Privacy Policy Andalas188 – Personal Data Protection for Malaysian Members

Andalas188 values the privacy of every member who entrusts us with their personal information. We recognise that this trust is the foundation of our relationship with over 250,000 members across Malaysia, and we do not take this responsibility lightly.

This Privacy Policy sets out in detail how andalas188 manages members' personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). The PDPA is the primary legislation governing the processing of personal data in commercial transactions in Malaysia, and andalas188 is committed to complying with every provision within it.

This policy applies to all personal information collected by andalas188 through:

• The main andalas188 website, accessible at andalas188.best
• The andalas188 mobile platform and interface, optimized for Android and iOS smartphones
• All interactions with the andalas188 customer support team, whether via live chat, email, or WhatsApp
• Registration process, identity verification (KYC), and account management
• All financial transactions, including deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as withdrawals to bank accounts

This policy does not apply to third-party websites or services that may be accessible via links from the andalas188 platform. We encourage you to read the privacy policy of any third-party website you visit.

Andalas188 collects various types of personal information in the course of providing online casino services to Malaysian members. Below is a detailed breakdown of the data we collect and the purpose behind each:

Data You Provide Directly:

• Registration Information: Full name as per MyKad, active Malaysian phone number, encrypted password, and date of birth for age verification.
• Identity Verification Documents (KYC): A copy or image of your MyKad is required to verify your identity before your first withdrawal is processed. This information is stored with strong encryption and restricted access.
• Financial Information: Payment method details including Touch 'n Go, GrabPay, or Boost e-wallet account numbers, bank account numbers for FPX processing, and your deposit and withdrawal transaction history in MYR.
• Support Communications: Records of live chat conversations, emails sent to support@andalas188.best, and any complaints or enquiries submitted to the support team.

Automatically Collected Data:

• Technical Data: IP address, web browser type, device operating system, screen resolution, and other device information relevant to optimising your platform experience.
• Activity Data: Gaming history including games played on andalas188, total wagers, wins and losses, session duration, and general platform usage patterns.
• Approximate Location Data: General location information derived from your IP address to verify that you are in Malaysia — not precise GPS location.
• Cookie Data: Information stored by cookies and similar tracking technologies as described in Section 6 of this document.

Every piece of data we collect has a clear and legitimate purpose. Andalas188 does not use your data for anything unrelated to providing you with our online casino services. Below are the primary purposes for which your personal data is used:

Core Operational Purposes (Required for Service):

• Creating and managing your andalas188 member account, including login verification and account security.
• Processing your MYR deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, and other supported Malaysian payment methods.
• Processing your winnings withdrawals to your registered bank account or e-wallet securely and on time.
• Verifying your age eligibility (18 and above) and your identity as a valid Malaysian citizen or resident.
• Providing access to all games on the andalas188 platform, including slots, Live Casino, Table Games, jackpots, and Sports Betting.
• Detecting and preventing fraud, money laundering, and the use of multiple accounts by the same individual.

Service Improvement Purposes:

• Analyzing usage patterns to improve the gaming experience and interface of the andalas188 platform.
• Personalizing game recommendations based on your play history and preferences at andalas188.
• Optimising platform performance for the devices and web browsers used by Malaysian members.
• Monitoring betting patterns for responsible gambling purposes and identifying members who may need assistance.

Communication Purposes (With Your Consent):

• Sends information about relevant andalas188 bonuses and promotions via SMS or email.
• Notifies you of important updates to the platform's Terms & Conditions or Privacy Policy.
• Sending security notifications related to your account, such as alerts for logins from a new device.

Andalas188 does not sell, rent, exchange, or disclose member personal data to third parties for their own marketing purposes. This is an unwavering commitment. However, there are specific situations where andalas188 may need to share limited information with trusted third parties in order for our services to function:

Contracted Service Providers:

• Payment Providers: Information required to process deposits and withdrawals is shared with the relevant payment providers, including Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and the FPX network. This sharing is limited strictly to data necessary to complete each transaction.
• Game Providers: Session information required for games to function properly is shared with third-party game providers such as Evolution Gaming, Pragmatic Play, and PG Soft. These providers are bound by strict confidentiality agreements with andalas188.
• Identity Verification Services: MyKad copies and KYC information are shared with approved third-party identity verification service providers to process new member verifications.
• Analytics Services: Anonymized and aggregated usage data is shared with analytics platforms to help us understand how members use the andalas188 platform.

