egroup88 Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how egroup88 ("egroup88", "we", "us", "the Company") collects, uses, stores, discloses, and otherwise processes the personal data of individuals who access or use the egroup88 Platform at https://egroup88.win ("the Platform"), including registered players, prospective players, and visitors to the website.

This Policy applies to all personal data processed by egroup88 in connection with the Platform, including data collected through the registration process, gameplay activity, financial transactions, customer support interactions, and your general use of the website. By using the Platform or registering an egroup88 account, you acknowledge that you have read, understood, and consent to the data practices described in this Policy.

This Policy is to be read in conjunction with our Terms & Conditions, which also form part of your agreement with egroup88.

2. Data Controller

For the purposes of applicable data protection law, egroup88 is the data controller in respect of the personal data it processes about you through the Platform. If you have any queries regarding this Policy or wish to exercise your data rights, please refer to Section 14 (Contact and Data Requests) of this Policy.

3. Personal Data We Collect

egroup88 collects the following categories of personal data:

• Identity Data: Full legal name, date of birth, nationality, and a copy of your government-issued identification document (Malaysian MyKad or passport) submitted during KYC verification.
• Contact Data: Malaysian mobile telephone number (+60), email address (if provided), and residential address where required for regulatory compliance.
• Account Data: Username, account ID, account registration date, login history, and account security settings.
• Financial Data: Deposit and withdrawal transaction records, payment method identifiers (e-wallet account references, masked bank account details), and transaction amounts in Malaysian Ringgit (MYR). egroup88 does not store full payment card numbers.
• Gaming Activity Data: Game session logs, wager amounts, game outcomes, bonus redemption history, and sportsbook betting activity including markets wagered on.
• Technical Data: IP address, browser type and version, device type and operating system, session duration, pages visited on the Platform, and referring URL.
• Communications Data: Records of interactions with the egroup88 customer support team via live chat or written correspondence.
• Responsible Gaming Data: Records of any deposit limits, loss limits, cooling-off periods, or self-exclusion elections made through your egroup88 account.

4. How We Collect Personal Data

egroup88 collects personal data through the following means:

• Direct submission: Data you provide when registering your egroup88 account, completing KYC verification, making deposits or withdrawals, or contacting customer support.
• Automated collection: Technical data collected automatically when you visit or interact with the Platform, including through cookies, server logs, and similar tracking technologies (see Section 8).
• Third-party sources: Identity verification service providers used by egroup88 to validate your KYC documents; fraud detection and anti-money laundering screening services; and payment processors used to facilitate transactions on the Platform.

5. Purposes and Legal Basis for Processing

egroup88 processes your personal data for the following purposes and on the following legal bases:

• Account registration and management — necessary for the performance of our contract with you as an egroup88 player.
• Identity verification and KYC compliance — necessary to comply with our legal and regulatory obligations under applicable gaming authority requirements, including age verification (21+ requirement) and anti-money laundering obligations.
• Processing deposits and withdrawals — necessary for the performance of our contract with you and to comply with financial services regulations applicable to egroup88's payment processors.
• Providing and improving gaming services — legitimate interest in maintaining and enhancing the quality of the egroup88 Platform for all players.
• Customer support — legitimate interest in resolving player enquiries and maintaining service quality.
• Fraud prevention and platform security — legitimate interest and legal obligation to detect, investigate, and prevent fraudulent activity, collusion, and money laundering.
• Responsible gaming monitoring — legal obligation to identify and support players who may be exhibiting signs of problem gambling, in accordance with our gaming licence conditions.
• Marketing communications — with your consent only, where you have opted in to receive promotional communications from egroup88. You may withdraw consent at any time from your account settings.

6. Sharing of Personal Data

egroup88 does not sell or rent your personal data. We may share your data with the following categories of recipients:

• Payment service providers: To process your MYR deposits and withdrawals via Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, and card processors.
• Identity verification and KYC providers: Third-party services engaged by egroup88 to verify the authenticity of identity documents and screen against regulatory watchlists.
• Game software providers: Licensed gaming studios whose games are integrated into the egroup88 Platform receive session and outcome data necessary to operate their software.
• Regulatory and law enforcement authorities: Where egroup88 is legally required to disclose personal data in connection with investigations, court orders, or compliance with its gaming licence obligations.
• IT and security service providers: Cloud hosting, cybersecurity, and platform infrastructure providers operating under strict contractual data processing agreements with egroup88.

