Privacy Policy — Seri88

Introduction

This Privacy Policy ("Policy") describes how Seri88 ("the Platform", "we", "us", "our") collects, processes, stores, and protects personal data relating to users ("you", "your", "the User") who access or use the seri88 website at https://seri88.click and all associated services.

Seri88 is committed to handling your personal information responsibly, transparently, and in accordance with applicable data protection principles. We recognise that the privacy of our members is a matter of genuine trust, and we take that responsibility seriously.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy. Together, these documents form the complete framework governing your relationship with the seri88 Platform.

Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

Term	Meaning
"Personal Data"	Any information that identifies or could reasonably be used to identify a living individual, including name, contact details, financial information, and device identifiers.
"Processing"	Any operation performed on personal data, including collection, storage, use, disclosure, erasure, or destruction.
"Data Controller"	Seri88 — the entity that determines the purposes and means by which your personal data is processed.
"Data Processor"	A third party that processes personal data on behalf of seri88, under contractual instruction and subject to appropriate data protection safeguards.
"KYC"	Know Your Customer — the identity and age verification process required before withdrawal privileges are activated on a member's account.
"Cookies"	Small text files placed on your device by the Platform's web server for the purposes of session management, analytics, and personalisation.
"AML"	Anti-Money Laundering — regulatory obligations requiring seri88 to monitor transactions and report suspicious activity to the relevant authorities.

Data We Collect

Seri88 collects personal data in several ways: directly from you when you register or interact with the Platform, automatically through your use of the website, and from third-party service providers where necessary. The categories of data we collect are as follows:

3.1 Registration & Account Data

• Full legal name, date of birth, and gender
• Email address, mobile phone number, and residential address
• Username and encrypted password
• Preferred currency (MYR / RM by default for Malaysian users) and language settings
• Referral source (how you found the seri88 platform)

3.2 Identity Verification (KYC) Data

• Copies of government-issued identity documents — Malaysian MyKad, driving licence, or passport
• Proof of residential address — utility bills, bank statements, or official correspondence dated within three months
• Selfie photographs taken for biometric identity confirmation
• Source of funds declarations where required under AML obligations

3.3 Financial Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method identifiers
• Payment method details — e-wallet accounts (Touch 'n Go eWallet, Boost, GrabPay), bank account numbers (Maybank, CIMB, Public Bank, Hong Leong), DuitNow QR IDs, FPX transaction references, and cryptocurrency wallet addresses (BTC, USDT)
• Account balance history and bonus credit/debit records

3.4 Gameplay & Betting Data

• Game session logs including game title, stake amounts, outcomes, and session duration
• Sports betting records including event selection, odds, stake, and settlement outcome
• Responsible gambling tool usage — deposit limits set, cooling-off periods activated, self-exclusion requests

3.5 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session timestamps, page view logs, and navigation paths within the Platform
• Cookie identifiers and similar tracking technologies (see Section 7)

3.6 Communications Data

• Records of Live Chat conversations, emails, and support ticket submissions
• Feedback and survey responses submitted voluntarily by users
• Marketing preference settings and communication opt-in/opt-out records

How We Use Your Data

Seri88 processes your personal data for specific, clearly defined purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes for which we process your data are as follows:

Purpose	Data Used
Account creation and management	Registration data, device data, communication preferences
Identity verification (KYC/AML compliance)	KYC documents, financial data, IP address
Processing deposits and withdrawals	Financial transaction data, payment method details
Delivering gaming services	Gameplay data, account data, device data
Fraud detection and platform security	Device data, transaction data, IP address, session logs
Responsible gambling monitoring	Gameplay data, deposit history, tool usage records
Customer support	Communications data, account data, transaction data
Marketing communications (with consent)	Registration data, communication preferences, gameplay data
Platform improvement and analytics	Technical data, gameplay data (aggregated and anonymised)
Legal and regulatory compliance	All categories where required by applicable law or regulator

Where seri88 intends to use your data for a purpose not listed above, we will notify you in advance and, where required, seek your explicit consent before proceeding.

Legal Basis for Processing

Seri88 relies on one or more of the following legal bases when processing your personal data:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you have agreed to — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with our international gaming licence conditions, AML regulations, and other applicable laws — including KYC verification, suspicious transaction reporting, and record retention requirements.
• Legitimate interests: Processing carried out for purposes that serve seri88's legitimate business interests, provided those interests are not overridden by your fundamental rights. This includes fraud prevention, platform security, and service improvement analytics.
• Consent: Where we rely on consent as the legal basis — primarily for direct marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal. You may update your marketing preferences from within your account settings.

Data Sharing & Third-Party Disclosure

Seri88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the specific circumstances described below, and only to the minimum extent necessary for the relevant purpose.

6.1 Service Providers (Data Processors)

We engage trusted third-party service providers to support the operation of the Platform. These include payment processing partners (including the operators of Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, DuitNow, and FPX infrastructure), identity verification providers, game studios, cloud infrastructure providers, and customer support tools. All such providers operate under contractual data processing agreements that bind them to treat your data with the same level of care as seri88.

6.2 Regulatory Authorities

Seri88 is required under its international gaming licence and applicable AML obligations to disclose certain information to regulatory authorities, law enforcement agencies, or other government bodies where required by law, court order, or regulatory instruction. Such disclosures are made only to the extent required and are not within seri88's discretion to withhold.

