Bubu88 Privacy Policy — Data Protection Our Promise to Malaysian Members

Bubu88 is an online casino platform serving members across Malaysia. As a platform that handles members' personal and financial information, bubu88 understands that your trust is our most valuable asset — and that trust can only be maintained when you are confident your personal data is in responsible hands.

This bubu88 Privacy Policy has been prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) — the primary legislation governing personal data protection in the country. In addition to PDPA compliance, bubu88 adopts data protection best practices that go beyond the minimum legal requirements, because we believe Malaysian players deserve a higher standard of protection.

It is important for you to understand that this document is not merely a formality to satisfy licensing or legal requirements. It reflects bubu88's core values — that every member has the right to know exactly what happens to their personal data, and that bubu88 will never use that data in a manner contrary to members' best interests.

Bubu88 only collects personal data that is strictly necessary to provide platform services to you. We follow a "minimum collection" principle — meaning we do not collect irrelevant or excessive data. The following are the categories of data collected by bubu88:

Bubu88 does not collect sensitive information such as biometric data, medical records, political views or religious beliefs. Any data collected is limited to what is necessary to operate an online casino platform safely and in compliance with applicable laws in Malaysia.

Bubu88 uses members' personal data only for legitimate, necessary and operationally relevant purposes. Every instance of data use by bubu88 is grounded in a lawful basis under Malaysia's PDPA:

• Account Management: Creating, verifying and managing your bubu88 account, including the KYC (identity verification) process required to ensure only eligible individuals use the platform.
• Transaction Processing: Processing your deposits and withdrawals through designated Malaysian payment methods, ensuring all transactions are accurately recorded and can be referenced if needed.
• Gaming Services Provision: Providing access to all bubu88 games, tracking your betting and winnings history, and processing any bonuses or promotions you are entitled to.
• Fraud Prevention & Security: Detecting and preventing fraud, money laundering, platform abuse, and any activity that violates bubu88's Terms & Conditions.
• Responsible Gaming: Monitors gameplay patterns to identify early signs of problem gambling and provides appropriate support tools to members who need them.
• Customer Support: Providing effective technical assistance and customer service whenever you contact the bubu88 support team.
• Marketing Communications: Sends you information about relevant bubu88 promotions, bonuses, and platform updates — only if you have given consent to receive such communications.
• Legal Compliance: Fulfils reporting and compliance obligations as required by applicable Malaysian law.

Bubu88 will not use your personal data for any purpose not listed above without first obtaining your additional consent. If you receive any communication from bubu88 that you feel is inappropriate or irrelevant, you may opt out at any time through your account settings or by contacting our support team.

Bubu88 does not sell, rent or trade members' personal data to any third party. This is an absolute commitment with no exceptions for commercial or marketing purposes. However, in the course of platform operations, bubu88 may need to share limited personal data with certain parties in the following circumstances:

• Platform Service Provider: Bubu88 uses trusted third-party services to operate certain parts of the platform, including game providers (Evolution Gaming, Pragmatic Play, PG Soft and others), payment gateway providers handling TNG, GrabPay and FPX transactions, as well as cloud service providers for computing and data storage. All these parties are bound by strict confidentiality agreements and may only use data for purposes specified by bubu88.
• Legal Compliance: bubu88 may be required to disclose personal data to the relevant Malaysian authorities when compelled by law, court order, or a directive from a legitimate regulatory body. Any such disclosure is limited to the minimum information required.
• Fraud Prevention: In situations involving identity verification or fraud investigations, bubu88 may need to share relevant information with fraud prevention agencies or the relevant industry bodies.
• Business Transfer: In the event of a merger, acquisition or sale of bubu88 assets, members' personal data may be transferred as part of those business assets. In such circumstances, bubu88 will notify members via email or in-platform notification prior to the transfer, and your rights under the PDPA will continue to be protected.

