fafa878 Privacy Policy

Introduction

fafa878 operates an English-language online entertainment platform presenting casino games, sports betting markets, promotions and payment services for adults aged 21 and above in Malaysia. In providing these services, fafa878 necessarily collects and processes personal information about players.

This Privacy Policy describes the categories of personal data collected, the purposes for which that data is processed, the legal grounds relied upon, how long data is retained, who may receive it, and what rights players hold with respect to their information. References to "fafa878", "we", "us" or "our" mean the fafa878 platform operating under the domain fafa878.cam.

This policy should be read alongside the fafa878 Terms and Conditions. Where a specific product, promotion or account feature involves additional data handling, supplementary notice will be provided at the relevant point of collection.

Definitions

• "Personal data" means any information that identifies or could reasonably identify a specific living individual.
• "Processing" means any operation performed on personal data, including collection, storage, use, disclosure or deletion.
• "Player" or "you" means an individual who creates an account with or otherwise accesses fafa878.
• "KYC" means know-your-customer identity and document verification procedures applied to player accounts.
• "MYR" means Malaysian Ringgit, the primary currency displayed and transacted on the fafa878 platform.
• "Third party" means a natural or legal person other than the player or fafa878.
• "Cookie" means a small text file stored on a device to support platform functionality and session continuity.

Personal Data We Collect

fafa878 collects information at different stages of the player relationship. The categories and typical examples are set out in the table below. Not all categories apply to every player; the information actually collected depends on the services accessed, verification requirements and payment methods selected.

Legal Grounds for Processing

fafa878 processes personal data on one or more of the following legal grounds:

• Contractual necessity: Processing required to operate your fafa878 account, deliver requested services, process MYR payments and handle withdrawal requests;
• Legal obligation: Processing required to satisfy identity verification, anti-money-laundering, fraud prevention and record-keeping duties under applicable rules;
• Legitimate interests: Processing required for platform security, fraud detection, responsible gambling monitoring, service improvement and internal analytics where those interests are not overridden by your rights; and
• Consent: Processing for optional marketing communications, where separately sought and individually withdrawable at any time.

How We Use Your Personal Data

fafa878 uses personal data for the following specific purposes:

• Creating, verifying and maintaining player accounts;
• Processing MYR deposits and eligible withdrawal requests through supported Malaysian payment channels;
• Delivering casino games, sports markets, live football features, promotions and customer support services;
• Conducting KYC, age verification (21+) and identity checks required before withdrawals or at any point during account use;
• Detecting, investigating and preventing fraudulent transactions, collusion, prohibited conduct and account abuse;
• Administering responsible gambling controls including deposit limits, session reminders, cooling-off periods and self-exclusion;
• Responding to account queries, complaints and support requests submitted by players in English, Bahasa Melayu or Chinese;
• Maintaining records to satisfy compliance, audit and legal obligations; and
• Sending service notifications related directly to account activity (not marketing) that a player cannot opt out of while the account remains active.

Data Sharing and Disclosure

fafa878 does not sell personal data. Personal information may be shared only in the specific circumstances below, and only to the extent reasonably necessary:

• Payment partners: Malaysian payment service providers (such as DuitNow operators, FPX, Touch 'n Go eWallet, Boost, GrabPay and supported banks) receive the transaction data necessary to process a deposit or withdrawal;
• KYC and verification services: Identity document details may be passed to a verification partner to confirm player age, identity and address;
• Fraud prevention and security services: Technical and behavioural data may be shared with specialist providers to protect accounts and detect misuse;
• Legal and regulatory disclosure: fafa878 may disclose information to law enforcement, regulators or a court where required or permitted by applicable law; and
• Corporate transactions: If fafa878 undergoes a business reorganisation, personal data may be transferred to a successor entity, subject to at least equivalent privacy protection.

All third-party service providers that process personal data on behalf of fafa878 are required to handle it securely, use it only for the specified purpose and not disclose it further.

Payments and Financial Data

fafa878 does not store complete card numbers or full bank account credentials on its own servers. When you use Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong, DuitNow or FPX, your full payment credentials are handled directly by those payment partners under their own security standards.

fafa878 retains masked payment references (such as the last four digits of an account number or a partial wallet identifier) to match transactions to your account, prevent payment fraud and satisfy MYR transaction record-keeping obligations. These references are not sufficient to initiate a transaction and are stored with access controls.

Cookies and Technical Data

fafa878 uses cookies and comparable technical mechanisms to maintain session continuity, remember authenticated state, support platform functionality and collect aggregated usage statistics. The following types of cookie may be in use:

• Strictly necessary cookies: Required to keep you logged in, remember account language preferences and enable security features. These cannot be disabled without degrading platform function.
• Functional cookies: Remember optional settings you select, such as preferred sports categories or notification preferences.
• Analytics cookies: Collect anonymised or aggregated data about how players navigate the platform to support performance improvement. No individual betting history is shared with analytics providers.

Browser settings typically allow cookies to be managed or deleted. Blocking strictly necessary cookies may prevent login or affect platform performance. Consult your browser documentation for instructions.

Data Retention

fafa878 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, compliance or audit obligations. General retention parameters are:

• Active account data: Retained throughout the period the account is open and accessible;
• Transaction and KYC records: Retained for a minimum of five years from the date of the transaction or verification event, consistent with anti-money-laundering record-keeping expectations;
• Support correspondence: Retained for a reasonable period to resolve disputes and respond to follow-up enquiries; and
• Marketing consent records: Retained until consent is withdrawn and for a reasonable period thereafter as evidence of the original consent.

When data is no longer required and no legal obligation extends its retention, fafa878 will delete or irreversibly anonymise it.

Your Rights as a Player

Subject to applicable law and verification of your identity, you may exercise the following rights in respect of personal data held about you by fafa878:

• Access: Request confirmation of whether fafa878 holds personal data about you and, if so, obtain a copy;
• Correction: Request correction of inaccurate or incomplete personal data;
• Deletion: Request deletion of personal data that is no longer necessary, subject to retention obligations;
• Restriction: Request that processing of your data be restricted while a correction or objection request is assessed;
• Objection: Object to processing based on legitimate interests, including direct marketing; and
• Portability: Where technically feasible and lawfully applicable, receive structured personal data you provided for transfer to another service.

Requests will be assessed in good faith. Where a request cannot be fulfilled — for example, because retention is required for legal compliance — fafa878 will explain the reason. Exercising data rights does not override financial obligations, outstanding KYC requirements or responsible gambling controls. Submit requests to the contact address in Section 14.

Children and Age Verification

fafa878 is strictly for adults aged 21 and above. We do not knowingly collect personal data from anyone under 21. If fafa878 identifies that data has been provided by a person below the minimum age, that data will be deleted and the associated account closed without delay.

Age verification checks form part of the fafa878 KYC process. Documentary evidence confirming date of birth may be required before full account access is granted, before a first withdrawal is processed, or at any point during the player relationship where reasonable grounds exist to verify eligibility.

Security Measures

fafa878 applies technical and organisational safeguards proportionate to the nature of the data held and the risks of unauthorised access, disclosure, alteration or loss. Measures in use include SSL/TLS encryption for data in transit, access restrictions limiting staff exposure to personal data on a need-to-know basis, and internal procedures for identifying and responding to security incidents.

No transmission over the internet is completely guaranteed to be secure. Players are responsible for maintaining the confidentiality of their account credentials and should notify fafa878 immediately at [email protected] if they believe their account has been accessed without authorisation. Do not share passwords, one-time codes or security PINs.

Changes to This Privacy Policy

fafa878 may update this Privacy Policy to reflect changes in data handling practices, applicable legal requirements, new product features or security improvements. Material changes will be signalled by updating the effective date at the top of the document and, where appropriate, by placing a notice in a player's account dashboard.

Continued use of fafa878 after a revised policy takes effect constitutes acknowledgement of the updated terms. Players who disagree with a material change should contact fafa878 to exercise their rights or close their account before the change takes effect where practicable.

Contact Us

For questions, concerns or requests relating to this Privacy Policy or personal data held by fafa878, please write to the fafa878 support team using the address below. Include your registered account name or email, a clear description of your request and any relevant reference numbers.

Website email: [email protected]

This address is displayed as plain text. Do not include your password, full banking credentials or one-time security codes in any written communication.

fafa878 will acknowledge written requests within a reasonable period and aim to provide a substantive response as promptly as the complexity of the request allows.