grab888 Privacy Policy

1.Who We Are

grab888 ("we", "us", "our") operates the online casino and sportsbook platform accessible at grab888.club. For the purposes of this Privacy Policy, grab888 is the data controller responsible for the personal data you provide when registering, transacting, or interacting with the grab888 platform. We serve Members primarily across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Kota Kinabalu, and the wider Malaysian market.

References to "Member", "you", or "your" in this policy refer to any registered grab888 account holder, as well as any visitor who accesses grab888.club regardless of whether they hold an account.

2.Personal Data We Collect

grab888 collects the following categories of personal data, depending on the nature of your interaction with the platform:

• Identity Data: Full name, date of birth, nationality, government-issued identification number (for KYC verification purposes), and copies of identity documents where required.
• Contact Data: Email address, mobile phone number, and residential address.
• Financial Data: Payment method details (e.g., FPX account identifiers, e-wallet account references for Touch 'n Go eWallet, Boost, GrabPay), deposit and withdrawal transaction history, and account balance information. grab888 does not store full card numbers or sensitive authentication data.
• Account & Activity Data: Login credentials (password stored in hashed, non-reversible form), gaming history, bet records, promotional participation history, and responsible gaming settings.
• Technical Data: IP address, browser type and version, device type, operating system, referral source, time zone, and session activity data collected via cookies and server logs.
• Communications Data: Records of correspondence with grab888 customer support, including live chat transcripts and email exchanges.

3.How We Collect Your Data

grab888 collects personal data through the following means:

• Direct collection: Data you provide when registering a grab888 account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical and behavioural data collected automatically through cookies, server logs, and similar tracking technologies when you access and navigate grab888.club.
• Third-party sources: Identity verification and fraud prevention data obtained from licensed identity verification service providers, and transaction data received from payment processors (such as FPX operators, Touch 'n Go eWallet, Boost, and GrabPay).

4.Legal Basis for Processing

grab888 processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to perform the grab888 Member Agreement, including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) regulations, know-your-customer (KYC) requirements under our international gaming authority licensing, and tax reporting obligations.
• Legitimate interests: Processing conducted in the pursuit of grab888's legitimate business interests, including fraud prevention, security monitoring, platform improvement, and responsible gaming programme management, where such interests are not overridden by your rights and interests.
• Consent: Where required by law, and in particular for certain direct marketing communications, grab888 will request your explicit consent before processing. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5.How We Use Your Personal Data

grab888 uses collected personal data for the following purposes:

• Registering and managing your grab888 account, including identity verification and age confirmation (21+ requirement).
• Processing deposits and withdrawals via your nominated payment method, including Touch 'n Go eWallet, Boost, GrabPay, and FPX banking channels.
• Delivering gaming services, tracking game activity, and maintaining bet records for transparency and dispute resolution.
• Applying and administering bonus offers, promotions, and the grab888 VIP programme.
• Complying with AML, KYC, and other regulatory obligations imposed by applicable law and our international gaming authority licensing conditions.
• Detecting, investigating, and preventing fraudulent activity, collusion, money laundering, and other prohibited conduct under the grab888 Terms and Conditions.
• Operating and enforcing responsible gaming tools, including self-exclusion requests and deposit limit settings.
• Improving the grab888 platform through analysis of aggregated usage data, identifying technical issues, and testing new features.
• Communicating with you regarding account-related matters, support queries, and (where consented) promotional offers.

6.Data Sharing & Disclosure

grab888 does not sell, rent, or trade your personal data to third parties for marketing purposes. We share personal data only in the following circumstances:

• Service providers: Payment processors, identity verification providers, IT infrastructure providers, and customer support platform operators engaged by grab888 under binding data processing agreements requiring them to process data only on grab888's instructions and to the same security standard.
• Regulatory authorities: Disclosure to licensing authorities, financial intelligence units, law enforcement agencies, or courts where required or permitted by law, including in response to lawful orders or to meet AML reporting obligations.
• Fraud prevention networks: Sharing of data with licensed fraud prevention and AML screening services to fulfil our regulatory obligations and protect the integrity of the grab888 platform.
• Business transfers: In the event of a merger, acquisition, or restructuring of grab888, personal data may be transferred to the relevant successor entity subject to equivalent privacy protections.

7.Cookies & Tracking Technologies

grab888.club uses cookies and similar technologies to enhance your experience on the platform. Cookies are small data files placed on your device that help us recognise returning Members, maintain session continuity across the grab888 login process, and gather anonymised analytics on platform usage.

• Strictly necessary cookies: Required for the grab888 platform to function, including session management and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences (e.g., language, display settings) to personalise your grab888 experience.
• Analytics cookies: Collect anonymised data on how Members navigate grab888.club to help us improve site performance and usability. No individually identifiable data is shared externally for analytics purposes.

You may configure your browser to refuse non-essential cookies. Please note that disabling certain cookies may affect the functionality of the grab888 platform.

8.Data Retention

grab888 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and our regulatory obligations. Specifically:

• Account and transaction data is retained for a minimum of five (5) years from the date of account closure, as required under applicable AML and gaming regulations.
• Communications data (support transcripts, emails) is retained for three (3) years from the date of the communication.
• Technical and log data is retained for up to twelve (12) months from collection.
• KYC verification documents are retained for the period required under the licensing conditions of our international gaming authority regulator.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data destruction procedures.

9.Data Security

grab888 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption across all pages of grab888.club, including the grab888 login interface and all transaction pages.
• Bcrypt or equivalent hashing for all stored passwords — grab888 does not store passwords in recoverable form.
• Role-based access controls restricting internal access to personal data to authorised personnel only.
• Regular security assessments, penetration testing, and vulnerability management of the grab888 platform infrastructure.
• Incident response procedures for identifying and responding to data security events, including notification obligations where applicable law requires.

While grab888 takes all reasonable steps to protect your data, no internet transmission is entirely risk-free. Members are responsible for maintaining the confidentiality of their own grab888 login credentials.

10.Your Rights

Subject to applicable data protection law, you have the following rights in relation to your personal data held by grab888:

• Right of access: Request a copy of the personal data grab888 holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data where retention is no longer legally required or justified.
• Right to restrict processing: Request that grab888 limit its use of your data in certain circumstances.
• Right to data portability: Request a structured, machine-readable copy of data you have provided to grab888.
• Right to object: Object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time.

To exercise any of these rights, please contact grab888 via Live Chat support or email at [email protected]. grab888 will respond to verified requests within 30 days. Note that certain rights may be limited where data retention is required for regulatory compliance.

11.Children's Privacy

The grab888 platform is strictly for adults aged 21 and above. grab888 does not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from a person under 21, that account will be suspended immediately and all associated data deleted or reported as required under our responsible gaming and licensing obligations. If you believe a minor has registered a grab888 account, please contact our support team immediately.

12.Changes to This Privacy Policy

grab888 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or platform features. Where changes are material, grab888 will notify Members via email or a prominent notice on grab888.club prior to the changes taking effect. The current version of this Privacy Policy is always available at grab888.club/privacy-policy. Continued use of the platform following notification of changes constitutes acceptance of the revised policy.

13.Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by grab888, please contact us through:

• Live Chat: Available 24/7 on the grab888 platform
• Email: [email protected]

grab888 aims to acknowledge all privacy-related inquiries within 48 hours and to provide substantive responses within 30 days of receipt.