon registration — including account management, processing deposits and withdrawals, and providing Platform access.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) requirements, KYC obligations, and responsible gambling compliance mandates.
• Legitimate Interests: Processing necessary for our legitimate business interests, including fraud detection, platform security, improving user experience, and enforcing our Terms — provided those interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in relation to optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

888sama uses the personal data we collect for the following specific purposes:

• To create and maintain your registered player Account;
• To authenticate your identity when you log in;
• To process deposits, withdrawals, and bonus applications;
• To communicate with you regarding your Account status, security alerts, and transaction confirmations.

• To conduct KYC identity verification in compliance with applicable regulations;
• To detect, investigate, and prevent money laundering, fraud, and other financial crimes;
• To enforce age verification — 888sama operates a strict 21+ policy and uses data to verify player eligibility;
• To maintain records required by applicable law for the mandatory retention period.

• To monitor gaming activity for indicators of problem gambling behaviour;
• To enforce deposit limits, loss limits, and self-exclusion arrangements that you have configured;
• To contact players proactively where our responsible gambling systems flag potentially harmful patterns.

• To send promotional offers, bonus notifications, and seasonal campaign communications (e.g., Hari Raya, CNY, Merdeka Day promotions) where you have consented to receive them;
• To personalise Platform content and offer recommendations based on your gaming preferences;
• You may opt out of marketing communications at any time via your Account settings or by replying to any marketing email with an unsubscribe request.

• To monitor for and investigate suspicious activity, account takeover attempts, and bonus abuse;
• To analyse aggregated, anonymised usage data to improve Platform performance and user experience;
• To conduct internal audits and quality assurance reviews.

888sama does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share personal data only in the following limited and controlled circumstances:

• Payment Processors: We share transaction data with authorised payment service providers (including FPX, DuitNow network banks, and e-wallet operators such as Touch 'n Go) solely for the purpose of processing deposits and withdrawals. These providers are contractually bound to process data only for the specified purpose.
• Identity Verification Providers: KYC documents and identity data may be shared with regulated third-party identity verification services to assist with compliance obligations. These providers operate under strict data handling agreements.
• Fraud Prevention & Security Services: Technical data including IP addresses and device fingerprints may be processed by fraud prevention partners to detect and prevent abuse.
• Game Software Providers: Where games are provided by third-party studios integrated into the Platform, limited gameplay data (session token, wager records) may be processed by the game provider's servers. Game providers do not receive your identity or payment data.
• Legal & Regulatory Authorities: We will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by applicable law, court order, or where we believe disclosure is necessary to protect the safety or rights of any person.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of our assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and any changes to this Policy that may result.

888sama retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

Upon expiry of the relevant retention period, personal data is securely deleted or permanently anonymised. Where data is anonymised, it may be retained indefinitely for aggregated statistical analysis without constituting personal data processing.

The 888sama Platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. The following categories of cookies may be placed on your device:

• Strictly Necessary Cookies: Essential for Platform functionality, including session authentication, shopping cart state (e.g., active bonus selections), and security tokens. These cannot be disabled without impairing Platform functionality.
• Performance & Analytics Cookies: Used to collect anonymised data about how visitors navigate the Platform — including pages visited, session duration, and error events. This data is used to improve Platform performance. No personally identifiable information is included in analytics data.
• Functional Cookies: Used to remember your preferences, such as display language, last-visited game category, and notification settings, to personalise your experience across sessions.
• Marketing Cookies: Used — where you have given consent — to serve relevant promotional content based on your activity on the Platform. These cookies do not track your activity outside of the 888sama Platform.

888sama implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Key measures include:

• Transport Encryption: All data transmitted between your device and 888sama's servers is encrypted using TLS 1.2 or higher (256-bit SSL). Look for the padlock icon in your browser's address bar when using the Platform.
• Data-at-Rest Encryption: Personal data stored in our databases is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data is restricted to authorised personnel only on a strict need-to-know basis. All internal access to player data is logged and auditable.
• Payment Security: 888sama does not store full payment card numbers or sensitive authentication data. Payment processing is handled by PCI-DSS compliant third-party processors.
• Intrusion Detection: Our systems are monitored continuously for suspicious access patterns, and automated alerts are triggered upon detection of anomalous activity.
• Penetration Testing: 888sama conducts regular security assessments and penetration testing to identify and remediate vulnerabilities.

Despite these measures, no data transmission over the internet or electronic storage system is completely secure. You are responsible for maintaining the confidentiality of your own account credentials. If you suspect that your Account has been compromised, contact us immediately at [email protected].

Subject to applicable law and the specific legal basis on which your data is processed, you have the following rights in relation to the personal data 888sama holds about you:

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is processed. We will provide this within 30 days of a verified request.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic profile information directly through your Account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies. This right is subject to our legal retention obligations — we may be unable to delete certain data (e.g., transaction records) where retention is required by law.
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a complaint is being investigated.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request that we provide your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You have the right to object to processing based on legitimate interests at any time. We will cease the specific processing activity unless we can demonstrate a compelling legitimate ground that overrides your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

888sama's Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21.

If we become aware that personal data has been collected from a person under the age of 21, we will take immediate steps to close the associated Account, delete the data, and — where required — report the matter to appropriate authorities. Age verification is conducted as part of our KYC process, and 888sama reserves the right to request proof of age at any time.

If you believe that a person under the age of 21 has registered on the Platform, please contact us immediately at [email protected] so that we may investigate and take appropriate action.

The 888sama Platform may contain references to third-party services, including payment method providers such as Touch 'n Go, Maybank2u, CIMB Clicks, DuitNow, and others. While we take care to work only with reputable service providers, 888sama is not responsible for the privacy practices of third parties.

When you interact with a third-party payment gateway — for example, by completing a transaction through Maybank2u or a Touch 'n Go eWallet payment screen — you do so subject to that third party's own privacy policy and terms of service. We encourage you to review the privacy policies of any third-party service you use in connection with your 888sama account.

Game software providers integrated into the Platform may operate their own game servers and process limited technical gameplay data. These providers are contractually required to comply with data protection standards consistent with this Policy.

888sama may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or operational requirements. When material changes are made, we will notify registered players by:

• Posting a notice on the Platform at login;
• Updating the "Last Updated" date at the top of this page;
• Sending a notification to your registered email address where the change is significant.

Your continued use of the Platform following publication of an updated Privacy Policy constitutes acceptance of the updated terms. We recommend reviewing this page periodically. The current version is always available at https://888sama.cam/privacy-policy.

For any questions, concerns, or requests relating to this Privacy Policy or the personal data 888sama holds about you, please contact our Data Support team through the following channels:

• Live Chat: Available 24/7 on the Platform. This is the fastest channel for urgent data concerns.
• Support Email: [email protected] — we aim to respond to privacy-related emails within 24 hours during business days.
• Support Hours: 00:00 – 23:59 MYT (UTC+8), daily, including all Malaysian public holidays.

When contacting us about a data rights request, please include your registered username and a clear description of your request. We will verify your identity before processing any data access, correction, or deletion request to ensure your data is protected from unauthorised third-party requests.