Grap88 Privacy Policy – Data Protection & Personal Information

Welcome to the grap88 Privacy Policy. We understand that entrusting your personal information to any online platform is a significant decision. That is why we take every aspect of data protection seriously — not merely to meet legal requirements, but because we genuinely value the trust that each of our members places in us.

This policy applies to all users who register, browse, or use any grap88 services, including our official website and mobile app. Please read this document carefully so you understand your rights and how we handle your information.

1 Information We Collect

When you register and use the grap88 platform, we collect various types of information for specific purposes outlined below. This collection is necessary to provide you with a secure, personalised, and high-quality service.

a) Registration & Identity Information

• Full name as stated on your official identification document
• National identification number (MyKad) or passport number
• Date of birth for age verification (18 years and above)
• Active email address and mobile phone number
• Current residential address

b) Financial & Transaction Information

• Payment method details (bank account number, e-wallet)
• Deposit, withdrawal, and wagering history
• Transaction records for audit and compliance purposes

c) Technical & Usage Information

• IP address, device type, operating system, and web browser
• Login session data including date, time, and geographic location
• Pages visited, games played, and session duration
• App diagnostic data and error reports

d) KYC Verification Documents

To meet compliance requirements, we may request copies of identity documents, proof of address (utility bills or bank statements), and a verification selfie. These documents are stored securely and used solely for verification purposes.

2 How We Use Your Information

Every piece of information we collect has a clear purpose and is not used beyond the defined scope. Below is an overview of how your information is used:

We will not use your information for purposes unrelated to grap88 services without first obtaining your explicit consent.

3 Information Sharing & Disclosure

Grap88 does not share your personal information with any external parties for commercial purposes. However, there are certain situations where sharing information is necessary and permitted by law:

Trusted Third-Party Service Providers

We work closely with service providers that support our platform operations — including payment processors, licensed game providers, cloud services, and analytics systems. All these partners are bound by strict data protection agreements and are only permitted to use your data for specified purposes.

Legal Requirements & Authorities

We may be required to disclose your information to government authorities, regulatory bodies, or law enforcement when there is a valid court order, or when we are legally obligated to do so — including under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001.

4 Data Security

We invest seriously in cybersecurity infrastructure to ensure your data is always protected. Our technical and organisational measures include:

• 256-bit SSL/TLS Encryption for all data communications between servers and users.
• Encryption of data at rest — sensitive information such as passwords and financial details is stored in encrypted format using AES-256 standards.
• Role-based access control (RBAC) — only authorised personnel may access sensitive data, and every access is recorded in an audit log.
• Two-factor authentication (2FA) for all staff logins and recommended for all platform users.
• Penetration testing conducted periodically by independent security firms to identify and close any system vulnerabilities.
• Real-time threat monitoring using an intrusion detection system (IDS) that operates 24 hours a day.

5 Data Retention Period

Grap88 retains your personal information only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law.

• Active account data: Retained for the duration your account is active and for a specified period after account closure.
• Financial transaction records: Retained for a minimum of seven (7) years in accordance with Malaysia's financial and tax legal requirements.
• KYC Documents: Retained for five (5) years after account closure, or longer if required by the authorities.
• Technical logs & session data: Retained for 90 days for security and troubleshooting purposes.
• Customer support communications: Retained for two (2) years for reference and service quality purposes.

Once the retention period expires, your data will be securely deleted or fully anonymised so it can no longer be linked to your identity.

6 Cookies & Tracking Technology

The grap88 platform uses cookies and similar tracking technologies to enhance the user experience, secure login sessions, and understand our platform's usage patterns. The following are the types of cookies we use:

You can manage or delete cookies through your web browser settings at any time. However, disabling certain cookies may affect specific platform functions, including the ability to log in.

7 Your Rights

As a grap88 user and data subject under Malaysia's PDPA, you have the following rights regarding your personal information. We are committed to processing every request within 14 business days.

To exercise any of the above rights, please contact our Data Protection team via live chat available 24/7 or through our official support email address. We may need to verify your identity before processing your request.

8 Changes to the Privacy Policy

Grap88 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or service improvements. Whenever we make significant changes, we will:

• Updating the "Last Updated" date at the top of this document.
• Sending email notifications to all registered members at least seven (7) days before the changes take effect.
• Displaying a clear notice on the platform's home page for a specified period.

Your continued use of the grap88 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with any changes, you have the right to close your account before those changes take effect.

9 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way we handle your personal information, please do not hesitate to contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom corner of the platform.
• Support Email: [email protected] (for privacy and data inquiries only)
• Official FAQ: Visit FAQ page for answers to frequently asked questions.

Our Data Protection Team is dedicated to ensuring every privacy-related inquiry is answered thoroughly and within a reasonable timeframe. We aim for an initial response within 24 hours and full resolution within 14 business days.