Fafa878 Privacy Policy – Personal Data Protection in Malaysia

1. Introduction

Fafa878 is an online casino and Sports Betting platform operating in Malaysia. We understand that your trust is our most valuable asset, and a large part of that trust depends on how responsibly and transparently we handle your personal data.

This Privacy Policy clearly explains what personal data we collect when you register and use the fafa878 platform, how we use that data, who we may share it with in certain circumstances, how long we retain it, and what your rights are as a data subject under applicable Malaysian law.

Fafa878 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable related regulations. We take a privacy by design approach — meaning privacy protection is built into our systems and processes from the ground up, not added as an afterthought.

2. Personal Data We Collect

2.1 Data You Provide to Us

When registering and using the fafa878 platform, you provide certain personal data to us directly:

• Registration information: Full name, Malaysian phone number, and password (stored in encrypted form, never as plain text).
• Identity verification information (KYC): A copy of your identity document (MyKad or passport) and proof of address when required for legal compliance purposes or withdrawals exceeding a certain limit.
• Financial information: Details of the payment methods used for deposits and withdrawals (DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, FPX via Maybank2u or CIMB Clicks). We do not store full bank account numbers — only the minimum information required to process transactions.
• Support communications: The content of messages you send to the fafa878 support team via live chat, email, or WhatsApp.

2.2 Automatically Collected Data

When you use the fafa878 platform, certain data is collected automatically by our systems:

• Log and usage data: IP address, web browser type, operating system, pages visited within the fafa878 platform, time and duration of visits, games played, and in-platform actions.
• Device data: Device type (mobile phone, laptop, tablet), device identifier, screen resolution, and technical device information required to optimise your experience on the fafa878 platform.
• Transaction data: A complete history of all deposits, withdrawals, bets, and winnings in your fafa878 account — these are financial records required for platform operations and legal compliance.
• Location data: General location information based on IP address, used to verify that you are accessing the platform from Malaysia and to ensure compliance with fafa878's geographic eligibility requirements.

3. How We Use Your Personal Data

Fafa878 uses collected personal data exclusively for the following purposes:

3.1 Platform Operations

• To verify your identity and grant access to your fafa878 account.
• Processing deposits (DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay, FPX) and withdrawal of winnings in MYR.
• Managing your gaming history, account balance, and betting records.
• To contact you regarding technical issues, account updates, or changes to the fafa878 platform that affect you.

3.2 Security & Fraud Prevention

• Detecting and investigating suspicious or potentially fraudulent activity in your fafa878 account.
• Preventing money laundering and other unlawful activities conducted through the fafa878 platform.
• Ensuring that only one valid account is active per individual.
• Monitoring usage patterns to identify potential security risks and take proactive action.

3.3 Legal Compliance

Fafa878 may be required to use and disclose your personal data in order to fulfil legal obligations, including Anti-Money Laundering (AML) and Know Your Customer (KYC) requirements, as well as lawful requests from competent Malaysian authorities.

3.4 Service Improvement

Anonymised usage data (with no personally identifiable information) is used to analyse fafa878 platform usage patterns, identify areas for improvement, and develop better new features for all members. fafa878 will not use your personally identifiable data for analytics purposes without your consent.

3.5 Marketing Communications

With your consent, fafa878 may contact you about promotions, bonuses, new games, and exclusive offers relevant to your gaming interests on the fafa878 platform. You may withdraw your consent to receive marketing communications at any time through your account settings or by contacting our support team.

4. Sharing Data With Third Parties

Fafa878 does not sell, rent, or share members' personal data with third parties for marketing or commercial purposes. Your personal data may be shared with a limited number of third parties only in the following circumstances:

4.1 Service Providers

Fafa878 works with trusted third-party service providers to support platform operations, including:

• Payment providers: To process deposit and withdrawal transactions via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX. These providers receive only the minimum data necessary to process your transaction.
• Game providers: Casino providers such as Evolution Gaming, Pragmatic Play, and PG Soft may receive session data required to technically operate live casino games and slots.
• Cloud and hosting services: Server infrastructure providers that store and process fafa878 platform data under strict confidentiality agreements.

All third-party service providers working with fafa878 are bound by strict data processing agreements and are only permitted to use your data for the specific purposes defined.

4.2 Legal Requirements

Fafa878 may disclose your personal data to competent Malaysian authorities when lawfully required to do so by legislation, court order, or a request from a law enforcement agency in the course of a legitimate criminal investigation. In such circumstances, fafa878 will disclose only the minimum data necessary and, where permitted by law, will endeavour to notify you in advance.

5. Data Security

Fafa878 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

• Encryption in transit: All communications between your browser or app and fafa878's servers are encrypted using TLS 1.3 with AES 256-bit encryption.
• Encryption of stored data: Sensitive data including passwords (stored as irreversible one-way hashes), financial information, and KYC documents are encrypted within the fafa878 database.
• Internal access controls: Access to member data within the fafa878 organisation follows the principle of least privilege — staff can only access the data they need to carry out their specific duties.
• Continuous security monitoring: An automated monitoring system tracks server and database activity around the clock to detect any suspicious or abnormal access.
• Periodic security testing: fafa878 conducts regular penetration testing and independent security audits to identify and address any system vulnerabilities before they can be exploited.
• Fund segregation: Member funds are held separately from fafa878's operational funds in dedicated accounts, ensuring the liquidity and security of your money at all times.

6. Data Retention Period

Fafa878 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or to comply with applicable legal requirements:

• Active account data: For as long as your fafa878 account remains active, and for a specified period after account closure for compliance and dispute resolution purposes.
• Financial transaction records: A minimum of seven (7) years from the date of transaction, in accordance with Malaysia's applicable accounting and AML legal requirements.
• KYC Documents: Throughout the period of account activity and for five (5) years following account closure, for regulatory compliance purposes.
• Support communication logs: Two (2) years from the date of communication, for dispute resolution and service improvement purposes.
• System log data: Six (6) to twelve (12) months for security and technical debugging purposes.

Once the relevant retention period has ended, data will be securely deleted or anonymised so that it can no longer be linked back to your identity.

7. Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files stored on your device when you visit the fafa878 website. They allow the site to "remember" certain information about your visit, improving your browsing experience and enabling specific features to function correctly.

7.2 Types of Cookies Used

• Session cookies: Temporary cookies that are deleted when you close your browser. Used to maintain your logged-in status during your fafa878 gaming session and to ensure session security.
• Preference cookies: To save your preferences such as language and display settings, providing a more personalised experience on the fafa878 platform.
• Analytics cookies: To collect anonymised usage data on how members use the fafa878 platform, helping us understand usage patterns and improve our services. This data contains no information that can personally identify you.
• Security cookies: To help identify and prevent fraud attempts, automated bots, and suspicious activity during your fafa878 session.

7.3 Managing Cookies

You can control and manage cookies through your web browser settings. Most browsers allow you to view, delete, and block cookies. Please note that blocking essential cookies may affect the functionality of the fafa878 platform — including your ability to log in to your account. For guidance on managing cookies in your browser, refer to the relevant browser's help documentation.

8. Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the privacy principles upheld by fafa878, you have the following rights regarding your personal data:

9. Children's Privacy

The fafa878 platform is exclusively for individuals aged 18 years and above. fafa878 does not intentionally collect, process, or store any personal data from individuals under the age of 18. If we discover that a child's personal data has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe your child has registered an account on fafa878 without your permission, please contact our support team immediately at support@fafa878.net so that we may take the appropriate action.

10. Links to Third-Party Websites

The fafa878 platform may contain information about third-party services related to platform operations, such as game providers or payment methods. fafa878's Privacy Policy does not apply to any third-party websites or services that may be linked from our platform. fafa878 is not responsible for the privacy practices or content of such third-party websites. We recommend that you read the privacy policy of any third-party service you use separately.

11. Amendments to the Privacy Policy

Fafa878 reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our privacy practices, platform technology, Malaysian legal requirements, or other legitimate reasons. Amendments take effect upon publication of the latest version on this page, accompanied by a revised "Last Updated" date.

For material amendments — meaning significant changes to how we use your personal data — fafa878 will endeavour to notify you via in-platform notification or email before the changes take effect, giving you the opportunity to review them. Your continued use of the fafa878 platform after the amended Policy is published will be considered your acceptance of the updated Privacy Policy.

12. Contact Us for Privacy Enquiries

If you have any questions, concerns, or complaints regarding fafa878's Privacy Policy or how we handle your personal data, we encourage you to reach out to us directly. The fafa878 privacy team is ready to assist and committed to addressing every enquiry thoroughly and within a reasonable timeframe.