OFFICIAL PRIVACY POLICY

Big288 Privacy Policy – Malaysia User Data Protection

Big288 takes your privacy seriously. This document clearly explains how we collect, use, store and protect your personal data in accordance with the Malaysia Personal Data Protection Act 2010 (PDPA). Your trust is our priority.

Updated: 1 January 2026
PDPA 2010 Compliance
256-bit SSL Encryption
Our Privacy Commitment
  • Your data is never sold to third parties
  • End-to-end encryption
  • Right to access and rectify data
  • Full compliance with Malaysia's PDPA
  • 24/7 security monitoring

How big288 Protects Your Privacy

Six core pillars of big288's privacy protection framework that ensure every Malaysia user's personal data remains secure and responsibly managed at all times.

Bank-Grade Data Encryption

All data transmitted between your device and big288 servers is protected with 256-bit SSL encryption, the same standard used by leading banking institutions worldwide.

Secure Data Storage

Your personal data is stored in data centres protected by strict physical and digital access controls. Only authorised personnel are permitted to access sensitive information.

User Access Control

You have full control over your data. Through your big288 account settings, you can view, update, or request deletion of your personal data at any time.

No Data Sales Policy

Big288 has never and will never sell, rent or transfer your personal data to any third party for marketing or commercial purposes without your consent.

PDPA 2010 Compliance

All data management practices at big288 fully comply with the Malaysia Personal Data Protection Act 2010, ensuring your rights as a data subject are always respected and protected.

Flexible Marketing Options

You are free to opt in or out of marketing communications from big288 at any time via your account notification settings, with no effect on core services.

Last updated: 1 January 2026
1

Introduction and Scope of the Privacy Policy

Welcome to the big288 Privacy Policy. This document is prepared to provide a clear, honest and transparent overview of how big288 ("we", "Platform", "company") collects, processes, stores and protects your personal data ("user", "you") when you use the website, mobile app or any services provided under the big288 brand.

This Privacy Policy applies to all registered users and visitors of the big288 website regardless of access method or geographic location. It is read together with our Terms and Conditions and Responsible Gaming Policy, all of which form the complete agreement framework between you and big288.

Big288 operates in compliance with the Malaysia Personal Data Protection Act 2010 (PDPA). We regard your personal data as a trust placed in us, and we are committed to upholding that trust with full integrity. Every decision relating to data management is made with your privacy and security as the priority.

By registering an account or continuing to use the big288 platform, you agree to the terms set out in this Privacy Policy. If you do not agree, please cease use and contact us to close your account.

2

Personal Data We Collect

Big288 collects personal data from various sources when you interact with our platform. The data collected is divided into two main categories: data you provide directly and data collected automatically.

Data you provide directly:

  • Full name as shown on official identification documents
  • Date of birth for age verification (18 and above)
  • Active email address for account communications
  • Mobile phone number for two-factor authentication (2FA)
  • Bank account or digital wallet details for payment processing
  • Copy of identification document (MyKad, passport) for KYC process
  • Full address details when required for verification

Data collected automatically:

  • IP address and geographic location information (city/state level)
  • Browser type and version, and operating system
  • Platform usage data including pages visited and session duration
  • Device information including model, operating system, and unique identifiers
  • Transaction logs including date, time, amount, and payment method
  • Game record data for dispute resolution and audit purposes

Big288 only collects data that is genuinely necessary to provide our services, ensure security and meet legal requirements. We do not collect sensitive data such as medical information or religious beliefs without a clear legal basis.

Overview of data types and retention periods:

Data Type Primary Purpose Retention Period
Personal Identification Information Identity verification, KYC 5 years after account closure
Transaction Data Payment processing, auditing 7 years (financial requirements)
Game Log Dispute resolution 3 years
Usage Data Platform improvement 2 years
Session Cookies Login security Until logout
3

How We Use Your Personal Data

The personal data we collect is used solely for legitimate and transparent purposes. big288 does not use your data for any purpose other than those stated below without first obtaining your additional consent.

  • Identity Verification and KYC: Ensuring every account is held by a real individual who meets the age and eligibility requirements set by law.
  • Financial Transaction Processing: Processing deposits, withdrawals, and bonus payments securely and accurately.
  • Support Service Provision: Enabling our customer support team to assist you more effectively whenever you have an enquiry or issue.
  • Account Security: Detecting and preventing unauthorised access, fraud, and suspicious activity through continuous monitoring.
  • Account Communications: Sending important notifications relating to your account, transactions, security updates, and policy changes.
  • Platform Improvement: Analysing usage patterns to improve the user experience, introduce new features, and optimise performance.
  • Legal Compliance: Meeting reporting obligations to relevant authorities in accordance with applicable legal requirements.
  • Marketing (with consent): Sending promotional offers, bonuses, and the latest news about big288 only to users who have given their consent.

Big288 will not use your data to make automated decisions that significantly affect you without appropriate human review. Any profiling carried out is limited strictly to security purposes and personalising your platform experience.

4

Data Sharing with Third Parties

Big288 understands that your trust depends on how we handle the data you share. As a matter of principle, we do not disclose your personal data to third parties without your consent. However, there are limited situations where data sharing is necessary:

  • Payment Processors: Required transaction information is shared with licensed payment processors such as FPX, digital wallet providers, and banks to complete your financial transactions.
  • KYC Service Providers: Identity verification data is shared with trusted third-party KYC service providers to meet compliance requirements.
  • Game Providers: Basic game session information is shared with licensed game providers to ensure game continuity and accuracy.
  • Legal Requirements: big288 will disclose data when required by court order, law enforcement authorities or relevant regulatory bodies in Malaysia.
  • Fraud Prevention: Limited information may be shared with recognised fraud prevention organisations to protect all platform users.

