Privacy Policy – trust888 Online Casino & Sportsbook Malaysia

1. Who We Are

trust888 ("we", "us", "our") operates the online casino and sportsbook platform accessible at trust888.co. We are the data controller in respect of all personal data collected through the Platform. As data controller, trust888 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

For any privacy-related queries or to exercise your data rights, you may contact the trust888 Data Protection team at [email protected].

2. Personal Data We Collect

trust888 collects personal data that you provide to us directly, data generated through your use of the Platform, and data we receive from third parties in connection with our legal compliance obligations. The categories of personal data we collect include:

2.1 Registration & Identity Data

• Full legal name as shown on your government-issued identification document;
• Date of birth (for age verification);
• Email address (used as your primary login credential and communications address);
• Mobile telephone number (for account security and two-factor authentication);
• Residential address.

2.2 Identity Verification (KYC) Data

• Copy of government-issued photo identification (Malaysian MyKad, passport, or equivalent);
• Proof of address documentation where required;
• Source of funds documentation where requested in connection with anti-money laundering obligations.

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records including amounts, timestamps, and payment method identifiers;
• Payment method details (eWallet account identifiers for Touch n Go and Boost; bank account details for Maybank, CIMB, Public Bank, and RHB) — note that trust888 does not store full card or banking credentials;
• Wagering history including bets placed, odds accepted, and settlement outcomes.

2.4 Technical & Usage Data

• IP address and device identifiers;
• Browser type and version;
• Operating system;
• Session timestamps and duration;
• Pages and products accessed within the Platform;
• Geolocation data (country/region level, derived from IP address).

2.5 Communications Data

• Content of communications you submit to trust888 via live chat, email, or any other support channel;
• Records of promotional offers accepted or declined;
• Responsible gaming tool preferences and settings.

3. How We Use Your Personal Data

trust888 uses your personal data for the following purposes:

• Account creation and management: To create, maintain, and administer your trust888 account, including verifying your identity and age as required by our operating standards.
• Transaction processing: To process deposits, withdrawals, and wagers accurately and to maintain complete transaction records.
• Legal and regulatory compliance: To comply with anti-money laundering (AML), know-your-customer (KYC), and other applicable legal obligations under internationally recognised gaming authority requirements.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, collusion, account abuse, and other prohibited conduct.
• Customer support: To respond to your queries, resolve disputes, and provide technical assistance.
• Service improvement: To analyse aggregated usage data for the purpose of improving Platform functionality, game selection, and user experience. This analysis uses anonymised or pseudonymised data wherever possible.
• Marketing communications: To send you promotional offers, bonus notifications, and product updates — subject to your communication preferences and applicable opt-in requirements.
• Responsible gaming: To monitor betting patterns and apply responsible gaming interventions where trust888's responsible gaming systems identify potential indicators of problem gambling behaviour.

4. Legal Basis for Processing

trust888 processes your personal data on the following legal bases:

• Contractual necessity: Processing necessary to perform the contract between you and trust888 — including account management, transaction processing, and service delivery.
• Legal obligation: Processing required to comply with applicable legal requirements, including AML/KYC obligations and regulatory reporting.
• Legitimate interests: Processing necessary for trust888's legitimate interests, including fraud prevention, security monitoring, and service improvement, where those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in relation to direct marketing communications. You may withdraw consent at any time by updating your communication preferences in your account settings or by contacting support.

5. Data Sharing & Disclosure

trust888 does not sell your personal data. We share your personal data only in the following circumstances:

5.1 Service Providers

trust888 engages carefully selected third-party service providers who assist us in operating the Platform, including payment processors (for Touch n Go, Boost, and banking integrations), identity verification providers, game technology providers, and cloud infrastructure services. These providers process your data only on trust888's documented instructions and are contractually bound to maintain appropriate data protection standards.

5.2 Legal and Regulatory Disclosure

trust888 may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law or valid legal process. trust888 will, where permitted by law, notify affected Members of any such disclosure.

5.3 Corporate Transactions

In the event of a merger, acquisition, or sale of all or substantially all of trust888's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any material change to the applicable Privacy Policy before the transfer takes effect.

5.4 No Sale of Data

trust888 does not sell, rent, licence, or otherwise transfer your personal data to third-party advertisers, data brokers, or marketing networks. Your data is used exclusively within the trust888 ecosystem for the purposes described in this Policy.

