Privacy Policy — bersatu888

1Introduction

This Privacy Policy ("Policy") describes the data processing practices of bersatu888 ("bersatu888", "we", "us", "our") in relation to personal data collected from individuals ("User", "you", "your") who access, register with, or otherwise use the bersatu888 platform available at bersatu888.cam and all associated services (collectively, the "Services").

bersatu888 is an online gaming and sports betting platform built specifically for the Malaysian market. As part of operating these Services, we process certain personal data about you. We are committed to handling that data lawfully, transparently, and with the minimum necessary footprint — collecting only what is required to operate the platform safely, comply with applicable anti-money laundering (AML) and Know Your Customer (KYC) obligations, and deliver a high-quality, personalised experience to Malaysian players.

This Policy applies to all personal data processed by bersatu888 in connection with the provision of the Services, regardless of the device or channel through which you access the platform — whether via desktop browser, mobile browser, or any other interface made available under the bersatu888.cam domain.

2Definitions

For the purposes of this Policy, the following terms have the meanings set out below:

• "Personal Data" — any information that relates to an identified or identifiable natural person, directly or indirectly, including but not limited to a name, identification number, location data, online identifier, or factors specific to the physical, physiological, economic, or social identity of that person.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" — bersatu888, being the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" — a third party that processes Personal Data on behalf of bersatu888 under a contractual data processing agreement.
• "Consent" — a freely given, specific, informed, and unambiguous indication of agreement to the processing of Personal Data for a stated purpose.
• "KYC" — Know Your Customer: the process by which bersatu888 verifies the identity and eligibility of Users in compliance with applicable AML regulations.
• "Cookies" — small text files placed on your device when you visit the Platform, used to enable session management, personalisation, and security functions.
• "Platform" — the bersatu888 website, mobile-optimised interfaces, and all associated digital services accessible under the bersatu888.cam domain.

3Categories of Personal Data We Collect

bersatu888 collects Personal Data in the following categories, depending on the nature of your interaction with the Platform:

We do not collect sensitive personal data (such as racial or ethnic origin, religious beliefs, health data, or biometric data) other than where strictly required by applicable KYC or AML regulations and where you have provided explicit consent or where processing is required by law.

4How We Collect Personal Data

bersatu888 collects Personal Data through the following channels and mechanisms:

• Directly from you — when you register an Account, complete KYC verification, make a deposit or withdrawal, contact customer support, respond to a survey, or otherwise provide information voluntarily through the Platform.
• Automatically through platform use — when you access the Platform, our servers and analytics infrastructure automatically collect Technical Data including your IP address, device information, browser type, and session activity. This data is collected via server logs, cookies, and similar technologies.
• From payment processors and financial institutions — when you initiate a payment transaction through a supported Malaysian payment channel (including Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, Touch 'n Go eWallet, Boost, or GrabPay), the relevant payment processor provides bersatu888 with transactional confirmation data necessary to credit or debit your Account Balance.
• From identity verification service providers — where we engage third-party KYC service providers to assist in verifying the identity of Users, those providers may supply bersatu888 with the results of identity and document verification checks.
• From fraud detection and AML monitoring systems — automated systems monitor transactional patterns and account activity to identify anomalies consistent with fraud, money laundering, or other prohibited conduct. These systems generate derived data based on your activity on the Platform.

5Legal Basis for Processing

bersatu888 processes Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Performance of a contract: Processing is necessary to provide the Services you have registered for — including account management, deposits, withdrawals, gaming activity, and customer support. Without this processing, bersatu888 cannot operate your Account.
• Legal obligation: bersatu888 is subject to applicable anti-money laundering (AML), counter-terrorism financing (CTF), and Know Your Customer (KYC) obligations. Compliance with these obligations requires the collection, retention, and in certain circumstances disclosure of Personal Data including identity documents, transaction records, and gaming activity logs.
• Legitimate interests: bersatu888 processes certain Technical Data and gaming activity data for fraud prevention, platform security, responsible gambling monitoring, and service improvement purposes — activities that are in the legitimate interests of bersatu888 and do not override your fundamental privacy rights.
• Consent: Where bersatu888 processes Personal Data for purposes not covered by the above — such as sending promotional communications — we will seek your explicit consent before doing so. You have the right to withdraw consent at any time.

