Happy88 Privacy Policy – Personal Data Protection Commitment for Malaysian Members

Happy88 collects various types of personal information in the course of operating our services. Below is a complete list of the data categories we collect, along with the purpose for each:

Happy88 does not collect sensitive data such as medical information, religious beliefs, political views, or biometric data unless specifically required by law. All data collection is conducted on a minimum-necessity basis — we only collect what is strictly needed.

When you register using Malaysian payment methods such as Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX internet banking, the relevant transaction information will be recorded in our system for account reconciliation and security monitoring purposes.

Happy88 uses the personal data it collects solely for the following purposes. We will not use your data for any other purpose without obtaining your consent first:

• Account Management: Creating and maintaining your happy88 account, including identity verification, password resets, and profile updates.
• Transaction Processing: Processing deposits and withdrawals via your chosen Malaysian payment method — whether Touch 'n Go eWallet, DuitNow, FPX (Maybank2u, CIMB Clicks), GrabPay, Boost, or ShopeePay.
• Service Provision: Enabling you to access and play the games available on the happy88 platform, including slots, Live Casino, table games, and Sports Betting.
• Customer Support: Processing your enquiries, complaints, and support requests via live chat, WhatsApp, or email.
• Security & Fraud Prevention: Monitoring account activity to detect any attempts at unauthorised access, fraud, or money laundering.
• Legal Compliance: Meeting statutory compliance obligations including KYC requirements, AML (Anti-Money Laundering) obligations, and reporting requirements to the relevant authorities.
• Platform Improvements: Analysing aggregated usage patterns (not individual behaviour) to improve the performance, interface, and overall user experience of the happy88 platform.
• Service Communications: Sending important account notifications such as deposit confirmations, withdrawal approvals, and significant policy updates.

Happy88 does not sell or disclose your personal data to third parties for marketing purposes. However, in the course of operating our services, your personal data may be shared with the following categories of third parties under limited and controlled circumstances:

• Payment Service Providers: Payment processors handling transactions via DuitNow, Touch 'n Go, FPX, GrabPay, Boost, and ShopeePay. They receive only the information necessary to process your transaction and are bound by strict confidentiality agreements.
• Game Providers: Game software providers such as Pragmatic Play, PG Soft, and Evolution that supply games on our platform. Data shared is limited to the session information required to run the games and maintain winning records.
• Identity Verification Service Providers: Third parties that assist with KYC processing and MyKad verification to ensure compliance with Malaysian legal requirements.
• Legal Authorities: When required by Malaysian law or a court order, happy88 will disclose the necessary information to law enforcement agencies, Bank Negara Malaysia, or other relevant authorities.
• Professional Advisors: Lawyers, accountants, and auditors involved in the lawful business operations of happy88, subject to strict professional confidentiality obligations.

All third parties who receive personal data belonging to happy88 members are required to handle that data in accordance with security and confidentiality standards equal to or exceeding those applied by happy88.

Happy88 implements a range of technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or accidental disclosure:

• 256-bit SSL Encryption: All data transmitted between your device and happy88 servers is encrypted using the latest TLS/SSL protocols. This ensures that no third party can read your data in transit, even if they manage to intercept the network communication.
• Stored Data Encryption: Sensitive data such as financial information and identity verification documents are stored in encrypted format within our databases. Even in the unlikely event of a server breach, stored data cannot be read without the decryption key.
• Internal Access Controls: Access to member personal data within happy88's internal systems is restricted on a need-to-know basis. Customer support staff, for example, can only view the data necessary to assist with your enquiry — they cannot access your password or full financial details.
• Two-Factor Authentication (2FA): All happy88 internal systems containing member personal data require two-factor authentication for access. This adds an extra layer of security in the event that a staff member's password is compromised.
• 24/7 Security Monitoring: happy88's automated monitoring system runs around the clock to detect any suspicious activity — including unusual login attempts, irregular transaction patterns, and access attempts from suspicious IP addresses.
• Regular Security Audits: Happy88 conducts regular internal and external security audits to identify and address any vulnerabilities in our data protection systems.

