🔒 Data & Privacy

Privacy Policy

At 88big, we treat your personal data with the same care we bring to every aspect of the platform. This Policy explains clearly what we collect, why we collect it, how it is used, and the rights you hold over your information.

Last updated: 1 January 2026  |  Effective upon account registration or continued platform use
Privacy at a Glance

How 88big Protects Your Data

These six points summarise our core data protection commitments. Full legal detail for each area is set out in the numbered clauses below.

Minimal Data Collection

We collect only the personal data that is strictly necessary to operate your account, process payments, verify identity, and comply with our licensing obligations. We do not collect data for its own sake.

Encryption & Security

All data transmitted between your device and the 88big platform is protected by 256-bit SSL/TLS encryption. Sensitive data at rest is stored using industry-standard encryption protocols and access-controlled systems.

No Sale of Personal Data

88big does not sell, rent, or trade your personal information to third parties for marketing or any other commercial purpose. Your data belongs to you — we are custodians, not merchants.

Defined Retention Periods

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Account data is deleted or anonymised within 12 months of confirmed account closure.

Your Rights, Respected

You may request access to, correction of, or deletion of your personal data at any time. You may also restrict or object to certain types of processing. We respond to all verified data requests within 30 days.

Controlled Third-Party Sharing

We share data with third parties — such as payment processors, game providers, and fraud-prevention services — only to the extent necessary and under strict contractual data protection obligations.

01 Introduction

This Privacy Policy ("Policy") describes how 88big ("88big", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at 88big.casa (the "Platform"), collects, uses, stores, and discloses personal data relating to registered users and visitors ("you", "User", "Player").

We are committed to handling personal data responsibly and in a manner that respects your privacy. This Policy has been drafted to meet internationally recognised privacy standards and reflects the data protection principles applied by our licensing authority. Where Malaysian players are concerned, we additionally acknowledge the principles of the Personal Data Protection Act 2010 (PDPA) as a baseline reference, though our primary regulatory obligations are governed by our international gaming licence.

By registering an account on the Platform or by continuing to use the Platform, you confirm that you have read and understood this Policy. If you do not agree with the practices described in this Policy, you should discontinue use of the Platform and request account closure.

Related documents: This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference.

02 Definitions

For the purposes of this Policy, the following terms have the meanings assigned below:

  • "Personal Data" Any information that identifies or could reasonably be used to identify a natural person, directly or indirectly — including name, identification number, contact details, financial information, and device identifiers.
  • "Processing" Any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
  • "Data Controller" The entity that determines the purposes and means of processing personal data. For the purposes of this Policy, 88big acts as the Data Controller in respect of all User personal data processed on the Platform.
  • "Data Processor" A third party that processes personal data on behalf of 88big pursuant to a written agreement and under 88big's instructions — for example, a payment gateway provider or fraud-prevention service.
  • "Consent" A freely given, specific, informed, and unambiguous indication of a User's agreement to the processing of their personal data for a stated purpose, evidenced by a positive action such as ticking a consent box.
  • "KYC Data" Identity and age verification documentation submitted by a User, including government-issued identification, proof of address, and payment method ownership evidence.
  • "Platform" The 88big online casino and sports betting website accessible at 88big.casa and all associated sub-domains, mobile-optimised pages, and ancillary services.

03 Data We Collect

88big collects the following categories of personal data in connection with the operation of the Platform:

Category Examples When Collected
Identity Data Full legal name, date of birth, nationality, government ID number Registration & KYC verification
Contact Data Email address, phone number, city of residence Registration
Financial Data Bank account name, last four digits of account/card, e-wallet ID, transaction history Deposits, withdrawals, KYC
Gameplay Data Bet history, game sessions, wagering amounts, sports markets accessed Platform use
Technical Data IP address, device type, browser, operating system, session timestamps Automatic — all visits
Communication Data Live chat transcripts, email correspondence, support tickets Support interactions
Marketing Preferences Promotion opt-in/opt-out status, preferred contact channel Registration & account settings

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data, except where expressly required by our licensing authority's compliance framework (e.g., nationality for sanctions screening).

04 How We Collect Data

88big collects personal data through the following means:

  • Directly from you: When you register an account, complete KYC verification, make deposits or withdrawals, contact our support team, or update your account profile;
  • Automatically: Through cookies, web beacons, server logs, and similar tracking technologies as you interact with the Platform — including pages visited, session duration, and device information;
  • From third parties: From payment processors (such as DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong Connect) when you initiate financial transactions; from fraud-detection and identity-verification services; and from our licensed game providers where usage data is shared for responsible gaming monitoring purposes.
Malaysian payment providers: When you make a deposit or withdrawal via Malaysian payment systems (DuitNow, FPX, or e-wallets), your financial institution or e-wallet provider may transmit limited transaction data to 88big as part of the payment processing flow. This data is handled in accordance with this Policy.

05 Purposes of Processing

88big processes your personal data for the following purposes:

  1. Account management: Creating, maintaining, and administering your account on the Platform;
  2. Identity and age verification: Confirming that you meet the minimum age requirement of 21 years and verifying your identity as required by our licensing obligations;
  3. Payment processing: Facilitating deposits and withdrawals via your chosen Malaysian payment method and maintaining accurate transaction records;
  4. Game service delivery: Providing access to casino games, sports betting markets, live dealer rooms, and other Platform features;
  5. Fraud prevention and AML compliance: Detecting, investigating, and preventing fraudulent activity, money laundering, and other prohibited conduct;
  6. Responsible gambling: Monitoring gameplay patterns to identify potential problem gambling behaviour and applying self-imposed limits requested by you;
  7. Customer support: Responding to your queries, complaints, and disputes through our live chat and email channels;
  8. Marketing communications: Sending you promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications;
  9. Legal and regulatory compliance: Meeting our obligations under applicable laws and our international gaming licence terms, including record-keeping requirements;
  10. Platform improvement: Analysing aggregated usage data to improve the design, functionality, and performance of the Platform.

06 Legal Bases for Processing

88big relies on the following legal bases when processing your personal data:

  • Contractual necessity: Processing required to fulfil the agreement between you and 88big as set out in our Terms & Conditions — including account creation, payment processing, and game service delivery;
  • Legal obligation: Processing required to comply with applicable legal and regulatory requirements — including KYC, anti-money-laundering (AML) checks, and record-retention obligations under our gaming licence;
  • Legitimate interests: Processing undertaken to pursue 88big's legitimate business interests — including fraud prevention, security monitoring, and Platform analytics — where such interests are not overridden by your privacy rights;
  • Consent: Processing based on your explicit consent — specifically, marketing communications. You may withdraw consent for marketing communications at any time without affecting the lawfulness of prior processing.

07 Sharing Your Data

88big does not sell, rent, or otherwise commercially exploit your personal data. We may share personal data with the following categories of third parties strictly to the extent necessary for the stated purpose:

  • Payment service providers: Malaysian banking partners and e-wallet operators (including those operating DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong Connect) for the purpose of processing deposits and withdrawals;
  • Game content providers: Licensed casino software and live dealer studios from whom we licence game content, where usage data must be shared for game operation and RNG audit purposes;
  • KYC and fraud-prevention services: Specialist identity verification and anti-fraud vendors engaged under data processing agreements to support our compliance obligations;
  • Customer support platforms: Third-party live chat and helpdesk software providers who process support interaction data as Data Processors under our instructions;
  • Regulatory authorities: Gaming regulators, law enforcement agencies, or other governmental bodies where disclosure is required by law or court order;
  • Professional advisors: Legal counsel, auditors, and compliance consultants who are bound by professional confidentiality obligations.

All third-party Data Processors engaged by 88big are contractually required to process your data only in accordance with our instructions and to maintain appropriate technical and organisational security measures.

We will never: Sell your personal data to advertising networks, data brokers, or any third party for commercial marketing purposes. If you receive unsolicited communications from third parties claiming to represent 88big, treat these as fraudulent and report them to our support team immediately.

08 International Transfers

As 88big operates under an international gaming licence, some of your personal data may be transferred to, stored in, or processed in jurisdictions outside of Malaysia. Where such transfers occur, we take steps to ensure that your data is afforded a level of protection equivalent to that applied within Malaysia and under our licensing framework, including by:

  • Entering into contractual data transfer agreements with third-party recipients that incorporate appropriate data protection clauses;
  • Ensuring that recipient jurisdictions or organisations maintain security standards commensurate with those applied by 88big; and
  • Limiting cross-border data transfers to what is strictly necessary for the stated processing purpose.

By using the Platform, you acknowledge and consent to the transfer of your personal data in the manner described in this clause.

09 Data Retention

88big retains personal data for the periods set out below, after which data is either securely deleted or anonymised such that it can no longer be linked to you as an individual:

Data Category Retention Period Basis
Account & Identity Data Duration of account plus 5 years after closure AML / Licensing obligation
Financial Transaction Records 7 years from transaction date AML / Legal obligation
Gameplay & Betting History Duration of account plus 3 years Responsible gambling monitoring
KYC Documents Duration of account plus 5 years AML / Licensing obligation
Support Correspondence 3 years from last interaction Dispute resolution
Marketing Preferences Until consent is withdrawn or account closed Consent
Technical & Device Logs 13 months on a rolling basis Fraud prevention / Security

Where you request deletion of your personal data and no overriding legal retention obligation applies, 88big will process the deletion request within 30 days of identity verification.

10 Cookies & Tracking Technologies

88big uses cookies and similar tracking technologies to improve Platform functionality, analyse usage patterns, and support security measures. The following types of cookies may be set when you visit the Platform:

  • Strictly necessary cookies: Essential for the Platform to function correctly — including session authentication, load balancing, and fraud-prevention identifiers. These cannot be disabled without impairing Platform functionality;
  • Functional cookies: Remember your preferences and settings (such as language and display options) to personalise your experience across sessions;
  • Analytical cookies: Collect anonymised or aggregated data about how Players interact with the Platform, enabling us to identify and address usability issues;
  • Security cookies: Detect and prevent suspicious behaviour, including repeated failed login attempts and potential account takeover activity.

