Privacy Policy

Fachai88 (hereinafter "the Company", "we", "us", or "our") operates the online gambling and sports betting platform accessible at fachai88.cam. This Privacy Policy (hereinafter "Policy") describes how the Company collects, processes, stores, shares, and protects the personal data of individuals (hereinafter "User", "Player", "you", or "your") who access or use the Platform, register an account, or interact with any of the Services we provide.

This Policy applies to all personal data collected through the Platform, including data provided during account registration, identity verification (KYC), financial transactions, customer support interactions, and your general use of the Platform's features. It also applies to data collected automatically through cookies, analytics tools, and similar technologies when you browse the Platform.

This Policy should be read in conjunction with our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated herein by reference.

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

The Data Controller for all personal data collected through the Platform is the entity operating the Fachai88 brand under its international gambling licence. The Company is responsible for ensuring that personal data is processed lawfully, fairly, and in a manner consistent with this Privacy Policy and applicable data protection legislation in the jurisdictions in which we operate.

For all data protection enquiries, including requests to exercise your rights under Section 10, please contact our designated Data Protection contact using the details provided in Section 15 of this Policy.

The Company collects the following categories of personal data, depending on how you interact with the Platform:

4.1 Registration & Account Data

• Full legal name (as it appears on your official identification document);
• Date of birth (required for age verification — you must be at least 21 years old);
• Email address and mobile phone number;
• Username and encrypted password;
• Preferred currency (MYR for Malaysian users) and language preference;
• Residential address (city, state, postcode — e.g., Kuala Lumpur, Petaling Jaya, Johor Bahru, Penang).

4.2 Identity Verification (KYC) Data

• Copy of government-issued photo identification (Malaysian National Identity Card / MyKad, passport, or equivalent);
• Proof of address (utility bill, bank statement, or other acceptable document);
• Proof of payment method ownership (e.g., screenshot of Touch 'n Go eWallet, Maybank2u, CIMB Clicks, or Public Bank account showing your registered name);
• Source of funds declaration (required for high-value transactions above defined thresholds).

4.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method identifiers;
• Payment method details (e.g., partially masked bank account numbers, e-wallet reference IDs for DuitNow, FPX, Touch 'n Go eWallet, Boost, or GrabPay transactions) — note that full card or bank account numbers are never stored by the Company;
• Account balance history and bonus credit/debit records.

4.4 Gaming & Betting Activity Data

• Game sessions, bet history, wager amounts, and outcomes;
• Sports betting history including markets selected, odds accepted, and settlement records;
• Bonus usage and wagering requirement completion records.

4.5 Technical & Device Data

• IP address and approximate geolocation derived therefrom;
• Device type, operating system, and browser version;
• Session duration, pages visited, and click-path data;
• Cookie identifiers and similar tracking technology data (see Section 11).

4.6 Communications Data

• Records of live chat sessions, emails, and support tickets submitted to our customer service team;
• Survey responses or feedback submitted voluntarily through the Platform.

We collect personal data through the following means:

• Directly from you: When you complete the account registration form, submit KYC documents, make a deposit or withdrawal, contact our support team, or participate in any promotion that requires personal details.
• Automatically via the Platform: Technical and device data is collected automatically when you access the Platform through cookies, log files, and analytics technologies embedded in the Platform's pages and applications.
• From third-party service providers: Identity verification agencies, payment processors (including those processing DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, Touch 'n Go eWallet, Boost, GrabPay, and Hong Leong Connect transactions), and fraud prevention services may provide us with supplementary data to verify your identity or validate a transaction.
• From publicly available sources: In limited circumstances, we may supplement our records with information from publicly available databases where this is necessary to verify your identity or assess compliance risk.

The Company processes your personal data for the following specific and legitimate purposes:

The Company processes your personal data on one or more of the following legal bases, as applicable to each processing activity:

• Contractual Necessity: Processing that is necessary to perform the contract between you and the Company (i.e., the Terms & Conditions you accepted upon registration), including account management, game provision, and payment processing.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC identity verification, anti-money laundering (AML) record-keeping, and responsible gambling obligations under our international licence.
• Legitimate Interests: Processing carried out in pursuit of the Company's legitimate business interests, including fraud prevention, platform security monitoring, and improving our services — provided these interests are not overridden by your data protection rights.
• Consent: Where you have given explicit consent for a specific processing activity, such as receiving marketing communications or the use of non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Fachai88 does not sell, rent, or commercially disclose your personal data to third parties. We share personal data only in the following limited and necessary circumstances:

• Payment Service Providers: Financial institutions and e-wallet operators that process your transactions, including the providers operating DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank2u, CIMB Clicks, Public Bank Online, and Hong Leong Connect. These providers receive only the data required to process your specific transaction.
• Identity Verification Providers: Third-party KYC and AML service providers that assist in verifying the identity documents and information you submit during registration or upon withdrawal request.
• Game Studio Partners: Licensed international game studios that supply the casino games and sports betting infrastructure available on the Platform may receive anonymised session data necessary to deliver those services. These partners do not receive personally identifiable data beyond what is required for game integration.
• Fraud Prevention & Security Services: Third-party fraud detection and cybersecurity service providers that help protect the Platform and its users from fraudulent activity, account takeovers, and financial crime.
• Regulatory Authorities: Where required by our licensing obligations or by a lawful order, demand, or request from a competent regulatory authority or law enforcement body, we may be required to disclose personal data. We will challenge any request that we consider disproportionate or unlawful.
• Corporate Transactions: In the event of a merger, acquisition, or restructuring of the Company, personal data held at that time may be transferred to the acquiring entity, subject to equivalent data protection standards being maintained.