Disclosures Required by Law:

Andalas188 may disclose your personal information to Malaysian government authorities or law enforcement if required by a valid court order, regulatory directive, or applicable Malaysian law. In such circumstances, andalas188 will endeavour to notify you of the request where legally permitted.

Andalas188 invests seriously in cybersecurity infrastructure to ensure that every member's personal data and financial information is protected to the highest standard. The following are the key security measures we have in place:

• 256-bit SSL Encryption: All communications between your browser and andalas188's servers are encrypted using TLS 1.3 protocol with AES-256 encryption. This means that even if someone were to intercept your network traffic, they would be unable to read the data.
• Stored Data Encryption: Sensitive information such as passwords is never stored in plain text — it is stored as hashed values that cannot be decrypted. Financial information and KYC documents are encrypted when stored on our servers.
• Internal Access Controls: Access to member personal data within andalas188's internal systems is restricted to staff with a legitimate need to access it. All access is automatically logged and monitored.
• Two-Factor Authentication (2FA): Andalas188 offers a two-factor authentication option for member accounts, providing an extra layer of security at login.
• 24/7 Security Monitoring: Andalas188's automated monitoring system operates around the clock to detect suspicious activity, intrusion attempts, and anomalies that may indicate a security threat.
• Regular Penetration Testing: The andalas188 infrastructure undergoes regular security testing and audits by independent cybersecurity experts to identify and address any potential vulnerabilities.
• Secure Data Backup: Member data is stored securely in data centres with high redundancy to ensure service continuity and protection against data loss.

Andalas188 uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session security, and understand how the platform is used. Cookies are small text files stored in your web browser when you visit a website.

The following are the types of cookies used by andalas188:

You can manage and delete cookies through your web browser settings. Please note, however, that disabling essential cookies may affect your ability to log in and use the andalas188 platform properly. Andalas188 does not use third-party cookies for third-party advertising purposes.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and andalas188's commitment to member privacy, you have several important rights regarding your personal data. Below are those rights and how to exercise them:

Andalas188 does not retain your personal data longer than necessary for the purposes it was collected, or as required by applicable Malaysian law. Our general principle is to keep data only for as long as it serves a legitimate purpose.

The specific retention periods for key data categories are as follows:

• Active Account Information: Personal data associated with active accounts is retained for the duration that the account remains active and in use by the member.
• Data After Account Closure: When an account is closed, whether by the member or by andalas188, core account data is retained for a further five (5) years for the purpose of resolving any potential disputes and ensuring legal compliance.
• Financial Transaction Records: Records of all transactions in MYR are retained for seven (7) years in accordance with applicable Malaysian financial legislation. This covers all deposits made via e-wallet and FPX, as well as all processed withdrawals.
• KYC Documents: MyKad copies and other identity verification documents are retained for seven (7) years after account closure, in accordance with anti-money laundering (AML) compliance requirements.
• Support Communication Logs: Records of all interactions with the andalas188 customer support team are retained for two (2) years for reference and quality assurance purposes.

Once the retention period expires or data is no longer needed, andalas188 will securely delete or anonymise it using secure deletion procedures to ensure it cannot be recovered.

Andalas188 strictly prohibits the use of our platform by any individual under the age of 18. Our platform contains games designed for adults and is not suitable for children or minors.

Andalas188 does not knowingly collect any personal data from individuals under the age of 18. If we discover that data has been collected from someone under 18, we will immediately take the following steps:

• Permanently closing the account in question
• Return any remaining balance in that account
• Delete all personal data associated with that individual from our systems

If you know or suspect that someone under the age of 18 has registered or is using the andalas188 platform, please contact us immediately at support@andalas188.best so that appropriate action can be taken.

Privacy Policy Amendments: Andalas188 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable Malaysian law, or the services we offer. Members will be notified of any material amendments via an in-platform notification or by email to the address registered in your andalas188 account.

The "Updated" date shown at the top of this document reflects the date of the most recent amendment. We encourage you to review this Privacy Policy periodically to stay informed about how andalas188 protects your information.

Contact Our Privacy Officer: If you have any questions, concerns, or complaints about how andalas188 handles your personal data, or if you wish to exercise any of your privacy rights as outlined in Section 7, please contact us through the following channels: