Privacy Policy

This Privacy Policy ("Policy") is published by Proton888 ("the Company", "we", "us", "our"), operator of the online gaming and sports betting platform available at proton888.cam. This Policy applies to all persons who visit, register on, or interact with the Proton888 platform, whether accessed via desktop browser, mobile browser, or any other interface (collectively, "the Platform").

Proton888 is committed to handling the personal data of all users — including registered players across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and throughout Malaysia — with the highest standards of care, transparency, and security. This Policy has been drafted in compliance with applicable data protection principles and is intended to give you a clear, honest account of our data practices.

By registering an account or using any part of the Proton888 Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read in conjunction with our Terms & Conditions.

For the purposes of this Policy, the following terms carry the meanings set out below:

Proton888 collects personal data only to the extent necessary for the purposes identified in this Policy. The categories of data we collect are as follows:

• Full legal name as it appears on your government-issued identification;
• Date of birth (to verify minimum age of 21 years);
• Malaysian NRIC number or passport number;
• Residential address, including city and postcode;
• Gender (where provided voluntarily during registration).

• Email address registered to your account;
• Malaysian mobile phone number;
• Preferred communication channel (email, live chat).

• Deposit and withdrawal history in MYR;
• Payment method identifiers — Touch 'n Go eWallet account reference, Boost wallet reference, GrabPay account reference, DuitNow/FPX bank account details, USDT wallet address;
• Transaction timestamps and amounts;
• Bonus and promotion redemption records.

• IP address at the time of login and transactions;
• Device type, operating system, and browser version;
• Session timestamps and duration;
• Geolocation data (country/city level, derived from IP address).

• Game history, bet records, and wagering patterns;
• Sports markets accessed and betting preferences;
• Responsible gambling tool usage (deposit limits set, session timers activated).

• Records of live chat conversations with our support team;
• Email correspondence regarding account queries, disputes, or verification;
• Voluntary feedback or survey responses submitted by you.

Personal data is collected through the following means:

• Direct Submission — data you provide when registering an account, completing KYC verification, making deposits or withdrawals, or contacting our support team;
• Automated Collection — technical data collected passively through cookies, server logs, and session tracking when you access or interact with the Platform;
• Payment Processors — transaction confirmation data received from our verified Malaysian payment partners (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX-connected banks) upon processing your deposit or withdrawal;
• Identity Verification Partners — where applicable, data returned from third-party KYC service providers used to verify your identity documents;
• Fraud Detection Systems — automated flags and risk scores generated by our internal fraud prevention tools.

We process your personal data for the following specific, legitimate purposes:

Proton888 processes your personal data only where a lawful basis exists. The applicable bases are:

• Contractual Necessity — processing required to fulfil our obligations under the account agreement, including payment processing, account management, and customer support;
• Legal Obligation — processing necessary to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and regulatory reporting obligations;
• Legitimate Interests — processing conducted for purposes of fraud prevention, platform security, responsible gambling monitoring, and platform improvement, where such interests are not overridden by your fundamental rights;
• Consent — where we have obtained your explicit consent for specific processing activities, such as the sending of promotional communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Proton888 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We may share your data only in the following limited circumstances:

We engage trusted third-party service providers to assist in operating the Platform. These include payment processing partners (Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX-connected banks), identity verification providers, cloud hosting services, and fraud detection providers. All processors are bound by contractual data protection clauses that restrict their use of your data to the specific service they are performing for us.

We may disclose personal data to law enforcement, regulatory authorities, or other government bodies where required to do so by applicable law, court order, or regulatory directive. Such disclosures are made strictly to the extent required and are logged internally.

In the event of a merger, acquisition, or sale of all or substantially all of the Company's assets, your personal data may be transferred to the acquiring entity. We will notify registered players via the Platform of any such transfer and the new data controller's identity prior to the effective date.

Outside of the above, your data will not be shared with any third party without your explicit prior consent.

Proton888 retains personal data only for as long as is necessary for the purposes outlined in this Policy, or as required by applicable legal, regulatory, or contractual obligations. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures.

Proton888 uses the following categories of cookies and similar technologies on the Platform:

• Strictly Necessary Cookies — essential for the Platform to function. These include session authentication tokens and security cookies. They cannot be disabled without affecting core functionality;
• Functional Cookies — used to remember your preferences such as language settings, lobby layout, and game history;
• Analytical Cookies — used to collect aggregated, anonymised data about how users interact with the Platform, helping us identify areas for improvement;
• Security Cookies — used by our fraud detection systems to assess risk signals and identify unusual access patterns.

You may manage non-essential cookies through your browser's settings. Most modern browsers allow you to view, block, or delete cookies at any time. Please note that disabling certain cookies may affect the functionality or performance of the Proton888 Platform. The Company does not operate a third-party advertising cookie network.

Proton888 implements robust technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• Encryption of sensitive data at rest, including financial records and identity documents;
• Role-based access controls ensuring that only authorised personnel access personal data on a need-to-know basis;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Multi-factor authentication required for all internal administrative access to data systems;
• Continuous server monitoring with automated alerting for anomalous activity patterns;
• Formal incident response procedures activated immediately upon detection of any suspected data breach.

While we employ best-practice security measures, no data transmission over the internet can be guaranteed to be 100% secure. You are responsible for maintaining the security of your account credentials. Please notify us immediately if you believe your account has been compromised.

As a data subject, you hold the following rights with respect to your personal data held by Proton888. To exercise any of these rights, submit a written request to our support team via live chat or at [email protected]. We will acknowledge your request within 5 business days and respond substantively within 14 business days.

The Proton888 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that an account has been created by a person under the minimum age, we will immediately suspend the account, void any transactions, and securely delete the associated personal data.

If you believe that a minor has registered an account or provided personal data to Proton888, please notify us immediately via live chat or email. We will investigate and take appropriate action without delay.

In order to provide the Proton888 Platform, your personal data may be transferred to and processed in countries outside Malaysia, including locations where our cloud hosting and technology infrastructure partners are based. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable Malaysian data protection principles.

Such safeguards may include contractual data protection clauses with the receiving party, or selection of processors operating under recognised data protection frameworks. No transfer of personal data to an international processor will occur without these safeguards being confirmed.

Proton888 reserves the right to update or amend this Privacy Policy at any time. Material changes — those that significantly affect how your personal data is used or your rights in relation to it — will be communicated to registered users via a prominent notice on the Platform at least 7 days prior to the change taking effect.

Non-material changes, such as formatting corrections or clarifications that do not alter the substance of the Policy, may be made without advance notice. The effective date at the top of this Policy will always reflect the most recent revision.

We encourage you to review this Policy periodically. Continued use of the Platform following the effective date of any amendments constitutes your acceptance of the revised Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the Proton888 support team through the following channels. All data-related enquiries are handled by our designated data protection contact.

Data rights requests (access, erasure, rectification, portability, objection, restriction) must be submitted in writing via email, clearly identifying the nature of your request and the account to which it relates. We will acknowledge receipt within 5 business days and provide a substantive response within 14 business days. Complex requests may require up to 30 days; we will notify you if an extension is necessary.