Data Protection

Privacy Policy Aqua88 –
Player Personal Data Protection

Your privacy is our priority. This document transparently explains how aqua88 collects, uses, stores, and protects your personal data in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Last Updated: 1 January 2026 PDPA Compliant

Aqua88's Commitment to Your Privacy

Six core principles that form the foundation of how aqua88 handles every player's personal data with full responsibility.

High-Level Data Encryption

All your personal data and financial transactions are protected using 256-bit SSL encryption and the latest TLS protocols. Data is stored on servers secured by multiple layers of security that meet international standards.

No Sale of Data to Third Parties

Aqua88 has never and will never sell, rent, or transfer your personal data to any third party for marketing purposes without your explicit consent. Your data remains entirely yours.

Full Control in Your Hands

You have full rights to access, correct, delete, or transfer your personal data. Privacy settings can be managed directly from your aqua88 account panel at any time without needing to contact support.

Malaysia PDPA Compliance

All aqua88 data handling practices are designed and implemented in accordance with the requirements of Malaysia's Personal Data Protection Act 2010 (PDPA). We undergo regular compliance audits to ensure our security standards remain up to date.

Data Breach Notification

In the event of any security incident involving your data, aqua88 is committed to notifying you within 72 hours of the incident being identified, in line with global data protection best practices.

Data Deletion Upon Request

You have the right to request deletion of your personal data from aqua88's systems upon account closure, subject to mandatory record-keeping requirements under applicable law. The deletion process is completed within 30 business days.

01 Introduction

Welcome to the aqua88 Privacy Policy. This document clearly and transparently explains how aqua88 ("we", "our platform") collects, uses, stores, protects, and shares your personal information when you use our website, mobile app, and all services we offer.

As an online entertainment platform serving players in Malaysia, aqua88 takes data protection responsibilities very seriously. We fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards.

By using the aqua88 platform, you consent to the collection and use of your personal data as described in this privacy policy. If you do not agree, please discontinue use of our platform.

This privacy policy applies to all users of the aqua88 platform, including unregistered visitors, registered members, and users of our mobile app. We encourage you to read this document in full so you understand your rights as a user and our commitment to your privacy.

02 Data We Collect

Aqua88 collects various types of personal data depending on how you interact with our platform. Below is a full breakdown of the data we collect and its sources:

Data You Provide Directly

  • Full name, email address and phone number upon account registration.
  • Identity verification (KYC) details: MyKad identification number, date of birth and verification selfie.
  • Bank account and digital wallet details for deposit and withdrawal purposes.
  • Residential address as updated in your account settings.
  • Any information you share when contacting our customer support.

Automatically Collected Data

  • IP address and device location information (at country/city level).
  • Device type, browser type and operating system used.
  • Login history including date, time, and location.
  • Gaming activity data: game type, play frequency, wagering amounts, and session duration.
  • Cookie and tracking technology data as described in Section 6.

Data Type Summary Table

Data Category Example Primary Purpose
Personal Identity Name, MyKad, date of birth KYC verification & fraud prevention
Contact Information Email, phone number, address Communication & notification delivery
Financial Data Bank account number, transaction records Deposit & withdrawal processing
Technical Data IP address, device type, browser Security & platform improvements
Gaming Data Wagering history, wins, and losses Responsible gaming & support

03 How We Use Your Data

Every piece of data aqua88 collects has a clear and legitimate purpose. We do not use your data beyond the scope stated below:

Account Management & Services

Your personal data is used to create and manage your aqua88 account, process deposits and withdrawals, resolve disputes, provide customer support, and ensure a smooth, personalized gaming experience for you.

Identity Verification & Fraud Prevention

KYC information is used solely to verify your identity, comply with anti-money laundering (AML) requirements, and identify and prevent fraudulent activity or platform abuse. This protects you and all other aqua88 members.

Communication & Marketing

With your consent, we use your contact information to send transaction notifications, platform updates, promotional offers, and the latest bonus information. You may withdraw your marketing consent at any time through your account settings.

Platform Improvements

Usage and technical data collected in aggregate (without identifying individuals) helps us understand usage patterns, identify technical issues, and continually improve the aqua88 platform experience.

Responsible Gaming

Gaming activity data is monitored to detect playing patterns that may indicate problem gambling. This allows us to offer timely support tools and interventions to members who need assistance, in line with our commitment to responsible gaming.

04 Data Sharing

Aqua88 does not sell or rent your personal data to any third party. However, in certain limited situations, we may share your data with the following parties:

Third-Party Service Providers

We work with trusted service providers to operate the platform, including payment processors, identity verification providers and cloud computing service providers. All providers are bound by strict confidentiality agreements and are only permitted to process your data for purposes we specify.

Legal Requirements

Aqua88 may disclose your personal data when required to do so by law, court order, or direction from a relevant authority. In such situations, we will notify you in advance where permitted by law.

Aqua88 has never shared your personal data with third-party advertisers, marketing companies, or data brokers without your explicit consent. This policy does not change.

Business Transfer

If aqua88 is involved in a merger, acquisition, or asset sale, user data may be transferred as part of that transaction. You will be notified in advance via email and in-platform notification, and you have the right to delete your account before the transfer takes place.