All third parties we work with are bound by strict confidentiality and data protection agreements. We share only the minimum necessary information and ensure our partners adhere to equivalent data protection standards.

5

Cookies and Tracking Technologies

Big288 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

We use several types of cookies for different purposes:

  • Necessary Cookies (Essential Cookies): Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled as they are essential for platform operation.
  • Performance Cookies: Collecting information on how you use our platform to help us identify and resolve performance issues.
  • Functional Cookies: Saving your preferences such as language, display settings, and login information to provide a more personalised experience.
  • Analytics Cookies: Helping us understand aggregated, anonymised usage patterns for ongoing platform improvement.

You can manage and delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of some areas of the big288 platform. For more information on managing cookies, refer to your browser's help documentation.

6

Data Storage and Security

The security of your personal data is the absolute priority of big288. We have implemented multiple layers of technical and organisational security controls to protect your data from unauthorised access, loss, alteration, or accidental disclosure.

The technical security measures we employ include:

  • Data encryption in transit using TLS 1.3 protocol
  • Data encryption at rest using AES-256
  • Enterprise-grade firewall and intrusion detection systems
  • Round-the-clock security monitoring 24/7/365
  • Regular penetration testing by independent security experts
  • Role-based access control with the principle of least privilege
  • Automatic data backup with periodic integrity verification

Big288 servers are housed in data centres that comply with international security standards, with physical protection, power redundancy, and strict environmental controls. Your data is retained for as long as necessary to fulfil the purpose of collection or as required by law, after which it will be securely deleted or anonymised.

While we take all reasonable steps to protect your data, no security system is perfect. In the event of a data breach affecting your rights, big288 will notify you within the timeframe prescribed by Malaysia's PDPA.

7

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data that big288 fully respects and supports:

Right of Access

Request a copy of the personal data we hold about you in a readable format.

Right to Rectification

Request the prompt correction of inaccurate, incomplete, or outdated data.

Right to Erasure

Request the deletion of your personal data, subject to legal retention obligations.

Right to Object

Object to the processing of your data for direct marketing purposes at any time.

Right to Data Portability

Receive your data in a structured format for transfer to another platform where applicable.

Right to Restriction

Request restriction of your data processing while a dispute or review is in progress.

To submit any request related to the above rights, please contact our Data Protection Officer team via email at [email protected], stating the type of request and your account information. We will process your request within 21 business days as required by Malaysia's PDPA.

8

Children's Data Protection

The big288 platform is strictly for individuals aged 18 and above. We do not intentionally collect or process personal data of individuals under the age of 18. This policy is absolute with no exceptions.

The big288 registration process requires age verification through the date of birth provided and may be supported by a KYC process using official identification documents. If we discover that a child's data has been collected unintentionally, we will take immediate action to delete that data and close the account in question.

If you suspect that a minor has registered a big288 account, please contact us immediately at [email protected] so we can take the appropriate action.

9

Cross-Border Data Transfers

In certain situations, your personal data may need to be transferred to or processed outside Malaysia, for example when we use cloud infrastructure services or work with international service providers.

Big288 ensures that any international data transfers are carried out with adequate safeguards, including:

  • Only transfer data to countries with a level of data protection equivalent to or higher than Malaysia's
  • Implementing standard data transfer contracts that require recipients to comply with established data protection standards
  • Ensuring all international third-party data processors have adequate technical and organisational security protections in place

By using the big288 platform, you consent to data transfers necessary for service operations as described in this Privacy Policy. big288 always ensures your rights remain fully protected in any such data transfer.

10

Amendments to the Privacy Policy

Big288 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements or business operations. The "Last updated" date at the top of this document will always reflect the latest version in effect.

When significant amendments occur, big288 will notify you via one or more of the following methods:

  • In-platform notifications on big288 during your next login session
  • Notification email to the address registered in your account
  • A clear notice on the big288 website home page

Continued use of the big288 platform after any amendments to the Privacy Policy have been published will be deemed as your acceptance of the updated terms. We encourage you to review this Privacy Policy periodically to ensure you are always informed of how we protect your information.

11

Contact Us – Data Protection Officer

If you have any questions, concerns or complaints regarding this Privacy Policy or how big288 handles your personal data, please do not hesitate to contact our Data Protection Officer. We are committed to providing accurate, clear and helpful responses within the stipulated timeframe.

You may reach us through the following channels:

  • Official Email: [email protected]
  • Help Centre: The Live Support section within the big288 platform
  • Response Time: Within 3 business days for general enquiries; 21 business days for formal data rights requests

For official requests regarding your rights under the PDPA, please include your full name, account number or registered email, and a clear description of your request so we can process it more efficiently. All communications will be handled with full confidentiality.

If you believe your complaint has not been resolved satisfactorily by big288, you have the right to refer the matter to the Department of Personal Data Protection Malaysia (JPDP) for further investigation.

PRIVACY ASSURED, PLAY WITH PEACE OF MIND

Ready to Play with Full Confidence?

Big288 ensures every gaming experience is protected by high-grade data security. Register today and enjoy games free from privacy risks alongside Malaysia's growing player community.

100% Data Security
SSL Encryption
PDPA Compliance
24/7 Support
Bahasa Melayu