Privacy Policy digi88 — Member Personal Data Protection

1. Information We Collect

Digi88 collects your personal information only for legitimate purposes necessary for platform operations. The types of information we collect include:

We only collect information that is strictly necessary. digi88 does not collect sensitive information such as medical background, religious beliefs, or political affiliations unless specifically required by applicable law.

2. How We Collect Information

Your personal information is collected through several transparent and controlled methods:

• Account Registration: When you register a new account at digi88, we request basic information such as your name, email, phone number, and date of birth for identity verification purposes.
• KYC Verification: When you submit identity documents for the KYC process, the information contained in those documents will be stored securely in our systems.
• Financial Transactions: Every deposit and withdrawal processed through the platform leaves a transaction record retained for audit and security purposes.
• Platform Usage: Our system automatically logs technical data such as IP address, browser type, device used, and navigation patterns within the platform.
• Support Communications: When you contact our support team via live chat or email, those conversations are retained for service quality purposes and future reference.
• Cookies: digi88 uses technical and analytical cookies to improve the user experience. You can manage cookie settings through your browser, though some platform functions may be affected if cookies are disabled.

3. Use of Your Personal Information

Digi88 uses the information collected solely for legitimate platform operations and to improve the user experience. In detail, your information is used to:

• Verify your identity during registration and the KYC process to ensure account security.
• Process deposits, withdrawals, and all other financial transactions accurately and promptly.
• Send important notifications related to your account, transactions, or changes to platform terms and policies.
• Detect and prevent fraud, money laundering, and suspicious activities on the platform.
• Fulfil legal compliance obligations and regulations applicable to platform operations.
• Analyse overall usage patterns (not individual-level) to improve platform performance and design.
• Provide more effective customer support based on records of prior interactions.
• Send you relevant promotional offers and bonuses — you may unsubscribe from marketing communications at any time via your account settings.

We do not use your information for any other purpose not stated above without obtaining your consent first.

4. Sharing Information with Third Parties

Digi88 is firmly committed to ensuring your personal information will not be sold or shared for third-party commercial purposes. However, in certain limited situations, information may be shared with:

• Payment Service Providers: Transaction details that must be shared with FPX, TNG eWallet, DuitNow, and other payment processors to complete your transactions.
• Technical Service Provider: Technical partners who help operate the platform infrastructure, including cloud and cybersecurity services — all bound by strict confidentiality agreements.
• Legal Authorities: When required by a court order or a directive from a lawful law enforcement authority, digi88 will comply with disclosure requests that follow proper legal procedures.
• KYC Verification Provider: Registered and trusted third-party identity verification services are used to assist with document review — subject to their own respective privacy policies.

In all data-sharing situations, digi88 ensures that recipients are bound by appropriate confidentiality and data protection obligations before any information is transferred.

5. Data Storage and Retention Period

All digi88 member personal data is stored on servers protected with advanced-grade encryption. We apply layered access controls to ensure that only authorised personnel can access such information.

Data retention periods depend on the type of information and applicable legal requirements:

• Active account information is retained for as long as your account remains active in the digi88 system.
• Financial transaction records are retained for a minimum of 7 years in accordance with industry standard compliance requirements.
• KYC documents are retained for the duration of the active account period plus 5 years after account closure.
• Customer support chat logs are retained for 2 years for reference and quality improvement purposes.
• Technical data and system logs are retained for 12 months for security and digital forensics purposes.

Upon expiry of the designated retention period, data will be securely deleted or anonymised using procedures that ensure the information cannot be recovered.

6. Data Security and Protection Measures

Digi88 continuously invests in the latest cybersecurity infrastructure to ensure your personal data is always protected. The security measures we practise include:

• 256-bit SSL encryption for all data transmission between the platform and user devices.
• Two-factor authentication (2FA) available for all member accounts as an added layer of security.
• Round-the-clock 24/7 security monitoring by digi88's in-house cybersecurity team.
• Regular vulnerability scanning of platform systems and infrastructure.
• A tested incident response plan to ensure swift action in the event of any security breach.
• Security awareness training for all digi88 staff who handle member personal data.

Despite all measures in place, no system can guarantee 100% absolute security. We encourage members to also take precautions such as using strong passwords and not sharing login credentials.

7. Your Rights as a Data Owner

As a digi88 member, you have the following rights regarding the personal data we hold:

• Right of Access: You may request a copy of the personal information we hold about you at any time through our support team.
• Right to Rectification: If the information we hold is inaccurate or outdated, you have the right to request that a correction be made promptly.
• Right to Erasure: You may request that your personal data be deleted from our systems, subject to applicable record-keeping obligations under the law.
• Right to Restrict Processing: In certain circumstances, you may request that the processing of your data be temporarily suspended pending review or objection.
• Right to Data Portability: You may request your personal data in a machine-readable format for transfer to another platform if needed.
• Right to Object: You have the right to object to the use of your data for direct marketing purposes at any time, without providing a reason.

To exercise any of the rights above, please contact the digi88 support team via live chat or email at the address stated in the contact us section. Requests will be processed within 14 business days.

8. Use of Cookies and Tracking Technologies

Digi88 uses cookies and similar tracking technologies to enhance your experience on the platform. Several types of cookies are used:

• Essential Cookies: Required for core platform functions such as login, navigation, and session security. These cookies cannot be disabled as they are critical to platform operation.
• Preference Cookies: Remember your preferences such as language, time zone, and display settings so you do not need to reconfigure them each time.
• Analytics Cookies: Collect non-identifiable usage data to help us understand how members use the platform and make improvements.
• Security Cookies: Helps detect and prevent fraudulent activity and unauthorised access to your account.

You can manage your cookie settings through your browser. Please note that disabling certain cookies may affect the functionality and your experience on the digi88 platform.

9. Cross-Border Data Transfers

As an online platform, data collected by digi88 may be stored or processed on servers located outside Malaysia. In such cases, digi88 ensures that any cross-border data transfers are only made to countries or service providers with data protection standards equivalent to or higher than those applicable in Malaysia.

All international data transfers are protected by appropriate data transfer agreements and additional safeguarding measures to ensure your personal information remains secure regardless of the physical server location.

10. Changes to This Privacy Policy

Digi88 reserves the right to update or modify this Privacy Policy from time to time in line with changes in law, technology, or our operational practices. Any significant changes will be communicated to members via:

• In-platform notifications on digi88 that will appear when you log in after changes take effect.
• Notification emails sent to the email address registered to your account.
• Update the "Last Updated" date shown at the top of this page.

Continued use of the digi88 platform after the effective date of any amendments constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

11. Contact Us About Privacy

If you have any questions, concerns, or wish to exercise your privacy rights, the digi88 team is ready to assist through the following channels: