Privacy Policy seru88 — Malaysia User Data Security

1 Introduction

Seru88 ("we", "Platform") is an online gaming platform operating under a recognised international licence, providing services to users across Malaysia. We understand that your trust is the most valuable asset we hold, and we take our responsibility to protect every user's privacy seriously.

This Privacy Policy ("Policy") provides a full and transparent explanation of how seru88 collects, processes, stores, and protects your personal data when you use the website seru88.bio, our mobile app, or any related services. This policy also explains your rights as a data owner and how to exercise them.

We fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable international data protection standards. Should there be any changes to how we handle your personal data, we will update this Policy and proactively notify you.

2 Data We Collect

Seru88 only collects data that is strictly necessary to provide you with a safe, efficient and responsible service. The following are the categories of data we collect:

2.1 Data You Provide Directly

• Identity Information — full name, date of birth, identity card or passport number.
• Contact Information — email address, phone number, residential address.
• Financial Information — bank account number, account holder name, bank name for deposit and withdrawal purposes.
• KYC Documents — copies of identity card, utility bills, and bank statements submitted during the verification process.
• Account Information — username, password (stored in encrypted hash form), account preferences.

2.2 Automatically Collected Data

• Technical Data — IP address, browser type, operating system, screen resolution, mobile device data.
• Usage Data — pages visited, access times, in-platform actions, games played, wagering amounts.
• Location Data — general location based on IP address for regional compliance purposes.
• Cookies and Session Data — login session information, language preferences, display settings.

3 How We Use Your Data

Every piece of data we collect is used for legitimate and transparent purposes. The following are the primary ways we use your information:

4 Data Sharing

Seru88 does not sell, rent, or trade your personal data. However, under certain limited circumstances, we may share your data with the following parties:

• Payment Service Providers — FPX providers, digital wallets, and other payment platforms required to process your financial transactions. They are bound by strict confidentiality agreements.
• KYC Service Providers — third-party identity verification companies used to verify user documents and identities for compliance purposes.
• Technical Infrastructure Providers — cloud computing and hosting services that store and process data on our behalf under strict data processing agreements.
• Legal Authorities — when required by law, court order, or a valid regulatory directive.
• Audit & Compliance — external auditors and certification bodies that assess our compliance with industry standards and relevant regulations.

5 Cookies & Tracking Technologies

Seru88 uses cookies and similar tracking technologies to enhance your experience on our platform. The types of cookies we use are as follows:

• Essential Cookies — required for core platform functions such as login session management and security. These cookies cannot be disabled.
• Performance Cookies — collects information on how you use the platform to help us improve site functionality and speed.
• Preference Cookies — remembers your preferences such as language, display settings, and game preferences for a more personalised experience.
• Analytics Cookies — helps us understand aggregate usage patterns for continuous platform improvement.

You can manage your cookie settings through your browser at any time. However, disabling certain cookies may affect the functionality of the seru88 platform.

6 Data Security

Seru88 continuously invests in security infrastructure to ensure your data is always protected. The technical and organisational security measures we implement include:

• 256-bit SSL/TLS encryption for all data in transit.
• Database-level encryption for sensitive information such as passwords and financial details.
• Multi-layered firewall protection and real-time intrusion detection systems (IDS).
• Role-based access control (RBAC) ensuring staff can only access data relevant to their responsibilities.
• Regular security audits by independent third parties and quarterly penetration testing.
• A comprehensive incident response plan with a maximum notification period of 72 hours.
• Automated encrypted data backups with recovery capabilities tested on a regular basis.

7 User Rights

Under Malaysia's PDPA and our privacy policy, you have the following rights regarding your personal data:

To exercise any of the above rights, contact our data protection team via support email or live chat. We will process your request within 14 business days.

8 Data Retention & Deletion

Seru88 retains your personal data only for as long as necessary to fulfil the purposes stated in this Policy or as required by law:

• Active Account Data — retained for the duration of your active account plus 7 years after account closure for legal and tax compliance purposes.
• Financial Transaction Records — retained for a minimum of 7 years in accordance with the Financial Services Act and anti-money laundering (AML) regulations.
• KYC Documents — retained for 5 years after the business relationship ends in accordance with international compliance requirements.
• Security Logs — retained for 2 years for security investigation and digital forensics purposes.
• Marketing Data — deleted immediately upon withdrawal of consent or unsubscription from marketing communications.

Once the retention period expires, your data will be securely deleted or anonymised in accordance with our established data deletion procedures.

9 Children's Privacy

Seru88 is a gaming platform dedicated exclusively to individuals aged 21 years and above. We do not knowingly collect personal data from individuals below the stipulated minimum age. We employ a strict age verification process during registration to ensure only eligible users can access our platform.

Should we discover that personal data of an individual under the age of 21 has been collected without our knowledge, we will take immediate steps to delete that data and close the relevant account.

10 Privacy Policy Amendments

Seru88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or technological developments. Whenever we make significant changes, we will:

• Displaying a clear notice on the seru88 homepage at least 14 days before changes take effect.
• Sending email notifications to all registered users with active accounts.
• Updating the "Last Updated" date at the top of this document.
• Maintaining previous versions of this Policy in an archive accessible upon request.

Your continued use of the seru88 platform after the effective date of any amendment constitutes your acceptance of the updated Policy.

11 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our Data Protection Officer through the following channels:

• Live Chat: Available 24/7 via the chat icon on the seru88 platform — the fastest way to get a response.
• Email: [email protected] (displayed as plain text only)
• Response Time: We are committed to responding to all privacy enquiries within 2 business days.

If you are dissatisfied with how we handle your privacy complaint, you have the right to submit a complaint to the Department of Personal Data Protection Malaysia or the relevant regulatory authority in your country.