Empire88 Privacy Policy – Member Personal Data Protection

This Privacy Policy explains how empire88 ("we", "Platform") collects, uses, stores, and protects your personal information when you use the empire88.plus website, the empire88 mobile app, and all related services.

By registering for or using any empire88 service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of it, you should not use our platform.

This document should be read alongside Terms and Conditions empire88 and both together constitute the entire agreement between you and us regarding the use of the platform.

Empire88 collects various types of data depending on your interactions with the platform. The following are the main categories of data we process:

We only collect data that is necessary for specific purposes. We do not collect sensitive data such as health information, religious beliefs or political views unless required by law.

The data we collect is used exclusively for the following purposes:

• Account Management: Creating and maintaining your account, processing registration and verifying identity through the KYC process.
• Transaction Processing: Processing deposits and withdrawals securely, identifying and preventing financial fraud.
• Service Provision: Operating the gaming platform, ensuring technical stability and delivering a seamless playing experience.
• Customer Support: Answering enquiries, resolving complaints and providing the technical assistance you need.
• Security & Compliance: Detecting suspicious activity, preventing fraud and complying with anti-money laundering (AML) legal requirements.
• Platform Improvements: Analysing aggregated usage patterns to improve platform design, features and performance.
• Marketing Communications: Sending relevant promotional information and offers — only if you have given consent for this.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and offer appropriate assistance.

Empire88 processes your personal data on one or more of the following legal bases under Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable legislation:

• Contract Fulfilment: Processing is required to fulfil the service contract between you and empire88, such as processing deposits and withdrawals.
• Legal Obligation: Processing is required to comply with our legal obligations, including AML and KYC requirements set by the relevant authorities.
• Legitimate Interest: Processing is required for empire88's legitimate interests, such as preventing fraud and ensuring platform security — provided these interests do not override your fundamental rights.
• Consent: For certain purposes such as marketing communications, we require and rely on your explicit consent, which may be withdrawn at any time.

Empire88 does not sell your personal data. However, in certain limited and controlled situations, we may share data with the following parties:

• Payment Service Providers: To securely process your financial transactions via DuitNow, FPX, Touch 'n Go eWallet, GrabPay, Boost, and Visa/Mastercard.
• Game Providers: Minimal game session information is shared with providers for technical purposes — no personally identifiable information is disclosed.
• IT Service Providers: Companies that assist us with technical operations such as server hosting and cybersecurity are bound by strict confidentiality agreements.
• Legal Authorities: When required by law, court order, or official investigation by a competent authority.
• Licensed Business Partners: In limited circumstances and with your consent, for mutually agreed purposes.

Empire88 uses cookies and similar tracking technologies to enhance your experience on the platform. The following are the categories of cookies we use:

• Essential Cookies: Required for essential platform functions such as login authentication and session management. These cookies cannot be disabled.
• Performance Cookies: Collecting information on how visitors use our platform to help us improve the user experience. Data is collected anonymously.
• Functional Cookies: Saving your preferences such as language and display settings so you don't have to re-enter them each time you log in.
• Marketing Cookies: Used to display more relevant advertisements. You may decline these cookies without affecting core platform functionality.

You can manage cookie settings through your web browser preferences. Please note that disabling essential cookies may affect login functionality and account security.

Empire88 continuously invests in security infrastructure to protect your data from unauthorized access, loss, destruction, or disclosure. Key security measures we employ include:

• 256-bit SSL encryption for all data in transit.
• Sensitive data stored in databases is encrypted using industry-recognised algorithms.
• Strict role-based access control — only staff who require access to specific data are permitted.
• 24/7 real-time security monitoring to detect and respond to threats swiftly.
• Regular penetration testing conducted by independent security experts.
• Secure data backup procedures and a comprehensive disaster recovery plan.
• Mandatory cybersecurity awareness training for all staff who handle data.

Empire88 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or for as long as required by applicable law.

• Active Account Data: Retained for the duration your account remains active.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with financial and AML legal requirements.
• Platform Activity Logs: Retained for 2 years for security and dispute resolution purposes.
• Support Communications: Retained for 3 years after the case is resolved.
• Marketing Data: Retained until you withdraw consent or request deletion.
• Closed Account Data: Core data is retained for 5 years after account closure for legal compliance, then securely deleted.

Under the Personal Data Protection Act 2010 and related legislation, you have the following rights regarding your personal data:

To exercise any of the above rights, please contact the empire88 support team via live chat or email at [email protected]. We will process your request within 30 business days.

In conducting global operations, empire88 may transfer your personal data to servers or processors located outside Malaysia. When this occurs, we ensure that:

• The destination country has equivalent or higher data protection standards.
• Appropriate data transfer agreements have been implemented in accordance with legal requirements.
• All data recipients are subject to equally strict confidentiality and security obligations.

Empire88 reserves the right to update or amend this Privacy Policy from time to time in response to changes in law, industry practices, or our operational requirements. The latest version will always be available at empire88.plus/privacy-policy.

When we make significant changes, we will notify you via:

• A prominent notice on the platform's home page for at least 14 days before the changes take effect.
• Notification via email to the address registered with your account.
• In-app notification on the empire88 mobile app when you open the app.

The "Updated" date at the top of this document reflects the date of the last amendment. Continued use of the platform after changes take effect constitutes acceptance of the revised policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact the empire88 Data Protection Officer (DPO) via:

• Live Chat: Available on the empire88 app and website — 24 hours a day, 7 days a week.
• Privacy Email: [email protected] — response within 24–48 business hours.

We take every privacy complaint seriously and are committed to resolving it within a reasonable time. This Privacy Policy was last updated on January 2026.