happy888 Privacy Policy

1. Introduction

happy888 is committed to protecting the privacy and personal data of all players. This Policy explains in plain language what data we collect from you, why we collect it, how we use and store it, and what rights you have in relation to it. We encourage all players — whether based in Kuala Lumpur, Penang, Johor Bahru, or elsewhere in Malaysia — to read this Policy carefully before registering an Account or providing any personal information to us.

This Policy applies to all personal data processed by happy888 in connection with the Platform, regardless of the device or channel through which you access our services. It should be read together with the happy888 Terms and Conditions, which govern the overall use of the Platform.

2. Data Controller

For the purposes of this Policy, happy888 acts as the data controller in respect of the personal data it processes about Players. The data controller is responsible for determining the purposes and means of processing personal data. All data-related enquiries, requests, and complaints should be directed to the happy888 Data Protection contact at [email protected].

3. Personal Data We Collect

We collect the following categories of personal data from Players in the course of operating the happy888 Platform:

3.1 Identity & Contact Data

• Full legal name as appearing on your MyKad or passport
• Date of birth (for age verification — all Players must be 21 or above)
• Malaysian mobile telephone number
• Email address
• Residential address

3.2 Identity Verification (KYC) Data

• Copies of government-issued identity documents (MyKad, passport)
• Proof of address documentation where required
• Selfie or liveness verification images where required for enhanced KYC

3.3 Financial Data

• Payment method identifiers (e-wallet account reference, bank account name for verification purposes)
• Transaction history: deposits, withdrawals, and bonus crediting
• Betting and wagering history across all product verticals

3.4 Technical & Usage Data

• IP address and geolocation data at the time of login and transaction
• Device type, operating system, and browser information
• Session duration, pages visited, and in-app navigation patterns
• Login timestamps and authentication method used

3.5 Communications Data

• Content of live chat conversations with customer support
• Email and notification correspondence history
• Preferences indicated in relation to marketing communications

4. How We Collect Your Data

happy888 collects personal data through the following channels:

• Direct submission: Data you provide when registering an Account, completing KYC, contacting customer support, or updating your profile settings.
• Automated collection: Data gathered automatically as you use the Platform, including through cookies, session tracking, and server logs.
• Third-party sources: Identity verification data from KYC service providers; fraud and AML screening data from licensed screening services; payment processing data from e-wallet and banking partners such as Touch n Go eWallet, Boost, Maybank, CIMB, and Public Bank.

5. Purpose and Legal Basis for Processing

We process your personal data for the following purposes, each supported by a legitimate legal basis:

• Account management and service delivery — necessary for the performance of our contract with you as a registered Player.
• Age and identity verification (KYC) — required under our international gaming authority licence and our legal obligations to prevent underage gambling and money laundering.
• Payment processing — necessary for the performance of our contract and compliance with financial regulations.
• Fraud prevention and platform security — necessary for our legitimate interest in maintaining platform integrity and protecting Players from unauthorised Account access.
• Responsible gaming monitoring — required under our licensing obligations and our legitimate interest in identifying and assisting Players who may be exhibiting signs of problem gambling.
• Customer support — necessary for the performance of our contract and our legitimate interest in resolving Player issues promptly.
• Marketing communications — based on your consent, where you have opted in to receive promotional communications from happy888. You may withdraw consent at any time.
• Legal and regulatory compliance — required by applicable law, including anti-money laundering obligations and gaming licence conditions.

6. Data Sharing and Disclosure

happy888 does not sell, rent, or otherwise commercially transfer your personal data to third parties. We share personal data only in the following limited and controlled circumstances:

• Licensed KYC and identity verification providers: To fulfil our age verification and anti-money laundering obligations.
• Payment service providers: Including Touch n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and USDT TRC20 gateway operators, solely for the purpose of processing transactions.
• Game content providers: Aggregated, non-personally identifiable session data may be shared with licensed game studios for technical performance purposes.
• Regulatory authorities: We are legally obligated to disclose certain data to our licensing authority, financial intelligence units, and law enforcement agencies upon receipt of a lawful request.
• IT and infrastructure service providers: Hosting, cloud storage, and security monitoring providers who process data on our behalf under strict data processing agreements.

