Privacy Policy axas888 — Our Commitment to Protecting Your Data

Introduction & Scope of This Privacy Policy

Axas888 is an online betting and gaming platform operating in Malaysia and serving Malaysian players. We understand that your trust in us depends not only on the quality of our games or the speed of withdrawals — but also on how we handle your most personal information.

This Privacy Policy is designed to give you a clear and complete picture of axas888's data handling practices. It explains exactly what data we collect from you, why we need it, how we protect it, how long we retain it, and what rights you have throughout.

This policy applies to all information collected through the axas888 platform, including the axas888.xyz website, mobile applications (where applicable), and any interactions with our customer support team via live chat, email, or WhatsApp. It also applies to information we collect automatically when you browse our platform.

Axas888 acts as the data controller for all personal information processed under this Privacy Policy. This means we determine the purposes and means of processing your data, and we bear full responsibility for ensuring that such processing is carried out lawfully and responsibly.

Data We Collect & How We Collect It

Axas888 collects your personal data in two main ways: directly when you provide information to us, and automatically as you use our platform.

Data You Provide to Us Directly

This is information you enter yourself when interacting with axas888:

• During account registration: Full name, date of birth, Malaysian phone number, email address, and your chosen password. This is the minimum required to create a secure axas888 account for you.
• During KYC verification: A copy of your MyKad or passport, proof of current address such as a utility bill or bank statement, and a selfie for identity verification when required.
• During financial transactions: Payment method details including your DuitNow account name, Touch 'n Go eWallet phone number, GrabPay ID, Boost ID, ShopeePay ID, or FPX account details for Maybank2u, CIMB Clicks, and other banks. axas888 does not store credit or debit card numbers directly — all card payments are processed through certified third-party payment providers.
• When contacting support: Any information you share through live chat, email, or WhatsApp with the axas888 team — including screenshots, details of your issue, and any feedback you provide.
• While using responsible gaming tools: The deposit limits, loss limits, and self-exclusion options you have configured in your axas888 account.

Automatically Collected Data

When you browse or use the axas888 platform, our systems automatically record certain technical information:

• Login and session data: IP address, browser type, device operating system, login and logout times, and session duration.
• Gaming activity data: Games played, bets placed including RM values and odds, bet outcomes, and use of specific features such as Cash Out in Sports Betting.
• Cookie data: Information collected through cookies and similar tracking technologies — further details are set out in Section 6 of this policy.
• Mobile device data: For players accessing axas888 via a mobile browser, we may collect device type, operating system version, and device identifier for security purposes.

How We Use Your Personal Data

Axas888 uses your personal data only for legitimate and necessary purposes. We do not process data for anything unrelated to the services you use. The following are the primary purposes for which axas888 processes your data:

• Account management and identity verification: To create, manage, and protect your axas888 account and ensure that only you can access it.
• Financial transaction processing: To process deposits via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX, and to process your MYR winnings withdrawals quickly and securely.
• Provision of betting services: To give you access to all axas888 features including slots, Malaysia Super League and EPL Sports Betting, badminton betting, cricket, e-sports, lottery, and the VIP Rewards programme.
• Fraud prevention and anti-money laundering: To monitor suspicious activity, detect unusual transaction patterns, and comply with the anti-money laundering (AML) legal requirements applicable to betting platform operators.
• Legal compliance: To fulfil applicable legal obligations — including age verification requirements, reporting to authorities where required by law, and retaining records of financial transactions.
• Customer support: To enable the axas888 support team to assist you with any queries, complaints, or technical issues you encounter.
• Platform improvements: To analyze usage patterns on an aggregate (not individual) basis in order to understand how players use axas888 and identify opportunities to improve the user experience.
• Service communications: To send important account notifications such as deposit confirmations, withdrawal confirmations, security alerts, and service terms updates.
• Responsible gaming programme: To monitor gaming patterns that may indicate a need for assistance and to enforce the responsible gaming limits you have set for yourself.

Sharing Data with Third Parties

Axas888 does not sell, lend, or trade players' personal data to any third party for commercial purposes. This is a non-negotiable principle and one of axas888's core commitments to our players.

There are, however, limited situations in which axas888 needs to share certain information with carefully selected third parties. This is done only when necessary and under strict data protection agreements:

Trusted Service Providers

Axas888 works with third-party service providers for certain functions. These providers receive only the minimum data necessary and are bound by strict confidentiality agreements:

• Payment providers: To securely process DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, and FPX transactions. These providers receive only the transaction information needed to process payments and have no access to your gaming history or other personal data.
• Game providers: Slot, cricket, and lottery game providers that supply gaming content for the axas888 platform. They may receive unique identifiers that cannot be directly linked to you, for technical reporting purposes.
• Identity verification services: For KYC processes requiring identity document verification — carried out by certified providers that meet the highest security standards.
• Hosting and infrastructure services: Server providers that store axas888 data in secure data centres with strict physical and digital security standards.

Legal Requirements

Axas888 may be required to disclose players' personal data to authorities in the following circumstances:

• When required by a valid court order or an official request from a Malaysian authority with relevant jurisdiction.
• To fulfill reporting obligations under applicable anti-money laundering legislation.
• To protect the rights, property, or safety of axas888, our players, or the general public where there is a legitimate and pressing need to do so.

In all cases, axas888 will disclose only the minimum data required and will notify the relevant player (where permitted by law) that their information has been requested by the authorities.

Security & Data Storage

Axas888 takes data security infrastructure seriously, because we understand that a failure in this area is not merely a technical issue — it is a breach of player trust. The following are the key measures we have in place to protect your data:

Technical Safeguards

• 256-bit SSL Encryption: All communications between your device and axas888 servers are fully encrypted. This means that even if someone manages to intercept your network traffic, the transmitted data cannot be read without the encryption key.
• Data encryption at rest: Sensitive data stored in axas888's databases — including passwords and financial details — is encrypted to the highest industry standards. Your password is never stored in plain text; it is hashed using a one-way, irreversible algorithm.
• Role-based access controls: Only axas888 staff with a legitimate business need are permitted to access player data. All access is logged and audited regularly. No individual staff member has unrestricted access to all data.
• 24/7 security monitoring: An automated monitoring system keeps watch for suspicious activity on the axas888 platform around the clock. Any detected anomaly triggers a manual review by the security team.
• Two-factor authentication (2FA): axas888 players are encouraged to enable 2FA from their account security settings. With 2FA active, a login is only successful when both the correct password AND the OTP code sent to the registered phone number are entered.
• Regular penetration testing: axas888 engages independent security experts to conduct regular penetration testing, identifying and patching any vulnerabilities before they can be exploited.

Physical Storage

Axas888 data is stored in data centres equipped with physical security controls including biometric access, 24/7 CCTV, alarm systems, and fire suppression. Physical access to servers is restricted to technical personnel who have undergone background checks.

Cookies & Tracking Technologies

The axas888 platform uses cookies and similar tracking technologies to enhance the user experience, maintain session security, and analyze how the platform is used. Below is a clear breakdown of the cookies we use:

Mandatory cookies cannot be disabled as they are essential to the basic functionality of the axas888 platform. For optional cookies, you can manage your preferences through your browser settings or via the cookie management panel available on axas888. Please note that disabling certain cookies may affect some platform features.

Your Rights as a Data Subject

As an axas888 player and data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:

• Right to access: You have the right to obtain a copy of the personal data we hold about you. Data access requests can be submitted through your account settings or by contacting support@axas888.xyz. We will respond within 30 days of receiving your request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. For basic details such as phone number and email address, you can update these directly from your account settings. For other information, please contact our support team.
• Right to erasure: You have the right to request deletion of your personal data under certain circumstances — for example, if you wish to close your axas888 account and your data is no longer needed for the purpose it was collected. Please note that we may be required to retain certain data for a period prescribed by law even after account closure.
• Right to restrict processing: In certain circumstances — such as when we are verifying the accuracy of data or considering your objection — you may request that we temporarily restrict the processing of your data.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. Opt-out requests from marketing communications can be made through your account notification settings.
• Right to data portability: You have the right to receive your personal data in a machine-readable format for transfer to another service provider, to the extent permitted by law.

To exercise any of the above rights, contact the axas888 privacy team at support@axas888.xyz with the email subject "Data Rights Request – [Your Name]". Include your account number and a brief description of your request. axas888 will respond within 30 days of receiving a complete request.

Data Retention Period

Axas888 does not retain your personal data longer than necessary for the purposes it was collected, or beyond the period required by applicable law. The following are our general data retention guidelines:

• Active account data: Retained for as long as your account remains active on axas888. When you request account closure, your data is held for a further 6 months before the deletion process begins — this allows you to recover your account should you change your mind.
• Financial transaction records: Retained for a minimum of 7 years from the date of each transaction, in accordance with Malaysian accounting and tax law requirements. This includes full MYR deposit and withdrawal history, not just the most recent records.
• KYC Documents: Retained for a minimum of 5 years from the date of last verification, or 5 years after account closure (whichever is later), in accordance with applicable AML requirements.
• Security logs: Retained for 12 months for fraud detection and security incident investigation purposes.
• Customer support history: Conversation records and support tickets are retained for 3 years to allow reference to previous interactions where relevant.
• Analytics data: Aggregated usage data (which cannot be linked to any individual) is retained for 2 years for long-term trend analysis.

Once the applicable retention period expires, axas888 will delete or cease tracking the relevant data using secure, irreversible methods. Deletion is carried out on a regular schedule in line with our internal policy.

Children's Privacy

The axas888 platform is strictly for adults aged 18 and above. axas888 does not intentionally collect or store any personal information from individuals under 18 years of age. All account registrations require confirmation that the user is at least 18 years old, and we conduct age verification checks on accounts that show signs of underage use.

If you become aware that a minor has registered or attempted to register an axas888 account using inaccurate information, please contact us immediately at support@axas888.xyz. We will investigate and take appropriate action, including account termination and deletion of all associated data.

Policy Updates & How to Contact Us

Axas888 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or new platform features. For any material amendments, we will notify you via email to your registered address and/or through an in-platform notification at least 14 days before the changes take effect.

For non-material amendments — such as language clarifications or typographical corrections — no notice will be sent, but the last updated date at the top of this document will be revised. We encourage you to review this Privacy Policy periodically.

Contact the axas888 Privacy Team

For any enquiries, concerns, or requests relating to this Privacy Policy or the processing of your personal data by axas888, please contact us:

• Email: support@axas888.xyz (use the subject line "Privacy Enquiry" for priority handling)
• Live Chat: Available 24/7 directly on the axas888 platform — the fastest way to get help with urgent queries
• WhatsApp: Contact the axas888 support number listed on the platform

The axas888 privacy team will endeavour to respond to all privacy-related enquiries within 3 business days. For more complex requests such as data access or data deletion requests, the response time is within 30 days.