empire88 Privacy Policy

empire88 ("we", "us", "our") operates the online gaming platform accessible at https://empire88.lat (the "Platform"). We are committed to protecting the privacy and personal data of all individuals who interact with our Platform, including registered Members and visitors from across Malaysia — whether you are based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, or elsewhere.

This Privacy Policy describes how empire88 collects, processes, stores, shares, and safeguards personal data in the course of operating the Platform. It should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy.

empire88 acts as the data controller in respect of all personal data collected through the Platform. We process personal data in accordance with applicable data protection legislation and the standards required by our international gaming authority licence.

empire88 collects personal data in the following categories:

• Registration data: Full name, date of birth, nationality, residential address, email address, and mobile phone number provided when creating an empire88 account.
• Identity verification data: Government-issued identity document (e.g., MyKad, passport), selfie images, and proof of address submitted to fulfil Know Your Customer (KYC) obligations required under our gaming licence.
• Financial data: Bank account details, e-wallet identifiers (Touch n Go eWallet, Boost), and transaction history associated with deposits and withdrawals on your empire88 account.
• Gaming activity data: Game sessions, bet histories, wagering records, win/loss data, bonus usage, and responsible gaming tool settings.
• Technical data: IP address, device type, browser type and version, operating system, session timestamps, and pages visited on the Platform.
• Communications data: Records of your interactions with empire88's support team via live chat, including chat transcripts and query resolutions.
• Voluntary data: Any additional information you voluntarily provide to empire88 support or in account feedback.

empire88 uses collected personal data for the following purposes:

• Account administration: Creating, maintaining, and verifying your empire88 account, including processing your empire88 login credentials securely.
• Transaction processing: Facilitating deposits and withdrawals via your chosen Malaysian payment method, including reconciliation and fraud prevention.
• Gaming service delivery: Enabling access to casino games, slots, sportsbook markets, Plinko, and all other Platform features associated with your account.
• KYC and regulatory compliance: Verifying your identity and age (21+) in accordance with our gaming authority licence obligations, and fulfilling anti-money laundering (AML) and counter-terrorist financing (CTF) requirements.
• Responsible gaming: Monitoring gaming behaviour to identify indicators of problem gambling and applying player protection tools where appropriate, including self-exclusion, deposit limits, and session time restrictions.
• Customer support: Responding to enquiries, resolving disputes, and providing technical assistance via empire88's 24/7 live chat support service.
• Marketing communications: Where you have provided consent, sending you information about promotions, bonuses, and relevant empire88 product updates. You may withdraw consent at any time via your account preferences.
• Platform improvement: Analysing aggregated and anonymised usage data to improve the performance, security, and functionality of the empire88 Platform.
• Fraud and security: Detecting, investigating, and preventing fraudulent activity, unauthorised access, and abuse of the Platform.

empire88 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you as a registered Member of the empire88 Platform — including account management, game access, and payment processing.
• Legal obligation: Processing required to comply with our obligations under applicable gaming authority regulations, including KYC, AML, CTF, and responsible gaming requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement where such interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing purposes, where your consent has been obtained and can be withdrawn at any time without affecting the legality of processing conducted prior to withdrawal.

empire88 does not sell your personal data to third parties. We may share your personal data in the following limited circumstances:

• Game and technology providers: Licensed game studios and infrastructure providers who supply the casino, slots, sportsbook, and Plinko products available on the Platform. These parties process data only to the extent necessary to deliver their services and are bound by data processing agreements.
• Payment processors: Financial institutions and e-wallet operators (including those facilitating Touch n Go eWallet, Boost, Maybank, CIMB, and Public Bank transactions) as required to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC service providers engaged to verify identity documents and perform age verification checks.
• Regulatory authorities: Gaming authority regulators, law enforcement agencies, or other governmental bodies where disclosure is required by applicable law, court order, or regulatory mandate.
• Professional advisers: Legal, audit, and compliance advisers subject to professional confidentiality obligations where their engagement requires access to Member data.

