Grab888 Privacy Policy – Personal Data Protection for Malaysian Users

Grab888 takes the privacy and personal data protection of Malaysian users extremely seriously. This Privacy Policy has been developed in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and sets out in detail how grab888 handles personal data collected from members and visitors to our platform.

We recognise that user trust is grab888's most valuable asset. That is why we are committed to managing your personal data with full responsibility, transparency, and integrity — not merely because it is a legal obligation, but because we believe Malaysian users deserve complete protection over their personal information.

This Privacy Policy applies to all information collected through the grab888.click website, all associated sub-domains, and any communications between you and the grab888 team via email, live chat, or WhatsApp. This policy forms part of grab888's Terms & Conditions and should be read alongside them.

Grab888 only collects personal data that is necessary for legitimate purposes related to the operation of the platform. The following categories of data may be collected:

Grab888 collects your personal data through several different methods, all for legitimate purposes aimed at providing a better experience for users in Malaysia:

• Account Registration: Information you provide when completing the grab888 registration form — your name, phone number, email address, and password.
• Identity Verification (KYC): Documents submitted to verify your identity when requested, such as a copy of your MyKad or other supporting documents.
• Financial Transactions: Data transmitted automatically when you make a deposit or withdrawal via local Malaysian payment methods.
• Platform Activity: Data automatically generated when you use the grab888 platform — including bets placed, games played, and time spent on the platform.
• Communications: Information you share when contacting the grab888 support team via live chat, WhatsApp, or email at support@grab888.click.
• Cookies & Tracking Technologies: Technical data collected automatically when you visit the grab888 website via cookies and related technologies (described further in Section 7).
• Promotions & Surveys: Information you voluntarily provide when participating in promotions, contests, or completing grab888 customer satisfaction surveys.

Grab888 uses your personal data only for legitimate and transparent purposes. Below is a full list of the ways in which grab888 uses your data:

• Account Operations: To create and manage your grab888 account, and to process login requests and two-factor authentication.
• Transaction Processing: Processing deposits and withdrawals in Malaysian Ringgit (MYR) via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, or FPX — ensuring funds move in and out safely and accurately.
• Identity Verification & Security: To verify the age and identity of users (grab888 is a strictly 18+ platform), and to prevent fraud, money laundering, and unauthorised access.
• Service Provision: Providing access to all grab888 services, including Sports Betting (badminton, Malaysia Super League football, cricket, e-sports), Live Casino, slots, and jackpots.
• Service Communication: Sending important notifications regarding your account, changes to our Terms & Conditions or Privacy Policy, and relevant security information.
• Marketing (with consent): Sending promotional information, bonus offers, and grab888 platform updates to users who have consented to receive marketing communications. You may withdraw your consent at any time.
• Platform Improvements: Analysing aggregated, anonymised usage patterns to enhance the grab888 user experience, develop new features, and improve platform performance.
• Legal Compliance: To fulfil legal obligations under applicable Malaysian law, including PDPA 2010, anti-money laundering (AMLA) legislation, and valid court orders.

Grab888 does not share your personal data with third parties without a legitimate basis. There are a limited number of circumstances in which data sharing may occur, and all are subject to strict safeguards:

• Trusted Service Providers: grab888 works with a select group of third-party service providers — including local Malaysian payment processors, certified cloud service providers, and gaming software vendors — who require limited access to certain data in order to deliver their services. All such providers are bound by strict confidentiality agreements and are only permitted to use data in accordance with grab888's instructions.
• Legal Requirements: grab888 may disclose personal data when required by Malaysian law, a valid court order, or a request from a competent Malaysian authority in connection with a criminal investigation or regulatory compliance.
• Fraud Prevention: In cases involving serious suspected fraud, money laundering, or other unlawful activity, grab888 reserves the right to share relevant information with the appropriate Malaysian authorities.
• Business Restructuring: In the event of a merger, acquisition, or sale of grab888's assets, user data may be transferred as part of that transaction, subject to prior notification to users and protections equivalent to those in this Privacy Policy.

In all of the above cases, grab888 ensures that data sharing is carried out with adequate safeguards and only to the extent necessary for the stated purpose.

Grab888 continuously invests in security infrastructure to protect the personal and financial data of all Malaysian users. The following are the key security measures we have in place:

• Two-Factor Authentication (2FA): An additional security layer is available for your grab888 account — an SMS verification code is sent to your registered Malaysian mobile number each time you log in from a new device.
• 24/7 Monitoring: The grab888 security team continuously monitors all platform activity to detect and address any suspicious behaviour or unauthorised access attempts before they cause harm.
• Internal Access Controls: Access to user personal data within grab888's internal systems is restricted to staff who require it to perform their job functions, with all access logged and regularly audited.
• Secure Data Backup: User data is regularly backed up to secure, isolated locations to ensure recovery is possible in the event of a technical failure or unforeseen disaster.
• Regular Security Testing: grab888 conducts regular penetration testing and vulnerability assessments by independent security experts to ensure our systems maintain the highest level of protection at all times.

While grab888 takes all reasonable steps to protect your data, we want to remind you that no system is one hundred percent foolproof. You are also responsible for keeping your grab888 account password secure and ensuring that no one else has access to the device you use to log in.

Grab888 uses cookies and similar tracking technologies to enhance the user experience on our platform. Below is an overview of the types of cookies we use:

• Essential Cookies: Required for the core functions of the grab888 platform — including maintaining your login session, remembering language preferences, and ensuring security features work correctly. These cookies cannot be disabled without affecting platform functionality.
• Performance & Analytics Cookies: Helping grab888 understand how users interact with the platform — which pages are visited most, how long users spend on each page, and where they encounter difficulties. This allows us to continuously improve the user experience. Data is collected in aggregate form and does not identify individuals.
• Functional Cookies: Storing your personal preferences such as favourite markets, display settings, and notification choices so you do not need to reconfigure them each time you log in to grab888.
• Session Cookies: Temporary cookies that are automatically deleted when you close your browser — used to maintain the security of your active grab888 session.

You can manage and delete cookies through your web browser settings. However, disabling certain cookies may affect the functionality of some grab888 platform features. For more information on how to manage cookies, refer to the help documentation for your web browser.

As a grab888 user in Malaysia, you have specific rights over your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA). grab888 is committed to respecting and facilitating the exercise of these rights:

• Right of Access: You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 business days.
• Right to Rectification: If you find that the personal data we hold about you is inaccurate or out of date, you have the right to request a correction. You can update most of your information directly through your grab888 account settings.
• Right to Withdraw Consent: For data processing that relies on your consent (e.g. marketing communications), you may withdraw that consent at any time through the notification settings in your grab888 account or by contacting our support team.
• Right to Object to Direct Marketing: You may opt out of marketing communications from grab888 at any time by contacting support@grab888.click or using the unsubscribe link in our marketing emails.
• Right to Erasure (within certain limits): Under certain circumstances permitted by law, you may request the deletion of your personal data. This request may not be fully fulfilled if we are required to retain the data for legal compliance or dispute resolution purposes.

To exercise any of the rights above, contact the grab888 privacy team by email at support@grab888.click clearly stating the nature of your request. We will acknowledge receipt within 3 business days.

Grab888 retains your personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required under applicable Malaysian law.

• Active Account: Personal data and activity records are retained for as long as your grab888 account remains active, enabling us to provide you with consistent and uninterrupted service.
• After Account Closure: Upon account closure, grab888 will retain certain data for the period required by Malaysian law — typically between 5 and 7 years for financial records, to comply with tax legislation, anti-money laundering (AMLA) requirements, and audit obligations.
• Marketing Data: If you withdraw your consent to receive marketing communications, grab888 will stop using your data for that purpose within 10 business days of receiving your request.
• Security Logs: Technical and security logs are retained for 12 months for the purposes of security incident investigation and fraud prevention.
• Secure Deletion: Once data is no longer required and there is no legal obligation to retain it, grab888 will securely delete it using procedures that ensure the data cannot be recovered.

The grab888 platform may contain links or references to third-party websites or services in certain contexts. The grab888 Privacy Policy applies solely to the grab888 platform and does not cover any third-party websites or services you may access through those links.

Grab888 is not responsible for the privacy practices or content of third-party websites. We encourage you to read the Privacy Policy of each website you visit independently to understand how they handle your personal data. Your access to any third-party websites is entirely at your own risk.

Malaysian local payment service providers operating alongside grab888 (such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX) have their own Privacy Policies that are separate from grab888's. That said, grab888 only partners with payment providers that uphold high security and privacy standards in Malaysia.

Grab888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, Malaysian legal requirements, or the services we offer. We are committed to doing so in a transparent manner:

• All material changes to this Privacy Policy will be communicated to all grab888 members via their registered email and in-platform notifications at least 14 days before the changes take effect.
• Minor editorial or clarificatory changes may be updated without formal notification, but the revision date will always be displayed at the top of this page.
• The latest version of the grab888 Privacy Policy will always be available on grab888.click for your reference at any time.
• By continuing to use the grab888 platform after the Privacy Policy has been updated, you are considered to have accepted and agreed to the changes. If you do not agree, you have the right to close your account before the changes take effect.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way grab888 handles your personal data, we strongly encourage you to reach out to us directly. The grab888 team is available in Bahasa Melayu 24 hours a day, 7 days a week:

When contacting us regarding privacy matters, please clearly state the nature of your enquiry or request, your grab888 account number (if applicable), and the contact details we should use to send our response. We will acknowledge receipt of your request within 3 business days and aim to resolve all privacy enquiries within 21 business days.