Updated: January 2026

Coin88 Privacy Policy – Your Data Protection & Privacy

Your privacy is our priority. This Privacy Policy transparently explains how coin88 collects, uses, stores, and protects your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Effective: 1 January 2026
Language: English (Malaysia)
Compliance: PDPA 2010
Jurisdiction: Malaysia
Update Notice

Any material changes to this Privacy Policy will be communicated via email or in-account notification.

PDPA Compliant

This Privacy Policy is formulated in accordance with Malaysia's Personal Data Protection Act 2010.

Important Note: By registering or using the coin88 platform, you agree to the collection and use of your personal data as described in this Privacy Policy. Please read this policy carefully in full.

1. Introduction

Who we are and why this Privacy Policy matters

Coin88 is an online entertainment platform operating in Malaysia, fully committed to protecting the privacy of every user who trusts us. We understand that your personal data is sensitive and must be handled with the highest level of trust and transparency.

This Privacy Policy explains how we handle your personal information — from how it is collected and why it is used, to who can access it and your rights as a user to control that data. We take seriously the trust you place in us when you register an account.

As a platform operating in Malaysia, coin88 fully complies with Personal Data Protection Act 2010 (PDPA) as well as guidelines issued by the Personal Data Protection Commissioner of Malaysia. This compliance is not merely a legal obligation — it is a core value we uphold.

2. Types of Personal Data We Collect

Information we collect while you use the platform

We only collect data that is genuinely necessary to provide you with a quality service. Data is collected through the registration process, platform usage, and your interactions with our customer support.

Data Category Example Information How Collected
Identity Information Full name, IC/passport number, date of birth, gender Account Registration & KYC
Contact Information Email address, phone number, full mailing address Account registration
Financial Information Bank account number, bank name, transaction history Deposit & withdrawal process
Technical Data IP address, browser type, operating system, device data Automatically during use
Usage Data Game history, betting, activity logs, preferences Automatically during gameplay
Verification Documents IC copy, utility bill, bank statement for KYC User uploads

We do not collect credit/debit card information directly. All payments are processed through integrated third-party payment gateways that comply with PCI-DSS standards.

3. How We Use Your Data

Purpose and legal basis for using your personal data

Every piece of data we collect has a clear and legitimate purpose. We do not use your data for any other purpose without obtaining your consent first. The following are the primary purposes for which your personal data is used:

  • Account management: Create, verify, and maintain your account so you can access the platform securely at all times.
  • Transaction processing: Verify and process your deposits and withdrawals accurately promptly to your registered bank account.
  • Identity verification (KYC): Meet anti-money laundering (AML) compliance requirements and verify user identity before withdrawals are approved.
  • Platform security: Detect and prevent fraud, unauthorized access, account abuse, and suspicious activity.
  • Customer support: Help you resolve issues, answer queries, and handle complaints more effectively.
  • Service communications: Send important notifications related to your account, transactions, policy changes, and security updates.
  • Platform improvement: Analyze aggregate usage patterns to improve the user experience, platform performance, and game offerings.
  • Marketing (with consent only): Send relevant promotions and offers only if you have opted in to receive marketing communications. You can unsubscribe at any time.

4. Data Sharing with Third Parties

Who can access your data and under what circumstances

Coin88 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. Data sharing only occurs in limited situations outlined below, and is always subject to strict data protection agreements.

  • Payment service provider: Minimal transaction data is shared with payment gateways and banks to process your deposits and withdrawals. All such providers are PCI-DSS compliant.
  • KYC service provider: Identity verification documents are shared with licensed KYC service providers who assist us in verifying the authenticity of your documents.
  • Platform technology provider: Hosting infrastructure, database management, and analytics are handled by technology providers bound by strict confidentiality agreements.
  • Regulatory authority: In situations required by Malaysian law, we may be obligated to disclose data to relevant authorities such as Bank Negara Malaysia or law enforcement agencies.

Every third party we engage has undergone thorough vetting and is required to sign a data processing agreement. They may only use your data for the purposes we specify.

5. Data Retention & Security Measures

How long data is retained and how it is protected

Your data security is our top technical priority. coin88 continuously invests in the latest security infrastructure to protect your data from unauthorized access, loss, or misuse.

Security Measures
  • 256-bit SSL/TLS Encryption
  • Data encryption at rest (AES-256)
  • Two-factor authentication (2FA)
  • 24/7 security monitoring
  • Regular penetration testing
Data Retention Period
  • Active account data: For the duration of the active period
  • Transaction records: 7 years (legal requirement)
  • KYC documents: 5 years after account closure
  • Communication logs: 2 years
  • Session data: 90 days

While we employ the best available security measures, no system in the world can be guaranteed 100% secure. You also play an important role by keeping your password and account login credentials confidential.

6. Cookies & Tracking Technologies

How we use cookies to enhance your experience

Coin88 uses cookies and similar tracking technologies to ensure the platform runs smoothly and to deliver a better experience for you. Cookies are small text files stored in your browser.

Cookie Types Purpose Duration
Essential Cookies Maintain your login session and account security Session only
Preference Cookies Save your language settings, theme, and game preferences 1year
Analytics Cookies Understanding aggregate platform usage patterns for improvement 2 years
Security Cookies Detect suspicious activity and prevent fraud 30 days

You can manage your cookie settings through your web browser. Please note that disabling essential cookies may affect platform functionality and the security of your login session.

7. Your Rights Under PDPA

Your right to control your personal data

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data we hold about you. coin88 fully respects and supports these rights.

Right of Access

You have the right to request a copy of the personal data we hold about you. Requests will be processed within 14 business days.

Right to Rectification

If your data is inaccurate or outdated, you may request a correction through your account settings or our customer support.

Right to Withdraw Consent

You may withdraw consent for data processing at any time, particularly for marketing communications.

Right to Enquiry

You have the right to ask how your data is being used and to receive a clear, easy-to-understand explanation.

Right to Object to Processing

In certain circumstances, you may object to the processing of your data for specific purposes other than legal obligations.

Right to Lodge a Complaint

If you believe your data has not been handled properly, you have the right to file a complaint with the Malaysia Department of Personal Data Protection.

To exercise any of the above rights, contact our data protection team at [email protected]. We will update you within 3 business days on the status of your request.

8. Protection of Children's Data

Our policy regarding underage users

The coin88 platform is exclusively for individuals aged 18 years and above. We do not intentionally collect or process personal data from children or minors.

Important: If we discover that a child's personal data has been collected without consent, we will take immediate steps to delete that data and terminate the associated account. Parents or guardians who become aware of such situation are urged to contact us immediately.

9. Privacy Policy Amendments

How changes to this policy are handled

Coin88 reserves the right to amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. All amendments will be communicated to you proactively.

  • Material changes will be communicated via your registered email or in-account notification at least 7 days before taking effect.
  • The "Last Updated" date at the top of this page always reflects the currently effective version of the Privacy Policy.
  • Continued use of the platform after changes take effect will be considered acceptance of the updated terms.
  • If you disagree with any amendments, you have the right to close your account before the changes take effect.

10. Contact Our Data Protection Officer

How to contact us for privacy inquiries

For any enquiries, requests, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer through the following channels:

Privacy Email
[email protected]
Response within 3 business days
Live Chat
Available 24/7 via the coin88 platform
Customer Support
[email protected]
24/7 general support

Our Six Pillars of Data Protection

We do more than comply with the law — we believe privacy is a fundamental right of every user and build our systems on that foundation of trust.

Military-Grade Encryption

All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption — the same standard used by global financial institutions.

No Data Sales

Coin88 has never and will never sell your personal data to advertisers, data brokers, or any third party for commercial gain.

Full PDPA Compliance

Our data handling practices are formulated and reviewed regularly to ensure full compliance with Malaysia's Personal Data Protection Act 2010.

Full User Control

You have full control over your data — from accessing and correcting it, to withdrawing processing consent at any time through your account settings.

Restricted Internal Access

Only authorized personnel with legitimate business needs may access user data, and every access is logged and audited regularly.

Rapid Incident Notification

In the event of any data security incident affecting your information, we will notify you within 72 hours in line with industry best practices.


Join 200,000+ Members Who Trust coin88

Your data is protected, your privacy respected. Register a coin88 account today and enjoy a safe, fair, and responsible online entertainment experience with a platform that puts your trust first.

256-bit SSL Compliant with PDPA 2010 KYC Verified No Data Sales
Bahasa Melayu