S 188 Privacy Policy – Personal Data Protection for Malaysian Players

s 188 collects various types of information when you register, use the platform, or interact with our services. This information is collected solely for legitimate purposes related to providing sports betting and online casino services to players in Malaysia.

We do not collect information that is unnecessary for the provision of our services. Sensitive personal data, such as health-related information, is not collected unless you have given your explicit consent and only for the stated purpose.

Data collected by s 188 is used only for lawful, specific, and relevant purposes. We do not process your data for any purpose not stated in this Privacy Policy without your prior consent.

• Account Management: To create, verify, and manage your player account at s 188, including the identity verification (KYC) process required under anti-money laundering regulations.
• Service Provision: To process Sports Betting (Malaysia Super League, EPL, badminton, and more), Live Casino games, slots, e-sports, and all other products available on the platform.
• Payment Processing: To manage deposits and withdrawals via supported Malaysian payment methods — Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, Maybank2u and CIMB Clicks — all in Malaysian Ringgit (RM).
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, multi-account abuse, and other security threats.
• Customer Support: To handle enquiries, resolve issues, and provide assistance via live chat and email in Bahasa Malaysia.
• Personalised Marketing: To send you promotional offers, bonuses, and relevant information based on your preferences and playing behaviour — only if you have given consent to receive marketing communications.
• Platform Improvements: To analyse usage patterns and improve our products, interface design, and overall player experience s 188.
• Legal Compliance: To fulfil legal and regulatory obligations applicable in Malaysia, including required record-keeping.

s 188 does not sell, rent, or trade players' personal information to any third party for marketing purposes. However, we do share certain information with the following parties under limited circumstances and with strict controls in place:

• Payment Service Provider: Certified payment gateways handling Touch 'n Go eWallet, GrabPay, DuitNow, FPX, and other eWallet transactions receive only the information necessary to process your financial transactions.
• Game Software Providers: Game providers (for slots, live baccarat, and others) may receive session data required for technical functionality, subject to strict data protection agreements.
• KYC Service Provider: Third-party identity verification providers that assist us in conducting the KYC checks required under AML regulations.
• Legal Authorities: When required by law, court order, or a legitimate Malaysian law enforcement agency, we will disclose the necessary information.

All third parties who receive your data are required to sign data protection agreements binding them to security standards no less stringent than those of s 188 themselves. We monitor their compliance on a regular basis.

s 188 implements various technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption in Transit and at Rest: All personal data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption.
• Role-Based Access Control: Only staff who require access to specific data to perform their duties are authorised to do so. All access is logged and audited.
• Two-Factor Authentication (2FA): Recommended for all player accounts and mandatory for all internal staff who handle player data.
• Continuous Threat Monitoring: An automated threat detection system operates 24/7 to identify suspicious activity in real time.
• Periodic Penetration Testing: Independent security audits and penetration testing are conducted at least twice a year by certified third-party cybersecurity firms.
• Staff Training: All staff s 188 undergo regular data protection training and cybersecurity awareness programmes.

While we take comprehensive measures to protect your data, no security system can guarantee 100% protection against all threats. We encourage players to use strong passwords, enable 2FA, and remain vigilant against phishing attempts.

Platform s 188 uses cookies and similar tracking technologies to enhance your experience, analyse platform usage, and ensure proper functionality. Below are the types of cookies we use:

You can manage your cookie preferences through your browser settings or via the privacy settings panel in your account s 188 yours. Please note that disabling essential cookies may prevent you from using certain platform features.

Under Malaysia's Personal Data Protection Act 2010 and the Privacy Policy of s 188, you have the following rights regarding your personal data:

To exercise any of the above rights, contact our Privacy Officer at privacy@s188.run or via the platform's live chat. All requests will be acknowledged within 48 hours and resolved within 30 working days, except for complex requests which may require up to 60 days.

s 188 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Malaysian law.

• Active Account Data: Retained for as long as your account is active and used to support the ongoing provision of our services.
• Financial Transaction Records: Retained for 7 years after transactions, in accordance with Malaysian financial and AML legal requirements.
• KYC (Identity Verification) Records: Retained for 5 years after account closure, in line with anti-money laundering requirements.
• Support Communication Records: Retained for 2 years for reference purposes and dispute resolution.
• Analytics Data (No PII): Anonymised data used for platform analytics may be retained indefinitely.

Once the retention period expires and there is no legal obligation to retain the data, s 188 will securely delete or anonymise the relevant data in accordance with established procedures.

s 188 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our data handling practices, compliance with new legislation, or improvements to player protection.

For significant amendments that affect how we manage your data, we will:

• Notifying you via your registered email or a prominent notice on the platform s 188 at least 14 days before the amendment takes effect.
• Updating the "Last Updated" date at the top of this document.
• Previous versions are retained and available upon request for reference.

Continued use of the platform s 188 after the amendment takes effect will be considered your acceptance of the revised Privacy Policy. If you disagree with any amendment, you may request account closure and deletion of your data.

If you have any questions, concerns, or complaints regarding the way s 188 manage your personal data, or if you wish to exercise any of your rights under this Privacy Policy, please contact our Privacy Officer through the following channels:

We are committed to acknowledging all privacy enquiries within 48 hours and provide a full response within 30 working days. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in Malaysia.