Privacy Policy

Introduction

This Privacy Policy (hereinafter "Policy") is issued by Ajaib88, the operator of the online gaming and sports betting platform accessible at https://ajaib88.cam and any associated subdomains or mobile applications (collectively, "the Platform"). This Policy applies to all users of the Platform, including registered Players, prospective account holders, and casual visitors.

Ajaib88 takes the privacy and security of your personal data seriously. We are committed to handling all personal information we collect in a manner that is lawful, transparent, and consistent with the principles of internationally recognised data protection frameworks, including the principles underpinning Malaysia's Personal Data Protection Act 2010 (PDPA) where applicable to our operations and service delivery to Malaysian users.

By accessing the Platform, creating an Account, or otherwise providing your personal data to Ajaib88, you acknowledge that you have read and understood this Policy and that you consent to the collection, use, and processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, which are incorporated by reference.

Definitions

For the purposes of this Policy, the following definitions shall apply:

Data We Collect

Ajaib88 collects the following categories of Personal Data from Players and Platform visitors. The specific data collected in each category depends on your level of engagement with the Platform:

Ajaib88 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where health-related information is voluntarily provided in the context of a responsible gambling self-exclusion request, in which case it is handled with the highest level of confidentiality.

How We Collect Data

Ajaib88 collects Personal Data through the following channels and mechanisms:

• Direct submission: Information you provide when registering an Account, completing KYC verification, making deposits or withdrawals, contacting customer support, or updating your Account profile.
• Automated collection: Technical and behavioural data collected automatically when you access the Platform, through server logs, session tracking systems, and browser-based technologies including cookies and similar tracking mechanisms (see Section 8).
• Third-party payment processors: Transaction confirmation data received from payment service providers including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, Visa, Mastercard, and cryptocurrency processing services, solely for the purpose of confirming the status and amount of a deposit or withdrawal.
• Identity verification partners: Confirmation data from third-party KYC and identity verification service providers used to validate documents submitted by Players during the verification process.
• Fraud prevention services: Risk signals and fraud indicators received from anti-fraud and anti-money-laundering screening services integrated into the Platform's compliance infrastructure.

Data Processing & Legal Basis

Ajaib88 processes Personal Data only where a valid legal basis exists for doing so. The legal bases upon which we rely are as follows:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions agreed to by the Player upon registration — including Account management, payment processing, game provision, and KYC verification. Without this processing, we cannot provide the services you have contracted for.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, age verification obligations, and any reporting obligations imposed by licensing authorities or law enforcement.
• Legitimate interests: Processing carried out for purposes that serve the legitimate interests of Ajaib88 or relevant third parties, where those interests are not overridden by the rights and interests of the Data Subject — including fraud prevention, platform security, service improvement, responsible gambling monitoring, and internal analytics.
• Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent — primarily in relation to marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

How We Use Your Data

Ajaib88 uses Personal Data collected from Players and Platform visitors for the following specific purposes:

• Account creation and management: To create, maintain, and administer your Player Account, including processing deposits, withdrawals, and bonus allocations in MYR.
• Identity verification (KYC): To verify your identity and age in fulfilment of our compliance obligations, including confirming that you meet the minimum age requirement of 21 years.
• Payment processing: To process transactions made via Malaysian payment methods including Touch 'n Go eWallet, Boost, DuitNow, FPX, Maybank, CIMB, Public Bank, and cryptocurrency networks.
• Service delivery: To provide access to casino games, live dealer tables, sports betting markets (including EPL, Liga Super Malaysia, UFC, and other fixtures), and all other products and features offered on the Platform.
• Customer support: To respond to enquiries, complaints, and support requests submitted via live chat, email, or WhatsApp, in English, Bahasa Melayu, or Chinese.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, bonus abuse, money laundering, underage gambling, and any other misuse of the Platform.
• Responsible gambling: To monitor gaming activity for indicators of problem gambling and to facilitate the operation of player-protection tools including deposit limits, self-exclusion, and cooling-off periods.
• Legal compliance: To fulfil our legal obligations, including responding to lawful requests from regulatory authorities, law enforcement agencies, and courts.
• Platform improvement: To analyse aggregate and anonymised usage data for the purpose of improving Platform features, game offerings, and user experience.
• Marketing communications: Where you have provided consent, to send you promotional offers, bonus announcements, and Platform updates via email or other channels. You may unsubscribe at any time.

Data Sharing & Disclosure

Ajaib88 does not sell, rent, or trade your Personal Data to any third party for commercial purposes. We share Personal Data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment service providers: We share transaction data with payment processors (including providers supporting Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, DuitNow, FPX, and cryptocurrency networks) solely to facilitate deposit and withdrawal processing.
• KYC and identity verification services: We share identity document data with certified third-party KYC verification providers to complete the Player verification process. These providers are contractually bound to handle your data securely and only for the purpose of verification.
• Game content providers: Anonymised or pseudonymised gaming activity data may be shared with our licensed game studio partners for the purpose of game performance monitoring, RTP auditing, and progressive jackpot system administration.
• Fraud and AML screening services: We share data with anti-fraud and anti-money-laundering service providers to fulfil our compliance obligations and protect the Platform from financial crime.
• Legal and regulatory authorities: We may disclose Personal Data to regulatory bodies, licensing authorities, law enforcement agencies, or courts where required to do so by applicable law, legal process, or in the enforcement of our Terms & Conditions.
• Business transfers: In the event of a merger, acquisition, reorganisation, or sale of all or part of Ajaib88's business, Personal Data held by the Platform may be transferred to the acquiring entity, subject to the same data protection obligations set out in this Policy.

Cookies & Tracking Technologies

The Ajaib88 Platform uses cookies and similar tracking technologies to enhance user experience, maintain session state, prevent fraud, and collect analytics data. The categories of cookies we use are as follows:

• Strictly necessary cookies: Required for the Platform to function — including session authentication, Account state management, and security tokens. These cannot be disabled without preventing access to Platform features.
• Functional cookies: Used to remember your preferences, such as language setting, odds display format, and responsible gambling tool configuration, so that you do not need to reconfigure these on each visit.
• Analytics cookies: Used to collect aggregated, anonymised data about how visitors use the Platform — including pages visited, session duration, and game categories accessed. This data is used exclusively for Platform improvement purposes.
• Security cookies: Used to detect fraud signals, identify suspicious session behaviour, and protect the Platform against bot traffic and credential-stuffing attacks.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use key Platform features including login and payment processing. Ajaib88 does not use third-party advertising cookies or cross-site tracking cookies.

Data Retention

Ajaib88 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. Our general data retention principles are as follows:

• Active Account data: Retained for the duration of the active Account relationship and for a minimum of five (5) years following Account closure, in compliance with anti-money laundering record-keeping obligations.
• KYC documents: Retained for a minimum of five (5) years following the date of verification completion, or longer where required by applicable regulatory requirements.
• Transaction records: Financial transaction records, including all MYR deposit and withdrawal records, are retained for a minimum of seven (7) years from the date of the transaction.
• Customer support communications: Live chat transcripts, email correspondence, and support ticket records are retained for three (3) years from the date of the interaction.
• Gaming activity data: Detailed gaming history records are retained for five (5) years from the date of each session, for compliance, dispute resolution, and responsible gambling monitoring purposes.
• Technical and access logs: Server access logs and technical session data are retained for twelve (12) months from the date of collection, after which they are anonymised or destroyed.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our data destruction procedures.

Data Security

Ajaib88 implements a comprehensive suite of technical and organisational security measures to protect Personal Data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and the Ajaib88 Platform is encrypted using TLS (Transport Layer Security) with a minimum of 256-bit encryption. The Platform enforces HTTPS on all pages.
• Encryption at rest: Sensitive Personal Data stored on Ajaib88 servers — including KYC documents, financial data, and Account credentials — is encrypted at rest using industry-standard encryption protocols.
• Access controls: Access to Personal Data within Ajaib88's internal systems is restricted on a need-to-know basis. Staff access to Player data is logged, monitored, and subject to regular audit review.
• Two-factor authentication: Two-factor authentication (2FA) is available to all Players and is required for all administrative staff accessing backend systems containing Personal Data.
• Regular security audits: The Platform undergoes regular independent security assessments, including penetration testing and vulnerability scanning, conducted by certified third-party security firms.
• Data breach response: Ajaib88 maintains a documented data breach response procedure. In the event of a breach affecting your Personal Data, we will notify affected individuals in accordance with applicable legal requirements.

Your Rights

Subject to applicable data protection law and the limitations set out below, you have the following rights with respect to your Personal Data held by Ajaib88:

• Right of access: You have the right to request a copy of the Personal Data we hold about you, together with information about how it is processed. We will respond to access requests within 30 days.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete Personal Data. You may update certain Account details directly through your Account profile. For KYC-related corrections, please contact support.
• Right to erasure: In certain circumstances, you may request that we delete your Personal Data. Please note that we are unable to delete data where retention is required by applicable law (for example, AML record-keeping obligations that require us to retain KYC and transaction data for a minimum of five years following Account closure).
• Right to restriction of processing: You may request that we restrict the processing of your Personal Data in certain circumstances — for example, where you contest the accuracy of the data, pending verification.
• Right to data portability: Where processing is based on your consent or on a contractual basis, and is carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your rights, or unless processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to withdraw consent: Where processing is based solely on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact us using the details in Section 15. We may need to verify your identity before processing your request. We will respond within 30 days, or within any shorter period required by applicable law.

Protection of Minors

The Ajaib88 Platform is strictly restricted to persons aged 21 years and above. We do not knowingly collect, use, or store Personal Data from any person under the age of 21. Age verification is a mandatory component of our registration and KYC processes.

Where Ajaib88 becomes aware that Personal Data has been collected from a person under 21 — whether through registration fraud, document forgery, or any other means — we will immediately close the associated Account, void any associated transactions, return any verifiable Real Money Funds to the original payment method where legally permissible, and destroy all associated Personal Data, except where retention is required for compliance purposes.

Third-Party Links & Services

The Ajaib88 Platform may contain references or links to third-party payment services and game providers. This Privacy Policy applies solely to Personal Data collected and processed by Ajaib88 in its capacity as Data Controller. It does not apply to the data practices of third-party services, which are governed by their own respective privacy policies.

Ajaib88 is not responsible for the privacy practices or content of any third-party services integrated into or referenced by the Platform. Players are encouraged to review the privacy notices of any third-party payment service — including Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and DuitNow — directly, as Ajaib88 does not control how those services handle data beyond the specific transaction confirmation information passed to Ajaib88 for payment processing purposes.

Changes to This Policy

Ajaib88 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaning they significantly affect how we collect, use, or share your Personal Data — we will provide at least 14 days' advance notice via email to your registered Account email address, or by way of a prominent notice on the Platform.

Non-material changes — including typographical corrections, clarifications that do not alter the substantive effect of any provision, and updates to contact details — may be made without prior notice. All changes take effect from the "Last Updated" date displayed at the top of this Policy.

Your continued use of the Platform following the effective date of any amendment to this Policy constitutes your acknowledgement of and agreement to the revised terms. If you do not accept a material change, you must stop using the Platform and may request Account closure by contacting our support team.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights described in Section 11, or have concerns about how Ajaib88 handles your Personal Data, please contact our support and data protection team through the following channels:

Formal data access requests and complaints should be submitted in writing via email, clearly marked "Data Subject Request" or "Privacy Complaint" in the subject line. Ajaib88 will acknowledge all formal data enquiries within 5 business days and aims to provide a substantive response within 30 days.