Privacy Policy —
How fam888 Protects Your Data

1 Introduction

This Privacy Policy (hereinafter "Policy") describes how fam888 (hereinafter "fam888", "we", "us", or "our"), the operator of the online gaming and sports betting platform accessible at https://fam888.cam (hereinafter the "Platform"), collects, uses, stores, discloses, and protects the personal data of individuals who visit, register on, or otherwise interact with the Platform (hereinafter "you", "Player", or "User").

fam888 is committed to handling your personal data with the highest standards of care, transparency, and security. This Policy is designed to help you understand exactly what information we hold about you, why we hold it, and what choices you have in respect of that information.

This Policy is to be read in conjunction with fam888's Terms & Conditions, which govern your contractual relationship with fam888. In the event of any conflict between this Policy and the Terms & Conditions with respect to data protection matters, this Policy shall prevail.

2 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or could reasonably be used to identify a natural person, directly or indirectly, including name, identification number, location data, online identifier, or one or more factors specific to that person's identity.
• "Processing" means any operation or set of operations performed on Personal Data, whether or not by automated means, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" means fam888, the entity that determines the purposes and means of processing Personal Data collected via the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of fam888 under a contractual arrangement, such as payment processors, KYC verification providers, or cloud hosting providers.
• "Consent" means a freely given, specific, informed, and unambiguous indication by you — through a clear affirmative act — that you agree to the processing of your Personal Data for a specified purpose.
• "KYC" means Know Your Customer — the mandatory identity verification process carried out by fam888 to confirm a player's identity before processing withdrawals or in response to suspicious account activity.
• "MYR" or "RM" means Malaysian Ringgit, the primary transaction currency of the fam888 Platform.

3 Personal Data We Collect

fam888 collects personal data in the following categories, depending on your level of interaction with the Platform:

4 How We Collect Your Data

fam888 collects your personal data through the following channels:

• Direct submission: Information you provide when completing the registration form, submitting KYC documents, making deposits or withdrawal requests, contacting customer support, or responding to promotions.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, server logs, and similar tracking technologies as further described in Section 9.
• Payment processors: Transaction confirmation data received from payment providers including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX-connected banks (Maybank, CIMB, Public Bank, Hong Leong), and cryptocurrency networks.
• Identity verification providers: Confirmation data returned by third-party KYC and identity verification services used to validate documents you submit during account verification.
• Fraud and security tools: Risk assessment data provided by anti-fraud and security systems used to protect the Platform and its players.

5 Legal Basis for Data Processing

fam888 processes your personal data on the following legal grounds, each applied to specific processing activities:

• Contractual necessity: Processing required to create your account, process deposits and withdrawals in MYR, fulfil bonus obligations, and provide the gaming and betting services you have requested.
• Legal obligation: Processing required to comply with applicable anti-money laundering (AML) laws, Know Your Customer (KYC) obligations, age verification requirements (21+), and any other statutory obligations imposed on fam888.
• Legitimate interests: Processing carried out to protect the security and integrity of the Platform, prevent fraud, detect and investigate suspicious account activity, and improve our services — where such processing does not override your fundamental privacy rights.
• Consent: Processing for marketing communications (where you have opted in), and placement of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing already carried out.

6 How We Use Your Personal Data

fam888 uses your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your fam888 player account, processing login authentication, and managing account preferences.
• Transaction processing: Processing deposits via Malaysian payment methods (Touch 'n Go eWallet, DuitNow, Maybank2u, CIMB Clicks, etc.) and processing approved withdrawal requests.
• KYC and age verification: Verifying that you are at least 21 years of age and confirming your identity prior to processing withdrawals, as required by applicable compliance obligations.
• Bonus and promotion management: Administering welcome bonuses, birthday rewards, referral programmes, and other promotional offers in accordance with their specific terms.
• Customer support: Responding to your enquiries, resolving disputes, processing complaints, and providing assistance via live chat and email.
• Responsible gambling: Monitoring account activity to identify signs of problematic gambling behaviour, applying deposit limits, loss limits, or self-exclusion measures where requested or required.
• Security and fraud prevention: Detecting, investigating, and preventing fraudulent transactions, unauthorised account access, bonus abuse, money laundering, and other prohibited activities.
• Legal compliance: Retaining records as required by applicable anti-money laundering, gaming regulation, and financial reporting laws.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the platform, user interface, and game offerings.
• Marketing communications: Sending promotional emails or messages about fam888 offers — only where you have opted in to receive such communications. You may opt out at any time.

7 Data Sharing & Disclosure

fam888 does not sell, rent, or trade your personal data to any third party. We may share your data with the following categories of recipients, strictly on a need-to-know basis and under contractual data protection obligations:

• Payment service providers: To process your deposits and withdrawals. This includes Malaysian payment networks such as DuitNow (PayNet), FPX-connected banks, Touch 'n Go eWallet (TNG Digital), Boost, GrabPay, and cryptocurrency processing partners. Each provider receives only the data necessary to execute the specific transaction.
• KYC and identity verification providers: To verify your identity documents in compliance with KYC requirements. These providers are contractually bound to use your data only for identity verification purposes.
• Cloud infrastructure and hosting providers: To host the Platform securely. All infrastructure providers are contractually obligated to apply security standards equivalent to those maintained by fam888.
• Anti-fraud and security vendors: To detect and prevent fraud, money laundering, and platform abuse.
• Legal and regulatory authorities: Where fam888 is required by law, court order, or regulatory direction to disclose personal data, we will do so. We will notify affected players where legally permissible to do so.
• Professional advisors: Including legal counsel, auditors, and compliance consultants, where disclosure is strictly necessary and subject to professional confidentiality obligations.

8 Data Retention

fam888 retains your personal data for as long as is necessary to fulfil the purposes outlined in this Policy, and in any case for the minimum periods required by applicable law. The following general retention principles apply:

• Active account data: Retained throughout the period your account is active and for a minimum of five (5) years following account closure, to comply with anti-money laundering record-keeping requirements.
• Transaction records: Financial transaction records (deposits, withdrawals, bet history) are retained for a minimum of seven (7) years in accordance with standard financial record-keeping obligations.
• KYC documents: Identity documents submitted for KYC verification are retained for a minimum of five (5) years following the completion of the relevant verification, or following account closure, whichever is later.
• Customer support records: Support chat and email correspondence is retained for a minimum of two (2) years following the closure of the relevant support interaction.
• Marketing data: Where you have opted in to marketing communications, your contact details for that purpose are retained until you opt out or request deletion.

Upon expiry of the applicable retention period, fam888 will securely delete or anonymise your personal data in a manner that prevents identification or reconstruction.

9 Cookies & Tracking Technologies

fam888 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file stored on your device when you visit a website. fam888 uses the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled without impairing Platform functionality.
• Performance and analytics cookies: Used to collect aggregated, anonymised information about how players use the Platform — such as which game categories are most visited and how long typical sessions last. This data is used solely to improve fam888's services.
• Preference cookies: Used to remember your Platform settings, such as preferred game category, language, and display preferences.

fam888 does not use third-party advertising cookies, cross-site tracking cookies, or retargeting pixels that profile you across external websites. You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies may affect your ability to use the Platform.

10 International Data Transfers

The operation of the fam888 Platform may involve the transfer of your personal data to countries or territories outside Malaysia, including to cloud infrastructure providers, payment processing partners, and identity verification vendors that may be located in other jurisdictions.

Where personal data is transferred to a jurisdiction that does not provide equivalent data protection standards, fam888 ensures that appropriate safeguards are in place. These safeguards include contractual data protection clauses in agreements with all data processors and sub-processors, which impose obligations on those parties equivalent to those described in this Policy.

By using the fam888 Platform, you acknowledge and accept that your personal data may be transferred, processed, and stored in countries outside Malaysia as described above.

