Data Protection

Privacy Policy star88 –
Malaysian User Data Protection

Your privacy is our priority. This document explains in detail how star88 collects, uses, stores and protects your personal data in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Updated: January 2026 PDPA Compliance SSL 256-bit
256-bit
SSL Encryption
PDPA
Full Compliance
24/7
Security Monitoring
0
Third-Party Data Sales
Our Commitment
star88's Six Data Protection Principles

We uphold six core principles in handling every user's personal data.

PDPA Compliance

All data handling practices at star88 fully comply with Malaysia's Personal Data Protection Act 2010 (PDPA). We undergo regular compliance audits to ensure the highest standards are consistently maintained.

High-Grade Encryption

All data transmitted between your device and star88's servers is protected using 256-bit SSL encryption. Sensitive data such as payment information is stored in fully encrypted format.

No Data Sales

Star88 has never and will never sell, rent or trade your personal data to any third party for marketing or commercial purposes without your explicit consent.

User Controls

You have full control over your personal data. Access, correct, download or request deletion of your data at any time via your account panel or by contacting our support team.

Minimum Collection

We only collect data that is strictly necessary to deliver our services. Our "data minimisation" principle ensures we never gather information irrelevant to the platform's operations.

Transparent Notice

Any changes to this Privacy Policy will be communicated to you via an in-platform notice or your registered email. We are committed to always being transparent about how your data is handled.

Important Note: This Privacy Policy is effective from January 2026. By using the star88 platform, you agree to the practices described in this document. Please read the entire document before using our services.

1 Introduction

Star88 takes the responsibility of protecting personal data extremely seriously. As an online gaming platform serving users in Malaysia, we understand the importance of your trust and are committed to handling every piece of information you share with us in a transparent, secure and responsible manner.

This Privacy Policy describes our data collection, use, retention and disclosure practices. It applies to all users who access the star88 website, our mobile app and any related services we provide. If you use our platform on behalf of an organisation, you represent that you have the authority to bind that organisation to this Privacy Policy.

We review this Privacy Policy periodically and will notify you of any significant changes. The "last updated" date at the top of this document indicates when the policy was last revised.


2 Personal Data We Collect

Star88 collects your personal data through several means, including information you provide directly and data collected automatically when you use our platform.

Data you provide directly:

  • Full name, date of birth, and identification card number for identity verification (KYC) purposes.
  • Email address and phone number for communication and account security.
  • Bank account or digital wallet details for processing deposits and withdrawals.
  • Supporting documents such as a copy of your ID card or passport when required for the KYC process.
  • Communication preferences and account settings that you configure yourself.

Data collected automatically:

  • IP address, device type, operating system and browser version.
  • Usage data including pages visited, session duration and navigation patterns.
  • Gaming data including betting, wins, game history and in-platform activity.
  • Approximate location data based on IP address for geographic compliance purposes.
  • Technical information related to platform connectivity and performance.
Data Category Example Requirements
Identity Data Name, IC, date of birth Mandatory (KYC)
Contact Data Email, phone number Mandatory
Financial Data Bank accounts, digital wallets Mandatory (Transaction)
Technical Data IP, device, browser Automatic
Gaming Data Betting history, wins Automatic

3 Data Collection & Usage Purposes

Star88 uses the personal data collected for legitimate and specific purposes. We do not use your data for any purpose other than those stated below without obtaining your additional consent:

  • Account management: Creating, verifying, and securely maintaining your user account.
  • Transaction processing: Processing deposits, withdrawals, and bonus payments accurately and promptly.
  • Legal compliance: Fulfilling KYC obligations, anti-money laundering (AML) requirements, and related regulatory compliance.
  • Platform security: Detecting and preventing fraud, abuse, and unlawful activity on the platform.
  • Customer support: Providing technical support and resolving your enquiries or complaints.
  • Service improvement: Analysing usage patterns to improve the user experience and platform performance.
  • Communications: Sending important notices related to your account, security, and policy changes.
  • Responsible gaming: Monitoring gameplay patterns to identify signs of at-risk behaviour and offer appropriate assistance.

We do not use your data for third-party advertising or aggressive marketing profiling. Any promotional communications we send relate directly to star88 services only, and you may opt out at any time.


4 Data Sharing & Disclosure

Star88 does not sell or trade your personal data. However, in certain limited situations, we may need to share your data with the following parties:

  • Payment service providers: To securely process your financial transactions through approved channels.
  • Gaming software providers: Minimum data required to deliver a smooth gaming experience.
  • KYC compliance services: Licensed identity verification partners to fulfill regulatory obligations.
  • Legal authority: When required by law, court order or a legitimate regulatory body.
  • Technology infrastructure providers: Cloud computing and cybersecurity services that handle data under strict confidentiality agreements.