6.3 Business Transfers

In the event that seri88 undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may form part of the transferred assets. Where such a transfer occurs, the acquiring entity will be bound by the terms of this Privacy Policy in respect of your data, and you will be notified of any material change in data controller identity.

Cookies & Tracking Technologies

The seri88 Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to improve your user experience, and to gather analytical data that helps us develop better services.

Cookie Type	Required?	Purpose
Essential Cookies	Yes	Session authentication, security tokens, login persistence, and core Platform functionality. Cannot be disabled without breaking the service.
Analytical Cookies	Optional	Aggregate usage data including page views, session duration, and navigation paths. Used to improve Platform performance and content. Data is anonymised before analysis.
Functional Cookies	Optional	Language preferences, currency display settings, and customised interface configurations saved between sessions.
Marketing Cookies	Optional	Tracking of promotional campaign performance and attribution. Only active where you have provided explicit consent. No data is shared with external ad networks.

You may manage your cookie preferences through your browser settings at any time. Please note that disabling essential cookies may affect the functionality of the seri88 Platform and your ability to log in or complete transactions.

Data Retention

Seri88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our gaming licence obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of your account's active status plus a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of verification, or longer where required by regulatory instruction.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications: Retained for three (3) years from the date of the last interaction, unless the communication forms part of an ongoing dispute or legal proceeding.
• Marketing preferences and consent records: Retained for three (3) years from the date of last consent update, or until consent is withdrawn.
• Anonymised analytics data: Retained indefinitely in aggregated, non-identifiable form.

Upon expiry of the applicable retention period, your personal data will be securely deleted or irreversibly anonymised. You may request early deletion of your data subject to the conditions set out in Section 10 (User Rights) of this Policy.

Data Security

Seri88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes, but is not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the seri88 Platform
• Encrypted storage of sensitive data fields including passwords, financial identifiers, and identity document copies
• Two-factor authentication (2FA) available to all registered members and mandatory for administrative access
• Role-based access controls restricting employee access to personal data on a strict need-to-know basis
• Regular third-party penetration testing and independent security audits conducted on a scheduled cycle
• Intrusion detection systems and real-time monitoring for anomalous access patterns or unauthorised data extraction
• Incident response procedures with defined escalation paths and notification timelines in the event of a data breach

In the event of a data breach that is likely to result in a risk to your rights and freedoms, seri88 will notify affected users within a reasonable timeframe, providing information about the nature of the breach, the data affected, and the steps being taken to mitigate the impact.

Your Data Rights

Subject to applicable law and the terms of our gaming licence, you hold the following rights in relation to the personal data seri88 holds about you. To exercise any of these rights, please contact our support team via Live Chat or at [email protected], clearly identifying yourself and the right you wish to exercise.

• Right of Access: You may request a copy of the personal data seri88 holds about you. We will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request its correction. You may update basic account information directly through your account settings panel.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where consent has been withdrawn, or where processing is unlawful. This right is subject to overriding legal obligations — for example, AML record-keeping requirements that mandate retention for a minimum of five years.
• Right to Restriction: You may request that seri88 restrict the processing of your data in certain circumstances, for example while the accuracy of data you have disputed is being verified.
• Right to Data Portability: Where processing is based on your consent or a contract and is carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling. You may also withdraw consent for marketing communications at any time from within your account settings.
• Right not to be subject to automated decision-making: Seri88 does not make decisions with significant legal or similarly significant effects based solely on automated processing of your personal data without human review.

Seri88 will not charge a fee for handling data rights requests submitted in good faith. We reserve the right to decline requests that are manifestly unfounded, excessive, or that would require us to breach a legal obligation.

Children's Privacy

The seri88 Platform is intended exclusively for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. The minimum age restriction reflects the standard applied to casino-style gambling participation applicable in the Malaysian market context.

If seri88 becomes aware that personal data has been collected from an individual who is below the minimum eligible age, the relevant account will be suspended immediately, all associated data will be reviewed under our KYC process, and any funds held will be dealt with in accordance with our Terms & Conditions. Where the individual is a minor, data collected inadvertently will be deleted without undue delay.

If you have reason to believe that a person under the age of 21 has registered or is using a seri88 account, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

Amendments to This Policy

Seri88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. The date of the most recent revision is displayed prominently at the top of this page.

Where material changes are made to this Policy — particularly changes that affect how we use your data or the rights available to you — seri88 will endeavour to provide advance notice via the email address registered to your account, or through a prominent notification displayed on the Platform upon your next login.

Your continued use of the seri88 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you should discontinue use of the Platform and contact our support team to exercise your account closure and data deletion rights.

We recommend reviewing this Privacy Policy periodically — at minimum once every six months — to remain informed of how seri88 manages your personal data.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way seri88 handles your personal data, please contact our dedicated support team through any of the following channels:

• Live Chat: Available 24/7 directly within the seri88 Platform. This is the fastest channel for privacy-related queries, with an average response time of 3–5 minutes.
• Email: [email protected] — please use the subject line "Privacy Request" to ensure your message is routed to the appropriate team. Responses within 24–48 hours on business days.
• Languages: Our support team can handle privacy queries in English, Bahasa Melayu, and Chinese.

For formal data subject access requests, erasure requests, or complaints regarding our data processing practices, please submit your request in writing via email with sufficient information to verify your identity before we process the request.