bar88 Privacy Policy

This Privacy Policy ("Policy") is issued by bar88 ("bar88", "we", "us", "our") and applies to all personal data collected from individuals ("you", "Player", "User") who access, register on, or use the bar88 online gaming and sports betting platform available at https://bar88.click (the "Platform").

bar88 is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. This Policy explains what data we collect, the purposes for which we use it, the legal bases that justify such processing, how long we retain it, and what rights you hold in relation to your own information.

This Policy forms part of bar88's broader suite of legal documents, which include our Terms & Conditions and our Responsible Gambling Policy. By using the Platform, you confirm that you have read and understood this Privacy Policy and that you consent to the processing of your personal data as described herein.

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" — any information that identifies or can reasonably be used to identify a specific individual, directly or indirectly. This includes name, contact details, device identifiers, and financial account information.
• "Processing" — any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Data Controller" — bar88, in its capacity as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" — a third party that processes personal data on bar88's behalf and under our documented instructions (e.g., a payment service provider or identity verification partner).
• "Consent" — a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
• "KYC" — Know Your Customer: the identity verification process conducted to confirm your identity before processing withdrawals or where otherwise required.
• "Cookies" — small text files placed on your device by the Platform to enable session management, preferences, and analytics functionality.

bar88 collects the following categories of personal data from players:

bar88 collects personal data through the following means:

4.1 Direct Collection

You provide data directly to us when you register an account, complete our KYC verification process, make a deposit or withdrawal, contact our support team, or participate in any promotional activity. This includes all information you submit voluntarily through the Platform.

4.2 Automated Collection

When you access or use the Platform, we automatically collect certain technical and usage data through cookies, log files, and similar tracking technologies. This includes your IP address, device and browser information, session duration, and navigation behaviour within the Platform.

4.3 Third-Party Sources

Where required for KYC and fraud prevention purposes, bar88 may receive data about you from third-party identity verification providers and payment processors. This data is used solely for the purpose of verifying your identity and ensuring the integrity of transactions on your account. We do not purchase marketing data or personal data lists from third parties.

bar88 processes your personal data on the following lawful bases:

• Contractual Necessity: Processing is necessary to perform the contract between bar88 and you — specifically, to operate your account, process deposits and withdrawals, and provide gaming and betting services.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory requirements, including anti-money laundering obligations, identity verification requirements, and record-keeping mandates.
• Legitimate Interests: Processing is carried out in the pursuit of bar88's legitimate interests, including fraud prevention, platform security, customer service improvement, and responsible gambling monitoring — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your consent as the basis for processing — for example, in the context of sending you marketing communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing.

bar88 uses your personal data for the following purposes:

• To create, verify, and maintain your bar88 account.
• To process your deposits and withdrawals via your chosen payment method — FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, or USDT TRC20.
• To verify your identity and age (minimum 21 years) as part of the KYC process.
• To detect, investigate, and prevent fraud, money laundering, account abuse, and other prohibited activities.
• To administer our responsible gambling programme — including monitoring player behaviour for indicators of problem gambling and applying account restrictions where appropriate.
• To provide customer support in English, Bahasa Melayu, and Mandarin Chinese through our Live Chat, WhatsApp, and email channels.
• To calculate and credit bonuses, loyalty points, cashback, birthday rewards, and referral bonuses in accordance with our promotions.
• To send you transactional communications relating to your account, such as deposit confirmations, withdrawal updates, and account security alerts.
• To send you marketing communications about bar88 promotions and new features — where you have provided your consent to receive such communications.
• To improve and develop the Platform based on usage data and player feedback.
• To comply with all applicable legal, regulatory, and anti-money laundering obligations.

bar88 does not sell, rent, or trade your personal data to any third party. We share your data only in the following limited and necessary circumstances:

7.1 Payment Service Providers

We share necessary transactional and identity data with our payment processing partners — including the operators of FPX, DuitNow, Touch 'n Go eWallet, Boost, and GrabPay — to the extent required to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by data processing agreements with bar88.

7.2 Identity Verification Providers

We share identity documentation and personal data with certified third-party KYC and identity verification service providers to fulfil our identity verification and age confirmation obligations.

7.3 Fraud Prevention & Security

We may share data with fraud prevention and cybersecurity service providers where necessary to protect bar88 and its players against fraud, account takeover, and other security threats.

7.4 Legal & Regulatory Compliance

We may disclose your personal data to competent authorities, regulators, law enforcement agencies, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of bar88, its players, or third parties.

bar88 uses cookies and similar technologies on the Platform for the following purposes:

• Essential Cookies: Required for the Platform to function. These enable your login session to persist, maintain your account security state, and ensure core functionality operates correctly. You cannot opt out of essential cookies while using the Platform.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players use the Platform — such as which pages are most visited and how long players spend on certain features. This data is used solely to improve the Platform experience. No personally identifiable information is collected via analytics cookies.
• Preference Cookies: Store your language preferences and display settings to personalise your experience across sessions.

bar88 does not use third-party advertising or retargeting cookies. Your browsing activity on bar88 is not tracked for the purpose of serving advertisements on other websites.

You may configure your browser settings to refuse or delete cookies at any time. Please note that disabling essential cookies may impair the functionality of the Platform, including the ability to log in or maintain a session.

bar88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, and to comply with our legal and regulatory obligations. The following general retention principles apply:

• Active Account Data: Retained for the duration of your account's active status and for a defined period following account closure, consistent with applicable record-keeping requirements.
• KYC and Identity Documents: Retained for the minimum period required by applicable anti-money laundering and identity verification regulations from the date of account closure or the date the document was submitted, whichever is later.
• Transaction Records: Retained for a defined period following each transaction, in accordance with applicable financial record-keeping obligations.
• Support Communications: Retained for a defined period following the resolution of the relevant matter, for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for as long as you remain subscribed to marketing communications, and for a reasonable period thereafter to demonstrate that your consent was obtained.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification.

bar88 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• End-to-end SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive personal data at rest on our servers.
• Strict access controls ensuring that only authorised personnel can access personal data, and only to the extent necessary for their role.
• Two-factor authentication requirements for account access and administrative systems.
• Regular security assessments, vulnerability scanning, and penetration testing.
• Incident response procedures to ensure timely detection of and response to any data security event.

Whilst bar88 takes data security seriously and applies industry-standard protections, no system is entirely immune from the risk of breach. In the unlikely event of a data security incident that affects your rights and freedoms, we will notify affected players as soon as practicable and take all reasonable steps to mitigate the impact.

You are also responsible for maintaining the security of your own account by using a strong, unique password and enabling two-factor authentication where available. Do not share your login credentials with any third party.

As a player on bar88, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team via Live Chat or email ([email protected] — plain text, not a clickable link):

bar88 will respond to all valid data rights requests within a reasonable timeframe of no longer than 30 days from receipt. In complex cases, we may extend this period and will inform you accordingly. We will not charge a fee for routine data rights requests unless a request is manifestly unfounded or excessive.

With your consent, bar88 may send you promotional communications about new games, bonuses, seasonal offers, and other Platform features via email or messaging platforms. You may provide or withdraw your consent for marketing communications at any time by:

• Updating your communication preferences within your bar88 account settings.
• Contacting our support team via Live Chat and requesting removal from marketing communications.
• Using the unsubscribe mechanism included in any email marketing communication we send.

Withdrawing your marketing consent will not affect your ability to use the Platform or receive transactional communications (such as deposit confirmations or security alerts) that are necessary for the operation of your account.

bar88 is an adult gaming platform strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. Access to the Platform by minors is strictly prohibited.

As part of our account registration and KYC verification process, bar88 takes active steps to verify that all players meet the minimum age requirement. If we become aware or have reason to suspect that a player is under the age of 21, we will suspend the account immediately, conduct an investigation, and — if the suspicion is confirmed — permanently close the account and return any real-money balance (net of any bonuses) in accordance with our Terms & Conditions.

If you believe that a minor has registered on bar88 or is using the Platform, please notify us immediately via our support team so that we can take appropriate action promptly.

bar88 reserves the right to update or revise this Privacy Policy at any time. When material changes are made, we will notify active players via email or through a prominent notice on the Platform prior to the changes taking effect.

The current version of this Privacy Policy will always be accessible at https://bar88.click/privacy-policy and will display the date on which it was last revised. Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgement of the revised Policy.

We encourage you to review this Policy periodically to stay informed about how we protect your data. If you have questions about any changes, please contact our support team.

If you have any questions, concerns, or requests in relation to this Privacy Policy or the processing of your personal data by bar88, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the bar88 Platform. Average response time is 3–5 minutes.
• Email (plain text — not a clickable link): [email protected]
• Support Languages: English, Bahasa Melayu, and Mandarin Chinese.

We aim to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 30 days. For urgent matters relating to account security or suspected data breaches, please clearly indicate the urgent nature of your request so our team can prioritise it accordingly.