05 Data Security

Protecting your personal data is aqua88's top priority. We continuously invest in security infrastructure and apply multiple layers of protection to keep your data safe:

  • Encryption in Transit: All data transmitted between your device and aqua88 servers is protected using TLS 1.3 encryption and 256-bit SSL certificates.
  • Encryption at Rest: Sensitive data such as financial information and KYC documents are stored in encrypted format using AES-256.
  • Access Control: Access to user data within aqua88 is restricted on a need-to-know basis and reviewed on a regular schedule.
  • 24/7 Monitoring: Our security systems are monitored around the clock to detect and respond to any threats or suspicious activity.
  • Security Audit: Penetration testing and independent security audits are conducted regularly by third-party security experts.
  • Two-Factor Authentication: We encourage and support two-factor authentication (2FA) for all user accounts as an added layer of protection.

While we take all reasonable steps to protect your data, no security system is completely impenetrable. In the event of a data breach, we are committed to notifying affected users within 72 hours and taking immediate remedial action.

06 Cookies & Tracking Technologies

Aqua88 uses cookies and similar tracking technologies to enhance the user experience, understand how our platform is used, and ensure the security of your login sessions.

Types of Cookies We Use

  • Essential Cookies: Required for core platform functions such as login, session verification, and security. These cookies cannot be disabled.
  • Performance Cookies: Collects anonymised data on how users interact with the platform to help us improve the user experience.
  • Functional Cookies: Saves your preferences such as language, display settings and game preferences for a more convenient return experience.
  • Analytics Cookies: Helps us understand the most popular pages and features for continuous platform improvement.

You can manage and delete cookies through your browser settings. However, disabling certain cookies may affect platform functionality. For more information on managing cookies, please refer to your browser's help guide.

07 Data Retention

Aqua88 retains your personal data for as long as your account is active and for the required period after account closure, depending on the type of data and applicable legal requirements.

Retention Period

  • Active Account Data: Retained for the duration of your active account plus 7 years after closure, in line with Malaysia's financial legal requirements.
  • Transaction Records: Retained for a minimum of 7 years for tax compliance and financial legal purposes.
  • KYC Documents: Retained for 5 years after account closure in accordance with AML requirements.
  • Communication Logs: Retained for 2 years for dispute resolution and customer support purposes.
  • Marketing Data: Deleted within 30 days after you withdraw your marketing consent.

Once the retention period expires, your data will be securely deleted using data disposal methods that comply with international standards, ensuring the data cannot be recovered or misused.

08 Your Rights

As a user of the aqua88 platform based in Malaysia, you have the following rights regarding your personal data under the PDPA 2010 and our privacy policy:

Right of Access

You have the right to request a copy of all personal data we hold about you.

Right to Rectification

You may request correction of inaccurate or incomplete data at any time.

Right to Erasure

You have the right to request deletion of your personal data, subject to legal requirements.

Right to Object

You may object to the use of your data for direct marketing purposes or certain types of processing.

Right to Data Portability

You may request your data in a structured, machine-readable format for transfer.

Right to Restrict Processing

You may request that we restrict the processing of your data in certain situations as defined by law.

To exercise any of the above rights, log in to your aqua88 account and access the "Privacy Settings" section, or contact our customer support team available 24/7. We are committed to processing all data rights requests within 14 business days.

09 Children's Data

The aqua88 platform is strictly for adult users aged 18 and above. We do not intentionally collect, process, or store any personal data from individuals under the age of 18.

If we find that a child's personal data has been collected without proper age verification, that data will be deleted immediately and the account in question will be terminated. Parents or guardians who suspect their child has used this platform are advised to contact us immediately.

We apply age verification during registration and throughout the KYC process to ensure only eligible individuals are permitted to use the platform. The safety and well-being of minors is a responsibility we take very seriously.

10 Privacy Policy Amendment

Aqua88 reserves the right to update or amend this privacy policy at any time to reflect changes in our practices, legal requirements, or the technologies we use. Any amendments will be recorded with the latest update date at the top of this document.

For material amendments (those that significantly change how we process your data), we will provide clear notice via:

  • Email notification to the email address registered to your account.
  • Prominent notices on the platform homepage and login page.
  • In-app notifications via the aqua88 mobile app (if you use our app).

Continued use of the aqua88 platform after the effective date of any amendment means you accept and agree to the updated privacy policy terms. If you do not agree to the amendments, you have the right to close your account before the effective date.

11 Contact Us

If you have any questions, concerns or complaints regarding this privacy policy or how aqua88 handles your personal data, please contact our Data Protection Officer (DPO) through the following channels:

  • Live Chat: Available 24/7 directly within the aqua88 platform — the fastest way to get a response.
  • Email: [email protected] — for official written enquiries relating to privacy and data.

We are committed to responding to all privacy-related inquiries within 3 business days. For formal complaints involving data rights under PDPA, you may also submit a complaint to the Department of Personal Data Protection Malaysia (JPDP) if you are unsatisfied with our response.

See also Terms and Conditions us for full details on the platform usage agreement, and the Responsible Gaming page for information on the gaming control tools we provide.

Your Data, Our Protection

Join Aqua88 with Full Confidence

Your personal data is protected with the highest level of encryption and we fully comply with Malaysia's PDPA. Register today and enjoy a safe, fair, and responsible online entertainment experience.

For any privacy enquiries, contact our customer support team available 24/7.

Bahasa Melayu