Cat888 Privacy Policy – Personal Data Protection for Malaysian Members

Cat888 is an online casino and Sports Betting platform operating under the domain cat888-app.com, serving players in Malaysia. We understand that trust is the foundation of the relationship between a platform and its members — and that trust begins with transparency about how we handle your personal information.

This Privacy Policy has been prepared to fulfil our obligations under Malaysia's Personal Data Protection Act (PDPA) 2010 and sets out in detail: what personal data we collect when you use the cat888 platform, why we need it, how it is used and protected, who it may be disclosed to, how long we retain it, and what rights you have over that data.

This policy applies to all users of the cat888 platform, including unregistered website visitors, active registered members, and former members whose accounts have been closed but whose transaction records remain within the legally mandated retention period. If you disagree with any aspect of this Privacy Policy, please do not use the cat888 platform and contact us to discuss the options available.

Cat888 collects personal data across several categories depending on the nature of your interaction with the platform. Below is a detailed explanation of each data category:

Registration and Identity Data: When you register a cat888 account, we collect your full name as shown on your Malaysian MyKad or passport, an active Malaysian mobile number, email address, date of birth (for age verification), and an encrypted password. We do not store passwords in plain text — they are hashed using the bcrypt algorithm before being saved.

Financial & Transaction Data: To process deposits and withdrawals, cat888 retains financial transaction records including the date and time, amount in Malaysian Ringgit (RM), payment method used (Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX Maybank2u, or FPX CIMB Clicks), and transaction status. Full account numbers or card details are not stored by cat888 — all processing is handled by certified payment processors.

Gaming Activity Data: Records of your gaming activity on the cat888 platform — including games played (baccarat, blackjack, roulette, Sports Betting on Liga Super Malaysia, EPL, badminton, e-sports), betting history, game outcomes, and session duration — are retained for fair play controls, compliance, and customer support purposes.

Technical & Usage Data: cat888 automatically collects technical data when you access the platform, including your IP address, device type and operating system, web browser type, visit time and duration, and pages accessed. This data is used for security purposes and technical platform improvements.

• Verification document data (MyKad or passport) — collected only when identity verification is required
• Communication records — live chat session logs and emails with the cat888 support team
• Preference data — language selection, account settings, and marketing communication preferences

Cat888 uses collected personal data solely for the legitimate and stated purposes below. We do not use your data for any other purpose without obtaining fresh consent from you:

• Account Management: Processing registrations, verifying identity and age eligibility, enabling secure login, and managing your account settings on cat888.
• Transaction Processing: Processing deposits via your chosen Malaysian local payment method and ensuring withdrawal winnings are credited to the correct account in Ringgit Malaysia (RM).
• Service Delivery: Enabling you to access and play all games on the cat888 platform — from baccarat and blackjack tables to Sports Betting — seamlessly and securely.
• Customer Support: Responding to enquiries, resolving disputes, and providing technical support to cat888 members in Bahasa Malaysia.
• Legal Compliance: Meeting compliance obligations including anti-money laundering (AML) verification, source of funds confirmation, and reporting requirements set by the relevant authorities.
• Platform Security: Detecting and preventing fraud, multi-account usage, bonus exploitation, and other activities that violate cat888's Terms & Conditions.
• Marketing Communications: Sending information about cat888 promotions, new bonuses, and special offers — only to members who have given their consent to receive such communications.
• Platform Improvements: Analysing usage patterns in aggregate and anonymised form to better understand the needs of Malaysian players and improve the quality of cat888's products.

Cat888 does not sell, rent, or disclose members' personal data to third parties for their own marketing purposes. However, in the course of operating the platform, cat888 shares limited personal data with the following categories of third parties — and only to the extent necessary for the stated purpose:

• Payment Processors: Payment service providers that process your deposit and withdrawal transactions — including Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX operators. They receive only the data necessary to process a specific transaction and are bound by their own privacy policies and Malaysian financial industry standards.
• Technical Service Providers: Companies that provide technical infrastructure such as server hosting, cybersecurity services, and platform analytics. All such providers are bound by strict data processing agreements that prohibit the use of cat888 data for their own purposes.
• Regulatory and Compliance Bodies: Authorities with legal powers to request information — such as the Malaysian Anti-Corruption Commission (MACC), the Royal Malaysia Police (PDRM), or relevant financial supervisory bodies — when cat888 receives a valid request in accordance with proper legal procedures.
• Gaming Service Providers: Game software providers and live dealer studios that supply gaming content to cat888. They receive only the limited data necessary to ensure the gaming experience functions correctly.

