1 Who We Are
smb888 ("smb888", "we", "us", or "our") operates the online gaming platform accessible at smb888.org (the "Platform"). smb888 is the data controller responsible for the personal data you provide or that we collect when you register, transact, or otherwise interact with our Platform.
This Privacy Policy applies to all users of the smb888 Platform, including registered account holders, prospective players, and visitors browsing the site without an account. By accessing or using the smb888 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.
2 Data We Collect
smb888 collects the following categories of personal data:
- Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification number (e.g., Malaysian MyKad number, passport number).
- Contact Data: Email address, Malaysian mobile phone number, and residential address including postcode and state.
- Financial Data: Payment method details (e-wallet identifiers, bank account details for withdrawal), transaction history, deposit and withdrawal amounts, and currency (MYR).
- Account Data: Username, encrypted password, account creation date, login history, session data, and account status.
- Gaming Activity Data: Bet history, game preferences, session durations, win/loss records, and bonus redemption history.
- KYC & Compliance Data: Copies of identity documents, proof of address, source-of-funds declarations, and any enhanced due diligence materials submitted in connection with your account.
- Technical Data: IP address, device type, browser type and version, operating system, referring URLs, and approximate geolocation derived from IP.
- Communications Data: Records of support interactions via live chat, email correspondence with [email protected], and any formal complaints or dispute submissions.
smb888 does not collect sensitive personal data (as defined under applicable data protection law, such as racial origin, religious beliefs, or health data) except where required by law or with your explicit consent.
3 How We Collect Data
smb888 collects personal data through the following means:
- Direct Submissions: Information you provide when registering an account, completing KYC verification, submitting a deposit or withdrawal request, or contacting smb888 customer support.
- Automated Technical Collection: Data collected automatically when you visit or use the smb888 Platform, including via cookies, pixel tags, and server logs. See Section 7 (Cookies & Tracking) for full details.
- Third-Party Sources: Identity verification data obtained from KYC/AML service providers; fraud and sanctions screening results from compliance data providers; payment confirmation data from e-wallet and banking intermediaries (including Touch 'n Go eWallet, Boost, DuitNow, and FPX processors).
- Publicly Available Sources: Where permitted by law, smb888 may supplement account data with information from publicly available registers or databases for compliance purposes.
4 Legal Basis for Processing
smb888 processes your personal data on the following legal bases:
- Contractual Necessity: Processing required to perform our obligations under the smb888 Terms & Conditions, including account management, transaction processing, and game delivery.
- Legal Obligation: Processing required to comply with applicable anti-money laundering (AML) legislation, KYC regulations, gaming licence conditions, and tax reporting requirements.
- Legitimate Interests: Processing conducted for fraud prevention, platform security, responsible gaming enforcement, and internal analytics — where such interests are not overridden by your rights and freedoms.
- Consent: Where you have given explicit consent — for example, to receive promotional communications from smb888. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.
5 How We Use Your Data
smb888 uses your personal data for the following purposes:
- To verify your identity and comply with KYC and AML obligations under our gaming licence.
- To create, manage, and maintain your smb888 player account, including processing deposits, withdrawals, and bonus claims.
- To deliver the gaming products and services you access via the smb888 Platform.
- To detect, investigate, and prevent fraud, money laundering, collusion, and other prohibited activities.
- To enforce the smb888 Terms & Conditions and applicable laws, including age verification and jurisdictional access restrictions.
- To provide customer support and respond to enquiries, complaints, and dispute submissions.
- To send transactional communications, including account activity notifications, deposit confirmations, withdrawal status updates, and security alerts.
- To send promotional communications about smb888 offers, bonuses, and new products — where you have opted in to receive such communications. You may opt out at any time.
- To conduct responsible gaming monitoring, including identifying patterns of play that may indicate problem gambling and applying account-level intervention tools where appropriate.
- To conduct internal analytics and improve the smb888 Platform experience.
6 Data Sharing & Disclosure
smb888 does not sell your personal data to third parties. We may disclose your personal data to the following categories of recipients:
- KYC & Compliance Providers: Third-party identity verification and AML screening services engaged to fulfil our regulatory obligations.
- Payment Processors: Malaysian e-wallet operators (including Touch 'n Go eWallet, Boost, GrabPay), bank FPX infrastructure providers, and cryptocurrency processors — strictly to the extent necessary to process your transactions.
- Game Studio Partners: Certified game providers whose platforms operate within the smb888 ecosystem. These providers may receive session and wagering data to facilitate game delivery and RNG certification.
