Grap88 Privacy Policy – Your Personal Data Protection

1grap88 Privacy Introduction & Commitment

Grap88 is an online gaming platform operating under strict data security standards. We are committed to complying with all relevant data protection laws and regulations, including Malaysia's Personal Data Protection Act 2010 (PDPA). This commitment goes beyond mere compliance — it reflects grap88's core values of transparency and trust.

This policy applies to all information collected through:

• The official grap88 website at grap88.pro and all associated subdomains.
• The grap88 mobile app, available for Android and iOS.
• All our communication channels including live chat, email, and Telegram.
• Any interaction you have with grap88 advertisements or content offered through our official channels.

When you provide us with personal data, you can be assured that it will be handled responsibly and used only for legitimate purposes in accordance with this Privacy Policy.

2Information We Collect

Grap88 only collects information that is strictly necessary to provide a quality, secure, and legally compliant service. Below are the categories of information we collect:

3How Your Information Is Used

Every piece of information you provide to grap88 is used responsibly and solely for legitimate purposes. Below are the key ways we use your data:

• Verification & Registration: To verify your identity during the KYC process and create a secure grap88 account in your name.
• Transaction Processing: To process deposits and fund withdrawals accurately and promptly to the account registered in your name.
• Account Security: To detect and prevent suspicious activity, unauthorised login attempts, and potential fraud on your account.
• Service Communications: To send important account-related notices, Terms and Conditions updates, transaction confirmations, and security alerts.
• Relevant Marketing: With your consent, to inform you about promotions, bonuses, and special offers that may interest you based on your playing habits.
• Platform Improvements: To analyse usage patterns on an aggregate basis (without identifying individuals) for the purpose of improving the performance and user experience of the grap88 platform.
• Legal Compliance: To fulfil applicable legal and regulatory obligations, including anti-money laundering (AML) requirements.

4Data Sharing & Disclosure to Third Parties

Grap88 does not sell, rent, or trade your personal data to any third party for commercial purposes. However, in certain limited situations, we may need to share your information with the following parties:

• Payment Providers: Required transaction information is shared with approved payment processors (such as FPX gateways and digital wallet providers) solely to facilitate the completion of financial transactions.
• KYC Audit Partners: Third-party identity verification service providers that are registered and have strict confidentiality agreements with grap88.
• Technology Service Providers: Companies that assist us in managing technical infrastructure, cybersecurity, and customer support, subject to strict data processing agreements.
• Statutory Authorities: When required by law, court order, or directive from a competent authority. In such cases, grap88 will endeavour to notify you in advance wherever possible, unless prohibited by law.

5Encryption & Security Measures

Your data security is grap88's top priority. We continuously invest in the latest security technologies and procedures to ensure your information is always protected against unauthorized access, disclosure, or alteration.

Key security measures we implement include:

• 256-bit SSL Encryption: All data transmitted between your device and grap88 servers is protected with industry-standard 256-bit SSL encryption, ensuring no third party can intercept your information.
• Two-Factor Authentication (2FA): An extra layer of protection for account login, ensuring only you can access your account even if your password is compromised.
• 24/7 Monitoring: An automated security monitoring system active around the clock to detect and block suspicious activity in real time.
• Secure Password Storage: Your password is never stored in plain text. We use a strong one-way hashing algorithm.
• Data Segregation: Sensitive data such as financial information is stored in an isolated environment with strict access controls, accessible only by authorised personnel.
• Regular Security Audits: Penetration testing and independent security audits are conducted regularly to identify and patch any vulnerabilities.

6Cookies & Tracking Technologies

Grap88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as maintaining your login session and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Analytics Cookies: Helps us understand how users interact with our platform (pages visited, time spent, etc.) on an anonymous basis for improvement purposes. This data is aggregated and not used to identify individuals.
• Functional Cookies: Remembers your preferences such as display theme, notification settings, and gaming preferences to deliver a more personalized experience.
• Security Cookies: Used to detect unauthorised access attempts and protect your account from cyberattacks.

You may manage or delete cookies at any time through your web browser settings. Please note that disabling certain cookies may affect the functionality and user experience of the grap88 platform.

7Data Retention Period

Grap88 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by law. Once the retention period expires, your data will be securely deleted or anonymised.

• Active Account Data: Retained for the duration that your account remains active and in use.
• Data After Account Closure: Certain information may be retained for up to seven (7) years after account closure to comply with applicable legal and financial regulatory requirements.
• Financial Transaction Data: Transaction records are retained for a minimum of seven (7) years in compliance with accounting and anti-money laundering (AML) legal requirements.
• Technical & Security Logs: Retained for a maximum of 90 days for security incident detection and technical troubleshooting purposes.
• Communication Records: Customer support chat records and emails are retained for three (3) years for quality control purposes and reference in the event of a dispute.

8Your Rights as a User

Under applicable data protection laws, you have certain rights regarding your personal data held by grap88. We fully respect and facilitate the exercise of these rights.

9International Data Transfers

In the course of its operations, grap88 may need to transfer your personal data to servers or service providers located outside Malaysia. When such transfers occur, grap88 ensures that:

• The recipient country or region maintains a level of data protection equivalent to or exceeding the standards required under Malaysian law.
• Appropriate data transfer agreements — including Standard Contractual Clauses or equivalent protective mechanisms — have been established with the recipient parties.
• All transferred data remains subject to the same security and privacy standards as set out in this Privacy Policy.

By using the grap88 platform, you consent to such data transfers, subject to the protections outlined above.

10Child Protection

Grap88 takes child protection seriously. Our platform is strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from minors.

• Our registration and KYC process is designed to verify that all users meet the minimum age requirement.
• If we discover that personal data of a minor has been collected without our knowledge, we will immediately delete such data and close the associated account.
• Parents or guardians who suspect their child has registered on the grap88 platform should contact us immediately at [email protected].

11Amendments to This Privacy Policy

Grap88 reserves the right to modify this Privacy Policy from time to time to reflect changes in our privacy practices, applicable laws, or how we handle personal data. We are committed to notifying you of any material changes through:

• A clear notice on the grap88 platform homepage and within your account.
• Notification via email to the address registered in your account.
• Update the "Last Updated" date at the top of this page.

Your continued use of the grap88 platform after any amendments take effect will be considered your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

12Contact Our Privacy Team

If you have any questions, concerns, or complaints regarding this Privacy Policy or how grap88 handles your personal data, please do not hesitate to contact us. Our Data Protection team is ready to assist you:

• Privacy Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 via the chat icon at the bottom corner of the grap88 platform.
• Telegram: Via the official grap88 Telegram channel.

We are committed to responding to all privacy-related enquiries within 14 working days. For more complex complaints, we will provide progress updates within that period and set a realistic resolution timeline.