Privacy Policy – free888

1. About This Policy

1.1 This Privacy Policy applies to all personal data collected, processed, and stored by free888 in connection with the operation of the free888 online casino and sportsbook platform accessible at free888.co (the "Platform").

1.2 This Policy should be read alongside the free888 Terms & Conditions, which govern the overall use of the Platform. By registering a free888 account, you consent to the collection and use of your personal data as described in this Policy.

1.3 free888 acts as the data controller for personal data collected directly through the Platform. Where free888 engages third-party service providers who process data on its behalf, those providers act as data processors and are bound by contractual data protection obligations.

1.4 This Policy was last updated on 1 June 2026. free888 will notify Members of any material changes to this Policy via the registered email address or via a prominent notice on the Platform prior to the changes taking effect.

2. Personal Data We Collect

free888 collects the following categories of personal data from Members and prospective Members:

3. How We Collect Your Data

3.1 Directly From You

free888 collects personal data directly from you when you:

• Register a free888 account by completing the online registration form.
• Complete the KYC identity and payment verification process.
• Make a deposit or initiate a withdrawal via a Malaysian payment method.
• Contact the free888 customer support team via live chat or email.
• Submit a complaint, feedback, or responsible gaming self-assessment.
• Update your account profile or notification preferences.

3.2 Automatically Through Platform Use

Technical and gaming activity data is collected automatically as you navigate and use the free888 Platform. This includes your IP address, device identifiers, session activity logs, and cookie data. See Section 7 for detailed information about our cookie practices.

3.3 From Third Parties

free888 may receive supplementary identity or fraud-screening data from third-party KYC verification providers and payment processors as part of the account verification and transaction monitoring processes required under applicable international gaming authority standards.

4. How We Use Your Personal Data

free888 uses the personal data it collects for the following purposes:

• Account Management: To create, administer, and maintain your free888 membership account, including processing your login, managing your MYR wallet balance, and recording your gaming history.
• Identity Verification (KYC): To verify your identity and age (21+ requirement) in compliance with applicable international gaming authority regulations and anti-money laundering obligations.
• Payment Processing: To process deposits and withdrawals in MYR via Touch n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, and Public Bank, and to maintain an accurate transaction record.
• Platform Security: To detect, prevent, and investigate fraud, money laundering, multi-accounting, bonus abuse, and other prohibited activities as defined in the free888 Terms & Conditions.
• Responsible Gaming: To monitor gaming activity for patterns indicative of problem gambling, administer self-exclusion requests, deposit limits, and session reminders, and to fulfil our duty of care obligations.
• Customer Support: To respond to your support enquiries, live chat sessions, and formal complaints effectively and within our stated response times.
• Service Improvement: To analyse aggregated, anonymised usage data to improve the free888 Platform's performance, game catalogue, user interface, and mobile optimisation.
• Marketing Communications: To send you personalised promotional offers and free888 platform news via your registered email or SMS, where you have opted in to receive such communications. You may opt out at any time.
• Legal Compliance: To comply with applicable legal, regulatory, and licensing obligations, including reporting requirements under anti-money laundering frameworks.

5. Legal Basis for Processing

free888 processes personal data on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform the contract between free888 and the Member, including account operation, payment processing, and game provision.
• Legal Obligation: Processing is required to comply with applicable law, including KYC identity verification, AML transaction monitoring, age verification, and regulatory reporting obligations imposed by applicable international gaming authority frameworks.
• Legitimate Interests: Processing is necessary for free888's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided such interests do not override the Member's fundamental privacy rights.
• Consent: Where free888 sends direct marketing communications, processes non-essential cookies, or engages in any processing activity that requires prior consent, free888 will obtain your explicit consent beforehand. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

6.1 free888 Does Not Sell Your Data

free888 does not sell, rent, lease, or trade your personal data to third-party marketers, data brokers, or advertising networks under any circumstances whatsoever.

6.2 Authorised Service Providers

free888 shares personal data only with carefully selected third-party service providers who process data on free888's behalf under binding contractual data protection agreements. These include:

• KYC and identity verification providers
• Payment processors and e-wallet platforms (including Touch n Go, DuitNow, FPX operators)
• Cloud infrastructure and data hosting providers operating secure, access-controlled environments
• Fraud detection and AML screening services
• Game studios providing certified RNG gaming content (anonymised gameplay data only)

6.3 Legal Disclosure

free888 may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or the direction of a relevant gaming authority. free888 will notify affected Members of such disclosures to the extent legally permissible.

7. Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device when you visit the free888 Platform. free888 uses cookies exclusively for the legitimate operational purposes described below. No third-party advertising or tracking cookies are deployed on the free888 Platform.

7.2 Types of Cookies Used

• Strictly Necessary Cookies: Essential for Platform operation — login session management, security token storage, and CSRF protection. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your language preferences, responsible gaming settings, and account interface customisations across sessions.
• Analytics Cookies: Collect anonymised, aggregated data about how Members navigate the free888 Platform to identify performance issues and improve the user experience. No personally identifiable information is included in analytics reports.

7.3 Cookie Control

You may configure your browser settings to block or delete cookies. Please note that blocking strictly necessary cookies will prevent you from logging in to your free888 account. For information on managing cookies in your browser, consult your browser's help documentation.

8. Data Retention

free888 retains personal data for the minimum period necessary to fulfil the purposes set out in this Policy, subject to longer retention periods required by law. In general:

• Active Account Data: Retained throughout the period of active membership.
• KYC & Identity Documents: Retained for a minimum of five (5) years following account closure, consistent with applicable AML regulatory requirements.
• Transaction Records: Retained for a minimum of five (5) years following the transaction date.
• Support Communications: Retained for two (2) years following resolution of the relevant enquiry or complaint.
• Gaming Activity Logs: Retained for five (5) years, or longer where required by applicable gaming authority regulations.

Upon expiry of the applicable retention period, free888 will securely delete or irreversibly anonymise your personal data.

9. Your Data Protection Rights

As a Member of free888, you have the following rights with respect to your personal data:

• Right of Access: You may request a copy of the personal data free888 holds about you at any time.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held by free888.
• Right to Erasure: You may request deletion of your personal data, subject to free888's legal obligations to retain certain data under applicable AML and gaming authority regulations.
• Right to Restrict Processing: You may request that free888 temporarily restrict processing of your personal data in certain circumstances.
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format for transfer to another service provider where technically feasible.
• Right to Object: You may object to processing based on legitimate interests or to direct marketing at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact free888 via live support chat or by email to [email protected]. free888 will respond to all data rights requests within 30 days.

10. Data Security

10.1 free888 implements technical and organisational security measures appropriate to the risk presented by the personal data we process. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and the free888 Platform.
• Encryption of sensitive data at rest on free888's secure servers.
• Role-based access controls limiting employee access to personal data to those with a legitimate operational need.
• Regular security audits and penetration testing of the free888 Platform infrastructure.
• Two-factor authentication available to all Members for additional account security.
• Automatic session timeout for inactive logged-in sessions.

10.2 In the event of a personal data breach that is likely to result in a risk to Member rights and freedoms, free888 will notify affected Members and relevant regulatory authorities in accordance with applicable legal timeframes.

11. Children's Privacy

The free888 Platform is strictly intended for adults aged 21 and above. free888 does not knowingly collect personal data from individuals under the age of 21. The free888 registration process includes age verification procedures to prevent underage access. If free888 becomes aware that personal data has been collected from a person under 21, it will immediately delete that data and close the associated account. If you believe a person under 21 has registered a free888 account, please notify us immediately via live support chat.

12. International Data Transfers

12.1 As an internationally operated gaming platform, free888 may transfer personal data to service providers and infrastructure partners located outside Malaysia. Where such transfers occur, free888 ensures that appropriate safeguards are in place to protect your personal data to an equivalent standard, including contractual clauses imposing data protection obligations on the recipient.

12.2 free888 will not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate safeguards as required by applicable law.

13. Amendments to This Policy

free888 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform functionality. Material changes will be communicated to Members via email to the registered address or via a prominent in-platform notice at least seven (7) days prior to the changes taking effect. The "Last updated" date at the top of this Policy will be revised accordingly. Your continued use of the free888 Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

14. Contact & Data Protection Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by free888, please contact us through the following channels:

• Live Chat: Available 24/7 via the free888 Platform — our Malaysia-based support team is the fastest route for urgent privacy matters.
• Email: [email protected]

free888 will acknowledge all privacy enquiries within 48 hours and provide a substantive response within 30 days. For complex data rights requests, free888 may request proof of identity before processing the request to protect against unauthorised access to another Member's data.