fafa878 Privacy Policy

1. Introduction

fafa878 ("fafa878", "we", "us", "our") operates the online gaming platform accessible at fafa878.co ("Platform"). We are the data controller in respect of personal data collected through the Platform. This Privacy Policy describes our practices regarding the collection, use, disclosure, and protection of personal data provided by members and visitors ("you", "your") in connection with your use of fafa878.

We take data protection seriously. Our approach is guided by applicable data protection legislation, including the Malaysian Personal Data Protection Act 2010 (PDPA), and the data protection requirements imposed by our international gaming licensing authority. By registering an account or otherwise using the Platform, you consent to the collection and use of personal data as described in this Privacy Policy.

If you have questions about how fafa878 handles your personal data, please contact our Data Protection team at the contact details provided in Section 13 of this Policy.

2. Personal Data We Collect

fafa878 collects personal data that you provide directly to us and data generated automatically through your use of the Platform. The categories of personal data we collect include:

2.1 Registration Data

When you register a fafa878 account, we collect your full legal name, date of birth, email address, mobile phone number, username, password (stored in encrypted form), and country of residence. This information is necessary to create and maintain your account.

2.2 Identity Verification (KYC) Data

To comply with our anti-money laundering obligations and gaming licence requirements, fafa878 may request copies of government-issued identity documents, including your Malaysian identity card (MyKad), passport, or equivalent document. We may also collect proof of address and, in some cases, source of funds documentation.

2.3 Financial Data

When you make deposits or request withdrawals, fafa878 collects payment information including your bank account details, e-wallet identifiers (such as your Touch 'n Go or Boost account reference), cryptocurrency wallet addresses, and transaction histories. We do not store full card numbers on our servers.

2.4 Gaming & Transaction Activity

fafa878 records all gaming activity associated with your account, including game sessions, bets placed, outcomes, bonus usage, deposits, withdrawals, and account balance history. This data is necessary to operate the Platform, resolve disputes, and comply with regulatory requirements.

2.5 Technical & Usage Data

We automatically collect technical data when you access the Platform, including your IP address, device type, operating system, browser type and version, session duration, pages visited, referral source, and general geographic location derived from IP data.

2.6 Communications Data

When you contact fafa878 customer support, we collect records of your communications including live chat transcripts, email correspondence, and any documents you provide.

3. How fafa878 Uses Your Personal Data

fafa878 uses the personal data we collect for the following purposes:

• Account Management: To create, operate, and maintain your fafa878 member account, including processing deposits and withdrawals, maintaining your balance, and applying bonuses;
• Identity Verification: To verify your identity and age as required under our gaming licence and applicable anti-money laundering obligations;
• Fraud Prevention & Security: To detect, investigate, and prevent fraud, cheating, money laundering, and other prohibited activities on the Platform;
• Regulatory Compliance: To comply with our legal and regulatory obligations under applicable law and the requirements of our international gaming licensing authority;
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance;
• Responsible Gaming: To monitor gaming patterns and, where appropriate, contact members who may be exhibiting signs of problem gambling, and to administer self-exclusion and limit requests;
• Platform Improvement: To analyse usage patterns, diagnose technical issues, and improve the features and performance of the fafa878 Platform;
• Marketing Communications: To send you promotional offers, platform updates, and relevant gaming information where you have consented to receive such communications. You may opt out at any time.

4. Legal Basis for Processing

fafa878 processes your personal data on one or more of the following legal bases:

• Contract Performance: Processing is necessary to perform our contract with you as a fafa878 member — including operating your account, processing transactions, and providing gaming services;
• Legal Obligation: Processing is required to comply with applicable law, including anti-money laundering legislation, gaming licence conditions, and tax reporting requirements;
• Legitimate Interests: Processing is necessary for the legitimate interests of fafa878, including fraud detection, Platform security, responsible gaming monitoring, and business analytics — provided such interests are not overridden by your fundamental rights;
• Consent: Where we rely on your consent — such as for marketing communications — you have the right to withdraw consent at any time by contacting us or using the opt-out mechanism in any marketing communication.