88big does not use third-party advertising or behavioural targeting cookies. We do not share cookie-derived data with advertising networks or data brokers.

You may manage cookie settings through your browser preferences. Please note that disabling strictly necessary cookies may prevent you from accessing parts of the Platform. Our Platform does not currently respond to browser "Do Not Track" signals.

11 Your Rights

Subject to applicable law and our legal retention obligations, you have the following rights in respect of your personal data held by 88big. To exercise any of these rights, please contact our support team at the details provided in Clause 16.

Right of Access

Request a copy of all personal data we hold about you and information about how it is being processed.

Right to Rectification

Request correction of inaccurate or incomplete personal data held in your account records.

Right to Erasure

Request deletion of personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.

Right to Restriction

Request that we restrict processing of your data while a rectification or objection request is being considered.

Right to Portability

Receive a copy of the personal data you provided to us in a structured, commonly used, machine-readable format.

Right to Object

Object to processing based on our legitimate interests, or to withdraw consent for marketing communications at any time.

We will acknowledge all verified data rights requests within 5 business days and provide a substantive response within 30 calendar days. Complex requests may require up to 60 days, in which case we will notify you of the extended timeline.

We may need to verify your identity before processing a data rights request to ensure that personal data is not disclosed to unauthorised parties. Requests submitted without adequate identity verification may be declined.

12 Children & Minors

The 88big Platform is strictly intended for individuals aged 21 and above. We do not knowingly collect personal data from any person under the age of 21. Registration requires age verification, and accounts found to belong to persons below the minimum age are closed immediately upon discovery.

If you believe that a minor has registered an account on the Platform, please contact our support team immediately. Any personal data relating to a minor that was collected inadvertently will be deleted as promptly as possible following verification of the situation.

21+ Only. This Platform is not directed at and should not be accessed by persons under the age of 21. Parental controls and software to restrict access to online gambling platforms are available from various providers and are recommended for households with individuals under the minimum age.

13 Security Measures

88big implements a layered set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

  • Encryption in transit: 256-bit SSL/TLS encryption for all data transmitted between your browser or device and the Platform;
  • Encryption at rest: Sensitive data fields — including identity documents, financial data, and KYC records — are encrypted in our database systems;
  • Access controls: Personal data is accessible only to authorised personnel who require it to perform their job functions, governed by role-based access controls and multi-factor authentication;
  • Intrusion detection: Real-time monitoring systems detect and alert on suspicious access patterns, brute-force attempts, and anomalous activity;
  • Penetration testing: We engage independent security specialists to conduct periodic assessments of our Platform infrastructure;
  • Data breach response: A documented incident response protocol is in place to contain, investigate, and notify affected parties in the event of a confirmed personal data breach, within timeframes required by our licensing authority.

While we maintain robust security measures, no online system is entirely immune to risk. You also have an important role in protecting your account — do not share login credentials, use a strong unique password, and enable two-factor authentication where offered.

14 Third-Party Links & Services

The 88big Platform may contain references to or integrations with third-party services — primarily payment gateways and licensed game content providers. When you interact with these third-party services (for example, by completing a DuitNow or Touch 'n Go eWallet payment transaction), the third party's own privacy policy governs the collection and processing of any data they receive during that interaction.

88big is not responsible for the privacy practices of third-party services and does not control the data collection or use practices of those services beyond what is governed by our Data Processor agreements. We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of the Platform.

15 Amendments to This Policy

88big reserves the right to revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our licensing obligations. When material changes are made, we will notify registered Players by email or through a prominent in-platform notification at least 14 days before the revised Policy takes effect.

Continued use of the Platform following the effective date of any revised Policy constitutes your acknowledgement of and agreement to the updated terms. Where changes require your fresh consent (for example, a new marketing programme), we will obtain that consent separately before processing.

The current version of this Policy is always available at 88big.casa/privacy-policy. The "Last Updated" date at the top of this page reflects the most recent revision date.

16 Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our Data & Privacy team through the following channels:

  • Live Chat: Available 24/7 on the Platform at 88big.casa — the fastest route for urgent privacy queries;
  • Email: [email protected] — for formal data rights requests, please include "Privacy Request" in the subject line along with your registered account email address (this address is plain text only; copy and paste into your email client).

When submitting a data rights request by email, please include your full registered name, account username, and a brief description of the right you wish to exercise and the data categories concerned. We will request identity verification before processing any request that involves disclosure or deletion of personal data.

For responsible gambling support, self-exclusion requests, or deposit limit queries, please visit our dedicated Responsible Gambling page where you will find specific guidance and contact options for those matters.
Your Data, Protected

Play with Confidence on 88big

Now that you understand how 88big handles your personal data, explore Malaysia's most player-centric online casino and sports betting platform with full peace of mind.

For players aged 21 and above only.  |  Responsible Gambling  |  FAQ