Privacy Policy

cekap88 ("cekap88", "the Platform", "We", "Us", "Our") operates the website accessible at https://cekap88.cam. This Privacy Policy ("Policy") describes the categories of personal data that cekap88 collects from users ("User", "You", "Your"), the purposes for which that data is processed, the parties with whom it may be shared, the safeguards applied to protect it and the rights available to you in relation to your personal data.

cekap88 is an English-language casino and sports betting information platform serving adult users in Malaysia. Personal data collected through this platform is processed in accordance with applicable data protection principles and relevant regulatory requirements, including those pertinent to online gaming services.

By registering an Account on cekap88 or by continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood the terms of this Policy. If you do not agree with the practices described herein, you should discontinue use of the Platform immediately.

For the purposes of this Privacy Policy, the following terms carry the meanings stated below:

• "Personal Data" — Any information that identifies or can reasonably be used to identify a living individual, either directly (e.g., name, email address) or indirectly (e.g., account identifier, device fingerprint).
• "Processing" — Any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transfer, erasure or destruction.
• "Data Controller" — The entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, cekap88 acts as the Data Controller in respect of data collected through the Platform.
• "Data Processor" — A third party that processes Personal Data on behalf of cekap88 under a contractual arrangement (e.g., payment processors, identity verification providers).
• "KYC" — Know Your Customer verification procedures requiring submission of identity documentation to confirm account holder eligibility, age and identity.
• "Cookies" — Small text files placed on a device by a website to store session state, preferences or analytical data.
• "User" / "You" — Any individual who accesses, registers on or transacts through the cekap88 Platform.
• "Third Party" — Any person or organisation that is not cekap88 or the User to whom the data relates.

cekap88 collects Personal Data through several channels: directly from you during registration and account use, automatically through your interaction with the Platform, and from third-party verification and payment providers where applicable. The principal categories of data collected are described in the table below.

cekap88 processes Personal Data only where a valid legal basis exists. The applicable bases, depending on the nature of the processing activity, are as follows:

1. Contractual necessity: Processing required to register your Account, process deposits and withdrawals, verify your identity and deliver the services you have requested in accordance with the cekap88 Terms & Conditions.
2. Legal obligation: Processing required to comply with applicable anti-money laundering requirements, age verification obligations, fraud prevention regulations and record-keeping mandates imposed by regulatory authorities.
3. Legitimate interests: Processing carried out in furtherance of cekap88's legitimate business interests, including platform security monitoring, fraud detection, improvement of user experience and responsible gambling analytics — where those interests are not overridden by your fundamental privacy rights.
4. Consent: Where cekap88 seeks to process your Personal Data for purposes not covered by the bases above — such as sending optional marketing communications — we will seek your prior, freely given and informed consent, which you may withdraw at any time.

Personal Data collected by cekap88 is used for the following purposes:

1. Account registration and management: Creating, maintaining, verifying and, where necessary, closing your cekap88 Account in accordance with these Terms.
2. Identity and age verification: Confirming that account holders meet the minimum age requirement of 21 years and that the identity information provided is accurate and authentic.
3. Payment processing: Facilitating MYR-denominated deposits and withdrawals through Malaysian payment channels including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, RHB and Hong Leong.
4. Fraud prevention and security: Detecting, investigating and preventing fraudulent transactions, account abuse, money laundering and other activities that violate cekap88's Terms & Conditions or applicable law.
5. Regulatory compliance: Meeting applicable anti-money laundering, know-your-customer and responsible gambling requirements, including maintaining audit logs and transaction records for the periods prescribed by regulation.
6. Customer support: Responding to account enquiries, support requests, complaints and dispute resolution correspondence.
7. Platform improvement: Analysing aggregate and anonymised usage data to identify technical issues, improve navigation, optimise page content and develop new features.
8. Responsible gambling management: Monitoring account activity to identify patterns indicative of problem gambling behaviour and, where appropriate, applying account controls or initiating contact in accordance with cekap88's responsible gambling obligations.
9. Marketing communications (consent-based): Sending promotional offers, bonus notifications and platform updates to Users who have opted in to receive such communications. Opt-out instructions are included in every marketing message.

cekap88 does not sell Personal Data. Data may be disclosed to the following categories of recipients, strictly for the purposes described in this Policy:

1. Payment service providers: Banks, e-wallet operators and payment gateway providers involved in processing deposits and withdrawals (e.g., FPX network participants, DuitNow operators, e-wallet providers) receive the minimum transactional data necessary to complete a payment instruction.
2. Identity verification providers: Third-party KYC services that assist cekap88 in verifying account holder identity and age. These providers act as Data Processors under contractual data protection obligations.
3. Fraud prevention and security services: Providers of anti-fraud, anti-money-laundering screening and device intelligence services used to protect the Platform and its users from financial crime.
4. Regulatory and law enforcement authorities: Where disclosure is required by applicable law, court order, regulatory demand or to protect cekap88's legal rights, Personal Data may be disclosed to competent authorities without prior notice to the User where lawful to do so.
5. Professional advisors: Legal counsel, auditors and compliance consultants engaged by cekap88 may access Personal Data on a confidential, need-to-know basis for the purposes of professional advice.
6. Business successors: In the event of a merger, acquisition, restructuring or asset sale involving cekap88, Personal Data held at the time of the transaction may be transferred to the successor entity, subject to this Policy continuing to govern its use.

cekap88 uses cookies and similar tracking technologies (including local storage objects and session tokens) to operate and improve the Platform. The principal cookie categories used are described below.

1. Strictly necessary cookies: Essential to the functioning of the Platform. These cookies maintain your login session, preserve security tokens and enable core navigation. They cannot be disabled without impairing platform functionality.
2. Performance and analytics cookies: Collect anonymised or aggregated data about how visitors interact with the Platform — such as pages visited, time on page and error events. This information helps cekap88 identify issues and improve user experience. No personally identifiable data is transmitted through these cookies without your consent.
3. Functional cookies: Remember your preferences such as language settings, theme choices and previously selected payment options to personalise your experience on subsequent visits.
4. Marketing cookies (consent required): Used only where you have given your consent, these cookies may track your visits across sessions to help cekap88 serve relevant promotional content. You may withdraw consent at any time by adjusting your browser settings or contacting cekap88 Support.

Most modern browsers allow you to control cookie acceptance through their settings menus. Disabling strictly necessary cookies may result in certain features of the cekap88 Platform becoming unavailable or functioning incorrectly.

cekap88 retains Personal Data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal, regulatory, tax or accounting obligations. The following general retention principles apply:

1. Active account data: Retained for the duration of the Account relationship and for a minimum period following closure as required by applicable anti-money laundering and gaming regulatory record-keeping requirements.
2. Transaction records: Financial transaction logs, including deposit and withdrawal records denominated in MYR, are retained for the minimum period prescribed by applicable financial regulations, typically no less than five years from the date of the transaction.
3. KYC documentation: Identity and verification documents submitted in support of KYC requirements are retained for the period mandated by the applicable regulatory framework governing online gaming operations.
4. Support communications: Correspondence relating to account disputes, complaints or support requests is retained for a reasonable period following resolution to support audit and dispute review functions.
5. Marketing data (consent-based): Retained until you withdraw consent or request removal from marketing communications, after which it is promptly deleted from active marketing databases.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised such that it can no longer be associated with an identifiable individual.

cekap88 implements technical and organisational measures designed to protect Personal Data against unauthorised access, accidental loss, destruction or alteration. These measures include but are not limited to:

1. Encryption of data in transit using Transport Layer Security (TLS) protocols.
2. Access controls restricting internal data access to authorised personnel with a legitimate operational need.
3. Regular security assessments and vulnerability monitoring of platform infrastructure.
4. Incident response procedures to identify, contain and report data security incidents in accordance with applicable obligations.
5. Staff training on data handling, confidentiality obligations and security awareness.

No data transmission over the internet or storage system can be guaranteed as completely secure. While cekap88 takes reasonable precautions, we cannot warrant absolute security against all possible threats.

cekap88 operates as a globally accessible online platform. As a result, your Personal Data may be processed or stored in locations outside Malaysia, including in jurisdictions where data protection laws may differ from those applicable in Malaysia.

1. Where Personal Data is transferred outside Malaysia to Data Processors or service providers, cekap88 takes reasonable steps to ensure that appropriate contractual protections are in place, consistent with applicable data transfer requirements.
2. Transfers to payment processors operating within Malaysian banking infrastructure — including FPX, DuitNow and Malaysian bank partners — are conducted within the domestic financial network and are subject to the security and confidentiality standards applicable to those networks.
3. cekap88 does not transfer Personal Data internationally for purposes that go beyond those described in this Policy.

Subject to applicable law and any overriding legal obligations (such as regulatory record-keeping requirements), you may exercise the following rights in relation to your Personal Data held by cekap88. Requests should be submitted in writing to the contact details in Clause 13.

cekap88 will respond to verified rights requests within a reasonable timeframe. We may need to verify your identity before processing a request. Where a request cannot be fulfilled — for example, because applicable law requires continued retention — we will explain the reason in writing.

cekap88 services are strictly restricted to individuals aged 21 years and above. The Platform does not knowingly collect Personal Data from individuals who are under this minimum age threshold.

1. cekap88 employs age verification procedures during registration to prevent underage access. Any Account found to have been created by an individual below the age of 21 will be closed immediately upon discovery and any associated balance will be subject to review.
2. If you have reason to believe that a minor has provided Personal Data to cekap88, please contact us immediately at the details in Clause 13 so that appropriate action can be taken.
3. This restriction applies uniformly to all users regardless of the laws of their jurisdiction, which may provide for different minimum age thresholds for certain activities.

If you wish to exercise any of your data rights, raise a privacy concern, request further information about how cekap88 handles your Personal Data, or report a suspected data security incident, please contact the cekap88 data contact team using the details below. All communications are handled in English.

Please include your registered Account username and a clear description of your request or concern when making contact. This helps us locate your data and respond accurately. Do not include full payment card numbers or passwords in any written correspondence.

cekap88 reserves the right to revise this Privacy Policy at any time. Where revisions are material — for example, changes to the categories of data collected, the purposes of processing or the parties to whom data is disclosed — cekap88 will endeavour to provide advance notice via Platform notification or Account communication before the revised Policy takes effect.

1. The "Last reviewed" date at the top of this page will be updated each time this Policy is revised.
2. Your continued use of the cekap88 Platform after the effective date of a revised Policy constitutes your acceptance of the updated terms.
3. If you do not accept the revised Policy, you should discontinue use of the Platform and may request Account closure by contacting the cekap88 Support team.
4. Where changes to this Policy require your renewed consent for any processing activity, cekap88 will obtain that consent separately before the relevant processing commences.