All third parties we work with are bound by data protection agreements that require them to handle your information to a security standard equal to or higher than our own. We do not permit them to use your data for their own purposes.

star88 never sell, rent or exchange your personal data to advertisers, data brokers or any external party for commercial purposes.

5 Data Security

We continuously invest in security infrastructure to keep your personal data protected at all times. Our technical and organisational security measures include:

  • 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
  • Passwords are stored using an irreversible one-way hashing algorithm.
  • Two-factor authentication (2FA) is available for all user accounts as an additional layer of protection.
  • Continuous 24-hour security monitoring by our cybersecurity team.
  • Strict internal access controls — only designated staff are permitted to access sensitive data based on their role requirements.
  • Regular penetration testing by independent security auditors.
  • Established incident response procedures in the event of any security breach.

While we implement all reasonable security measures, no system is completely impenetrable. We encourage you to also take precautions such as using a strong password, enabling 2FA and not sharing your login credentials with anyone.


6 Cookie Usage

Star88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

  • Essential Cookies: Required for core platform functions such as login authentication and session security. These cookies cannot be disabled.
  • Preference Cookies: Saving your preferences such as language, time zone, and display settings for your convenience.
  • Analytics Cookies: Collecting information on how users interact with the platform for improvement purposes. This data is aggregated and does not identify individuals.
  • Security Cookies: Helping detect suspicious activity and protecting your account from unauthorised access.

You can manage cookie settings through your browser. Please note that disabling certain cookies may affect the functionality of some parts of the platform. star88 does not use third-party cookies for targeted advertising.


7 User Rights

Under Malaysia's PDPA and our commitment to privacy, you have the following rights regarding your personal data:

Right of Access

Request a copy of your personal data that we hold at any time.

Right to Rectification

Update or correct inaccurate or incomplete personal data.

Right to Erasure

Request deletion of your personal data, subject to legal obligations.

Right to Restriction

Restrict the processing of your data under certain circumstances permitted by law.

Right to Portability

Receive your data in a structured format that can be transferred to another platform.

Right to Object

Object to the processing of your data for specific purposes, including marketing communications.

To submit any request relating to your privacy rights, contact our data protection team via live chat on the platform or our support email. We will process your request within 14 business days.

8 Data Retention Period

Star88 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by law. The following is a general guide to our retention periods:

  • Active account data: Retained for the duration your account is active and for the required period following account closure for compliance purposes.
  • Financial transaction records: Retained for a minimum of 7 years in line with Malaysia's financial and tax legal requirements.
  • KYC Documents: Retained for the period required by anti-money laundering (AML) regulations.
  • Security logs: Retained for 12 months for security incident investigation purposes if required.
  • Support communication data: Retained for 2 years for customer service reference.

Once the retention period has expired, your personal data will be securely deleted or anonymised so that it can no longer be personally associated with you.


9 International Data Transfers

In the course of operating the platform, your personal data may be processed or stored on servers located outside Malaysia. Should such a transfer occur, star88 ensures that:

  • The transfer destination provides a level of data protection equivalent to Malaysia's standards.
  • Appropriate data transfer agreements have been established with all service providers outside Malaysia.
  • All data transfers are conducted through encrypted and secure channels.
  • Overseas service providers are bound by data protection requirements equally as stringent as our internal standards.

Star88 does not transfer personal data to countries that lack an adequate level of data protection without appropriate additional safeguards in place.


10 Contact Our Privacy Team

If you have any questions, concerns or complaints regarding this Privacy Policy or the way we handle your personal data, please do not hesitate to contact us.

  • Live Chat: Available 24/7 directly within the star88 platform for the fastest response.
  • Email: [email protected] – we aim to respond within 24 business hours.
  • FAQ: Visit page FAQ us for answers to commonly asked privacy questions.

We are committed to addressing any privacy concerns seriously and within a reasonable timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysia Personal Data Protection Department.

This Privacy Policy forms part of your overall agreement with star88 and should be read together with Terms and Conditions and policies Responsible Gaming us.
Your Data is Safe with Us
Play with Peace of Mind – Your Privacy is Fully Protected

Star88 protects your personal data with high-grade encryption and full PDPA compliance. Register today and enjoy a safe, fair and responsible gaming experience.

PDPA Compliant SSL 256-bit No Data Sales Full User Control
Bahasa Melayu