Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by virus88 ("the Company", "we", "us", or "our"), the operator of the online casino and sports betting platform accessible at https://virus88.cam (the "Platform" or "Services"). It applies to all registered members, visitors, and persons who interact with the Platform in any capacity.

virus88 is committed to safeguarding the privacy and personal data of all individuals who use our Services, including players across Malaysia — from Kuala Lumpur and Penang to Johor Bahru, Petaling Jaya, Shah Alam, and beyond. We process personal data in a lawful, fair, and transparent manner in accordance with applicable data protection principles and the requirements of our international gaming licence.

By accessing the Platform, registering an account, or using any of our Services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions, which together govern your relationship with virus88.

2. Definitions

For the purposes of this Policy, the following terms shall apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, contact details, financial information, and online identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, transmission, and deletion.
• "Data Subject" means the individual to whom the personal data relates — in the context of this Policy, primarily the registered User or visitor.
• "Data Controller" means the entity that determines the purposes and means of processing personal data — in this case, virus88.
• "Third Party" means any person or entity other than the Data Subject and virus88, including payment processors, KYC service providers, and analytics vendors.
• "Cookies" means small text files stored on your device by your web browser to enable the Platform to recognise your device and remember certain information.
• "KYC" means Know Your Customer — the identity and address verification process required under our anti-money-laundering obligations.
• "MYR" means Malaysian Ringgit, the currency in which transactions on the Platform are denominated.

3. Personal Data We Collect

virus88 collects the following categories of personal data, as applicable to your interaction with the Platform:

3.1 Identity & Contact Data

• Full legal name as shown on your government-issued identity document;
• Date of birth (to verify the 21+ age requirement);
• Nationality and country of residence;
• Residential address, including postcode;
• Email address and mobile phone number.

3.2 Identity Verification (KYC) Data

• Copy of Malaysian identity document (MyKad, Driver's Licence, or Passport);
• Proof of residential address (utility bill, bank statement dated within 3 months);
• Selfie photograph holding the submitted identity document;
• Proof of payment method ownership where required.

3.3 Financial & Transaction Data

• Payment method details (e.g., bank account number, e-wallet identifier for Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect);
• Deposit and withdrawal history, including amounts in MYR;
• Bonus and promotion usage records;
• Transaction reference numbers and timestamps.

3.4 Gaming & Behavioural Data

• Game play history, wager amounts, and outcomes;
• Sports betting selections (including Liga Super Malaysia, EPL, UFC markets);
• Session duration, login frequency, and responsible gambling tool usage;
• Customer support interaction records.

3.5 Technical & Usage Data

• IP address and approximate geolocation;
• Device type, operating system, browser type and version;
• Pages visited, links clicked, and time spent on each page;
• Cookie identifiers and session tokens.

4. How We Collect Personal Data

We collect personal data through the following means:

4.1 Directly From You

When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, participate in a promotion, or otherwise interact with the Platform, you provide data directly to us.

4.2 Automatically Through Technology

When you visit or use the Platform, we automatically collect technical and usage data through cookies, web beacons, server logs, and similar tracking technologies. This collection occurs whether or not you are logged into your Account.

4.3 From Third Parties

We may receive personal data from third-party identity verification services, payment processors, fraud prevention partners, and publicly available databases (such as sanctions screening lists) for the purposes of KYC compliance and fraud prevention.

5. Purposes of Data Processing

virus88 processes personal data for the following clearly defined purposes:

6. Legal Basis for Processing

We process your personal data on the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between you and virus88 — including account management, payment processing, and provision of gaming services.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money-laundering requirements, KYC obligations under our gaming licence, and sanctions screening.
• Legitimate Interests: Processing carried out in our legitimate interests — including fraud prevention, platform security, responsible gambling monitoring, and service improvement — where such interests are not overridden by your rights and freedoms.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent — including direct marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Sharing & Disclosure of Personal Data

virus88 does not sell or rent your personal data to third parties. We may share your personal data with the following categories of recipients only to the extent necessary for the stated purposes:

7.1 Service Providers

Third-party vendors engaged to support platform operations, including KYC and identity verification providers, payment processors (e.g., providers facilitating DuitNow, FPX, Touch 'n Go eWallet, and other Malaysian payment rails), cloud hosting providers, customer support platforms, and analytics tools. All service providers are bound by contractual confidentiality and data protection obligations.

7.2 Regulatory & Law Enforcement Authorities

We may disclose personal data to competent authorities — including our gaming regulator, financial intelligence units, and law enforcement agencies — where required by law, court order, or regulatory obligation, including for anti-money-laundering investigations.

7.3 Responsible Gambling Organisations

In limited circumstances, data may be shared with responsible gambling programme administrators to facilitate self-exclusion requests or problem gambling interventions, as required under our licence conditions.

7.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the relevant successor entity, subject to the same privacy protections described in this Policy.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable legal, regulatory, or contractual obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account relationship with virus88 and for a minimum of five (5) years following account closure, in compliance with anti-money-laundering and gaming licence record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• KYC Documentation: Retained for a minimum of five (5) years from account closure or the end of the business relationship.
• Marketing Consent Records: Retained until consent is withdrawn, and for a further reasonable period as evidence of the consent given.
• Technical & Log Data: Typically retained for twelve (12) months unless required longer for security investigations or legal proceedings.

When data is no longer required, it is securely deleted or anonymised in accordance with industry-standard procedures.

9. Your Data Subject Rights

Subject to applicable law and certain exceptions (including those necessary for AML compliance), you hold the following rights in relation to your personal data held by virus88:

• Right of Access: You may request a copy of the personal data we hold about you, free of charge in most circumstances.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. Some corrections require updated KYC documentation.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction of Processing: You may request that we restrict processing of your data in certain circumstances, such as while a rectification request is pending.
• Right to Data Portability: You may request that data you provided to us on the basis of consent or contract be transferred to you or another controller in a machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests or for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact us at [email protected] (plain text — not a clickable link). We will respond within a reasonable timeframe, generally within 30 calendar days. We may request proof of identity before processing certain requests.

10. Cookies & Tracking Technologies

virus88 uses cookies and similar technologies to enhance your experience on the Platform. The following categories of cookies are used:

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. For more information on cookie management, refer to the help section of your browser.

11. Data Security

virus88 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit;
• Encryption of sensitive data at rest, including KYC documents and financial records;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security assessments and vulnerability testing;
• Secure, geographically distributed server infrastructure;
• Two-factor authentication options for account access.

While we employ industry-standard security practices, no electronic transmission or storage system is entirely immune from compromise. Users are responsible for maintaining the security of their own login credentials and for notifying us promptly of any suspected unauthorised access to their Account.

12. Minors

The Platform is strictly restricted to individuals aged 21 and above. virus88 does not knowingly collect personal data from anyone under the age of 21. If we become aware that personal data has been collected from an underage individual, the relevant account will be immediately suspended, the data will be securely deleted to the extent legally permissible, and any deposits will be refunded to the source payment method.

If you believe an underage individual has registered on the Platform, please contact us immediately at [email protected] (plain text — not a clickable link).

13. International Data Transfers

As an internationally operated platform, virus88 may transfer your personal data to servers or service providers located outside of Malaysia. Such transfers occur in connection with our cloud hosting infrastructure, KYC verification providers, and payment processing partners.

When transferring data internationally, we ensure appropriate safeguards are in place, including contractual data protection clauses with all third-party recipients, to ensure your data receives a standard of protection equivalent to that described in this Policy.

14. Amendments to This Policy

virus88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or licensing requirements. Material changes will be communicated to registered Users via the email address on file or through a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the head of this document will be revised with each update. Continued use of the Platform following the effective date of any amended Policy constitutes acceptance of the revised terms. If you do not accept the revised Policy, please cease using the Platform and contact us to close your Account.

15. Contact Us

For questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the virus88 Data Protection team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the Platform. Average response time under 2 minutes.

When submitting a data subject rights request, please include your registered email address and a brief description of your request. We may require proof of identity before actioning certain requests. We aim to respond within 30 calendar days of receipt.