5. Sharing Your Personal Data

fafa878 does not sell your personal data. We may share personal data with the following categories of recipient in connection with the purposes described in this Policy:

• Payment Processors: We share financial data with licensed payment service providers — including Malaysian e-wallet operators (Touch 'n Go, Boost, GrabPay) and banking partners (Maybank, CIMB, Public Bank, Hong Leong Bank) — to process deposits and withdrawals;
• Game Providers: Game session data may be shared with our licensed game software providers (such as Pragmatic Play, PG Soft, and Evolution Gaming) as necessary to deliver gaming content and resolve game disputes;
• Identity Verification Services: KYC data may be processed by third-party identity verification providers to facilitate required identity checks;
• Regulatory & Law Enforcement Authorities: We may disclose personal data to gaming regulators, financial intelligence units, tax authorities, or law enforcement agencies where required by law or legal process;
• Technology Service Providers: We use cloud hosting, analytics, and security providers to operate the Platform. These providers access data only as necessary to perform services on our behalf and are contractually bound to maintain data confidentiality;
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets, member data may be transferred as part of that transaction. We will notify affected members before such a transfer occurs.

6. Cookies & Tracking Technologies

fafa878 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that help us recognise your browser, maintain your session, and gather usage analytics.

Types of Cookies Used

• Essential Cookies: Required for Platform functionality, including maintaining your logged-in session and processing transactions. These cannot be disabled without breaking core Platform features;
• Analytics Cookies: Used to collect aggregated data about how members use fafa878, enabling us to improve performance and usability. This data does not identify individual members;
• Preference Cookies: Store your language, display, and notification preferences to personalise your fafa878 experience;
• Security Cookies: Help detect and prevent fraudulent activity and protect your account from unauthorised access.

You may control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the fafa878 Platform.

7. Data Retention

fafa878 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including to comply with legal, regulatory, and contractual obligations. Specific retention periods are determined by the following principles:

• Account and transaction data is retained for a minimum of five (5) years following account closure to satisfy anti-money laundering record-keeping requirements;
• KYC documentation is retained for a minimum of five (5) years from the date of the last transaction on the account;
• Communications data (support chat, emails) is retained for three (3) years from the date of the communication;
• Marketing consent records are retained for the duration of the member relationship plus two (2) years;
• Technical and session data is retained for twelve (12) months in identifiable form and may be retained longer in anonymised and aggregated form.

When personal data is no longer required, fafa878 will delete or anonymise it in a secure manner.

8. Data Security

fafa878 implements technical and organisational measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmission between your device and fafa878 servers;
• Encryption of sensitive data at rest, including passwords (stored as salted hashes) and financial credentials;
• Access controls ensuring that personal data is accessible only to fafa878 personnel and service providers who need it to perform their functions;
• Regular security audits, penetration testing, and vulnerability assessments of Platform infrastructure;
• Incident response procedures to detect, contain, and notify affected parties in the event of a data breach, in accordance with applicable legal requirements.

9. Your Rights Regarding Your Personal Data

Subject to applicable law, you have the following rights in relation to personal data that fafa878 holds about you:

• Right of Access: You may request a copy of the personal data fafa878 holds about you;
• Right of Correction: You may request that we correct any inaccurate or incomplete personal data;
• Right of Deletion: You may request deletion of your personal data in certain circumstances, subject to our legal retention obligations;
• Right to Restrict Processing: You may request that we restrict processing of your data in certain circumstances while a query or objection is resolved;
• Right to Object: You may object to processing based on legitimate interests, including direct marketing;
• Right to Withdraw Consent: Where processing is based on consent (such as marketing), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact fafa878 at the details provided in Section 13. We will respond within 30 days of receiving a valid request. We may need to verify your identity before processing your request.

10. Children's Privacy

The fafa878 Platform is strictly intended for persons aged 21 and above. fafa878 does not knowingly collect personal data from anyone under the age of 21. If we become aware that a minor has registered an account or provided personal data without appropriate consent, we will take immediate steps to delete that data and close the associated account.

If you believe that a person under the age of 21 has registered on fafa878, please contact our support team immediately.

11. International Data Transfers

fafa878 operates internationally and your personal data may be stored or processed in jurisdictions outside Malaysia, including locations where our cloud infrastructure, game providers, and payment processors operate. Where personal data is transferred internationally, fafa878 will implement appropriate safeguards to ensure that your data receives a level of protection consistent with applicable Malaysian and international data protection standards.

By using the fafa878 Platform, you consent to the transfer of your personal data to jurisdictions outside Malaysia on the terms described in this Policy.

12. Updates to This Privacy Policy

fafa878 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or Platform functionality. When we make material changes, we will notify registered members by email or by a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this page indicates when this Privacy Policy was last revised. Your continued use of the fafa878 Platform following any update constitutes your acceptance of the revised Privacy Policy.

13. Contact & Data Protection Enquiries

If you have questions, concerns, or requests relating to this Privacy Policy or the manner in which fafa878 processes your personal data, please contact us: