Privacy Policy Fortune888 — Our Commitment to Protecting Malaysian Players' Data

Fortune888 ("we", "platform", "Fortune888") is the data controller responsible for all personal information collected from users of our platform. This Privacy Policy applies to all players who register and use Fortune888's services, including the main website, online casino gaming interface, Sports Betting section, promotional programmes, and all official Fortune888 communication channels.

Fortune888 is committed to protecting your privacy in line with internationally recognised data protection standards. We take a responsible approach to handling personal data — meaning we only collect what is genuinely necessary to provide our services, store it securely, and never use it for purposes you have not consented to.

This Privacy Policy forms part of your overall agreement with Fortune888, together with Terms & Conditions and Responsible Gaming Policy. We encourage you to read all three documents to get a complete picture of your rights and responsibilities as a Fortune888 member.

Fortune888 collects your personal information through various means — when you register an account, use the platform, make financial transactions, or reach out to our support team. The categories of data we collect are as follows:

Fortune888 does not collect unnecessary data. Every category of data listed above serves a clear and legitimate purpose in the context of providing a safe and responsible online gaming platform to Malaysian players.

Fortune888 uses your personal data for the following purposes, all within the context of providing and improving platform services for Malaysian players:

• Account Management: Creating, verifying, and maintaining your Fortune888 account, including the KYC (Know Your Customer) process required under anti-money laundering regulations.
• Transaction Processing: Processing deposits and withdrawals via local Malaysian payment methods such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX including Maybank2u and CIMB Clicks. Payment data is required to ensure your funds reach the right destination.
• Gaming Services Provision: Giving you access to all games on Fortune888 — slots, live casino, roulette, baccarat, Sports Betting on the Malaysia Super League, EPL, badminton, MPL esports, cricket, and more.
• Promotion & Bonus Management: Processing promotion eligibility, calculating bonus wagering fulfilment, and ensuring Fortune888 promotions are awarded only to qualifying players.
• Customer Support: Handling enquiries, complaints, and requests submitted through Fortune888's live chat, email, or other communication channels.
• Security & Fraud Prevention: To detect and prevent fraudulent activity, duplicate accounts, money laundering, and the use of bots or automation software in violation of Fortune888's Terms & Conditions.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and reaching out to players who may benefit from support or self-exclusion tools.
• Platform Improvement: Analysing usage patterns (in aggregated, anonymised form) to improve the overall Fortune888 player experience.
• Marketing Communications: Sending information about promotions, the latest bonuses, and new Fortune888 features — only to players who have agreed to receive such communications.

Fortune888 does not sell, rent, or disclose your personal information to third parties for their own marketing purposes. However, there are specific situations where Fortune888 needs to share certain data with selected third parties as part of platform operations. All data sharing is governed by strict confidentiality agreements:

• Payment Service Providers: When you make a deposit or withdrawal, the information required to complete the transaction is shared with the relevant e-wallet and online banking providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, or FPX). This sharing is a technical necessity and involves only the minimum data required to process the transaction.
• Game Software Providers: Game providers such as Evolution Gaming, Pragmatic Play Live, Playtech, and others may receive the minimum technical data necessary to run their games — for example, game session IDs and account balances. These providers are bound by strict data protection requirements under their business agreements with Fortune888.
• Legal Authorities: Fortune888 will disclose personal information to investigative, regulatory, or law enforcement authorities where required by court order, applicable law, or legitimate regulatory obligation. Fortune888 will endeavour to notify you of any such request where permitted by law.
• Identity Verification (KYC) Services: To meet anti-money laundering (AML) and identity verification requirements, Fortune888 may engage authorised third-party services to verify your identity documents. These providers are held to data protection standards equivalent to those of Fortune888.

Fortune888 invests seriously in data security infrastructure to ensure your personal and financial information is protected at all times. The following are the security layers we have in place:

• 256-bit SSL Encryption: All communications between your web browser or app and Fortune888's servers are encrypted using 256-bit SSL (Secure Socket Layer) technology — the same standard used by major banking and financial institutions worldwide. This means data travelling between your device and Fortune888 cannot be read by any third party, even if intercepted.
• Encrypted Data Storage: All personal data stored on Fortune888's servers is held in encrypted format. Your password is stored using a one-way hashing function — meaning even Fortune888 staff cannot view your actual password.
• Two-Factor Authentication (2FA): Fortune888 supports and encourages the use of two-factor authentication for account login, adding an extra layer of security beyond your password.
• Continuous Security Monitoring: Fortune888's systems are monitored around the clock by our technical security team to detect any suspicious activity, unauthorised access attempts, or abnormal patterns.
• Internal Data Access Controls: Within the Fortune888 organisation, access to players' personal data is restricted to staff who require it to carry out their job functions. All access is logged and audited regularly.
• Regular Security Testing: The Fortune888 platform undergoes regular penetration testing and independent security audits to identify and address any potential vulnerabilities.