Happy88 retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by Malaysian law:

• Active Account Data: For the duration of your active membership with happy88, plus the minimum retention period required by applicable law following account closure.
• Financial Transaction Records: A minimum of seven (7) years from the date of the transaction, in line with Malaysian legal requirements for financial records and audits.
• KYC & Identity Verification Records: A minimum of five (5) years after account closure, in line with Malaysia's anti-money laundering (AML) legal requirements.
• Support Communication Records: Two (2) years from the date of communication, for quality control and dispute reference purposes.
• Technical Data (System Logs): Ninety (90) days for routine system logs. Security logs related to incidents are retained longer as required for investigation purposes.

Once the applicable retention period has elapsed, happy88 will securely delete or anonymise your personal data using permanent, non-recoverable deletion procedures.

You may request early deletion of your data under certain circumstances — refer to the Your Rights section below for more details. Please note that happy88 may need to retain some data even after a deletion request is received, where there is a legal obligation to do so.

Happy88 uses cookie and session technology to ensure the platform operates correctly and to provide a better experience for users. The following are the types of cookies we use:

• Session Cookies: Required to maintain your login status while you use the platform. These cookies are deleted automatically when you close your browser or app. Without session cookies, you would need to log in again every time you navigate to a different page.
• Preference Cookies: Stores your preferences such as interface language and display settings so you do not need to reconfigure them on each visit. This cookie persists for 30 days.
• Security Cookies: Used to detect suspicious login attempts and protect your account from CSRF (Cross-Site Request Forgery) attacks. This cookie is a critical security component of the platform and cannot be disabled.
• Internal Analytics Cookies: Happy88 uses internal analytics that do not involve third parties to understand platform usage patterns at an aggregate level — not at the individual level. This data helps us improve platform speed and refine the interface.

Happy88 does not use third-party tracking cookies such as Google Analytics or social media pixels that monitor your activity across other websites. What you browse outside of the happy88 platform is entirely your own business.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect how the happy88 platform functions. We recommend keeping session and security cookies enabled for the best experience.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights in relation to the personal data held by happy88:

• Right of Access: You have the right to request a copy of the personal data we hold about you. Happy88 will provide this information in a readable format within 21 working days from the date the request is received.
• Right to Rectification: If you find that your personal data in happy88's records is inaccurate or out of date, you have the right to request a correction. Happy88 will update the data within a reasonable timeframe following verification.
• Right to Withdraw Consent: Where the processing of your data is based on your consent (such as marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the validity of any processing carried out prior to withdrawal.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes. happy88 will honour that objection immediately.
• Right to Erasure: Under certain circumstances, you may request that happy88 delete your personal data. This right is subject to our legal obligations to retain certain records — happy88 will inform you if a request cannot be fulfilled in full, along with the reasons why.

To submit any request relating to your personal data rights, contact the happy88 Data Protection Officer by email at support@happy88.bet with the subject line "Personal Data Request — [Full Name]". We will verify your identity before processing the request to protect the security of your account.

The happy88 platform is strictly for individuals aged 18 and above. happy88 does not knowingly collect or process personal data belonging to minors.

Every new account registration goes through an age verification process. Should happy88 discover that personal data belonging to an individual under 18 has been collected unintentionally, we will take immediate steps to delete that data and close the account in question.

If you are a parent or guardian who believes that a child under your care has registered a happy88 account, please contact our support team immediately at support@happy88.bet and we will investigate and take appropriate action within 24 hours.

Happy88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or developments in our service operations.

• The latest version of this Privacy Policy will always be available on this page, with the update date clearly displayed at the top of the document.
• For significant amendments — those that materially affect your rights or the way we use your data — happy88 will notify you via an in-platform notification or email at least 14 days before the changes take effect.
• Your continued use of the happy88 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.
• If you do not agree with the amendments made, you have the right to close your account and request data deletion in accordance with the procedure outlined in the Your Rights section above.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way happy88 handles your personal data, please contact us through the following channels:

Happy88 is committed to handling all privacy-related enquiries seriously and within a reasonable timeframe. We believe that transparency and open communication are the foundation of the trust you place in our platform.