All third-party processors engaged by happy888 are bound by contractual data protection obligations consistent with applicable data protection law.

7. International Data Transfers

happy888 may transfer personal data to data processors located outside of Malaysia in connection with the services described in this Policy. Where such transfers occur, happy888 ensures that appropriate safeguards are in place, including contractual clauses that impose data protection obligations on the receiving party equivalent to those applicable under this Policy. If you have questions about the specific safeguards applied to international transfers of your data, please contact us at [email protected].

8. Data Retention

happy888 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. Specific retention periods include:

• Account data and transaction records are retained for a minimum of five (5) years following Account closure to satisfy anti-money laundering and gaming licence record-keeping obligations.
• KYC documents are retained in accordance with the retention requirements specified by our licensing authority.
• Customer support communications are retained for three (3) years from the date of the interaction.
• Marketing consent records are retained for as long as necessary to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

9. Cookies and Tracking Technologies

The happy888 Platform uses cookies and similar tracking technologies to operate, secure, and improve its services. The categories of cookies used are:

• Strictly necessary cookies: Required for core Platform functionality including login session management, security tokens, and load balancing. These cannot be disabled.
• Functional cookies: Retain your preferences such as language settings and remembered login credentials where you have opted in to the "remember me" feature.
• Analytics cookies: Collect aggregated, anonymised data about how Players navigate the Platform to help us identify usability improvements. No personally identifiable information is transmitted.
• Security cookies: Used to detect fraudulent login attempts and protect against cross-site request forgery (CSRF) attacks.

You may manage non-essential cookie preferences through your browser settings. Disabling strictly necessary cookies will impair Platform functionality and may prevent you from logging in.

10. Your Data Rights

Subject to applicable law and the limitations imposed by our regulatory obligations, you have the following rights in relation to your personal data held by happy888:

• Right of Access: You may request a copy of the personal data happy888 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer required for the purpose for which it was collected, subject to overriding legal retention obligations.
• Right to Restrict Processing: You may request that we restrict the processing of your data in certain circumstances.
• Right to Object: You may object to processing based on our legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will respond within thirty (30) days. We may require identity verification before processing your request.

11. Security Measures

happy888 implements a multi-layered security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key technical and organisational measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
• AES-256 encryption for sensitive data stored in our databases
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis
• Two-factor authentication for all internal system access by happy888 personnel
• Regular independent penetration testing and security audits
• Anomaly detection systems that flag unusual account activity for review

Notwithstanding these measures, no data transmission over the internet is entirely secure. Players should take their own precautions including using strong, unique passwords and enabling two-step verification on their happy888 Account.

12. Children and Minors

The happy888 Platform is strictly for individuals aged 21 years and above. We do not knowingly collect personal data from persons under 21. Age verification is a mandatory step of the registration process and is enforced through KYC documentation review. If happy888 discovers that personal data has been collected from a person under 21, the relevant Account will be immediately closed, all data will be securely deleted (except where retention is legally required), and any deposited funds will be returned. If you are a parent or guardian and believe a minor has accessed the Platform using your Account, contact us at [email protected] immediately.

13. Third-Party Links

The happy888 Platform does not contain links to external third-party websites. All navigation links within the Platform direct Players to internal pages only. happy888 is not responsible for the privacy practices of any external website that a Player may access independently.

14. Changes to This Privacy Policy

happy888 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform functionality. The revised Policy will be published on this page with an updated "Last Updated" date. For material changes, we will notify registered Players via email or a prominent in-Platform notice. Continued use of the Platform following the publication of a revised Policy constitutes your acceptance of the updated terms. We recommend that you review this Policy periodically.

15. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or about how happy888 handles your personal data, please contact us:

Email: [email protected]

We aim to acknowledge all privacy-related enquiries within two (2) business days and to provide a substantive response within thirty (30) calendar days. All correspondence must be in English. If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection supervisory authority or the gaming authority's player complaints service.