Official Documents

Privacy Policy y88 – Member Personal Data Protection

Y88 is committed to protecting your privacy. This document clearly explains how we collect, use, store, and protect your personal information as a member of our platform.

Updated: January 2026

This Privacy Policy document explains how y88 ("we", "Platform", or "y88.lc") collects, uses, discloses, and protects your personal information when you use our online betting platform. We take the privacy of every member seriously and are committed to handling your data with full responsibility.

1 Introduction

Y88 is an online sports betting and casino platform operating in Malaysia. As a responsible platform, we comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and international standards for user data protection.

By registering or continuing to use the y88 platform, you agree to the terms of this Privacy Policy. If you disagree with any part of this policy, you are advised to stop using the platform and contact our support team to close your account.

Important Note: This Privacy Policy applies to all services provided through the y88.lc website, the y88 mobile app, and any of our official communication channels. All data collected is solely for the purpose of platform operations.

2 Information Collected

Y88 only collects information that is strictly necessary to provide you with the best service. We do not collect irrelevant or excessive data. The following are the categories of information we collect:

Data Category Data Examples Purpose Legal Basis
Identity Data Full name, date of birth, identification card number KYC verification & compliance Legal Obligations
Contact Data Email address, phone number, residential address Account communications & support Contract
Financial Data Bank account number, transaction records, payment methods Deposit & withdrawal processing Legal Obligations
Technical Data IP address, device type, browser, operating system Security & Fraud Detection Legitimate Interests
Usage Data Wagering records, game history, login activity Service improvement & AML compliance Contract
Preference Data Notification settings, preferred language, self-imposed betting limits Personalized user experience Legitimate Interests

Sensitive Data: y88 does not collect sensitive data such as medical information, religious beliefs, or political views without your explicit consent. KYC documents such as copies of identity cards are stored in a fully encrypted environment.

3 How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. y88 does not use your data for any purpose other than those stated below, and we never sell members' personal data to third parties for marketing purposes.

  • Account Management: Creating, verifying, and managing your member account, including the KYC process required by law.
  • Transaction Processing: Processing deposits and withdrawals securely through supported payment channels such as DuitNow, FPX, and digital wallets.
  • Platform Security: Detecting and preventing fraud, money laundering, system manipulation, and unauthorised access to your account.
  • Legal Compliance: Meeting the reporting and documentation requirements mandated by regulatory bodies and anti-money laundering (AML) laws.
  • Customer Support: Handling your enquiries, complaints, and support requests more efficiently and effectively.
  • Service Improvement: Analysing usage patterns on an aggregate (not individual) basis to improve the platform's interface, performance, and overall experience.
  • Important Communications: Sending account-related notifications, policy updates, promotions you have consented to receive, and critical security information.
  • Responsible Gaming: Monitoring betting patterns to identify potential gambling problems and offer appropriate responsible gaming self-control tools.

Marketing: We will only send marketing communications if you have given explicit consent during registration or through your account settings. You may withdraw this consent at any time via your account settings page.

4 Sharing Information with Third Parties

Y88 does not sell, rent, or trade your personal data to any third party. However, in certain legitimate situations, we may need to share limited information with our operational partners:

  • Payment Service Providers: Transaction information is shared with payment processors such as FPX, DuitNow, and digital wallet providers solely for transaction settlement purposes. These providers are bound by strict confidentiality agreements.
  • Game Providers: Usernames and session information are shared with game software providers to enable a seamless gaming experience. No financial or full identity information is shared.
  • Regulatory Body & Law Enforcement: y88 is required to disclose certain information when ordered by a court, law enforcement, or relevant regulatory authority in accordance with applicable law.
  • KYC Verification Services: Identity information is shared with licensed third-party identity verification service providers to facilitate faster and more secure account verification.
  • Analytics Services: De-identified and aggregated usage data may be shared with analytics providers to help us understand platform usage patterns.

All third parties we work with are bound by data protection agreements that require them to handle your information to the same or higher standards that we set for ourselves.

Cross-Border Data Transfers: Some of our service providers operate outside Malaysia. In such cases, y88 ensures that data transfers are protected by appropriate mechanisms and comply with Malaysia's PDPA requirements.

5 Data Security

Y88 continuously invests in the latest cybersecurity infrastructure to protect your personal data. We adopt a layered approach to data security, covering everything from the network level through to the application level.

  • 256-bit SSL/TLS Encryption: All communications between your device and y88 servers are encrypted using 256-bit SSL/TLS protocol — the highest standard in the industry.
  • End-to-End Data Encryption: Sensitive data such as financial information and KYC documents is stored in encrypted form using AES-256 algorithms within our secure databases.
  • Two-Factor Authentication (2FA): You can (and we strongly recommend) enable 2FA for an additional layer of protection against unauthorised access to your account.
  • 24/7 Monitoring System: Our cybersecurity team continuously monitors systems to detect any threats or suspicious activity.
  • Regular Penetration Testing: y88 conducts regular penetration testing by independent third-party security experts to identify and address system vulnerabilities.
  • Internal Access Control: Access to member personal data within our organisation is restricted to staff who require it to perform their duties only, with detailed access logging in place.

Incident Response: In the event of a data security breach affecting your information, y88 is committed to notifying you within 72 hours of confirming the incident, in line with industry best practices.

