CACA88 Privacy Policy – Malaysia Member Personal Data Protection

CACA88 is an online casino entertainment platform operating under a valid and regulated gambling licence. We understand that your trust is our most valuable asset, and one of the ways we honour that trust is by managing your personal data responsibly and transparently.

This Privacy Policy applies to all users who browse the CACA88 website, register an account, make deposits or withdrawals, use our mobile app, or contact our support team through any communication channel. It covers all information you provide to us directly as well as information we collect automatically through your use of the platform.

By using the CACA88 platform, you consent to the collection and use of your personal information as described in this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to request deletion of your data.

CACA88 only collects information that is genuinely necessary to deliver a safe, seamless, and regulatory-compliant service. Below are the categories of information we collect and their specific purposes:

Every piece of information we collect has a clear and legitimate purpose. caca88 uses your personal data for the following purposes:

• Account Management: Registering, verifying, and managing your account on the CACA88 platform, including the mandatory KYC process.
• Transaction Processing: Processing all deposits and withdrawals securely, including verification of the bank account holder's identity.
• Platform Security: Detecting and preventing fraud, hacking, multi-account usage, and suspicious activities that could compromise platform security.
• Customer Support: Providing technical support, resolving complaints, and improving the quality of our support services.
• Regulatory Compliance: Fulfilling legal obligations including anti-money laundering (AML) and counter-terrorism financing (CFT) requirements.
• Responsible Gaming: Monitoring gaming patterns to identify early signs of problem gambling and reaching out to members who may need assistance.
• Platform Improvement: Analyzing aggregated usage data (without identifying individuals) to improve user experience, platform performance, and the range of games offered.
• Marketing Communications: Sending promotional information, bonus offers, and platform news — but only if you have consented to receive them. You may withdraw this consent at any time.

CACA88 does not sell, rent, or disclose your personal information to third parties for commercial purposes. However, there are limited situations where we need to share your data with trusted third parties, and this is done solely on legitimate operational grounds:

• Payment Gateway Provider: To process deposits and withdrawals, transaction information must be shared with licensed banks and digital wallet providers that comply with international security standards.
• KYC Service Provider: Accredited identity verification companies assist us in validating the authenticity of documents submitted by new members.
• Game Service Provider: Third-party gaming companies (such as slot providers and live casino providers) receive limited technical data necessary to ensure smooth gaming sessions.
• Regulatory Authority: CACA88 will disclose required data if directed by a legitimate regulatory body, court, or law enforcement agency pursuant to a lawful order.
• Independent Auditor: Audit firms conducting compliance reviews and security audits may access required data under strict confidentiality agreements.

Protecting your personal data from unauthorized access, loss, or misuse is a top priority at CACA88. We implement comprehensive multi-layered security measures:

• 256-bit SSL Encryption: All data transmitted between your device and caca88 servers is encrypted using the latest TLS 1.3 protocol, ensuring no third party can intercept your information in transit.
• Encrypted Data Storage: Sensitive data stored in our databases is encrypted using AES-256, one of the highest encryption standards used by financial institutions worldwide.
• Two-Factor Authentication (2FA): All member accounts come with 2FA options using an authenticator app or SMS code to prevent unauthorised access even if your password is compromised.
• Real-Time Monitoring: Our security system monitors all account activity 24 hours a day, 7 days a week to detect suspicious login patterns, access attempts from new locations, and other signs that may indicate account compromise.
• Internal Access Control: Only CACA88 staff who require data access to perform their duties are authorised to do so, and all access is logged and audited on a regular basis.
• Regular Penetration Testing: The caca88 platform undergoes comprehensive security testing by independent cybersecurity firms every quarter to identify and address any vulnerabilities before they can be exploited.

CACA88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as secure login, session management, and remembering your language preference. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collecting information on how you use the platform (most frequently visited pages, time spent) to help us improve website performance and navigation.
• Functional Cookies: Saving your preferences such as language, currency, and display settings so you do not need to reconfigure them each time you log in.
• Security Cookies: Helping us detect suspicious activity and protect your account from unauthorized access by identifying unusual usage patterns.

You may manage or delete cookies through your web browser settings at any time. However, disabling essential cookies may affect certain functions of the CACA88 platform.

As a caca88 member and as an individual whose data we process, you have the following rights, which we fully respect. All data rights requests will be processed within 30 business days:

CACA88 does not retain your personal data longer than necessary for the purpose it was collected, or as required by applicable laws and regulations. Below are our general data retention guidelines:

• Active Account Data: Retained for the duration your account is active on CACA88 and up to 7 years after account closure, in line with financial record-keeping legal requirements.
• Transaction Records: Retained for a minimum of 7 years in accordance with anti-money laundering legislation and financial reporting requirements.
• KYC Documents: Retained for 5 years after the business relationship ends, or longer if required by regulatory authorities.
• Security Log Data: Retained for 2 years for security incident and fraud investigation purposes.
• Support Communication Records: Retained for 3 years for quality control and future reference if required.
• Cookie Data: Session cookies are deleted when you close your browser. Persistent cookies expire after a set period, typically between 30 days and 1 year.

Once the retention period expires, your data will be permanently deleted or anonymised so it can no longer be linked to you personally.

CACA88 is an entertainment platform intended exclusively for individuals aged 18 and above. We do not knowingly collect, process, or store personal data of any individual under the age of 18.

Should we discover that we have inadvertently collected information from an individual under the age of 18, we will take immediate steps to delete that information and close the account in question. Any wins obtained during that period will be voided.

CACA88 reserves the right to update or amend this Privacy Policy at any time in line with changes in law, technology, or the way we conduct our business. Any significant amendments will be communicated to you via:

• In-platform notification during your next login session
• Email to the address registered to your account
• Updated on the "Last Updated" date at the top of this document

Continued use of the CACA88 platform after amendments are published constitutes your acceptance of the latest version of the Privacy Policy. If you disagree with any changes, you have the right to close your account and request data deletion.

If you have any questions, concerns, or wish to exercise any of your personal data rights as outlined in this Privacy Policy, our Data Protection Officer (DPO) team is ready to assist.

The best ways to reach us regarding privacy matters:

• In-Platform Live Chat: The fastest method — typically receives a response within 5 minutes during peak hours.
• Email: [email protected] — for official data rights requests, response within 3–5 business days.
• FAQ Page: View CACA88 FAQ for answers to frequently asked privacy questions.

Please include "Data Privacy Request" in your message subject line so our team can prioritise your request more efficiently. All requests will be acknowledged within 24 hours and resolved within 30 business days.