Fortune888 uses cookies and similar tracking technologies to keep the platform running properly, improve the user experience, and analyze usage patterns. The following are the types of cookies used by Fortune888:

• Essential Cookies: These cookies are required for the Fortune888 platform to function — including your login session, language preferences, and basic platform settings. The platform will not work properly without them. These cookies cannot be disabled while you are using Fortune888.
• Functional Cookies: Used to remember your preferences such as favourite games, display settings, and your usual betting limits. These cookies enhance your overall experience on the Fortune888 platform.
• Analytics Cookies: Fortune888 uses analytics tools to understand how players interact with the platform — which pages are visited most, how long users spend on them, and general navigation patterns. This data is analysed in aggregate and anonymised form to help us continuously improve Fortune888 over time.
• Security Cookies: Used to detect and prevent fraudulent activity, help verify your identity during login sessions, and protect your Fortune888 account from unauthorised access.

You can manage your cookie settings through your web browser's preferences. Please note that disabling certain cookies may affect the functionality of the Fortune888 platform. For more information on managing cookies, refer to your web browser's help documentation.

Fortune888 retains your personal data for as long as your account remains active or as long as is necessary to provide services to you. However, certain retention requirements may obligate us to keep specific data for a longer period after account closure:

• Financial Transaction Data: Deposit, withdrawal, and transaction history records are retained for a minimum of 5 years from the transaction date, in compliance with anti-money laundering (AML) requirements and applicable financial record-keeping obligations.
• Identity Verification (KYC) Data: Identity verification documents and related records are retained for a minimum of 5 years after the termination of the business relationship, in compliance with applicable legal requirements.
• Support Communication Records: Live chat transcripts and email correspondence with the Fortune888 team are retained for 2 years for quality control purposes and as a reference in the event of any disputes.
• General Account Data: Following voluntary account closure by a player, Fortune888 retains general account information for 2 years before deletion, unless a longer retention period is required by law.

Once the designated retention period has lapsed and there is no legal requirement for further retention, Fortune888 will securely delete or anonymise the relevant personal data in accordance with its established data deletion procedures.

As a Fortune888 user, you have certain rights regarding the personal data we hold about you. Fortune888 respects these rights and provides straightforward mechanisms for you to exercise them:

• Right of Access: You have the right to request and receive a copy of the personal data Fortune888 holds about you. This request can be made by emailing support@fortune888.best, and Fortune888 will process it within 30 days.
• Right to Rectification: If any personal data held by Fortune888 is inaccurate or incomplete, you have the right to request a correction. You can update certain information directly through your Fortune888 account profile settings.
• Right to Restriction of Processing: In certain situations, you may request that Fortune888 restrict how we process your data — for example, if you dispute its accuracy, or while Fortune888 is reviewing your deletion request.
• Right to Withdraw Consent: For data processing that relies on your consent (such as marketing communications), you may withdraw that consent at any time through the notification settings in your Fortune888 account or by contacting our support team.
• Right to Complain: If you believe Fortune888 has not handled your personal data in accordance with this Privacy Policy, you have the right to lodge a complaint directly with Fortune888 or with the relevant data protection authority.

Please note that some of the rights above may be subject to certain limitations where legal obligations prevent Fortune888 from fulfilling a request in full — for example, AML data retention requirements. In such cases, Fortune888 will inform you of the applicable limitations.

Fortune888 is a platform strictly restricted to individuals aged 18 and above. We do not knowingly collect, store, or process the personal data of anyone under the age of 18.

If Fortune888 discovers that personal data belonging to a minor has been collected — whether through dishonest registration or any other means — we will take immediate steps to delete that data and close the associated account. Any remaining balance will be returned through an appropriate method.

Fortune888 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data handling practices, relevant legislative changes, or the addition of new platform features. Each amendment will include an updated effective date at the top of this document.

For amendments considered material — meaning changes that significantly affect how we use your data or your privacy rights — Fortune888 will notify affected players by email or in-platform notification at least 14 days before the amendment takes effect. This gives you sufficient time to review the changes and make a fully informed decision.

Your continued use of the Fortune888 platform after any amendments take effect constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.

If you have any questions, concerns, or complaints regarding how Fortune888 handles your personal data, we encourage you to reach out to us directly. The Fortune888 team is committed to addressing every privacy enquiry with care and thoroughness.

You may contact Fortune888's data protection team through:

• Email: support@fortune888.best — for formal written privacy enquiries. We aim to respond within 48 business hours.
• Live Chat: Available 24/7 on the Fortune888 platform for immediate queries about your privacy and data security.

When submitting a privacy-related enquiry, please clearly state the nature of your query and, where relevant, the type of data or processing you wish to ask about. This helps the Fortune888 team provide you with an accurate and useful response in the shortest time possible.