11 Your Data Rights

You have the following rights in respect of your personal data held by fam888. To exercise any of these rights, please contact our customer support team at the details provided in Section 16.

11.1 Right of Access

You have the right to request a copy of the personal data fam888 holds about you. We will provide this information within thirty (30) calendar days of receiving a valid, verified request.

11.2 Right to Rectification

You have the right to request the correction of any inaccurate or incomplete personal data held by fam888. Account holders can update certain data (such as contact details) directly through their account settings. For other corrections, please contact our support team.

11.3 Right to Erasure

You have the right to request the deletion of your personal data in certain circumstances, including where the data is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal ground for processing. Please note that fam888 may be required to retain certain data for legal compliance reasons (see Section 8) even following a valid deletion request.

11.4 Right to Restrict Processing

You have the right to request that fam888 restricts the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing pending verification of whether fam888's legitimate grounds override your interests.

11.5 Right to Data Portability

Where processing is based on your consent or on contractual necessity, and processing is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.

11.6 Right to Object

You have the right to object to the processing of your personal data where that processing is based on fam888's legitimate interests. You also have an unconditional right to object to the processing of your data for direct marketing purposes at any time.

11.7 Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

12 Children, Minors & Age Restriction

The fam888 Platform is strictly intended for adults aged 21 years and above. fam888 does not knowingly collect, use, or process personal data belonging to persons under the age of 21. Registration by persons under 21 is strictly prohibited and constitutes a breach of fam888's Terms & Conditions.

fam888 operates mandatory age verification procedures at registration and as part of the KYC process. If fam888 becomes aware or has reasonable grounds to believe that personal data has been collected from a person under the age of 21, that account will be suspended immediately, all balances will be frozen pending investigation, and the relevant data will be deleted or returned in accordance with applicable law.

Parents and guardians who believe that a minor may have accessed or registered on fam888 are encouraged to contact our support team immediately at [email protected] (copy this address manually).

13 Security Measures

fam888 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and fam888's servers.
• Encryption at rest for all stored personal data and financial records using industry-standard encryption algorithms.
• Two-factor authentication (2FA) available to all players to protect account access beyond username and password.
• Access controls and role-based permissions ensuring that fam888 staff access only the minimum personal data necessary for their specific function.
• Regular security audits and penetration testing to identify and remediate vulnerabilities in the Platform's infrastructure and code.
• Intrusion detection and monitoring systems that alert the security team to anomalous access patterns or potential data breaches in real time.

While fam888 takes all reasonable technical precautions, no digital system can guarantee absolute security. You are responsible for keeping your own login credentials confidential and for enabling 2FA on your account. If you suspect that your account has been compromised, please contact our support team immediately.

14 Third-Party Links & Services

The fam888 Platform may from time to time reference third-party services, payment providers, or informational resources. This Privacy Policy applies solely to data processed by fam888 through the Platform. fam888 does not control and is not responsible for the privacy practices or content of any third-party websites, applications, or services.

References to payment brands such as Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, and FPX are made in the context of payment processing descriptions only. Each of these providers operates under its own independent privacy policy, which governs data collected and processed by them directly.

15 Updates to This Privacy Policy

fam888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory guidance, or Platform functionality. The "Last Updated" date at the top of this page will be revised each time a material change is made.

Where a material change is made to this Policy, fam888 will endeavour to notify registered players by email or by a prominent Platform notification. For non-material changes, we may update the Policy without direct notification, and the revised Policy will take effect upon publication.

Your continued use of the Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you should cease using the Platform and may request account closure.

16 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or fam888's data processing practices, please contact our team using the following details. Note that all email addresses are provided as plain text only and are not clickable links — please copy them manually into your email client.

For concerns related to responsible gambling, self-exclusion, or problem gambling support, please visit our dedicated Responsible Gambling page, which contains information on tools available within fam888 and external support resources relevant to Malaysian players.