Skor88 Privacy Policy —
Your Personal Data Protection

Skor88 collects various types of personal information to enable us to provide a safe, efficient and high-quality service to members. The type of information collected depends on how you interact with our platform.

Information you provide directly:

• Full name as shown on your official identification document
• Identity Card number (MyKad) or passport number
• Date of birth for age verification
• Active email address and mobile phone number
• Current residential address
• Bank account or digital wallet information for financial transaction purposes
• Copies of KYC documents such as identity card, driving licence, or passport

Information collected automatically:

• IP address and location information (country/region)
• Device type, operating system, and web browser version used
• Login session data including usage time and duration
• Gaming activity history and wagering records
• Complete financial transaction records including deposits and withdrawals
• Cookie data and other related tracking technologies

Skor88 only uses your personal data for legitimate and transparent purposes. We do not use your data for any purpose unrelated to the provision of our online casino platform services.

• Identity verification and KYC — to ensure only eligible individuals access our platform, in compliance with legal requirements.
• Financial transaction processing — to process deposits, withdrawals and fund transfers safely and promptly.
• Account management — to provide, maintain and upgrade your member account.
• Fraud prevention and security — to detect suspicious activity, protect your account and maintain platform integrity.
• Service communications — to send important notifications related to your account, transactions and policy updates.
• Legal compliance — to fulfil obligations under PDPA 2010 and applicable financial regulations.
• Platform enhancement — to analyse usage patterns and improve the overall user experience.
• Customer support — to help resolve enquiries, complaints and technical issues you report.

Skor88 takes a cautious approach to sharing members' personal data with external parties. We only disclose your information in limited and lawful circumstances as follows:

• Payment service providers — Payment gateway providers such as FPX, Touch 'n Go and GrabPay receive transaction data necessary to process your fund transfers securely.
• Gaming service providers — Third-party game software providers supporting our platform may receive data required for game technical operations only.
• Regulatory authorities — We fully comply with any lawful directives from government authorities, law enforcement bodies or courts requiring data disclosure.
• KYC service providers — Trusted third-party identity verification partners are used to authenticate your identification documents.
• Auditors and professional advisors — Parties involved in financial audits, legal compliance or professional advisory services who are bound by strict confidentiality obligations.

All third parties we work with are required to sign data protection agreements that prohibit them from using your information beyond the permitted scope. They are not allowed to sell, share or disclose your data to any other party.

Skor88 invests seriously in digital security infrastructure to ensure your personal data is always protected. The security measures we implement encompass multiple layers of protection:

• 256-bit SSL encryption on all data transmissions between your browser and our servers.
• Encrypted database where sensitive data is stored in a format readable only by authorised systems.
• Role-based access control ensuring only authorised staff can access specific data according to their role requirements.
• Two-factor authentication (2FA) available for all member accounts as an additional login protection layer.
• 24/7 security monitoring by our cybersecurity team to detect and respond to any threats swiftly.
• How Skor88 Handles conducted by independent third parties to identify and remediate any system vulnerabilities.
• Multi-layered firewall and intrusion detection systems protect our server infrastructure from external attacks.

While we take all reasonable precautions, no digital system can be guaranteed 100% secure against all threats. In the event of a data breach affecting your information, we are committed to notifying you within the timeframe required by applicable law.

The skor88 platform uses cookies and similar tracking technologies to enhance the user experience and maintain the security of your login session. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies — Required for core platform functions such as login session management and security. These cookies cannot be disabled without affecting site functionality.
• Performance Cookies — Collect anonymous information about how you use our site to help us improve platform performance and usability.
• Functional Cookies — Store your preferences such as language and display settings so you do not need to reset them each time you log in.
• Analytics Cookies — Help us understand platform traffic and usage patterns to make better decisions about new feature development.

You can control or block the use of cookies through your web browser settings at any time. However, blocking essential cookies may affect certain functions of the Skor88 platform.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data held by Skor88. We fully respect and facilitate the exercise of these rights.

Skor88 retains your personal data for as long as your account is active or as long as needed to provide the services you requested. Once an account is closed, we will retain your data for the following periods before permanent deletion:

• Financial transaction records — retained for seven (7) years from the transaction date, in line with Malaysia's financial legal requirements.
• KYC Documents — retained for five (5) years after account closure for anti-money laundering (AML) compliance purposes.
• Activity and session logs — retained for two (2) years for security and dispute resolution purposes.
• Support communication records — retained for three (3) years for quality control and complaint resolution purposes.
• Cookie and tracking data — automatically cleared or expired according to cookie type within 30 days to 24 months.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to your identity. This deletion process is carried out using methods that comply with international security standards.

Skor88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements or platform service improvements. Whenever amendments are made, we will:

• Updating the "Last Updated" date shown at the top of this page.
• Displaying an in-platform notification on skor88 when you first log in after an amendment.
• Sending an email notification to your registered email address for material or significant amendments.

We encourage you to review this Privacy Policy page periodically to stay informed about how we protect your information. Continued use of the Skor88 platform after any amendments take effect will be considered your acceptance of the latest version of the policy.

If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your personal data, our team is ready to assist.