Privacy Policy Turbo88 – Malaysian Player Personal Data Protection

This Privacy Policy is published by Turbo88 ("we", "platform") and applies to all users who access or register an account at turbo88-jit.com ("you", "player"). This document outlines our practices regarding the collection, use, protection and disclosure of your personal data as a Malaysian player.

Turbo88 is committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA) and any regulations or guidelines issued by the Personal Data Protection Commissioner from time to time. We believe that transparency in the handling of personal data is the foundation of the trust you have placed in us.

By registering an account with Turbo88, using any of our services, or continuing to use our platform after this Privacy Policy has been updated, you agree to the practices described in this document. If you do not agree, please stop using the Turbo88 platform and contact us to find out what options are available to you.

Turbo88 collects your personal data through several channels — directly when you register an account or interact with the platform, and automatically via tracking technologies when you use our website. The categories of data we collect are as follows:

Identity & Contact Data:

• Full name as stated on your Malaysian identity card (MyKad) or passport
• An active Malaysian phone number (used for OTP verification)
• A valid email address
• Date of birth (for age verification — 18 years and above)
• National identity card number (MyKad) or passport number — required for KYC purposes only
• Residential address (required only for players requesting withdrawals above a certain threshold)

Financial & Transaction Data:

• E-wallet account numbers (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow) used for deposits and withdrawals
• Malaysian bank account number for withdrawals via FPX (Maybank2u, CIMB Clicks, etc.)
• Records of all deposit and withdrawal transactions, including amount, date, time and payment method
• Betting activity records including game type (slots, live casino, roulette, badminton betting, football, e-sports), bet amounts, and outcomes

Technical & Usage Data:

• IP address and location information (state/city) derived from it
• Device type, operating system and web browser used
• Session data including login date and time, session duration, and pages visited
• Cookie data and device identifiers used for authentication and security

Turbo88 only processes your personal data for purposes that are legitimate, necessary and relevant to the provision of our services. Each processing purpose has a clear legal basis under Malaysia's PDPA. The following are our primary purposes for using your data:

• Account Management: Creating and managing your Turbo88 account, processing registrations, verifying your identity at login and handling password resets.
• Financial Transaction Processing: Processes deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow and FPX, and handles withdrawals to your Malaysian bank account or e-wallet securely and accurately.
• Gaming Services Provision: Gives you access to slots, jackpots, live casino, roulette, badminton betting, Malaysia Super League and EPL football, e-sports, lottery and all other services on Turbo88.
• Security & Fraud Prevention: Detecting and preventing unauthorised access, identity fraud, bonus abuse, money laundering, and any other illegal activity on our platform.
• Legal Compliance (KYC/AML): Meeting legal compliance requirements, including Know Your Customer (KYC) and Anti-Money Laundering (AML) procedures as mandated by law.
• Customer Support: Enables our Bahasa Malaysia-speaking Turbo88 support team to help you resolve issues, answer enquiries and handle complaints effectively.
• VIP Programme & Promotions: Managing the VIP Rewards programme, calculating bonus eligibility, cashback, and promotions, and keeping you informed about offers relevant to your gaming activity.
• Responsible Gaming: Monitoring gameplay patterns to identify early signs of problem gambling and supporting players who may need help through the self-control tools we provide.
• Platform Improvements: Analysing aggregated usage data (in a form that cannot identify any individual) to understand how players use our platform and to improve it over time.

Turbo88 does not sell your personal data to anyone. However, there are limited situations where we need to share data with certain third parties in order to operate our services. In all such cases, we ensure your data is protected under strict security and confidentiality agreements:

• Payment Providers: Required transaction data is shared with payment processors such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX gateway providers solely to process your deposits and withdrawals. They receive no more data than is necessary for this purpose.
• Game Providers: Your username or account identifier (not your full personal data) is shared with licensed game providers such as Pragmatic Play, PG Soft, and other technical partners solely to ensure games function correctly.
• Infrastructure Service Providers: The cloud service providers, server hosting companies and cybersecurity firms we work with may have limited access to your data as part of delivering their technical services. All such providers are bound by strict data processing agreements.
• Legal Authorities: Turbo88 may disclose personal data to law enforcement agencies, courts or regulatory bodies where required by Malaysian law or a valid court order, or where we believe disclosure is necessary to prevent crime or protect public safety.
• Business Acquisition: In the event of a merger, acquisition, or asset transfer, your personal data may be transferred to the successor entity. Should this occur, you will be notified in advance and the new privacy policy will be made available.