In all cases where data must be shared, cat888 ensures that written agreements with adequate data protection clauses are in place before any transfer takes place. We do not permit third parties to use cat888 member data for their own purposes unrelated to delivering services to cat888.

Protecting members' personal data is a core operational priority at cat888. We have invested in a comprehensive, multi-layered security infrastructure to keep your data safe from unauthorized access, breaches, and misuse at all times:

• Data Encryption in Transit: All communication between your browser or app and cat888's servers is secured by TLS 1.3 — the latest and most secure version of the transport layer security protocol. This ensures that data transmitted when you log in, make a deposit, or play cannot be intercepted by third parties.
• Data Encryption at Rest: Sensitive data stored in cat888's databases — including financial information and identity documents — is encrypted using AES-256-bit encryption at rest. Even in the event of unauthorised physical access to the servers, the data remains unreadable without the appropriate encryption key.
• Layered Access Controls: Internal access to cat888 member data is restricted on a least-privilege basis. Only staff who require access to carry out their duties may view specific data, and all access is logged and monitored.
• Two-Factor Authentication: All internal cat888 accounts with access to member data are required to use two-factor authentication (2FA). For members, 2FA is available and strongly recommended as an added layer of account security.
• Continuous Monitoring: cat888's automated monitoring system operates 24 hours a day to detect unusual activity such as login attempts from unrecognized locations, suspicious betting patterns, or unauthorized attempts to access the database.
• Regular Security Audits: cat888 conducts regular penetration testing and security audits by independent cybersecurity experts to identify and address vulnerabilities before they can be exploited.

While cat888 has taken all reasonable steps to protect your data, no security system is 100% foolproof. In the event of a material data security breach affecting members' personal data, cat888 is committed to notifying the affected members and the relevant authorities within the timeframe required by Malaysian law.

Cat888 uses cookies and similar tracking technologies to enhance the user experience and platform security. Cookies are small text files stored on your device when you visit cat888. They help the platform remember your preferences and keep your login session secure.

The types of cookies used by cat888 are as follows:

• Essential Cookies (Required): Required for core platform functions such as login authentication, session management, and security. These cookies cannot be disabled as they are essential to cat888's operation. They do not store any personally identifiable information.
• Functional Cookies: Allows cat888 to remember your preferences such as your chosen language, interface settings, and favorite game tables. These cookies improve your experience on the platform without compromising your privacy.
• Analytics Cookies: Collects information on how visitors use cat888 — the most frequently visited pages, time spent, and navigation paths. This data is aggregated and anonymized to help us understand and improve the platform.

You can manage cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the cat888 platform. Analytics cookies can be declined without impacting your gaming experience.

In the course of operating the cat888 platform, it may be necessary to transfer or process Malaysian members' personal data in countries or regions outside Malaysia — for example, for international payment processing or the use of server infrastructure located abroad.

When international data transfers occur, cat888 ensures that adequate safeguards are in place to protect your personal data. This includes confirming that the recipient country or region offers an equivalent level of data protection, or applying appropriate contractual protections such as standard contractual clauses approved by the relevant data protection authority.

Cat888 does not transfer members' personal data to countries that lack adequate data protection laws without additional protective arrangements in place. If you would like to know more about specific international data transfers involving your data, please contact us at support@cat888-app.com.

Cat888 does not retain your personal data longer than necessary to fulfill the purpose for which it was collected, or to comply with legal requirements. Our data retention policy is as follows:

• Active Account Data: Personal data of members with an active cat888 account is retained for the duration of that active membership.
• Data After Account Closure: After an account is closed, cat888 will retain financial transaction records for a minimum of 7 years to comply with relevant Malaysian financial and tax legislation.
• Identity Data: Copies of identity verification documents (MyKad or passport) collected during the KYC (Know Your Customer) process will be retained for 5 years from the date of collection or account closure, whichever is later, in accordance with Malaysia's AML compliance requirements.
• Communication Records: Customer support session records and emails related to disputes or complaints are retained for 3 years after final resolution, to allow for review should any follow-up be required.
• Anonymized Analytics Data: Anonymised aggregate data used for platform improvement analytics may be retained indefinitely, as it no longer constitutes personally identifiable information.

Once a retention period expires and there is no legal requirement to continue storing the data, cat888 will securely delete or anonymise that personal data using appropriate data disposal procedures.

Under Malaysia's Personal Data Protection Act (PDPA) 2010, you as a data subject have the following rights in relation to the personal data held by cat888. We are committed to making it straightforward for you to exercise these rights: