Privacy Policy — deluxe88

1. Who We Are

deluxe88 (referred to in this Policy as "deluxe88", "we", "us", or "our") operates the online gaming platform accessible at deluxe88.co (the "Platform"). deluxe88 is the data controller responsible for the personal data of players and visitors processed in connection with the Platform. We operate under a licence issued by an international gaming regulatory authority, which imposes specific data protection and player identification obligations that shape how we collect and handle personal information.

This Privacy Policy applies to all personal data collected from individuals who register accounts on, browse, or otherwise interact with the deluxe88 Platform, including data collected during KYC verification, deposits, withdrawals, gameplay, customer support interactions, and promotional activities.

2. Personal Data We Collect

Depending on how you interact with the deluxe88 Platform, we may collect the following categories of personal data:

2.1 Identity and Contact Data

• Full legal name as it appears on your Malaysian national identity card (MyKad) or other government-issued identification document
• Date of birth
• Malaysian residential address
• Email address
• Malaysian mobile telephone number
• Copy of identity document (MyKad, passport, or equivalent) submitted for KYC verification

2.2 Financial and Payment Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method identifiers
• E-wallet account identifiers (Touch 'n Go eWallet, Boost, GrabPay) or bank account details (Maybank2u, CIMB Clicks, Public Bank, DuitNow) used for transactions — held only to the extent necessary for transaction processing and fraud prevention
• Cryptocurrency wallet addresses where USDT TRC20 is used as a payment method

2.3 Account and Gameplay Data

• Account username, hashed password, and login history including timestamps and IP addresses
• Game session records including titles played, stakes, outcomes, and session durations
• Bonus and promotion history
• Responsible gaming tool usage, including deposit limits set, cooling-off activations, and self-exclusion records

2.4 Technical and Device Data

• IP address, browser type, operating system, device type, and screen resolution
• Referring URL and navigation behaviour on the Platform
• Cookie identifiers and session tokens (see Section 8 for cookie details)

2.5 Communications Data

• Records of customer support interactions, including live chat transcripts and email correspondence
• Feedback and complaints submitted to deluxe88

3. How We Collect Your Data

deluxe88 collects personal data through the following mechanisms:

• Account registration: Information you provide when creating your deluxe88 account, including name, email, mobile number, and date of birth.
• KYC verification: Identity documents submitted when completing Know Your Customer verification prior to your first withdrawal.
• Payment transactions: Data generated when you make deposits or request withdrawals through supported Malaysian payment methods.
• Platform use: Data automatically generated by your interaction with the Platform, including gameplay, login events, and navigation.
• Customer support: Information you provide when contacting deluxe88 via live chat or email.
• Cookies and tracking technologies: As described in Section 8 of this Policy.

deluxe88 does not collect personal data from third-party data brokers or social media platforms for account targeting purposes.

4. How We Use Your Personal Data

deluxe88 processes your personal data for the following specific purposes:

• Account management: Creating, maintaining, and securing your deluxe88 account; processing login authentication including two-factor verification.
• KYC and age verification: Confirming your identity and age (minimum 21 years) as required under our gaming licence obligations.
• Payment processing: Processing deposits and withdrawals in MYR to and from your registered Malaysian payment methods; detecting and preventing payment fraud.
• Game provision: Delivering casino, sports betting, lottery, and slot services; maintaining game session records; resolving game disputes.
• Responsible gaming: Administering self-imposed deposit limits, cooling-off periods, and self-exclusion; monitoring for indicators of problem gambling as required by our licence.
• Legal and regulatory compliance: Meeting anti-money laundering (AML) obligations; responding to lawful requests from regulatory and law enforcement authorities; maintaining records required under our gaming licence.
• Security and fraud prevention: Detecting multi-accounting, bonus abuse, collusion, and other prohibited conduct; protecting Platform infrastructure.
• Customer support: Responding to enquiries, complaints, and account issues.
• Promotions and communications: Notifying you of promotions applicable to your account — only if you have opted in to marketing communications during registration or subsequently via account settings.
• Platform improvement: Analysing aggregated, anonymised usage data to improve Platform performance, game selection, and user experience.

5. Legal Basis for Processing

deluxe88 processes your personal data on the following legal bases:

• Performance of a contract: Processing necessary to provide the deluxe88 gaming service to you — including account management, payment processing, and game provision — is carried out on the basis that it is necessary to perform our contract with you.
• Legal obligation: Processing for KYC verification, AML compliance, age verification, responsible gaming record-keeping, and responses to regulatory authorities is carried out to fulfil legal and licence obligations.
• Legitimate interests: Processing for fraud prevention, security monitoring, Platform improvement, and abuse detection is carried out on the basis of our legitimate interests, provided those interests are not overridden by your rights and interests.
• Consent: Marketing communications are sent only on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time by updating your account communication preferences.

6. Sharing Your Personal Data

deluxe88 does not sell your personal data to third parties. We share personal data only in the following limited circumstances and only to the extent necessary:

• Licensed game software providers: Game providers integrated into the deluxe88 lobby receive session data (such as player ID and stake amounts) necessary to operate the game. These providers operate under their own gaming licences and are contractually required to protect data.
• Payment processors: Malaysian e-wallet operators, FPX, and banking partners receive transaction data necessary to process your deposits and withdrawals. Payment data is handled in accordance with applicable financial services regulations.
• KYC and identity verification services: Where automated identity verification tools are used, identity document data is shared with licensed verification service providers.
• Regulatory and law enforcement authorities: deluxe88 will disclose personal data to gaming regulators, financial intelligence units, or law enforcement where required by applicable law, court order, or our licensing conditions.
• Fraud prevention services: Fraud indicators may be shared with industry-standard fraud prevention databases to protect the Platform and its players.

All third-party processors engaged by deluxe88 are subject to data processing agreements and are required to process personal data only for specified, authorised purposes.

7. Data Retention

deluxe88 retains personal data for as long as is necessary for the purposes for which it was collected, subject to applicable legal and regulatory minimum retention periods. The following general retention periods apply:

• Account and KYC data: Retained for a minimum of 5 years from the date of account closure, as required under AML and gaming licence obligations.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Gameplay records: Retained for a minimum of 3 years from the date of each game session.
• Customer support records: Retained for 2 years from the date of each interaction, unless relevant to an open dispute or regulatory inquiry.
• Marketing consent records: Retained for the duration of your consent and for 1 year after withdrawal of consent.

Where retention beyond the stated period is necessary for ongoing legal proceedings, regulatory investigations, or dispute resolution, data will be retained until the matter is fully resolved.

8. Cookies and Tracking Technologies

deluxe88 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function correctly, including maintaining your login session, storing your language preference, and enabling secure account access. These cannot be disabled without impairing Platform functionality.
• Analytics cookies: Used to collect aggregated data about how visitors use the Platform — including pages visited, session duration, and navigation paths — to improve Platform performance. This data is anonymised and does not identify individual users.
• Fraud prevention cookies: Used to detect suspicious behaviour patterns, including bot activity and multi-accounting attempts.

deluxe88 does not use third-party advertising cookies or behavioural targeting technologies on the Platform. You may manage cookie preferences through your browser settings; note that disabling essential cookies will affect your ability to log in and use the Platform.

9. Data Security

deluxe88 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Security measures in place include:

• SSL/TLS encryption for all data transmitted between your device and the Platform
• Encryption of stored sensitive data including identity documents and payment identifiers
• Two-factor authentication (2FA) via SMS OTP for account access
• Automated session timeout after periods of inactivity
• Access controls limiting personal data access to authorised personnel on a need-to-know basis
• Regular security auditing and penetration testing

While deluxe88 takes reasonable precautions, no internet transmission is 100% secure. In the event of a data breach that is likely to result in a risk to your rights, deluxe88 will notify affected individuals and relevant regulatory authorities in accordance with applicable obligations.

10. Your Rights

Subject to applicable data protection law and our legal and regulatory obligations, you have the following rights in relation to your personal data held by deluxe88:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where we no longer have a lawful basis to retain it. Note that legal and regulatory minimum retention obligations may preclude full erasure of certain data categories.
• Right to restriction: You may request that processing of your personal data be restricted in certain circumstances, for example while a rectification request is pending.
• Right to data portability: You may request that account and transaction data held by deluxe88 be provided to you in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications), you may withdraw consent at any time via your account settings. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to object: You may object to processing carried out on the basis of legitimate interests where you have grounds relating to your particular situation.

To exercise any of the above rights, contact deluxe88 at [email protected]. Requests will be acknowledged within 2 business days and responded to within 30 days. Identity verification may be required before a request is processed.

11. Children and Underage Players

The deluxe88 Platform is strictly intended for individuals aged 21 years and above. deluxe88 does not knowingly collect personal data from persons under the age of 21. Age verification is conducted at account registration and is mandatory before any withdrawal is processed. If deluxe88 becomes aware that an account has been registered by a person under the age of 21, that account will be immediately suspended, all balances held will be returned to the original funding source (less any bonus amounts), and the personal data associated with the account will be deleted to the extent permitted by law.

If you believe a minor has registered on the Platform, please notify us immediately at [email protected].

12. Third-Party Links

The deluxe88 Platform may contain references to third-party services, including licensed game software providers whose game titles are accessible through the Platform lobby. deluxe88 is not responsible for the privacy practices of third-party software providers or their platforms. Where you access a third-party game interface, that interface may be subject to the game provider's own privacy policy. We recommend reviewing the privacy documentation of any third-party service you use.

13. Updates to This Privacy Policy

deluxe88 may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or Platform features. When material changes are made, the updated Policy will be published on this page with a revised effective date. Registered players will be notified of material changes via the email address on their account. Your continued use of the Platform after the effective date of any update constitutes your acknowledgement of the revised Privacy Policy. If you do not agree with any updated provision, you should cease using the Platform and may request account closure through the support team.

14. How to Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by deluxe88, please contact us through the following channels:

• Live Chat: Available 24/7 on the Platform, staffed by English-speaking agents
• Email: [email protected] — please mark your subject line "Data Privacy Request" for prioritised handling

deluxe88 aims to acknowledge all written data privacy requests within 2 business days and to provide a substantive response within 30 days. For complex requests, we will notify you within the initial 30-day period if an extension is required.