FC888 Privacy Policy – Data Protection & Player Privacy for Malaysia's Online Casino

Data Controller Information

The data controller responsible for processing your personal data in connection with your use of the platform fc888-jit.com is FC888 ("FC888", "we", "platform"). We are the primary data controller that determines the purposes and means of processing your personal data.

FC888's Data Protection Officer can be reached via the official email address at support@fc888-jit.com. Any queries, concerns, or requests relating to your privacy and personal data protection can be directed to them for prompt action.

FC888 operates in accordance with applicable Malaysian laws and regulations, including the Personal Data Protection Act 2010 (PDPA) and all its subsidiary regulations in force from time to time. As an entity operating in Malaysia and serving players from across the country — from Perlis to Sabah and Sarawak — we fully recognise our responsibility to protect every player's privacy without exception.

Personal Data We Collect

FC888 collects various categories of personal data in the context of providing our online casino services. Below is a summary of the types of data we collect and their sources:

FC888 collects data through three main channels: (1) information you provide directly during registration or use of the platform; (2) data generated automatically through your platform activity; and (3) information from third-party payment service providers such as Touch 'n Go eWallet, GrabPay, DuitNow, or FPX during transaction processing.

FC888 adheres to the principle of data minimisation — we only collect data that is genuinely necessary for the stated purposes and do not gather sensitive information unrelated to the provision of our services.

How FC888 Uses Your Personal Data

FC888 uses collected personal data for the following legitimate and necessary purposes:

• Account Management: Creating and managing your FC888 account, verifying your identity, processing logins, and managing account security settings.
• Transaction processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX (Maybank2u, CIMB Clicks), Boost, and ShopeePay, as well as processing your winnings withdrawals to your preferred bank account or digital wallet.
• Provision of gaming services: Ensuring all games — slots, live casino, baccarat, roulette, Sports Betting for the Malaysia Super League and EPL, lottery and jackpot — run correctly and fairly for your account.
• Bonus and promotion management: Processing bonus claims, verifying promotional eligibility, calculating wagering requirements, and crediting applicable rewards to your account.
• Security and fraud prevention: Detecting and preventing fraud, money laundering, collusion, and any platform abuse. This includes monitoring suspicious transaction patterns.
• Customer Support: Responding to your enquiries and complaints, resolving disputes, and providing technical support in Bahasa Melayu 24/7.
• Legal compliance: Fulfilling legal compliance obligations including AML (Anti-Money Laundering), KYC (Know Your Customer) requirements, and reporting to authorities as required under Malaysian law.
• Responsible gambling: Monitoring gameplay patterns to identify players who may need responsible gambling support and to enforce limits set by the player.
• Platform improvements: Analysing usage data (in anonymised, aggregated form) to understand how players use the platform and make relevant improvements.
• Marketing communications (with consent): Sending notifications about promotions, new bonuses and exclusive FC888 offers to players who have consented to receive such communications. You may unsubscribe at any time.

Legal Basis for Data Processing

Every instance of personal data processing by FC888 is grounded in at least one valid legal basis under Malaysia's PDPA. These bases are as follows:

• Contract performance: Processing necessary to fulfil the service contract between you and FC888 — including account management, transaction processing and the provision of games.
• Legal obligation: Processing required for FC888 to meet its legal obligations in Malaysia, including AML and KYC requirements and reporting to the relevant authorities.
• Legitimate interests: Processing for the purposes of platform security, fraud prevention, service improvement, and business risk management — where those interests do not override your privacy rights.
• Consent: For direct marketing and the delivery of promotional communications, FC888 relies on the explicit consent you provided during registration or at a later stage. You may withdraw this consent at any time without affecting the validity of any processing carried out prior to withdrawal.

Third-Party Data Sharing & Disclosure

FC888 does not sell, rent or commercialise players' personal data to third parties for their marketing or business purposes. However, in certain limited and legitimate circumstances, FC888 may share your data with the following parties:

• Payment service providers: Required transaction information is shared with payment providers such as Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost, and ShopeePay solely for the purpose of processing your deposits and withdrawals. These providers are bound by strict confidentiality agreements.
• Game providers: Minimum technical game data required is shared with game software providers (such as Pragmatic Play, Evolution Gaming, PG Soft) to ensure games function correctly. Full identity data is not shared.
• Legal authorities: FC888 will disclose data when required to do so by applicable Malaysian law, a valid court order or a lawful request from a law enforcement agency. Any such disclosure is limited strictly to the data required.
• IT & security service providers: Technical contractors who assist FC888 in operating the platform's infrastructure, cybersecurity, and system auditing are permitted to access data within the scope of their work only, and are bound by comprehensive confidentiality agreements.

In all data-sharing arrangements, FC888 ensures that recipients adhere to data protection standards equal to or higher than our own, and that data is used solely for the permitted purposes.

FC888 Data Security Measures

FC888 implements a range of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These key measures include:

• 256-bit SSL Encryption: All data transmitted between your device and FC888's servers is encrypted using 256-bit TLS/SSL protocols, ensuring no third party can read your data in transit.
• Data encryption at rest: Sensitive data stored in FC888's database — including passwords and financial information — is encrypted using strong encryption algorithms. Your password is never stored in plain text.
• Role-based access controls: Only FC888 staff with a legitimate business need who have undergone thorough background checks may access player data. All access is logged and continuously monitored.
• Two-factor authentication (2FA): FC888 supports two-factor authentication for player accounts, adding an extra layer of security beyond the password.
• Regular security audits: The FC888 platform undergoes regular penetration testing and security audits conducted by independent third parties to identify and address any security vulnerabilities.
• Real-time threat monitoring: FC888's cybersecurity monitoring system operates 24/7 to detect and respond to any suspicious activity or unauthorised access attempts.

While FC888 implements comprehensive security measures, no system can guarantee absolute 100% security. Players are also responsible for protecting their account passwords and using secure devices to access the FC888 platform.

Data Retention Period

FC888 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Malaysian law. The following are the general data retention guidelines we follow:

Once the retention period expires, data will be securely deleted or anonymised in accordance with approved data deletion procedures. Anonymised data may be retained for longer periods for aggregate statistical analysis purposes that do not identify individual users.

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection best practices, you have the following rights regarding your personal data held by FC888:

• Right to Access: You have the right to obtain a copy of the personal data we hold about you. Data access requests will be processed within 14 business days at no charge.
• Right to Rectification: If you believe any data we hold about you is inaccurate or incomplete, you have the right to request a correction. All corrections will be carried out within 7 business days.
• Right to Erasure: Under certain circumstances, you have the right to request that we delete your personal data. Please note that this right may be limited by legal obligations requiring us to retain data for a specified period.
• Right to Data Portability: You have the right to receive the personal data you have provided to us in a machine-readable format, and to transfer that data to another data controller.
• Right to Object: You have the right to object to the processing of your data for direct marketing purposes at any time. Upon receiving your objection, FC888 will cease processing your data for that purpose immediately.
• Right to Withdraw Consent: Where data processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing that took place prior to withdrawal.

To exercise any of the rights above, please contact the FC888 support team via email at support@fc888-jit.com by stating the right you wish to exercise along with sufficient identity verification details. FC888 may require identity verification before processing any data-related request in order to protect the security of your account.

Cookies, Tracking & Your Privacy Choices

FC888 uses cookies and similar tracking technologies to enhance the user experience, maintain platform security and analyse usage patterns. Below are the types of cookies we use and how you can manage them:

• Essential Cookies: Required for the FC888 platform to function properly – including login session cookies, security cookies, and language preference cookies. Cannot be disabled without affecting core platform functionality.
• Performance & Analytics Cookies: Collecting information on how you use the platform (pages visited, time spent, errors encountered) to help us make improvements. Data is collected in aggregate form without identifying individual users.
• Functional Cookies: Remembering your preferences and settings — such as interface language, frequently used bet limits, and favourite tables — to deliver a more personalised experience.
• Security Cookies: Used to detect suspicious activity, prevent fraud, and protect your account from unauthorised access.

Manage your cookie preferences below:

Your cookie preferences are saved on your device. Clearing your browser data will reset these preferences to default.

Data Transfers Outside Malaysia

In the course of operating the FC888 platform, which involves international technical service providers and gaming software vendors, your personal data may be transferred to and processed outside Malaysia in certain limited circumstances.

FC888 ensures that all cross-border data transfers comply with Malaysia's PDPA requirements and only take place when:

• The recipient country has data protection laws equivalent to or stricter than Malaysia;
• The data recipient is bound by a data transfer agreement that ensures an adequate level of protection; or
• You have given explicit consent for such a transfer.

FC888 does not transfer player data to entities in countries without an adequate level of data protection unless appropriate additional safeguards are in place.

Children's Privacy & Minor Protection

FC888 does not collect personal data from individuals under the age of 18. Our platform is intended for adults only and we do not permit any person under the age of 18 to register for or use our services in any capacity.

Should FC888 discover that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that data and close the associated account. Parents or guardians who become aware that their child has registered on FC888 are requested to contact us immediately at support@fc888-jit.com.

Privacy Policy Amendments

FC888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legislation, or developments in the data protection industry. When material changes are made:

• A notice will be sent to all registered members via email and/or in-platform notification.
• The "Updated" date at the top of this document will be revised accordingly.
• For significant changes, we will provide at least 14 days' notice before the changes take effect.

Continued use of the FC888 platform after the effective date of any amendment will be considered acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account and request deletion of your data.

Contact Us – Privacy & Data Protection Enquiries

If you have any questions, concerns or requests regarding this Privacy Policy or how FC888 handles your personal data, please reach out to us through the following channels:

You may also refer to the related documents: Terms & Conditions · Responsible Gambling · FAQ

If you are not satisfied with how FC888 has handled your privacy complaint after our internal process is complete, you have the right to refer the matter to the Personal Data Protection Commissioner of Malaysia (PDPD Commissioner) for an independent review.