Privacy Policy

This Privacy Policy ("Policy") is issued by bersatu88 ("Company", "we", "us", "our") and governs the collection, use, processing, storage, and disclosure of personal data relating to users ("User", "Player", "you") of the bersatu88 platform, accessible at https://bersatu88.cam and all associated subdomains, mobile applications, and services (collectively, the "Platform").

bersatu88 is committed to handling your personal data responsibly, transparently, and in accordance with internationally recognised privacy principles. We operate a Malaysia-focused online gaming platform serving players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and other Malaysian cities, and we recognise that your trust in our data practices is foundational to the bersatu88 relationship.

By registering an account with bersatu88 or otherwise using the Platform, you acknowledge that you have read, understood, and consented to the practices described in this Policy. If you do not agree with this Policy, you must refrain from using the Platform. This Policy should be read in conjunction with our Terms & Conditions.

The following terms carry the meanings set out below throughout this Policy:

bersatu88 collects Personal Data through several channels during the course of your relationship with the Platform. The categories of data we collect include:

3.1 Registration and Account Data

• Full legal name, date of birth, and gender
• Residential address (including city, state, and postcode — Malaysian addresses accepted in full)
• Email address and mobile phone number
• Username and encrypted account password
• Preferred currency (Malaysian Ringgit — MYR/RM by default)

3.2 Identity Verification (KYC) Data

• Copy of government-issued photo identification (Malaysian MyKad, passport, or equivalent)
• Proof of residential address documentation (utility bill, bank statement, or equivalent)
• Selfie or facial verification image where required for enhanced identity checks
• Source of funds documentation for high-value accounts or as required by anti-money laundering (AML) obligations

3.3 Financial and Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and methods used
• Payment instrument identifiers (e.g., partial card number, e-wallet account reference, bank account reference for Maybank, CIMB, Public Bank, DuitNow, FPX)
• Transaction history and account balance records

3.4 Usage and Technical Data

• IP address and geolocation data derived from IP
• Device type, operating system, and browser type
• Session duration, pages visited, games played, and betting activity logs
• Click-stream and navigation data
• Login timestamps and failed login attempt records

3.5 Communications Data

• Correspondence with our support team via live chat, email, or any other communication channel
• Survey responses, feedback submissions, and promotional opt-in preferences

bersatu88 uses the Personal Data it collects for specific, defined purposes. We do not use your data for purposes beyond those described below without obtaining your additional consent where required:

bersatu88 processes your Personal Data on one or more of the following lawful bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between you and bersatu88 — including account registration, game delivery, deposit and withdrawal processing, and support services.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and licensing conditions imposed by our gaming regulator.
• Legitimate Interests: Processing conducted for the legitimate interests of bersatu88 and its users, including fraud prevention, platform security, responsible gambling monitoring, and service improvement — provided such interests are not overridden by your fundamental rights.
• Consent: Where you have provided specific, informed, and freely given consent — such as for marketing communications or optional analytics participation. You may withdraw such consent at any time by contacting our support team or updating your Account preferences.

bersatu88 may share your Personal Data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Service Providers: Malaysian payment processors and gateway operators — including partners supporting Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, and Public Bank integrations — for the purpose of processing deposits and withdrawals.
• KYC and Identity Verification Providers: Third-party identity verification services that assist bersatu88 in fulfilling its age verification and AML obligations.
• Game and Software Providers: Licensed game studios and software providers whose products are offered on the Platform. Minimal session data is shared to facilitate game delivery and fair-play auditing.
• Regulatory Authorities and Law Enforcement: Where required by applicable law, court order, or lawful request from a competent authority, bersatu88 will disclose Personal Data to regulators, law enforcement agencies, or government bodies. We will notify you of such requests where legally permissible to do so.
• Professional Advisers: Legal, compliance, audit, and accounting professionals engaged by bersatu88, who are bound by strict confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of bersatu88's business assets, your Personal Data may be transferred to the successor entity. You will be notified of any such transfer that materially affects your data rights.

All financial transactions on bersatu88 are processed through certified payment service providers operating under applicable financial services regulations. When you make a deposit or withdrawal using Malaysian payment methods — including Touch 'n Go eWallet, Boost, GrabPay, FPX, DuitNow, or direct bank transfer via Maybank, CIMB, Public Bank, Hong Leong Bank, or RHB — the following data handling standards apply:

• Full payment instrument numbers (card numbers, full bank account numbers) are never stored on bersatu88 servers. Tokenised references provided by payment processors are stored in their place.
• All payment data in transit is protected using 256-bit TLS/SSL encryption.
• Payment transaction records are retained for the period required by applicable AML and financial regulations.
• bersatu88 operates a same-method withdrawal policy in part to satisfy AML requirements — ensuring that funds are returned via the same route they entered the Platform.

bersatu88 uses cookies and similar tracking technologies to operate, improve, and secure the Platform. By continuing to use the Platform after being presented with our cookie notice, you consent to the use of cookies as described below:

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent the Platform from functioning correctly.

bersatu88 retains Personal Data for no longer than is necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

• Active Account Data: Retained for the duration of your account relationship with bersatu88 plus a minimum of five (5) years following account closure, in accordance with AML and financial record-keeping regulations.
• KYC Documents: Retained for a minimum of five (5) years from the date of collection, or longer where required by regulatory obligations applicable to our licensed jurisdiction.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in line with standard financial audit requirements.
• Support Communications: Retained for three (3) years from the date of the last interaction, to support dispute resolution and quality assurance.
• Marketing Opt-In Data: Retained until you withdraw consent or we receive a verifiable erasure request, whichever occurs first.

Upon expiry of applicable retention periods, Personal Data is securely deleted or anonymised in accordance with our internal data lifecycle policy.

Subject to applicable law and certain regulatory limitations, you hold the following rights in respect of your Personal Data held by bersatu88. To exercise any of these rights, contact our support team at the details provided in Section 15.

bersatu88 will respond to all rights requests within 30 calendar days of receipt. Where a request is complex or involves large volumes of data, we may extend this period by a further 60 days and will notify you accordingly. We will not charge a fee for reasonable requests.

bersatu88 implements a multi-layered security framework to protect your Personal Data against unauthorised access, disclosure, alteration, loss, or destruction:

• Encryption: All data transmitted between your device and the Platform is protected by 256-bit TLS/SSL encryption. Sensitive data at rest is encrypted using industry-standard algorithms.
• Access Controls: Access to Personal Data is restricted to authorised personnel on a strict need-to-know basis. Staff with access to sensitive data undergo regular privacy and security training.
• Infrastructure Security: Our Platform is hosted on secured, geographically redundant infrastructure with continuous intrusion detection monitoring, regular penetration testing, and automated vulnerability scanning.
• Incident Response: bersatu88 maintains a documented incident response plan. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users and relevant authorities within the timeframe required by applicable regulations.
• Password Security: Account passwords are stored in one-way hashed format. bersatu88 staff never have access to your plain-text password.

While we take all reasonable precautions, no digital system is wholly immune to risk. You bear responsibility for maintaining the confidentiality of your account login credentials and for notifying us immediately if you suspect any unauthorised access.

The bersatu88 Platform is strictly restricted to individuals aged 21 years and above. We do not knowingly collect Personal Data from any person under the age of 21, and we maintain a comprehensive age verification process as part of our KYC procedures to enforce this restriction.

If bersatu88 becomes aware that Personal Data has been collected from a person under the age of 21 — whether through a misrepresentation during registration or otherwise — the affected Account will be immediately suspended, all funds and bonuses will be frozen pending investigation, and the Personal Data of the underage individual will be deleted in accordance with applicable law.

Parents and guardians who believe their child may have accessed the bersatu88 Platform without authorisation should contact our support team immediately at [email protected].

In the course of delivering its services, bersatu88 may transfer your Personal Data to Data Processors located in jurisdictions outside of Malaysia. Such transfers may occur in connection with our payment processing partners, KYC verification providers, and cloud infrastructure services.

Where Personal Data is transferred internationally, bersatu88 ensures that appropriate safeguards are in place to protect your data, including:

• Contractual data processing agreements incorporating standard data protection clauses with all third-party processors
• Transfer to jurisdictions assessed as providing adequate levels of data protection
• Application of equivalent technical and organisational security measures to transferred data

bersatu88 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or Platform features. Amendments will take effect upon publication of the revised Policy on this page.

Where amendments are material — particularly those that affect your rights or our obligations — bersatu88 will endeavour to provide prior notice via email to your registered address or via an in-Platform notification. The "Last Updated" date at the top of this page reflects the date of the most recent revision.

Your continued use of the Platform following the publication of any Policy amendment constitutes your acknowledgement and acceptance of the revised terms. If you do not accept the revised Policy, you should close your Account in accordance with the process described in our Terms & Conditions.

For all privacy-related enquiries, requests to exercise your data rights, or concerns regarding the handling of your Personal Data by bersatu88, please contact us through the following channels:

• Email (Privacy Enquiries): [email protected] — please include "Privacy Request" in the subject line for faster routing.
• Live Chat: Available 24 hours a day, 7 days a week via the chat widget on the bersatu88 Platform.
• Response Timeline: We aim to acknowledge all privacy requests within 5 business days and resolve them within 30 calendar days. Complex requests involving multiple data categories may take up to 90 days in total.

For additional information on your rights as a player, please refer to our FAQ page or review our Terms & Conditions.