Bubu88 continuously invests in the most up-to-date data security infrastructure to ensure members' personal and financial data is protected at all times. The security measures implemented by bubu88 cover technical, physical and organisational aspects:

• Data-in-Transit Encryption: All communications between your device and bubu88 servers are encrypted with 256-bit SSL/TLS, ensuring your data remains unreadable even if intercepted by unauthorized parties.
• Stored Data Encryption: Sensitive data stored in bubu88's databases — including passwords and financial information — is encrypted using strong encryption algorithms, rendering it unreadable without the correct decryption key.
• Two-Factor Authentication (2FA): bubu88 provides two-factor authentication for all member accounts. By enabling 2FA, logging into your account requires an additional verification code sent to your registered mobile number — even if someone else knows your password, they cannot access your account without your phone.
• 24/7 Security Monitoring: bubu88's automated monitoring system detects suspicious activity around the clock — including login attempts from unusual locations, abnormal transaction patterns, and any signs of attempted intrusion — without interruption.
• Strict Access Controls: Only authorised bubu88 staff who require access to members' personal data in order to carry out their assigned duties are granted such access. All access is logged and audited on a regular basis.
• Regular Security Testing: bubu88 conducts regular penetration testing and security audits through qualified third-party cybersecurity firms to identify and address system vulnerabilities before they can be exploited.

Bubu88 uses cookies and similar tracking technologies to enhance your experience on the platform, ensure essential functions operate correctly, and understand how members use our platform so we can continue to improve it. Cookies are small text files stored in your web browser when you visit bubu88.

You can control and manage cookie settings through your web browser. Most modern browsers — including Chrome, Firefox, Safari and Edge — allow you to view, delete and block cookies from specific websites. Please note, however, that blocking bubu88's essential cookies may affect platform functionality and your overall gaming experience.

Bubu88 retains your personal data only for as long as necessary for the purposes set out in this Privacy Policy, or as required by applicable Malaysian law. bubu88's data retention principle is based on minimum necessity — when data is no longer needed, it will be securely deleted or anonymised.

• Active Account Data: For as long as your bubu88 account remains active, your registration information and activity records are retained for operational and customer support purposes.
• Data After Account Closure: Following the closure of a bubu88 account, bubu88 will retain the required records for a minimum of 7 years in accordance with Malaysian laws governing financial records and anti-money laundering (AMLA).
• Financial Transaction Records: All transaction records — deposits, withdrawals, and betting history — are retained for a minimum of 7 years in accordance with Malaysian legal requirements.
• Support Communication Records: Customer support interaction records are retained for 2 years for reference and service improvement purposes.
• Marketing Data: If you withdraw your consent to receive marketing communications, your preferences will be updated immediately and all marketing communications will cease. A record of your consent withdrawal is retained as proof of compliance.

Once the applicable retention period has expired, bubu88 will securely delete or fully anonymise your personal data using methods that are safe and irreversible. Anonymised data that can no longer be linked to any specific individual may be retained for long-term statistical and analytical purposes.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a data subject have clear and enforceable rights regarding your personal data held by bubu88. bubu88 is committed to respecting and facilitating the exercise of these rights:

Bubu88 does not accept registrations from individuals under the age of 18 and does not knowingly collect personal data from minors. The bubu88 platform is designed exclusively for adults, and we take our responsibility to protect minors very seriously.

Should bubu88 discover that personal data has been collected from a minor without knowledge, the account will be suspended immediately and the data deleted as soon as practicable in accordance with legal requirements. Any balance in the account will be handled in accordance with established procedures.

The bubu88 platform may contain links or integrations to third-party services used in platform operations, such as game providers (Evolution Gaming, Pragmatic Play, PG Soft and others) and payment gateways for processing TNG, GrabPay, DuitNow and FPX transactions.

This bubu88 Privacy Policy applies solely to the bubu88 platform and does not cover the privacy practices of any third party. bubu88 selects its third-party partners carefully and ensures they maintain adequate privacy and data security policies. However, bubu88 is not responsible for the content or privacy practices of any third-party websites or services you may access through the bubu88 platform.

Bubu88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, technological developments, updates to applicable Malaysian law, or evolving platform operational requirements. Members will be notified of any material amendments through:

• Email notifications sent to your registered email address with bubu88.
• In-platform notifications on bubu88 that will appear when you log in.
• A clear notice displayed on the bubu88.my homepage for a reasonable period.

The "Updated" date at the top of this page will always reflect the date this Privacy Policy was last revised. Continued use of the bubu88 platform after any changes to the Privacy Policy take effect constitutes acceptance of the updated policy. If you do not agree with the changes, you may close your bubu88 account and discontinue use of the platform.

Bubu88 has appointed a Data Privacy Officer responsible for ensuring the platform complies with Malaysia's PDPA and for handling all privacy-related enquiries, requests and complaints from members. If you have any questions, concerns or requests regarding this Privacy Policy or how bubu88 manages your personal data, please reach us through: