Section 1
Introduction
atm888 is an English-language information platform serving Malaysian readers who seek guidance on online casino games, sports betting, MYR payment options and responsible gambling. The website is operated in the interests of Malaysian users, including those based in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya and Shah Alam.
This Privacy Policy explains what personal data atm888 may collect, why it is processed, how long it is retained and what rights you hold as a user. atm888 is committed to handling personal data responsibly, using it only for the purposes described here and keeping it secure at all times.
By continuing to use atm888 after the effective date shown above, you acknowledge that you have reviewed this Privacy Policy and that you consent to data handling carried out on the basis described below.
Section 2
Definitions
The following terms are used throughout this Privacy Policy with the meanings set out below.
- Personal data means any information that identifies or can reasonably identify a living individual, including name, email address, device identifiers and account history.
- Processing means any operation performed on personal data, including collection, storage, retrieval, use, disclosure and deletion.
- Data subject means the identified or identifiable individual whose personal data is processed — in this context, an atm888 user.
- Controller means the entity that determines the purposes and means of processing personal data. For atm888, this refers to the website operator.
- Processor means an entity that processes personal data on behalf of the controller under contractual instructions.
- Consent means a freely given, specific, informed and unambiguous indication of agreement to processing.
Section 3
Information We Collect
atm888 may collect several categories of information depending on how a user interacts with the website. Providing some information is necessary to deliver a useful service, while other information is collected automatically as part of standard website operation.
Information provided directly:
- Name, username and email address supplied during account or contact processes
- Identity and address documents submitted for KYC verification purposes
- Communication records from support enquiries sent to atm888
Information collected automatically:
- Device type, operating system and browser version
- Internet Protocol (IP) address and approximate geographic location
- Pages visited, session duration and navigation sequence
- Referring URL, search terms and interaction with page elements
- Cookie identifiers and similar tracking data described further in Section 8
atm888 does not intentionally collect sensitive personal categories such as racial origin, health status, religious belief or biometric data unless a regulatory process specifically requires it for identity verification.
Section 4
How We Use Personal Data
atm888 uses collected personal data only for legitimate purposes that are proportionate and necessary. These purposes include:
- delivering and improving the website service, including personalising language and content for Malaysian users;
- responding to support enquiries and processing account-related requests;
- conducting identity verification where required to prevent fraud or duplicate accounts;
- monitoring security, detecting unauthorised access attempts and maintaining system integrity;
- analysing user navigation to identify technical problems or content gaps;
- meeting legal obligations, including record-keeping requirements under applicable law;
- communicating updates about the Privacy Policy, Terms & Conditions or atm888 services, where appropriate.
atm888 does not use personal data for automated decision-making that produces legal or significant effects on an individual user without human review.
Section 5
Legal Basis for Processing
Processing of personal data by atm888 rests on one or more of the following legal bases:
- Consent: where a user has actively agreed to processing, such as by submitting an enquiry or accepting cookie settings;
- Contractual necessity: where processing is required to provide the service or fulfil an obligation described in the Terms & Conditions;
- Legitimate interests: where atm888 has a justifiable operational purpose, such as security monitoring or service improvement, that does not override the user's fundamental rights;
- Legal obligation: where applicable law requires atm888 to retain or disclose certain records.
Where consent is the relevant basis, a user may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before that withdrawal.
Section 6
Data Sharing and Disclosure
atm888 does not sell, rent or trade personal data to third parties for their own commercial purposes. Personal data may be disclosed in limited circumstances to:
- Service providers who assist with website hosting, analytics, security or communications, where such providers are bound by appropriate confidentiality and data protection obligations;
- Verification partners engaged to assist with KYC document review, where identity records need to be assessed against official sources;
- Legal authorities when atm888 is required to comply with a court order, regulatory requirement or applicable law enforcement request;
- Business successors in the event of a restructure, acquisition or asset transfer, where the successor organisation assumes the same privacy commitments.
atm888 will endeavour to notify affected users of material third-party disclosures where permitted by applicable law and the nature of the disclosure allows it.
Section 7
Payment and Transaction Data
atm888 may display or discuss Malaysian payment services including FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong Bank, Touch 'n Go eWallet, Boost and GrabPay. Where payment-related records are processed in connection with an atm888 account, those records are handled with additional care given their financial sensitivity.
Full payment card numbers are not stored by atm888. Transaction references, deposit amounts expressed in MYR, withdrawal requests and method preferences may be retained for a period consistent with financial record-keeping obligations or fraud investigation requirements.
