cekap88 Privacy Policy

1Introduction

cekap88 ("cekap88", "we", "us", "our") operates the online gaming platform at cekap88.org (the "Platform") and is the data controller responsible for personal data processed in connection with the Platform. This Privacy Policy applies to all Members, registered users, and visitors to the Platform, including those accessing cekap88 from Malaysia and other jurisdictions.

cekap88 is committed to handling personal data in a manner that is lawful, fair, and transparent, and in accordance with applicable data protection legislation including the Personal Data Protection Act 2010 (PDPA) of Malaysia and international data protection standards adopted under the licensing framework within which cekap88 operates.

By registering an account with cekap88, depositing funds, placing wagers, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2Personal Data We Collect

cekap88 collects personal data in the following categories, depending on how you interact with the Platform:

cekap88 does not collect special category data (such as biometric data, health information, or political opinions) unless specifically required by applicable law.

3How cekap88 Uses Your Personal Data

cekap88 uses the personal data collected for the following purposes:

• Account Administration: Creating, maintaining, and securing your cekap88 Member account, including authentication and access management.
• Service Delivery: Processing deposits and withdrawals, awarding bonuses, operating gaming services, and communicating your transaction outcomes.
• Identity Verification (KYC/AML): Verifying your identity and age in compliance with anti-money laundering obligations and to prevent underage gambling. cekap88 is required to conduct due diligence on all Members and to report suspicious transactions where applicable.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, cheating, abuse of promotional offers, and unauthorised account access.
• Responsible Gaming: Monitoring gaming behaviour to identify indicators of problem gambling and administering self-exclusion, deposit limits, and other responsible gaming tools requested by Members.
• Customer Support: Responding to enquiries, resolving disputes, and communicating service updates relevant to your account.
• Marketing Communications: Sending promotional offers, loyalty programme updates, and product announcements, where you have provided consent or where a legitimate interest applies. You may opt out of marketing communications at any time through your account settings.
• Legal Compliance: Complying with applicable legal and regulatory obligations, including responding to lawful requests from competent authorities.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the Platform's performance, user experience, and game offering.

4Legal Basis for Processing

cekap88 processes personal data on the following legal grounds:

• Contractual Necessity: Processing required to perform the contract between cekap88 and the Member, including account management, transaction processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable law, including anti-money laundering obligations, age verification requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing undertaken in pursuit of cekap88's legitimate interests in fraud prevention, platform security, and responsible gaming — where those interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and certain analytics activities, where you have provided explicit consent. You may withdraw consent at any time, without affecting the lawfulness of prior processing.

5Data Sharing and Disclosure

cekap88 does not sell, rent, or trade your personal data to third parties. cekap88 may share personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Processors: Banks, e-wallet operators (including Touch 'n Go, Boost, Maybank FPX, CIMB, Public Bank, RHB Bank), and cryptocurrency service providers, for the purpose of processing financial transactions.
• Identity Verification Providers: Third-party KYC and AML compliance services engaged to verify Member identities and screen against sanctions lists.
• Game Providers: Licensed game studios and platform providers (such as Evolution Gaming, Pragmatic Play, PG Soft) may receive technical identifiers necessary to operate their games on the cekap88 Platform. These parties do not receive your full personal profile.
• Regulatory and Law Enforcement Authorities: cekap88 will disclose personal data to competent authorities where legally required to do so, including under court orders, regulatory investigations, or statutory reporting obligations.
• Technology and Infrastructure Partners: Cloud hosting, security, and platform technology providers engaged under data processing agreements that restrict their use of your data to the purposes specified by cekap88.

6Cookies and Tracking Technologies

cekap88 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies used include:

• Strictly Necessary Cookies: Essential for the Platform to function — enabling login sessions, account authentication, and security features. These cannot be disabled without impacting core Platform functionality.
• Functional Cookies: Remembering your preferences, language settings, and responsible gaming configurations between sessions.
• Analytical Cookies: Collecting anonymised data about Platform usage patterns — such as which pages are visited most frequently and where users encounter errors — to improve the Member experience.
• Marketing Cookies: Where you have consented, tracking engagement with cekap88 communications to deliver more relevant promotional content.

You may manage cookie preferences through your browser settings. Note that disabling functional or analytical cookies may affect some features of the cekap88 Platform.

7Data Retention

cekap88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the duration of your cekap88 membership and for a period thereafter as required by anti-money laundering regulations (typically five to seven years post-account closure).
• Transaction Records: Retained for a minimum of five years from the date of the transaction, in accordance with financial record-keeping obligations.
• KYC and Identity Verification Documents: Retained for the period required under applicable AML legislation, generally five years following the end of the business relationship.
• Support Communications: Retained for three years from the date of the most recent interaction, unless the subject matter requires longer retention.
• Technical/Log Data: Retained for up to twelve months for security and fraud investigation purposes, then deleted or anonymised.

Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised.

8International Data Transfers

cekap88's Platform serves Members in Malaysia and internationally. Your personal data may be processed by cekap88 or its service providers in jurisdictions outside Malaysia. Where such transfers occur, cekap88 ensures that equivalent safeguards are in place, including:

• Contractual clauses requiring the recipient to maintain data protection standards equivalent to those required under Malaysian law;
• Transfers only to jurisdictions or organisations assessed as providing an adequate level of data protection;
• Binding data processing agreements with all international service providers.

9Your Data Rights

Subject to applicable law, cekap88 Members and Platform visitors have the following rights in relation to their personal data:

• Right of Access: You may request a copy of the personal data cekap88 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held in your cekap88 account.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to cekap88's legal retention obligations.
• Right to Restriction: You may request that cekap88 restrict processing of your personal data in certain circumstances, for example while the accuracy of data is disputed.
• Right to Object: You may object to processing of your personal data for direct marketing purposes at any time, with immediate effect.
• Right to Data Portability: Where technically feasible and legally applicable, you may request your personal data in a structured, machine-readable format.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact cekap88 at [email protected]. cekap88 will acknowledge requests within two business days and respond substantively within thirty days, or notify you if additional time is required.

10Children's Privacy

The cekap88 Platform is strictly intended for adults aged 21 years and above. cekap88 does not knowingly collect personal data from persons under the age of 21. If cekap88 becomes aware that personal data has been collected from a person under the minimum age, that data will be deleted and the associated account closed. Age verification is conducted during registration and may be repeated during the lifecycle of a Member's account.

If you believe a minor may have registered on the cekap88 Platform, please contact [email protected] immediately.

11Security Measures

cekap88 implements a layered security architecture to protect personal data against unauthorised access, disclosure, alteration, or destruction. Key measures include:

• End-to-end SSL/TLS encryption for all data in transit between your device and the cekap88 Platform;
• AES-256 encryption for sensitive data at rest;
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis;
• Multi-Factor Authentication (MFA) for administrative access to data systems;
• Regular penetration testing and vulnerability assessments by independent security professionals;
• 24/7 security monitoring and intrusion detection systems;
• Documented incident response procedures, including breach notification protocols.

Notwithstanding these measures, no online platform can guarantee absolute security. Members are encouraged to use strong, unique passwords and to enable Two-Factor Authentication on their cekap88 accounts as additional personal security measures.

12Updates to This Privacy Policy

cekap88 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we offer. When material changes are made, cekap88 will notify registered Members via email or through a prominent notice on the Platform. The effective date at the top of this Policy will be updated accordingly. Your continued use of the cekap88 Platform following any update constitutes your acceptance of the revised Policy.

13Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a complaint about how cekap88 handles your personal data, please contact us at:

cekap88 will investigate all data privacy complaints in good faith and will endeavour to resolve them promptly. If you are not satisfied with cekap88's response, you may refer your complaint to the relevant data protection supervisory authority in your jurisdiction.