Privacy Policy

1. Introduction

1.1 This Privacy Policy is published by atm88 ("atm88", "we", "us", "our") and applies to all personal data collected through the atm88 platform at atm88.lat, including through registration, account use, customer support interactions, and any associated communications.

1.2 atm88 takes the privacy of its Malaysian members seriously. We understand that trust is foundational to the atm88 member relationship, and that means being transparent about how personal data is handled. This policy is written in plain English — not to obscure obligations behind legal language, but to give our members a genuine understanding of their data rights and our data practices.

1.3 By registering an atm88 account or continuing to use the atm88 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree to this Privacy Policy, you must not use the atm88 platform.

1.4 This Privacy Policy should be read alongside the atm88 Terms & Conditions, which are incorporated by reference.

2. Personal Data We Collect

2.1 atm88 collects the following categories of personal data:

2.2 atm88 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data (beyond responsible gaming indicators), or biometric data, except where required by applicable KYC regulations.

3. How We Collect Your Data

3.1 Directly from you — when you register an atm88 account, complete KYC verification, make a deposit or withdrawal, contact atm88 support, or participate in a promotion.

3.2 Automatically — when you access or use the atm88 platform, our servers automatically record technical data including IP addresses, device identifiers, browser type, pages accessed, and session timestamps. Cookies and similar tracking technologies also collect data as described in Section 7.

3.3 From third parties — atm88 may receive data from identity verification providers during KYC checks, from payment processors (including FPX, Maybank, CIMB, and eWallet operators) during transaction processing, and from fraud prevention and anti-money-laundering screening services.

4. How We Use Your Personal Data

4.1 atm88 uses your personal data for the following purposes:

• To create and maintain your atm88 member account and verify your identity;
• To process deposits, withdrawals, and bonus payments in MYR;
• To deliver the games, betting markets, and other platform services you access;
• To communicate with you about your account, including transaction confirmations, security alerts, and support responses;
• To send you promotional communications about atm88 offers and bonuses where you have opted in to receive such communications;
• To monitor your gaming activity for responsible gaming purposes, including detecting patterns associated with problem gambling;
• To detect and prevent fraud, money laundering, cheating, and other prohibited conduct;
• To comply with applicable legal and regulatory obligations including AML/KYC requirements;
• To improve and personalise the atm88 platform based on usage patterns and Member feedback;
• To enforce the atm88 Terms & Conditions and resolve disputes.

4.2 atm88 does not use automated decision-making (including profiling) that produces legal or similarly significant effects on Members without human review.

5. Legal Basis for Processing

5.1 atm88 processes your personal data on the following legal bases:

• Contract performance — processing necessary to fulfil our obligations to you under the atm88 Terms & Conditions, including account operation and payment processing;
• Legal obligation — processing required to comply with applicable laws, including anti-money-laundering legislation and KYC obligations;
• Legitimate interests — processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where our interests do not override your fundamental privacy rights;
• Consent — processing for direct marketing communications, where you have affirmatively opted in. You may withdraw consent at any time.

6. Data Sharing & Third-Party Disclosure

6.1 atm88 may share your personal data with the following categories of third parties, strictly for the purposes described in this Privacy Policy:

• Payment processors — FPX, Maybank, CIMB, Public Bank, Touch n Go eWallet, and Boost, to process deposits and withdrawals;
• Identity verification providers — third-party KYC and age verification services used to authenticate member identities;
• Game providers — software providers including Evolution, Pragmatic Play, and Microgaming, who may receive session and account identifiers necessary to deliver their games;
• Fraud and AML screening services — providers of risk screening and transaction monitoring tools;
• Legal and regulatory authorities — where atm88 is required by law, court order, or regulatory direction to disclose Member data.

6.2 All third-party processors engaged by atm88 are required to process Member data only for the specified purpose, under binding data processing agreements, and with appropriate security measures in place.

6.3 atm88 does not sell, rent, or otherwise transfer Member personal data to unaffiliated third parties for their own commercial or marketing purposes.

7. Cookies & Tracking Technologies

7.1 The atm88 platform uses cookies and similar tracking technologies (web beacons, pixel tags, local storage) to operate and improve the platform. The following types of cookies are used:

• Strictly necessary cookies — required for the platform to function, including session authentication and security tokens. These cannot be disabled.
• Functional cookies — remember your preferences such as language settings, display options, and last-visited sections.
• Analytics cookies — collect aggregate, anonymised data about platform usage to help atm88 understand how Members navigate and use the service.
• Security cookies — help detect and prevent fraudulent activity, bot activity, and brute-force login attempts.

7.2 You may configure your browser to reject or delete cookies. Please note that disabling strictly necessary cookies will impair or prevent your ability to use the atm88 platform.

8. Data Retention

8.1 atm88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following:

• Active account data is retained for the duration of the Member's account with atm88;
• Following account closure, identity and financial transaction records are retained for a minimum of 7 years to comply with anti-money-laundering and financial record-keeping obligations;
• Communications and support records are retained for 3 years from the date of the relevant interaction;
• Technical and usage logs are retained for 12 months unless required for longer by a specific security or legal investigation.

8.2 Where personal data is no longer required and no legal retention obligation applies, atm88 will securely delete or anonymise the data.

9. Data Security

9.1 atm88 implements technical and organisational security measures appropriate to the risk presented by the data we hold, including:

• 256-bit SSL/TLS encryption for all data transmitted between your device and atm88 servers;
• Encryption at rest for sensitive personal and financial data stored on atm88 infrastructure;
• One-way cryptographic hashing of all Member passwords;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Intrusion detection systems and real-time security monitoring;
• Regular security audits and penetration testing by independent third parties.

9.2 In the event of a personal data breach that poses a risk to Member rights, atm88 will take prompt remedial action and notify affected Members in accordance with applicable legal requirements.

10. Your Data Rights

10.1 Subject to applicable law and any overriding legal obligations, atm88 Members have the following rights in respect of their personal data:

• Right of access — you may request a copy of the personal data atm88 holds about you;
• Right to rectification — you may request correction of inaccurate or incomplete data;
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes collected, subject to legal retention obligations;
• Right to restriction — you may request that atm88 restrict processing of your data in certain circumstances;
• Right to data portability — where processing is based on your consent or contract performance, you may request a structured machine-readable copy of your data;
• Right to object — you may object to processing based on legitimate interests or for direct marketing purposes;
• Right to withdraw consent — where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

10.2 To exercise any of the above rights, please contact atm88 via the support channels listed in Section 14. atm88 will respond to verified requests within 30 days.

11. Children's Privacy

11.1 The atm88 platform is strictly for adults aged 21 years and above. atm88 does not knowingly collect personal data from any person under the age of 21. If atm88 becomes aware that personal data has been collected from an individual under 21, the account will be closed and all associated data deleted, with any deposits returned where possible.

11.2 If you believe a person under 21 has registered an atm88 account, please contact atm88 support immediately so the account can be investigated and closed.

12. International Data Transfers

12.1 atm88's primary platform infrastructure and Member data are processed within our operating region. Where atm88 engages third-party service providers located in other jurisdictions (such as game providers or KYC verification services), data transfers to those providers are made under appropriate data transfer safeguards including contractual protections.

12.2 atm88 will not transfer Malaysian Member personal data to jurisdictions that do not provide an adequate level of data protection without first putting in place appropriate contractual safeguards.

13. Updates to This Privacy Policy

13.1 atm88 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, new services, or applicable law. Material changes will be communicated to registered Members via email or a prominent notice on the atm88 platform before the changes take effect.

13.2 The "Last Updated" date at the top of this page indicates when the most recent revision was made. Continued use of the atm88 platform following notification of any update constitutes acceptance of the revised Privacy Policy.

14. Contact Us

For any privacy-related queries, requests to exercise your data rights, or concerns about how atm88 handles your personal data, please contact the atm88 Privacy team: