Purpose Limitation
fl888 collects information for identified purposes such as account operation, identity verification, payment processing, fraud prevention and responsible gambling support.
This Privacy Policy explains how fl888 collects, uses, stores and protects personal information when eligible Malaysian adults access our gaming information, account and payment-related services.
This Privacy Policy describes the privacy practices of fl888 in relation to the website at https://fl888.cam, associated mobile pages and services made available through the platform. It applies when you visit fl888, create or use an account, contact support, review a promotion, make a payment, request a withdrawal or use responsible gambling controls.
fl888 recognises that gaming accounts can involve sensitive personal, identity and financial information. We therefore aim to process personal data fairly, for defined purposes and with proportionate safeguards. This policy is intended to help Malaysian users understand what information fl888 may hold, why that information is required and what choices may be available.
By using fl888, you acknowledge that your information may be processed as described in this Privacy Policy. Where consent is the appropriate basis for a particular activity, fl888 will request it separately. Refusing optional processing will not prevent essential security, regulatory or account administration messages.
This policy should be read together with the fl888 Terms and Conditions and Responsible Gambling information. Access to casino-style gambling services is restricted to eligible adults aged 21 and above. Age verification data may therefore be necessary before certain platform functions can be used.
These practical principles guide the way fl888 handles user information throughout an account relationship.
fl888 collects information for identified purposes such as account operation, identity verification, payment processing, fraud prevention and responsible gambling support.
fl888 seeks information that is reasonably relevant to the service or legal requirement involved, rather than collecting personal details without a defined need.
Technical and organisational controls are used to reduce unauthorised access, alteration, disclosure or loss of account and transaction information.
Privacy information is presented in direct English suited to Malaysian users, including explanations of MYR transactions and familiar local payment channels.
fl888 retains information for operational, dispute, security and compliance periods, then deletes or anonymises it where continued storage is unnecessary.
Eligible users may request access, correction or other available privacy actions, subject to identity checks and applicable record-keeping obligations.
The information collected by fl888 depends on how you interact with the platform. A visitor reading general information provides less account data than a verified user making an MYR withdrawal. Categories may include the following:
| Data category | Examples | Primary purpose |
|---|---|---|
| Identity information | Full legal name, date of birth, nationality and identity document details. | Age confirmation, KYC checks, account integrity and compliance review. |
| Contact information | Email address, residential address and communication preferences. | Account notices, support communication, security alerts and service administration. |
| Account information | Username, encrypted authentication data, account status and preference settings. | Account access, service delivery, security and personalisation. |
| Payment information | Transaction references, masked account details, payment method and wallet addresses. | Deposits, withdrawals, refunds, fraud prevention and financial reconciliation. |
| Technical information | IP address, browser type, device identifiers, operating system and access times. | Platform performance, login security, abuse detection and troubleshooting. |
| Gaming activity | Game sessions, sports selections, wagering values, bonus use and transaction history. | Service operation, dispute handling, risk controls and responsible gambling monitoring. |
| Support records | Messages, complaint details, verification correspondence and call notes where applicable. | Responding to requests, quality assurance and maintaining an accurate case history. |
Where a user selects DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank or Hong Leong, fl888 may receive transaction identifiers and limited account details necessary to confirm the payment. fl888 does not ask users to disclose an online banking password or one-time security code.
fl888 may collect information directly when you enter account details, communicate with support, choose a limit, submit verification records or initiate a payment. You are responsible for providing accurate information and updating details when they change.
Information may also be collected automatically when you access fl888. Server logs and similar technologies can record device, browser, approximate location, session and security information. These records help fl888 recognise unusual login activity, maintain platform stability and understand whether pages operate correctly across mobile devices used in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam and elsewhere.
fl888 may receive limited information from payment processors, identity verification providers, fraud prevention services and other parties involved in delivering or securing the service. Such information can include confirmation that a bank or eWallet payment succeeded, that an identity document passed a validation check or that a transaction requires further review.
fl888 processes personal information only where there is an appropriate purpose and basis. Depending on the circumstances, processing may be necessary to provide requested services, meet legal or compliance obligations, protect legitimate operational interests, prevent harm or act on valid consent.
fl888 uses registration and account information to authenticate users, maintain preferences, display MYR balances, record transactions, manage promotions and provide requested casino or sports-related functions.
Identity and payment records may be processed to confirm that an account belongs to one eligible adult, that the user is aged 21 or above and that withdrawals are directed to an authorised method.
fl888 may compare login, transaction, device and account patterns to identify duplicate accounts, payment abuse, unauthorised access, money laundering indicators, collusion or manipulation of promotional terms.
Activity information may support deposit limits, session reminders, cooling-off periods and self-exclusion. Where indicators suggest potentially harmful activity, fl888 may provide information about available controls or restrict an account where appropriate.