- Regulatory & Law Enforcement Authorities: smb888 will disclose personal data to competent authorities where required by law, court order, or regulatory direction. We may also proactively disclose data where we believe disclosure is necessary to prevent serious harm or illegal activity.
- Corporate Successors: In the event of a merger, acquisition, or sale of substantially all of smb888's assets, your data may be transferred to the acquiring entity, subject to equivalent data protection obligations.
All third-party recipients of your data are contractually required to maintain appropriate technical and organisational security measures and to use your data only for the purposes for which it was disclosed.
7 Cookies & Tracking
smb888 uses cookies and similar tracking technologies on the Platform for the following purposes:
- Strictly Necessary Cookies: Required for the Platform to function, including session authentication, security tokens, and load balancing. These cannot be disabled without impairing Platform functionality.
- Functional Cookies: Store your preferences such as language settings, remembered login credentials (where you have opted in), and UI customisation choices.
- Analytics Cookies: Used to understand how players navigate the smb888 Platform, which pages are most visited, and where users encounter difficulties — enabling us to improve the user experience.
- Security Cookies: Support fraud detection and session integrity verification.
You may configure your browser to reject or delete cookies. Note that disabling strictly necessary cookies will impair your ability to use the smb888 login and transaction functions. smb888 does not use third-party advertising or retargeting cookies on the Platform.
8 Data Retention
smb888 retains your personal data for as long as your account is active and for such additional period as is required by applicable law or our regulatory obligations. Specific retention periods include:
- Account and KYC Data: Retained for a minimum of five (5) years following account closure, as required under AML and gaming regulatory frameworks.
- Transaction Records: Retained for a minimum of five (5) years from the date of the transaction for financial record-keeping and regulatory audit purposes.
- Gaming Activity Logs: Retained for a minimum of three (3) years from the date of each session.
- Support Communications: Retained for a minimum of two (2) years from the date of the interaction.
- Technical Logs: Retained for up to twelve (12) months for security monitoring and incident investigation purposes.
Following the applicable retention period, personal data is securely deleted or anonymised in accordance with industry-standard data destruction procedures.
9 Data Security
smb888 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
- 256-bit SSL/TLS encryption for all data in transit between your device and smb888 servers.
- Encryption of sensitive data fields (including passwords and financial identifiers) at rest using industry-standard cryptographic methods.
- Role-based access controls limiting internal access to personal data on a strict need-to-know basis.
- Regular third-party penetration testing and security audits of the smb888 Platform infrastructure.
- Automated fraud detection and anomalous session monitoring systems operating in real time.
While smb888 employs these protections, no internet transmission or electronic storage system is completely immune to breach. In the event of a personal data breach that poses a risk to your rights and freedoms, smb888 will notify affected players in accordance with applicable notification requirements.
10 Your Rights
Subject to applicable data protection law, you have the following rights in respect of your personal data held by smb888:
- Right of Access: To request a copy of the personal data smb888 holds about you.
- Right to Rectification: To request correction of inaccurate or incomplete personal data.
- Right to Erasure: To request deletion of your personal data, subject to overriding legal or regulatory retention obligations.
- Right to Restriction: To request that smb888 restrict the processing of your data in certain circumstances.
- Right to Data Portability: To receive your personal data in a structured, commonly used, machine-readable format where processing is based on consent or contract.
- Right to Object: To object to processing based on legitimate interests, including direct marketing communications.
- Right to Withdraw Consent: Where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact smb888 via live chat or at [email protected]. smb888 will respond to verified requests within thirty (30) days. We may require identity verification before processing a data subject request.
11 International Transfers
Some of smb888's service providers and game studio partners operate infrastructure outside of Malaysia. Where personal data is transferred internationally, smb888 ensures that appropriate safeguards are in place — including contractual data protection obligations equivalent to those required under applicable law — to protect the security and integrity of your data throughout the transfer.
12 Children's Privacy
The smb888 Platform is strictly intended for adults aged 21 years and above. smb888 does not knowingly collect personal data from individuals under 21. If we become aware that an account has been created by or on behalf of a minor, we will immediately terminate the account, forfeit any associated balances, and securely delete all associated personal data. If you believe a minor has accessed the smb888 Platform, please notify us immediately at [email protected].
13 Changes to This Policy
smb888 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform features. Material changes will be communicated to registered players via email or in-platform notification prior to taking effect. The "Last Updated" date at the top of this page will be revised accordingly. Your continued use of the smb888 Platform following any update constitutes your acceptance of the revised Privacy Policy.
14 Contact & Complaints
For any queries, requests, or concerns relating to this Privacy Policy or smb888's data practices, please contact our Data Protection team via:
If you are unsatisfied with smb888's response to a data protection concern, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.