smb888 Privacy Policy

1. Introduction

Welcome to smb888. This Privacy Policy ("Policy") governs the collection, use, disclosure, and protection of personal data by smb888 ("smb888", "we", "us", or "our") in connection with the online gaming platform accessible at smb888.lat ("Platform"). This Policy applies to all registered members, visitors, and persons who interact with smb888 services, including our sportsbook, live casino, slots, lottery, and any other gaming product available on the Platform.

smb888 is committed to handling personal data responsibly and in alignment with internationally recognised data protection principles. Malaysian members are encouraged to read this Policy carefully alongside our Terms & Conditions before using the Platform.

We recognise that online privacy is a genuine concern, particularly in the context of financial transactions and identity verification that are inherent to regulated gaming platforms. Rest assured that smb888 treats every piece of data entrusted to us with the highest standard of care.

2. Data We Collect

smb888 collects personal data in a variety of ways — directly from you when you register or interact with us, automatically through your use of the Platform, and, in limited circumstances, from third parties to fulfil our legal and operational obligations.

2.1 Information You Provide Directly

• Registration data: full name, date of birth, gender, nationality, email address, and phone number.
• Identity verification: copies of government-issued ID (MyKad, passport), selfie for Know-Your-Customer (KYC) checks.
• Payment information: bank account details for deposits and withdrawals (Maybank, CIMB, Public Bank), e-wallet identifiers (Touch n Go eWallet, Boost), or cryptocurrency wallet addresses (BTC, USDT, ETH).
• Communications: messages sent to our support team via live chat, email, or any feedback forms on the Platform.
• Responsible gaming settings: deposit limits, self-exclusion requests, and cooling-off period elections submitted through your account dashboard.

2.2 Information Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device identifiers, screen resolution, and time zone settings.
• Usage and behavioural data: pages visited, games played, session duration, betting patterns, wagering history, deposit and withdrawal timestamps, and navigation paths within the Platform.
• Location data: approximate geolocation derived from your IP address, used solely for fraud prevention and jurisdictional compliance purposes.
• Cookies and similar technologies: session tokens, preference cookies, and analytics identifiers as described in Section 6 below.

2.3 Information Received from Third Parties

• Identity verification providers: results of KYC and AML screening from third-party compliance services to satisfy our regulatory obligations.
• Payment processors: transaction status and confirmation data from banks and e-wallet operators to reconcile deposits and withdrawals.
• Fraud prevention services: risk scores and device fingerprint signals from our fraud detection partners.

3. How We Use Your Data

smb888 processes your personal data only for legitimate, clearly defined purposes. We will never use your data in a manner that is incompatible with the reason it was originally collected. The principal purposes for which we use your data are set out below.

• Account creation and management: to register your membership, maintain your account profile, and authenticate your identity when you log in to smb888.
• Transaction processing: to process deposits, withdrawals, bonuses, and any other financial transactions you initiate on the Platform, including via Maybank, CIMB, Public Bank, Touch n Go eWallet, Boost, and supported cryptocurrency networks.
• Legal and regulatory compliance: to fulfil our obligations under applicable anti-money laundering (AML), counter-terrorism financing (CTF), and Know-Your-Customer (KYC) requirements under international gaming licensing conditions.
• Fraud prevention and security: to detect, investigate, and prevent fraudulent activity, unauthorised access, collusion, bonus abuse, and any other conduct that violates our Terms & Conditions.
• Customer support: to respond to your enquiries, resolve disputes, process complaints, and provide technical assistance through our 24/7 live chat and email support channels.
• Service personalisation: to customise your gaming experience on smb888, including presenting relevant promotions, recommending games, and applying your saved account preferences.
• Responsible gaming: to monitor betting behaviour and identify indicators of problem gambling, enforce deposit limits and self-exclusion requests, and direct members to our Responsible Gaming resources where appropriate.
• Marketing communications: to send you promotional offers, bonus notifications, and platform updates where you have given your consent or where we have a legitimate interest in doing so, subject to your right to opt out at any time.
• Analytics and improvement: to analyse Platform usage trends, measure the performance of our games and services, and make data-driven improvements to the smb888 experience.

4. Legal Basis for Processing

smb888 processes personal data under the following recognised legal bases:

• Contractual necessity: processing is required to fulfil our contractual obligations to you as a registered smb888 member, including account operation and transaction processing.
• Legal obligation: processing is required to comply with applicable laws, including AML, CTF, and KYC regulations that govern online gaming platforms operating under international licensing frameworks.
• Legitimate interests: processing is necessary for our legitimate interests in operating a secure, fair, and commercially viable gaming platform — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: for marketing communications and non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Sharing Your Data

smb888 does not sell your personal data. We may disclose your personal data to the following categories of recipients solely to the extent necessary for the purposes described in this Policy:

5.1 Service Providers and Processors

We engage carefully selected third-party service providers who process data on our behalf under strict contractual data protection obligations. These include payment gateway operators, KYC and identity verification vendors, fraud prevention specialists, cloud hosting providers, and customer support technology partners.