6. Cookies & Tracking Technologies

trust888 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies: Required for the Platform to function, including session management, login persistence, and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, game lobby layout, and responsible gaming configurations.
• Analytics cookies: Collect anonymised data about how Members use the Platform to help trust888 identify usability improvements and performance issues.

You may manage your cookie preferences through your browser settings. Disabling functional or analytics cookies will not prevent you from using the Platform but may affect your experience.

7. Data Retention

trust888 retains your personal data for as long as your Account remains active and for such additional period as is required by applicable law or legitimate operational purpose. Specifically:

• Account and KYC data: Retained for the duration of your Account plus a minimum of five (5) years following Account closure, in accordance with standard AML record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Support communications: Retained for two (2) years from the date of the last communication in a support thread.
• Technical and usage logs: Retained for up to twelve (12) months from the date of generation, after which they are deleted or fully anonymised.

Where retention beyond these periods is required by a specific legal obligation or ongoing dispute, trust888 will retain the relevant data until that obligation or dispute is resolved.

8. Security Measures

trust888 implements a comprehensive set of technical and organisational security measures to protect your personal data, including:

• 256-bit SSL/TLS encryption for all data transmitted between your device and trust888's servers;
• AES-256 encryption for personal and financial data stored at rest;
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis;
• Regular security audits and penetration testing by independent security professionals;
• Two-factor authentication available for all Member accounts;
• Automated anomaly detection systems monitoring for unusual account activity.

No data transmission over the internet can be guaranteed to be 100% secure. While trust888 takes every reasonable precaution, Members are also responsible for maintaining the security of their own devices and login credentials.

9. Your Data Rights

Subject to applicable law, you have the following rights in respect of the personal data trust888 holds about you:

• Right of access: You may request a copy of the personal data trust888 holds about you. trust888 will respond to access requests within 30 days.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. You can update many data fields directly within your account settings.
• Right to erasure: In certain circumstances, you may request deletion of your personal data. Note that trust888 may be required to retain certain data for legal compliance reasons that override this right.
• Right to restrict processing: You may request that trust888 limits processing of your data in specified circumstances, such as while the accuracy of data is being contested.
• Right to data portability: You may request a copy of the personal data you provided to trust888 in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes. Objections to direct marketing will be honoured immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact the trust888 Data Protection team at [email protected] with your request and account details. We will acknowledge your request within five (5) business days and respond fully within thirty (30) days.

10. Children & Minors

trust888 requires all Members to complete identity and age verification (KYC) before real-money services are enabled. If trust888 identifies or is notified that an Account has been registered by an individual under the age of 21, all personal data associated with that Account will be permanently deleted and the Account will be closed. Parents and guardians who suspect a minor has registered on the Platform should contact trust888 support immediately.

11. Marketing Communications

trust888 may send you marketing communications — including promotional offers, bonus notifications, and product updates — by email or SMS, subject to your communication preferences and any applicable consent requirements.

You may opt out of marketing communications at any time by:

• Updating your communication preferences in your trust888 account settings;
• Clicking the unsubscribe link included in any trust888 marketing email;
• Contacting trust888 support and requesting removal from marketing lists.

Opting out of marketing communications does not affect transactional communications — you will continue to receive emails necessary for account management, security alerts, and transaction confirmations.

12. Changes to This Privacy Policy

trust888 may update this Privacy Policy from time to time to reflect changes in our data practices, operational requirements, or applicable law. Where changes are material, trust888 will provide notice to active Members via email or on-Platform notification prior to the changes taking effect. The effective date at the top of this Policy will be updated each time a revision is made. Continued use of the Platform after the effective date of any revised Policy constitutes acceptance of the updated terms. We encourage you to review this Policy periodically.

13. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how trust888 has handled your personal data, please contact us:

• Email: [email protected]
• Live Chat: Available 24/7 from within the trust888 Platform

Please include your registered username or email address in all correspondence so we can identify your account and respond accurately. trust888 aims to acknowledge all privacy-related queries within two (2) business days and to resolve them fully within thirty (30) days. Where a complaint cannot be resolved to your satisfaction through our internal process, you may have the right to escalate to the relevant data protection authority or regulatory body in your jurisdiction.