All third-party data recipients are required to implement appropriate technical and organisational safeguards consistent with the data protection standards applied by empire88.

empire88 uses cookies and similar tracking technologies on the Platform to enhance your user experience, maintain your login session, analyse traffic patterns, and deliver relevant content. The following categories of cookies are used:

• Essential cookies: Required for the Platform to function, including session management, empire88 login state persistence, and security token validation. These cannot be disabled.
• Analytical cookies: Used to collect aggregated data on how Members navigate the Platform, which pages are visited most frequently, and where technical errors occur. Data is processed in anonymised form.
• Functional cookies: Store your preferences such as language settings, game lobby view, and responsible gaming tool configurations.
• Marketing cookies: Used where you have consented to receive personalised promotional content. These may track your activity across sessions to serve relevant bonus and game recommendations.

You may manage cookie preferences via your browser settings. Disabling non-essential cookies will not affect your ability to access core empire88 Platform features, but may limit certain personalisation functions.

empire88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Active accounts: Personal data is retained for the duration of the Member relationship and for a minimum of five (5) years following account closure, as required by our gaming authority licence for AML audit purposes.
• Transaction records: Financial transaction data, including deposit and withdrawal records, is retained for a minimum of seven (7) years in accordance with applicable financial record-keeping obligations.
• Support communications: Live chat transcripts and support correspondence are retained for three (3) years from the date of the interaction.
• Marketing data: Contact data processed on the basis of consent for marketing purposes is retained until consent is withdrawn, following which it will be deleted within 30 days.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with empire88's data destruction procedures.

empire88 implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• End-to-end SSL/TLS encryption across all pages of the empire88 Platform, including the empire88 login page, account dashboard, and all transaction pages.
• Encrypted storage of passwords and sensitive authentication credentials using industry-standard hashing algorithms.
• Segregation of Member personal data from operational and marketing data environments.
• Access controls limiting internal access to personal data on a strict need-to-know basis.
• Regular security assessments and penetration testing of Platform infrastructure.
• Anomaly detection systems that flag unusual empire88 login patterns, such as access from unrecognised devices or locations outside Malaysia, for security review.

Notwithstanding these measures, no data transmission over the internet can be guaranteed as completely secure. Members are responsible for maintaining the confidentiality of their own empire88 login credentials and should contact support immediately if they suspect unauthorised account access.

As a data subject, you have the following rights in respect of your personal data held by empire88. To exercise any of these rights, contact empire88 support via the 24/7 live chat service or by email at [email protected] (plain text — not a clickable link):

• Right of access: You may request confirmation of whether empire88 holds personal data about you and receive a copy of that data.
• Right to rectification: You may request correction of inaccurate or incomplete personal data held about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to empire88's overriding legal obligations to retain certain data.
• Right to restriction: You may request that we restrict processing of your personal data in certain circumstances, such as where you contest its accuracy.
• Right to data portability: Where processing is based on consent or contractual necessity, you may request receipt of your personal data in a structured, machine-readable format.
• Right to object: You may object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests grounds, though such processing may continue where empire88 demonstrates compelling legitimate grounds.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

empire88 will respond to all data rights requests within 30 calendar days of receipt. Where a request is complex or numerous, this period may be extended by a further 60 days with prior notification to the requestor.

The empire88 Platform is strictly intended for individuals aged 21 years and above. empire88 does not knowingly collect, process, or retain personal data of persons under the age of 21. If empire88 becomes aware that personal data of an underage individual has been collected, such data will be deleted immediately and the associated account will be permanently closed.

If you believe that an underage individual has registered on the empire88 Platform, please contact our support team via live chat immediately so that appropriate action can be taken without delay.

The empire88 Platform may contain links to third-party websites or services (for example, game provider demonstration pages or payment processor portals). empire88 has no control over the privacy practices or content of third-party sites and accepts no responsibility for their data handling practices. Members are advised to review the privacy policies of any third-party sites they visit.

empire88 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, our gaming authority licence obligations, or our operational data processing practices. The updated version will be published on this page with a revised "Last updated" date.

Where amendments are material, empire88 will endeavour to notify Members via the registered email address or via an in-Platform notification prior to the changes taking effect. Continued use of the empire88 Platform following publication of updated Terms constitutes acceptance of the revised Privacy Policy.

If you have questions, concerns, or requests relating to this Privacy Policy or empire88's handling of your personal data, please contact our Data Protection team via:

• Live Chat: Available 24/7 via your empire88 account dashboard.
• Email: [email protected] (plain text — not a clickable link). Please include your registered username and the nature of your enquiry.

empire88 aims to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 calendar days, or such shorter period as may be required by applicable law.