Users should never share a DuitNow authorisation code, bank one-time password, FPX session token or card security code through an atm888 enquiry or chat channel. atm888 will not request these credentials.
Section 8
Cookies and Tracking Technologies
atm888 uses cookies and comparable technologies to operate certain website functions, remember user preferences and collect analytical data. The principal categories are:
- Essential cookies: required for the website to load and display correctly; these cannot be disabled without disrupting access;
- Functional cookies: used to remember display preferences, language settings and session continuity;
- Analytical cookies: used to measure page views, session lengths and navigation patterns in an aggregated form that does not directly identify individuals;
- Security cookies: used to detect and mitigate fraudulent requests or unusual activity patterns.
Users may adjust browser settings to restrict or clear cookies. Disabling non-essential cookies will not prevent access to atm888 content but may affect the quality of certain personalised features.
Section 9
Data Retention
atm888 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, to meet a legal obligation or to defend a legitimate legal claim. Typical retention periods are guided by the following principles:
- Account and identity data may be retained for the period an account remains active plus the minimum period required by applicable legal obligations;
- Transaction and payment records may be held for up to seven years in line with financial and tax record-keeping standards;
- Support communications may be retained for up to three years to allow ongoing resolution of related disputes;
- Analytical and technical logs are typically held for a rolling period of between 90 days and 12 months.
When data is no longer required, atm888 will delete it securely or irreversibly anonymise it so that it can no longer be associated with an individual.
Section 10
User Rights
Subject to applicable local law, atm888 users may hold several rights in relation to their personal data. These may include:
- Right of access: to request confirmation of whether atm888 holds personal data about you and to receive a copy of that data;
- Right to rectification: to request correction of personal data that is inaccurate or incomplete;
- Right to erasure: to request deletion of personal data where it is no longer necessary, consent has been withdrawn or there is no overriding legal basis to retain it;
- Right to restrict processing: to request that atm888 limit how personal data is used in defined circumstances;
- Right to data portability: to receive data provided directly to atm888 in a commonly used, machine-readable format;
- Right to object: to object to processing based on legitimate interests where a user has grounds relating to their specific situation.
To exercise any of these rights, users should contact atm888 at the support email shown at the bottom of this page. atm888 will respond within a reasonable period and may need to verify identity before disclosing or modifying personal data.
Requests to exercise user rights are handled free of charge in normal circumstances. Where requests are manifestly excessive or repetitive, atm888 reserves the right to charge a reasonable administrative fee or to refuse the request with written justification.
Section 11
Security Measures
atm888 applies technical and organisational security measures appropriate to the risks presented by the types of personal data processed. These include HTTPS encryption, access controls, session management, audit logging and periodic review of data handling practices.
Despite these measures, no internet transmission or storage system is entirely without risk. Users should support their own security by using strong and unique passwords, avoiding shared devices and network access points for sensitive account activity, and logging out after each session.
If atm888 becomes aware of a personal data breach that is likely to result in material risk to affected users, it will take prompt steps to contain the breach and notify relevant parties in accordance with applicable legal requirements.
Section 12
Children and Minors
atm888 is strictly intended for adults aged 21 and above. The website does not knowingly collect personal data from persons below this age. If atm888 becomes aware that personal data has been inadvertently collected from a minor, it will take prompt steps to delete that data without further use.
Parents and guardians are encouraged to supervise device use and to report any concern about underage access to the atm888 support email. Access to gambling information by persons under the age of 21 is not permitted under atm888 policy.
Section 13
Policy Changes
atm888 may update this Privacy Policy when legal requirements change, new data processing activities are introduced or existing practices are improved. Material changes will be reflected by an updated effective date at the top of this page.
Users who access atm888 after a revised Privacy Policy has been published are taken to have accepted the revised version. Where a change significantly affects the way personal data is used, atm888 will take reasonable steps to bring this to users' attention through available communication channels.
Section 14
Contact Us
Questions, requests or concerns about this Privacy Policy or atm888's personal data practices may be addressed to the support team. The atm888 contact email is displayed below as plain text. Do not include passwords, banking credentials, one-time codes or full identity document numbers in a general privacy enquiry.
Support email: [email protected]
atm888 aims to acknowledge privacy enquiries within two business days and to resolve straightforward requests within 30 days. Complex requests involving data access, portability or erasure may take longer, and users will be kept informed of the progress.