We retain personal data for as long as is necessary to fulfil the purposes for which it was collected, as described in this Policy, and for as long as we have a legitimate legal or regulatory obligation to retain it. The general retention principles we apply are as follows:

• Active Accounts: Personal data associated with an active Fachai88 account is retained for the duration of the account's existence. Certain categories of data — such as transaction records and KYC documents — are retained for a minimum period even after account closure, in accordance with anti-money laundering regulations and our licensing obligations. This minimum retention period is typically 5 years from the date of the relevant transaction or the date of account closure, whichever is later.
• Closed Accounts: Upon account closure at your request, we will delete or anonymise personal data that we are not legally required to retain within 90 days, subject to the retention periods described above for financial and KYC records.
• Inactive Accounts: Accounts that have had no login activity for 24 consecutive months may be subject to archiving. You will be notified before archiving takes place. Archived data remains available for regulatory purposes but is removed from active systems.
• Communications Data: Customer support records are retained for up to 3 years from the date of the last interaction, after which they are deleted or anonymised.
• Marketing Data: Where you have opted into marketing communications, your marketing preferences are retained until you withdraw consent or request deletion. Upon opt-out, your data is removed from marketing lists within 10 business days.

Subject to applicable law and the limitations described herein, you have the following rights in respect of your personal data held by the Company:

We may ask you to verify your identity before processing a data rights request to protect your personal data from unauthorised access. We reserve the right to refuse requests that are manifestly unfounded, repetitive, or excessive, in which case we will provide a written explanation.

The Platform uses cookies and similar tracking technologies to ensure proper functionality, enhance your browsing experience, and gather analytics data that helps us improve the Platform. The following categories of cookies may be in use:

• Strictly Necessary Cookies: These are essential for the Platform to function correctly. They enable core features such as account login sessions, security authentication tokens, and shopping cart or deposit flow continuity. These cookies cannot be disabled without materially impairing your use of the Platform.
• Functional Cookies: These remember your preferences such as language settings, display preferences, and previously visited pages to provide a more personalised experience on return visits.
• Analytics Cookies: These collect anonymised data about how users navigate the Platform — which pages are visited most frequently, how long sessions last, and where users encounter errors. This data is used solely for internal performance analysis and Platform improvement.
• Marketing Cookies (Opt-In Only): Where you have consented, these cookies enable us to deliver relevant promotional content tailored to your interests on the Platform. You may withdraw this consent at any time through your account privacy settings or by contacting our support team.

You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of specific Platform features. Detailed instructions for managing cookies are available in your browser's help documentation.

The Company implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• Encryption in Transit: All data transmitted between your device and the Platform is encrypted using Transport Layer Security (TLS) 1.2 or higher, providing 256-bit SSL encryption to protect data from interception during transmission.
• Encryption at Rest: Sensitive personal data fields, including identity document scans and financial identifiers, are stored using industry-standard encryption at rest.
• Access Controls: Access to personal data within the Company's internal systems is strictly limited to authorised personnel who require that access to perform their job functions. Role-based access controls and multi-factor authentication are enforced across all internal systems.
• Regular Security Audits: The Platform undergoes periodic penetration testing and security audits conducted by independent third-party security professionals to identify and remediate vulnerabilities.
• Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, the Company will notify the relevant regulatory authority and, where required, affected individuals, within the timeframes prescribed by applicable law.

The Platform is strictly for adults aged 21 years and above. The Company does not knowingly collect or process personal data from individuals under 21 years of age. Age verification is a mandatory step in the account registration process, and KYC verification is required before withdrawal privileges are activated.

If the Company becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. Any funds deposited by an underage user will be returned in full via the original payment method.

If you believe that a minor has created an account on the Platform using false age information, please contact us immediately at the details provided in Section 15 so that we can investigate and take appropriate action.

The Company reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, our licensing requirements, or the Services we offer. The "Last Updated" date at the top of this page will be revised whenever the Policy is amended.

Where amendments are material — meaning they significantly affect how we process your personal data or your rights thereunder — we will notify you by sending a notice to your registered email address or by displaying a prominent notification on the Platform prior to the change taking effect. For non-material changes (such as corrections of typographical errors or clarifications that do not alter the substance of the Policy), we may update the Policy without individual notice, relying on the "Last Updated" date as the record of amendment.

Your continued use of the Platform after the effective date of any amended Policy constitutes your acceptance of the revised terms. If you do not agree with the amended Policy, you should cease using the Platform and contact us to close your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or our data processing practices, or if you wish to exercise any of the rights described in Section 10, please contact our Data Protection team using the following details:

When submitting a data rights request, please include your registered username, the email address associated with your account, and a clear description of your request. We may ask you to verify your identity before processing the request.

For general customer support enquiries, our 24/7 live chat service is available directly on the Platform. For responsible gambling support or self-exclusion requests, please visit our Responsible Gambling page.