6 Cookies & Tracking Technologies

Y88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

  • Essential Cookies: Required for core platform functions such as login authentication, session security, and language preferences. These cookies cannot be disabled as the platform will not function properly without them.
  • Performance Cookies: Collecting information on how you use the platform (pages visited, time spent) to help us improve performance and navigation. All data is aggregated and anonymised.
  • Functional Cookies: Storing your preferences such as language, display settings, and game preferences to provide a more personalised experience.
  • Security Cookies: Used to detect and prevent fraudulent activity, cyberattacks, and unauthorised access to your account.

You can manage cookie settings through your internet browser. Please note that disabling certain cookies may affect the functionality of the y88 platform. More information on managing cookies can be found in your browser's help section.

7 Your Rights Under PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by us. y88 is committed to respecting and facilitating the exercise of these rights.

8 Data Retention & Deletion

Y88 retains your personal data only for as long as it is needed for the purposes stated in this policy, or as required by law. Once the retention period expires, data will be securely deleted or anonymized.

  • Active Account Data: Retained for the duration of your active account plus 7 years after account closure for AML compliance and audit requirements.
  • Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's financial legal requirements.
  • KYC Documents: Retained for the duration of the active account period plus 5 years, or longer if required by the relevant authorities.
  • Security Logs: Retained for 2 years for the purpose of security incident and fraud investigations.
  • Support Communication Data: Retained for 3 years from the date of last interaction.

When you voluntarily close your account, y88 will initiate the data deletion process within 30 days, subject to the minimum retention requirements stated above. You will receive an email confirmation once the deletion process is complete.

Secure Backup: Stored data is regularly backed up to secure, encrypted locations. These backups are subject to the same retention periods as the original data and are deleted simultaneously upon expiry.

9 Child Protection

The y88 platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from minors. y88 maintains a zero-tolerance policy against the participation of minors in any wagering activity.

  • Our registration process requires strict age verification through KYC.
  • If we discover an account registered by a minor, that account will be closed immediately and all associated data will be deleted.
  • Parents or guardians who become aware that a child under their care has registered an account at y88 should contact us immediately at [email protected].

Shared Responsibility: y88 encourages the use of parental control software to block children's access to gambling websites. We work with child protection organizations to ensure our platform is safe from misuse.

10 Changes to the Privacy Policy

Y88 reserves the right to update or modify this Privacy Policy at any time. Any material changes will be communicated to you via in-platform notifications or your registered email at least 14 days before the changes take effect.

  • The latest update date is always displayed at the top of this document.
  • Continued use of the platform after any changes take effect will be considered your acceptance of the updated policy.
  • If you disagree with the changes made, you have the right to close your account and we will process the withdrawal of any remaining balance.
  • Previous versions of the Privacy Policy are archived and can be requested through our support team.

11 Contact Us Regarding Privacy

For any inquiries, requests, or complaints regarding your privacy and personal data protection, please contact our Data Protection Officer (DPO). We are committed to responding to all privacy-related inquiries within 5 business days.

  • Privacy Email: [email protected] (please state "Privacy Inquiry" in the email subject line)
  • Response Time: General inquiries within 2–4 hours; data rights requests within 5 business days
  • Language: Bahasa Melayu and English

When submitting a data-related request, please include your account number and sufficient proof of identity so we can verify your identity and process the request securely and accurately.

Your Rights

Your Personal Data Rights at y88

As a y88 member, you have full control over your personal data. Learn about the rights guaranteed to you.

Right of Access

You have the right to request a copy of all personal data we hold about you. Requests will be processed within 5 business days.

Right to Rectification

If your data is inaccurate or incomplete, you have the right to request a correction via the account portal or our support team.

Right to Erasure

You can request the deletion of your data, subject to our legal obligations to retain certain records for specified periods.

Right to Object to Processing

You have the right to object to the processing of your data for direct marketing purposes at any time, without needing to provide a reason.

Right to Data Portability

You can request your data in a structured, machine-readable format to be transferred to another platform should you choose to do so.

Right to Restriction of Processing

In certain circumstances, you may request that we limit the processing of your data while your query or complaint is being resolved.

Our Commitment

Why Your Data Is Safe with y88

Y88 takes serious investment in data security infrastructure to ensure every member's privacy is consistently protected.

Military-Grade Encryption

All data is encrypted using AES-256 and 256-bit SSL/TLS — the same standard used by financial institutions and government agencies worldwide.

Malaysia PDPA Compliance

Y88 is fully compliant with Malaysia's Personal Data Protection Act 2010 (PDPA) and continually updates our practices in line with the latest developments in privacy legislation.

Secure & Transparent KYC

Our identity verification process uses trusted KYC technology. Your documents are stored in a fully encrypted, isolated environment.

Real-Time Threat Monitoring

Our system monitors every transaction and user session in real time to detect any suspicious activity and protect your account.

No Data Sales

Y88 has never and will never sell members' personal data to advertisers or third-party data brokers. Your data is used solely for platform operations.

Dedicated Privacy Support

Our support team is available 24/7 to promptly and professionally address any concerns regarding your privacy and personal data.

Trusted Platform

Join y88 – Safe Wagering,
Your Privacy is Protected

With the highest level of data protection, 256-bit SSL encryption, and full PDPA compliance, y88 is a betting platform you can trust completely. Register today and enjoy a safe and enjoyable gaming experience.

256-bit
SSL Encryption
24/7
Privacy Support
PDPA
Full Compliance
0%
Data Sales
Bahasa Melayu