6How We Use Your Personal Data

bersatu888 uses Personal Data for the following specific purposes:

• Account management: Creating, maintaining, and securing your bersatu888 Account; processing login requests; managing Account settings and preferences.
• Identity verification and KYC compliance: Verifying that you are who you say you are; confirming that you meet the minimum age requirement of 21 years; fulfilling regulatory obligations relating to customer due diligence.
• Payment processing: Processing deposits and withdrawals in MYR via your nominated payment method; reconciling transactional records; investigating payment discrepancies.
• Gaming and betting services: Enabling you to access the full range of gaming and sports betting products; settling bets; calculating and applying bonuses; maintaining your VIP tier status.
• Fraud prevention and security: Detecting and preventing account takeover, fraudulent transactions, collusion, bonus abuse, and other prohibited conduct; maintaining the integrity of the Platform.
• AML and regulatory compliance: Screening against sanctions lists and politically exposed persons (PEP) databases; retaining transaction records as required by applicable regulations; responding to lawful requests from regulatory or law enforcement authorities.
• Responsible gambling: Monitoring gaming patterns to identify indicators of problem gambling behaviour; applying deposit and loss limits you have set; processing self-exclusion requests; contacting you where responsible gambling intervention is warranted.
• Customer support: Responding to your enquiries, complaints, and dispute submissions; maintaining records of support interactions.
• Platform improvement: Analysing anonymised aggregated usage data to understand how the Platform is used and to identify areas for improvement.
• Communications: Sending you transactional notifications (deposit confirmations, withdrawal status updates, KYC approval notices); sending promotional communications where you have opted in to receive them.

7Data Sharing & Disclosure

bersatu888 does not sell, rent, or trade your Personal Data to third parties for commercial purposes. We may, however, share your Personal Data with the following categories of recipients where necessary and lawful:

• Payment processors and financial institutions: To facilitate deposits and withdrawals via Malaysian payment channels including Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, Touch 'n Go eWallet, Boost, and GrabPay. These processors receive only the data required to complete the relevant transaction.
• KYC and identity verification providers: Third-party providers engaged to assist bersatu888 in fulfilling its identity verification obligations. These providers process identity documents and verification results under contractual data processing agreements with bersatu888.
• Fraud detection and AML service providers: Third-party systems used to screen for sanctions, PEP status, and suspicious transactional patterns. These providers operate as Data Processors under contractual arrangements with bersatu888.
• IT infrastructure and cloud service providers: Providers of server hosting, database, and cloud infrastructure used to operate the Platform. These providers do not have independent access to your data outside of their infrastructure role.
• Regulatory and law enforcement authorities: Where bersatu888 is required by law, court order, or lawful regulatory direction to disclose Personal Data to a competent authority, we will comply with that obligation. Where legally permitted, we will endeavour to notify you of such disclosure.
• Professional advisers: Legal counsel, auditors, and compliance consultants engaged by bersatu888 who process Personal Data under strict professional confidentiality obligations.

8Cookies & Tracking Technologies

bersatu888 uses cookies and similar tracking technologies to operate the Platform effectively. Cookies are small text files stored in your browser that enable the Platform to recognise you across pages, maintain your login session, and record certain preferences.

The cookies used by bersatu888 fall into the following categories:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during an active session, CSRF protection tokens, and cookies that maintain your language and currency preferences. These cookies cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: Used to remember settings and preferences you have selected, such as your preferred payment method or your responsible gambling limit configuration. These cookies improve your experience but are not essential to platform operation.
• Analytics Cookies: Used to collect anonymised, aggregated data about how users navigate the Platform — which pages are visited most frequently, how long sessions last, and where users encounter difficulties. This data is used solely to improve the Platform and is never used to identify individual users.
• Security Cookies: Used to support fraud detection and account security functions, including device fingerprinting to detect suspicious login patterns and account takeover attempts.

bersatu888 does not use third-party advertising cookies, tracking pixels for retargeting purposes, or any cookie that facilitates the sharing of your browsing data with advertising networks or social media platforms.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the Platform, including the ability to log in and maintain an authenticated session.

9Data Retention

bersatu888 retains Personal Data for as long as is necessary to fulfil the purposes described in this Policy, subject to the following specific retention principles:

• Active Account data: While your Account remains open, we retain all Personal Data necessary to operate the Account, process transactions, and comply with our regulatory obligations.
• Closed Account data: Following Account closure, bersatu888 retains identity verification documents, KYC records, and transaction history for a minimum period of five (5) years, or such longer period as may be required by applicable AML or financial regulations. This retention is required by law and cannot be waived by individual request during the mandatory retention window.
• Support communications: Customer support transcripts and correspondence are retained for a period of three (3) years from the date of the interaction, or for the duration of any unresolved dispute, whichever is longer.
• Marketing data: Where you have opted in to promotional communications, we retain your contact details for marketing purposes until you withdraw consent or opt out, whichever occurs first.
• Technical and analytics data: Server logs and anonymised analytics data are retained for a maximum of twenty-four (24) months before being purged or fully anonymised.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with industry-standard data destruction procedures.

10Data Security

bersatu888 implements a layered, defence-in-depth approach to the security of Personal Data. Our technical and organisational security measures include, but are not limited to:

• Transport Encryption: All data transmitted between your device and the bersatu888 Platform is encrypted using Transport Layer Security (TLS 1.2 or higher), equivalent to 256-bit SSL encryption. The bersatu888.cam domain is secured with a valid SSL certificate.
• At-Rest Encryption: Sensitive Personal Data stored in our databases — including financial data, identity document copies, and KYC verification records — is encrypted at rest using AES-256 or equivalent encryption standards.
• Access Controls: Access to Personal Data is restricted to bersatu888 personnel and authorised Data Processors on a strict need-to-know basis. Access rights are reviewed periodically and revoked promptly upon personnel role changes or departures.
• Payment Data Security: bersatu888 handles payment data in accordance with Payment Card Industry Data Security Standard (PCI-DSS) compliant procedures. Full payment card numbers are never stored on bersatu888 servers.
• Incident Response: bersatu888 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights, we will notify you and relevant authorities within the timeframes required by applicable law.

11International Data Transfers

bersatu888 operates infrastructure that may involve the transfer of Personal Data to servers or service providers located outside of Malaysia. Where such transfers occur, bersatu888 ensures that appropriate safeguards are in place to protect your Personal Data, including:

• Contractual data processing agreements with Data Processors that include internationally recognised standard contractual clauses for cross-border data transfers.
• Technical safeguards ensuring that data transferred internationally is subject to the same encryption and access control standards as data held within Malaysia.
• Due diligence on third-party processors to ensure they operate security and privacy practices consistent with the standards described in this Policy.

bersatu888 does not transfer Personal Data to jurisdictions that have not implemented adequate data protection frameworks without ensuring that equivalent contractual or technical safeguards are in place.

12Your Rights Over Your Personal Data

As a data subject, you have the following rights in relation to the Personal Data held about you by bersatu888. To exercise any of these rights, please contact our support team as described in Section 16.

bersatu888 will respond to valid data rights requests within thirty (30) calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by up to a further sixty (60) days, with notice provided to you within the initial thirty-day window.

Please note that certain rights — particularly the right to erasure — are subject to overriding legal obligations. In particular, bersatu888 is required by applicable AML regulations to retain identity and transaction records for a minimum of five years following Account closure, regardless of any erasure request received during that period.

13Children & Minors

bersatu888's Services are strictly restricted to individuals who are 21 years of age or older. We do not knowingly collect Personal Data from any person under the age of 21. Our registration process includes age-verification steps, and KYC procedures require documentary proof of age before any real-money activity is permitted.

If bersatu888 becomes aware that Personal Data has been collected from a person under the age of 21 without verified parental or guardian consent, we will take immediate steps to delete that data and to close the relevant Account. If you believe that a minor has registered an Account on the Platform, please contact us immediately using the details in Section 16.

14Third-Party Links

The bersatu888 Platform may, from time to time, contain links to third-party websites or services. This Privacy Policy applies exclusively to data processed by bersatu888 in connection with the Services. bersatu888 does not control and is not responsible for the privacy practices of any third-party website that you may access via a link from our Platform.

We recommend that you review the privacy policy of any third-party website you visit, including the privacy policies of payment processors such as Maybank, CIMB, Public Bank, Touch 'n Go, and Boost, which operate their own independent data processing practices.

15Amendments to This Policy

bersatu888 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data processing or a new category of third-party recipient — we will provide advance notice to registered Users via email and/or via a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date displayed at the top of this page reflects the date on which the current version of this Policy became effective. We encourage you to review this page periodically. Your continued use of the Platform following the effective date of any amended Policy constitutes your acknowledgement of the updated terms.

16Contact Us

If you wish to exercise any of your data rights, raise a privacy concern, submit a data erasure request, or ask a question about this Privacy Policy, you may contact bersatu888 through the following channels:

• Live Chat Support: Available 24 hours a day, 7 days a week (including all Malaysian public holidays) via your member Account dashboard. When submitting a data rights request, please clearly state the nature of your request (e.g., "Data Access Request", "Erasure Request") so it can be directed to the appropriate team.
• Email (plain text — not a clickable link): [email protected]
• Response Timeframes: We acknowledge all privacy-related queries within five (5) business days and provide a substantive response within thirty (30) calendar days, unless the complexity of the request requires a reasonable extension as described in Section 12.