Bear88 Privacy Policy — Malaysian Player Data Protection

Bear88 collects your personal information only when it is genuinely necessary to provide a safe, responsible, and quality service. We do not collect irrelevant or excessive data. The following are the categories of information we collect:

Account Registration Information:

• Full name as it appears on your official identification document (MyKad or passport)
• Date of birth for age verification (18 years and above)
• An active email address you own
• Mobile phone number registered in Malaysia
• Password stored in hashed form — we do not store your password in plain text
• Current residential address

Identity Verification Information (KYC):

• A copy of a valid national ID (MyKad) or passport
• A selfie for liveness verification (to confirm the documents belong to the actual applicant)
• Proof of current address such as a utility bill or bank statement (if required)

Financial Information:

• Bank account number or e-wallet details for deposit and withdrawal purposes
• History of deposit and withdrawal transactions on the bear88 platform
• Payment methods used (FPX, Touch 'n Go, GrabPay, Boost, and others)

Platform Usage Data:

• Gaming activity records including bets, wins, and session history
• IP address, device type, operating system, and web browser used
• Login times, session duration, and general usage patterns

The data we collect is used responsibly and only for legitimate purposes related to the operation of the bear88 platform. We never sell your personal data to external parties for advertising or marketing purposes.

We also use aggregated, anonymised usage data to understand platform usage patterns, improve the user experience, and detect security anomalies. Data in this form cannot be used to identify any specific individual.

The security of your data is bear88's top technical priority. We continually invest in security infrastructure to ensure your information remains protected from unauthorised access, data breaches, or misuse.

Protection layers we have implemented:

• 256-bit SSL/TLS encryption: All data transmitted between your device and bear88's servers is encrypted using industry standards. The padlock icon in your browser confirms this secure connection is active at all times.
• Data encryption at rest: Sensitive data including financial information and KYC documents is stored in encrypted form on our servers. Even in the event of a physical breach, the data cannot be read without the correct encryption key.
• Two-factor authentication (2FA): bear88 supports and encourages the use of 2FA for all accounts. This additional security layer ensures only you can access your account, even if your password is compromised.
• Continuous threat monitoring: Our systems monitor login activity and transactions 24 hours a day to detect any suspicious patterns. Any unusual activity will trigger an automatic security review.
• Internal access controls: Only bear88 staff who require access to specific data for their work purposes are permitted. All access is logged and monitored on a regular basis.
• Regular data backups: Your data is securely and regularly backed up to ensure service continuity and rapid recovery in the event of any technical disruption.

Bear88 does not share your personal data with external parties arbitrarily. However, there are limited situations where sharing information is necessary to keep the platform functioning properly and to comply with legal requirements:

Trusted service provider:

• Payment processors: FPX, Touch 'n Go, GrabPay, Boost, and banking partners are required to receive minimum transaction information to process your deposits and withdrawals. All these payment processors are bound by strict confidentiality agreements.
• KYC & identity verification providers: Third-party identity verification services may process your documents on behalf of bear88. They are only permitted to use your data for verification purposes.
• Cloud service provider: bear88's infrastructure relies on enterprise-grade cloud providers that comply with the highest international security standards.
• Gaming partner: Game providers that supply content on our platform may receive the game session data required for game functionality. Information shared is limited and does not include your personal financial details.

Legally mandated disclosures:

• Bear88 will disclose information to the relevant authorities when required by court order, criminal investigation, or a legally valid regulatory requirement.
• In cases involving fraud, money laundering, or other illegal activity, relevant information will be provided to the appropriate enforcement agencies.

Bear88 uses cookies and similar tracking technologies to keep the platform running smoothly and to deliver a better experience for you. Cookies are small files stored on your device when you visit our website.

Types of cookies we use:

• Session cookies: These cookies are required to maintain your login session, store language preferences, and enable core platform features to function. They are automatically deleted when you close your browser.
• Persistent cookies: Used to remember your preference settings so you do not need to reconfigure them each time you log in. These cookies have a limited expiry period.
• Analytical cookies: Helps us understand how players use the platform — which pages are visited most frequently, time spent in each section, and any errors encountered. This data is collected in aggregate form without identifying individuals.
• Security cookies: Used to detect suspicious login attempts and protect your account from unauthorised access.

You can manage or delete cookies through your browser settings at any time. Please note that removing essential cookies may affect core platform functionality. Cookie settings can also be changed under your bear88 Account Settings.

Bear88 fully respects your rights over your personal data. As a bear88 player, you have the following rights regarding your personal information we hold:

• Right to access: You may request a copy of all personal data we hold on your account. We will fulfil this request within 14 business days.
• Right to rectification: If any information in your account is inaccurate or outdated, you have the right to request that we correct it promptly. You may also update much of your information directly through your account settings.
• Right to erasure: Under certain circumstances, you may request that we delete your personal data. Please note that some data may need to be retained for a specific period to comply with legal requirements or to resolve any outstanding issues.
• Right to object to processing: You have the right to object to the use of your data for certain purposes, such as marketing communications. You may unsubscribe from promotional emails at any time via the unsubscribe link.
• Right to data portability: You may request your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to withdraw consent: For any processing that relies on your consent, you may withdraw that consent at any time without affecting your other rights.

To exercise any of the above rights, please contact the bear88 support team via 24/7 live chat. We are committed to responding to all privacy-related enquiries seriously and within a reasonable timeframe.

Bear88 retains your personal data for as long as your account is active and for the period required to fulfil the purposes stated in this Privacy Policy. The following are general guidelines for our retention periods:

• Active account data: Retained for the duration your account is active at bear88.
• Financial transaction records: Retained for a minimum of 7 years after a transaction occurs, in line with anti-money laundering (AML) and tax legal requirements.
• KYC documents: Retained for a minimum of 5 years after the business relationship with you ends, in accordance with compliance requirements.
• Support communication logs: Retained for 2 years for reference purposes and to resolve any disputes that may arise.
• Analytics data (in anonymised form): May be retained for a longer period as it cannot be used to identify individuals.

Once the designated retention period has ended and there is no legal requirement to continue storing your data, it will be securely deleted or anonymised using methods that comply with information security standards.

Bear88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. We are committed to being fully transparent about any changes made.

When a significant change occurs, we will:

• Displaying a clear notice on the home page or your account for at least 7 days before the changes take effect.
• Sending a notification email to your registered email address for changes that materially affect your privacy rights.
• Updating the "Last Updated" date at the top of this document.

Continued use of the bear88 platform after changes take effect constitutes acceptance of the updated Privacy Policy. If you disagree with the changes, you have the right to close your account before they take effect.