All third parties with whom egroup88 shares personal data are contractually required to process such data in accordance with applicable data protection standards and solely for the purposes for which it was shared.

7. International Data Transfers

In operating a global platform infrastructure, egroup88 may transfer personal data to servers or service providers located outside Malaysia. Where such transfers occur, egroup88 ensures that appropriate safeguards are in place — including contractual data transfer agreements aligned with internationally recognised data protection standards — to ensure your personal data receives an equivalent level of protection to that afforded within Malaysia.

8. Cookies and Tracking Technologies

The egroup88 Platform uses the following categories of cookies and similar technologies:

• Strictly necessary cookies: Essential for the Platform to function, including session authentication cookies that keep you logged in to your egroup88 account during a visit. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and last-visited game categories to improve your egroup88 experience across sessions.
• Analytics cookies: Used by egroup88 to understand aggregate Platform usage patterns — which pages are visited, how long sessions last, and where players encounter errors. This data is anonymised and used solely for Platform improvement.

egroup88 does not deploy third-party advertising or behavioural retargeting cookies without your explicit consent. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the egroup88 Platform.

9. Data Retention

egroup88 retains personal data for the following periods:

• Account and identity data: For the duration of your active egroup88 account and for a minimum of five (5) years following account closure, as required by our gaming licence and anti-money laundering obligations.
• Financial transaction records: Minimum seven (7) years from the date of each transaction, in compliance with financial record-keeping requirements.
• Gaming activity logs: Minimum three (3) years from the date of each session, for dispute resolution and regulatory audit purposes.
• Technical and log data: Up to twelve (12) months, after which it is aggregated and anonymised.
• Marketing consent records: Until consent is withdrawn, plus a reasonable period thereafter to evidence the historical consent.

Following the expiry of applicable retention periods, egroup88 will securely delete or anonymise personal data so that it can no longer be linked to any individual.

10. Security Measures

egroup88 implements technical and organisational security measures proportionate to the risks associated with processing your personal data, including:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and egroup88 servers.
• Encryption at rest for sensitive data including identity documents and financial records.
• Role-based access controls limiting data access to authorised personnel only.
• Regular security assessments and penetration testing of the egroup88 Platform infrastructure.
• Incident response procedures including prompt notification obligations in the event of a data breach affecting your personal data.

No data transmission over the internet is completely secure. While egroup88 takes all reasonable precautions, we cannot guarantee the absolute security of data transmitted to or from the Platform.

11. Your Rights as a Data Subject

Subject to applicable data protection law, you have the following rights in respect of your personal data held by egroup88:

• Right of access: To request a copy of the personal data egroup88 holds about you.
• Right of rectification: To request correction of inaccurate or incomplete personal data.
• Right to erasure: To request deletion of your personal data, subject to egroup88's legal retention obligations.
• Right to restriction of processing: To request that egroup88 limit how it processes your personal data in certain circumstances.
• Right to data portability: To receive your personal data in a structured, machine-readable format where technically feasible.
• Right to object: To object to processing of your personal data based on egroup88's legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact egroup88 as described in Section 14. We will respond to verified requests within thirty (30) calendar days. Some requests may be subject to identity verification before egroup88 can act on them.

12. Children and Minors

The egroup88 Platform is strictly for individuals aged 21 years and above. egroup88 does not knowingly collect personal data from any person under 21 years of age. If we become aware that personal data has been collected from an individual under 21 — including through fraudulent registration — that account will be immediately closed, all data associated with it deleted to the extent not required by law, and any balance forfeited. Parents and guardians are encouraged to implement appropriate parental controls on devices accessible to minors.

13. Changes to This Privacy Policy

egroup88 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform features. Material changes will be communicated to registered egroup88 players via the email address on file or through a prominent notice on the Platform. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision. Your continued use of the Platform following notification of changes constitutes acceptance of the revised Policy.

14. Contact and Data Requests

For all privacy-related enquiries, requests to exercise your data rights, or to report a concern about how egroup88 handles your personal data, please contact our support team via live chat inside your egroup88 account dashboard, or in writing at:

Email: [email protected]

Please include your full name and registered egroup88 account username in all written data requests. Do not include your password, payment card details, or full identity document numbers in email correspondence.