Privacy Policy CEO88 – User Data Protection

CEO88 ("we", "Platform", "us") cares about the privacy of every user who uses our online entertainment platform at ceo88.vu. This Privacy Policy explains in detail how we collect, use, disclose, store, and protect your personal information when you register, log in, and use any CEO88 services.

This Policy applies to all CEO88 platform users regardless of their geographic location, including those accessing via the desktop website, Android mobile app, or iOS. It also covers every interaction you have with our customer support team via live chat, Telegram, WhatsApp, or any other communication channel provided by CEO88.

CEO88 acts as data controller under the applicable data protection framework. This means we are responsible for determining the purpose and manner in which your personal data is processed, and we take that responsibility seriously.

CEO88 collects users' personal information through several key channels. The following are the types of data collected along with the purpose of each collection:

We want to affirm that ceo88 only collects information that is strictly necessary to operate the platform safely and effectively. No sensitive data such as health information, religious beliefs, or political views is collected by ceo88.

Personal data collected by CEO88 is used exclusively for the following purposes, and never for purposes unrelated to platform operations:

• Account management: Creating, verifying, and maintaining your user account on the ceo88 platform.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions related to your account efficiently and securely.
• Identity verification (KYC): Fulfilling legal compliance obligations including the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001.
• Customer support: Providing effective technical assistance and troubleshooting when you contact the ceo88 support team.
• Platform security: Detecting and preventing fraudulent activity, multi-account usage, system exploitation, and other security threats.
• Service improvement: Analyzing usage patterns in aggregate (not individually) to improve the user experience and quality of ceo88 services.
• Marketing communications: Sending information about promotions, bonuses, and special offers — only to users who have consented to receive such communications.
• Legal compliance: Meeting the legal and regulatory obligations applicable to the operation of a licensed online gambling platform.

In addition to information you provide directly, ceo88 also collects certain types of data automatically while you use the platform. This data is essential for maintaining account security and ensuring a smooth user experience.

Automatically collected technical data includes:

• IP Address: Used to identify approximate geographic location, detect suspicious logins from unrecognized locations, and assist in security investigations.
• Device information: Device type (phone, computer), operating system, model, and unique device identifier are used for security verification and to ensure the app functions correctly.
• Browser data: Web browser type and version, screen resolution, and language settings are used to optimize platform display.
• Activity logs: Login timestamps, session duration, pages visited, and actions performed within the platform are recorded for audit and security purposes.
• Performance data: Information about connection speed and technical issues is used to improve platform performance.

All such technical data is stored on ceo88's secure servers and is subject to the data retention policy set out in Section 7 of this document.

CEO88 does not sell or transfer users' personal data to any third party for commercial or marketing purposes. However, there are limited scenarios where ceo88 may need to share certain information with trusted parties, all subject to strict confidentiality agreements:

• Payment processors: Required financial information is shared with approved payment service providers (such as FPX, Touch 'n Go, GrabPay) solely to process your transactions. These providers are bound by PCI-DSS security standards.
• Technology service providers: Cloud infrastructure providers, anti-fraud services, and platform analytics tools that help ceo88 operate securely and efficiently. All such providers are subject to strict data processing agreements.
• Regulatory authorities: The gambling licensing authority that issued CEO88's operating licence may require periodic compliance reports containing aggregated data.
• Law enforcement: CEO88 will comply with valid court orders or official requests from law enforcement agencies when required by law.
• Anti-money laundering: In cases suspected of involving illicit financial activity, CEO88 is legally obligated to report to Malaysia's Financial Intelligence Unit (FIED).

CEO88 continuously invests in security infrastructure to ensure your personal data is protected at every level. The following are the layers of protection we implement:

• Encryption in transit: All communications between your device and ceo88's servers use TLS 1.3 protocol with a 256-bit SSL certificate, ensuring data cannot be intercepted or read during transmission.
• Encryption at rest: Sensitive data stored in the CEO88 database — including financial information and identity documents — is encrypted using AES-256 standards.
• Two-factor authentication (2FA): CEO88 supports and encourages the use of 2FA for all user accounts to add an extra layer of protection against unauthorised access.
• 24/7 Monitoring: ceo88's security systems are continuously monitored by our cybersecurity team to detect and respond to any threats in real time.
• Role-based access control: ceo88 staff may only access user data necessary for their specific duties. All access is logged and audited on a regular basis.
• Penetration testing: CEO88 conducts regular security testing by independent third parties to identify and address any vulnerabilities before they can be exploited.
• Secure backups: Data is regularly backed up to separate, secure server locations to ensure service continuity and data recovery in the event of an incident.

CEO88 retains users' personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following are our data retention guidelines:

• Active account data: For the duration your account is active and for 7 years after account closure, in line with financial and anti-money laundering legal requirements.
• Financial transaction records: Minimum 7 years from the transaction date, as required by Malaysian financial law.
• KYC Documents: For the duration your account is active and 5 years after account closure, or longer if required by regulatory authorities.
• Support communication logs: 2 years from the date of last interaction for reference and service improvement purposes.
• Technical Data and Logs: 90 days for standard system logs; security logs are retained for up to 1 year.
• Marketing data: Until you withdraw your consent or request deletion of the data.

Once the retention period expires, data will be securely deleted or anonymised so that it can no longer be associated with your identity.

As a ceo88 user, you have the following rights regarding the personal data we hold about you. You may submit a request to exercise any of these rights by contacting our support team:

CEO88 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions properly. The following are the types of cookies used:

• Essential cookies: Required for core platform functions such as login session verification, security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies: Collecting information about how users interact with the platform (such as most frequently visited pages) to help us improve our services. All data is collected in aggregate and anonymized.
• Functionality cookies: Saving user preferences such as language, currency, and display settings so you do not need to reconfigure them each time you log in.
• Security cookies: Helps identify trusted devices, detect suspicious login attempts, and protect your account from unauthorized access.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect the functionality of the CEO88 platform. For more information on managing cookies, refer to the help documentation of the web browser you are using.

CEO88 is an online entertainment platform that for individuals aged 18 and above only. We do not actively collect or process personal data from children under the age of 18.

All users are required to complete an age verification process upon account registration. A valid identification document is required to confirm the user is at least 18 years of age before being granted full access to ceo88's platform services.

CEO88 also encourages parents and guardians to use appropriate parental control software to prevent children from accessing online gambling platforms.

The ceo88 platform may contain links or references to third-party websites or services in certain informational contexts. ceo88 is not responsible for the privacy practices or content of those third-party websites.

We encourage users to read the privacy policy of any third-party websites visited, as this ceo88 Privacy Policy applies only to the platform and services operated directly by ceo88.

Third-party payment service providers integrated with the ceo88 platform have their own privacy policies governing how they handle your data during transaction processing. ceo88 ensures that all payment providers we work with adhere to high data security standards; however, we do not have control over their internal operations.

CEO88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or platform service improvements. Any amendments will take effect immediately upon being published on this page.

When material amendments are made to this Privacy Policy, CEO88 will take the following steps to notify users:

• Updating the "Updated" date at the top of this document.
• Displaying a notice on the platform's home page or during login for a specified period.
• Sending email notifications to registered users for significant and material changes.

Your continued use of the ceo88 platform after any amendments to this Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you have the right to close your account and discontinue use of the platform.

If you have any questions, concerns, or requests regarding this Privacy Policy or how ceo88 handles your personal data, please contact our Data Protection Officer (DPO) through the following channels:

CEO88 is committed to handling every privacy-related enquiry seriously and professionally. You also have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you believe your privacy rights have been violated.