Contact and support records help fl888 answer questions, resolve account disputes, explain bonus conditions and send essential notices about security, payments, policy changes or service availability.
Aggregated or appropriately protected usage data may be reviewed to understand performance, navigation and general preferences, such as interest in EPL, Liga Super Malaysia, UFC, live football, slots or live dealer information.
fl888 may use cookies, local storage and comparable technologies to maintain sessions, remember settings, support security controls and assess platform performance. A cookie is a small data file stored by a browser. It does not independently reveal a user's full identity, but it can be associated with an account or device.
You may adjust browser controls to block or delete cookies. However, preventing essential cookies may cause account access, payment displays or security features to operate incorrectly. Any optional technology requiring consent should remain disabled until the required choice has been recorded.
fl888 does not sell personal information as a general business practice. Information may be disclosed to carefully selected service providers where access is necessary for identity verification, payment processing, hosting, cybersecurity, customer support, fraud detection, professional advice or platform maintenance.
Recipients are expected to use information only for authorised purposes and to apply appropriate confidentiality and security measures. The information shared is limited according to the service being performed. For example, a payment provider may need transaction and account identifiers but does not require unrelated game preference information.
Personal information may also be disclosed where fl888 reasonably believes this is required by applicable law, a valid legal request, regulatory obligation, dispute process or the need to protect users, the platform or the public against fraud or harm.
Some service providers may process information outside Malaysia. Data protection standards can differ between jurisdictions. Where an international transfer occurs, fl888 seeks suitable contractual, organisational or legal safeguards proportionate to the information and transfer involved.
fl888 uses technical and organisational measures intended to protect information against accidental loss, unauthorised access, improper alteration or disclosure. Controls may include access restrictions, encryption in transit, monitoring, secure development practices, account verification and incident response procedures.
No internet service can guarantee absolute security. Users must protect their own account credentials, choose a strong password not used elsewhere and keep one-time codes private. fl888 will never ask a user to reveal a full online banking password.
If you suspect that another person has accessed your fl888 account, change your password promptly and notify support. When using a shared device, sign out completely and avoid saving credentials in the browser. Public Wi-Fi in cafés, shopping centres or transport hubs may not provide the same protection as a trusted connection.
Do not share passwords, verification codes, cryptocurrency seed phrases or full payment card details. Check wallet networks and payment recipients before confirming any transfer. Blockchain transactions are generally irreversible once completed.
fl888 retains personal information only for as long as reasonably necessary for the purpose for which it was collected, subject to legal, regulatory, security, financial record and dispute requirements. Retention periods may differ between account records, payment data, support correspondence, self-exclusion records and technical logs.
Closing an account does not always result in immediate deletion. fl888 may need to preserve selected information to address chargebacks, resolve disputes, detect duplicate registrations, maintain self-exclusion protection or comply with lawful record-keeping obligations. Information retained after closure should remain subject to appropriate access restrictions.
When continued identification is no longer required, fl888 may delete personal information or convert it into anonymised data that cannot reasonably be linked back to an individual. Aggregated, non-identifying information may be retained for statistics, security analysis and platform improvement.
Subject to applicable law, identity verification and legitimate exceptions, users may request certain actions concerning personal information held by fl888. A request must contain enough detail for fl888 to identify the relevant account and understand the action being sought.
fl888 may request proof of identity before completing a privacy request. This protects account data against disclosure to an unauthorised person. Requests may be refused or limited where they conflict with legal retention duties, fraud prevention, the rights of another person or an active dispute. Where possible, fl888 will explain the reason for a limitation.
Responsible gambling information can be particularly sensitive. fl888 may process deposit limits, session restrictions, cooling-off selections, self-exclusion records and relevant support communication to apply the user's chosen controls and reduce the risk of reactivation during an exclusion period.
A request to erase an account may not override the need to retain a minimal self-exclusion record. Keeping that restricted record can help fl888 identify an attempted new registration and uphold the protective choice previously made by the user.
fl888 is intended for adults aged 21 and above only. Information indicating possible underage access will be reviewed promptly, and the relevant account may be suspended while age is verified. Parents and guardians should protect devices, payment credentials and passwords from unauthorised access.
fl888 may update this Privacy Policy to reflect changes in services, security practices, technology or applicable requirements. The effective date shown near the top of the page identifies the current version. Material changes may also be communicated through an account notice or another appropriate channel.
If you have a question about this policy, believe personal information is inaccurate or wish to make a privacy request, contact fl888 support using the plain-text email address shown on this page. Include your registered account details and a clear description of the request, but never send a password, one-time code or complete payment credential.
fl888 may need to verify your identity before discussing account-specific information. This verification step protects users by reducing the risk that private data is released to an impersonator.
Support email:
[email protected]
This email address is displayed as plain text and is not a clickable link.
Return to the homepage for an overview of fl888, or read the Terms and Conditions for account, payment and promotion rules. Gambling is for eligible adults aged 21 and above only.