5.2 Regulatory and Law Enforcement Bodies

We may disclose personal data to government authorities, regulators, or law enforcement agencies where required by applicable law, court order, or where we believe disclosure is necessary to protect the safety of our members or the public, or to enforce our Terms & Conditions.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of smb888's business, your personal data may be transferred to the acquiring entity. We will notify affected members and take reasonable steps to ensure your data remains protected under terms consistent with this Policy.

5.4 What We Will Never Do

• Sell or rent your personal data to third-party advertisers or data brokers.
• Share your data with third parties for their own independent marketing purposes without your explicit consent.
• Transfer your data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate safeguards.

6. Cookies and Tracking Technologies

smb888 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit our website. The table below summarises the types of cookies we use.

You may control or delete cookies through your browser settings. Please note that disabling strictly necessary cookies may impair certain Platform features, including your ability to log in to your smb888 account. We do not use cookies for third-party advertising or cross-site behavioural tracking.

7. Data Retention

smb888 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including compliance with applicable legal, regulatory, accounting, and reporting requirements. The following general retention periods apply:

• Active account data: retained for the duration of your membership and for a period of five (5) years following account closure, in line with AML and gaming licensing obligations.
• Transaction and financial records: retained for a minimum of seven (7) years to satisfy statutory accounting requirements.
• KYC and identity documents: retained for five (5) years after the end of the business relationship, or longer where required by applicable regulations.
• Support communications: retained for three (3) years from the date of the interaction unless a longer retention period is required for ongoing dispute resolution.
• Marketing preferences and consent records: retained until you withdraw consent, or for three (3) years from your last interaction with smb888 marketing communications, whichever is sooner.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised so that it can no longer be associated with you.

8. Security Measures

smb888 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes, but is not limited to:

• Encryption in transit: all data transmitted between your device and the Platform is encrypted using TLS 1.2 or higher protocols.
• Encryption at rest: sensitive personal and financial data stored on our servers is encrypted using AES-256 encryption.
• Access controls: role-based access controls ensure that smb888 personnel can only access personal data on a strict need-to-know basis. All access is logged and audited.
• Two-factor authentication: members are encouraged to enable two-factor authentication (2FA) on their accounts for an additional layer of login security.
• Regular security assessments: we conduct periodic vulnerability assessments and penetration testing of our Platform infrastructure.
• Incident response: we maintain a documented data breach response procedure. In the event of a breach that is likely to result in a risk to your rights or freedoms, we will notify you and the relevant authorities in accordance with applicable requirements.

9. Your Rights

As a smb888 member, you have certain rights in relation to the personal data we hold about you. We are committed to honouring these rights promptly and without undue complication. Your rights include:

• Right of access: you may request a copy of the personal data smb888 holds about you, along with information about how it is being used.
• Right to rectification: if any personal data we hold is inaccurate or incomplete, you have the right to request that we correct or update it.
• Right to erasure: in certain circumstances, you may request that we delete your personal data. Note that this right may be limited where we are required to retain data for legal or regulatory compliance purposes.
• Right to restriction: you may ask us to restrict the processing of your personal data in specific circumstances, such as where you contest its accuracy or object to our processing.
• Right to data portability: where processing is based on your consent or a contract, you may request that we provide your personal data in a structured, commonly used, and machine-readable format.
• Right to object: you have the right to object to processing based on our legitimate interests, including profiling for direct marketing purposes. Upon receiving such an objection, we will cease that processing unless we have compelling legitimate grounds that override your interests.
• Right to withdraw consent: where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before the withdrawal.

To exercise any of the rights listed above, please contact our Data Protection team via email at [email protected] or through the 24/7 live chat on the Platform. We will respond to verified requests within thirty (30) days. In some cases, we may need to verify your identity before acting on your request.

10. Minors and Age Restriction

smb888 is strictly an adults-only platform. Access to and use of the Platform is prohibited for any person under the age of 21 years. We do not knowingly collect personal data from individuals under 21. All prospective members must confirm their age and identity through our KYC verification process before an account is approved.

If smb888 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. Parents and guardians who suspect that a minor has accessed smb888 services are encouraged to contact us immediately at [email protected].

11. Changes to This Policy

smb888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or Platform functionality. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page;
• Display a prominent notice on the Platform for a reasonable period following the update; and
• Where required by law or where changes materially affect your rights, notify you directly by email to the address registered to your smb888 account.

Your continued use of the Platform following the posting of an updated Privacy Policy constitutes your acknowledgement of, and agreement to, the revised terms. We encourage you to review this page periodically to stay informed about how smb888 protects your personal data.

12. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way smb888 handles your personal data, please reach out to us through any of the channels below. Our team is available around the clock to assist you.