In all of the above situations, we ensure that only the minimum necessary data is shared, and recipients are bound by adequate confidentiality agreements. Turbo88 remains accountable for how your data is handled by these parties.

Turbo88 implements multiple layers of technical and operational security controls to protect your personal data against unauthorised access, loss, destruction or accidental disclosure:

• 256-bit SSL/TLS Encryption: All communications between your browser or app and Turbo88's servers are encrypted using TLS 1.3 with 256-bit keys — making it virtually impossible for unauthorised parties to intercept or read.
• Data Encryption at Rest: Sensitive data stored in our databases, including financial information and KYC documents, is encrypted at rest using AES-256 encryption.
• Two-Factor Authentication (2FA): An OTP system via your Malaysian phone number is used during login, withdrawals and any changes to sensitive account information to verify your identity.
• 24/7 Security Monitoring: Our automated threat monitoring system operates around the clock to detect and respond to any suspicious activity, including login attempts from unrecognised locations.
• Internal Access Controls: Access to players' personal data within Turbo88 is restricted on a need-to-know basis. Customer support staff can only access the data necessary to resolve your enquiry.
• Regular Security Audits: The Turbo88 platform undergoes independent security audits on a regular basis to identify and address any potential vulnerabilities.

Turbo88 uses cookies and similar tracking technologies to enhance your experience on our platform, ensure account security and understand how players use our services. Below are the types of cookies we use:

• Essential Cookies: Required for core platform functionality — including maintaining your login session, saving language preferences and securing your financial transactions. These cookies cannot be disabled without affecting platform functionality.
• Performance & Analytics Cookies: Used to collect statistical data on how players use the Turbo88 platform — for example, the most frequently visited pages, time spent in each section, and the most commonly clicked buttons. This data is collected in aggregate and cannot be used to identify any individual.
• Functional Cookies: Remembering your preferences and settings — such as your favourite games, display settings, and notification preferences — to deliver a more personalised experience.
• Security Cookies: Used to detect fraud attempts, prevent CSRF (Cross-Site Request Forgery) attacks and monitor suspicious access patterns.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may affect the functionality of the Turbo88 platform. Turbo88 does not use third-party cookies for advertising or cross-site tracking purposes.

Turbo88 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by Malaysian law. Our general principle is to avoid retaining data longer than needed:

• Active Account Data: For as long as your account remains active on Turbo88, your personal data is retained to ensure the service operates properly and securely.
• Data After Account Closure: After your account is closed, Turbo88 retains the minimum records required for legal compliance — including financial transaction records — for the period prescribed by Malaysian law, typically between 5 and 7 years.
• KYC Records: Identity verification documents (KYC) are retained for a minimum of 5 years after the end of the business relationship, in line with Malaysia's anti-money laundering (AML) legal requirements.
• Security Logs: Access logs and security logs are retained for 12 months for the purpose of security incident investigations where required, after which they are automatically deleted.
• Cookie Data: Session cookies are deleted automatically when you close your browser. Persistent cookies have a set expiry period and are deleted once that period lapses.

Once the retention period expires, your personal data will be securely deleted or anonymised using methods that ensure it cannot be recovered. If you wish to request early deletion of your data (where permitted by law), please contact us at support@turbo88-jit.com.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the best privacy practices we follow, you have the following rights regarding your personal data at Turbo88:

• Right of Access: You have the right to request and receive a copy of the personal data we hold about you. Requests will be processed within 21 working days. A reasonable fee may apply for requests involving a large volume of data.
• Right to Rectification: If any data we hold is inaccurate, incomplete or outdated, you have the right to request a correction. You can update certain details (such as your phone number and email) directly within your account settings.
• Right to Erasure ("Right to Be Forgotten"): Under certain circumstances provided for under the PDPA — for example, where data is no longer needed for its original purpose or where you withdraw your consent — you may request the deletion of your data. This right is subject to any applicable legal retention requirements.
• Right to Object to Direct Marketing: You may opt out of any direct marketing communications from Turbo88 at any time by using the unsubscribe link in our emails or by contacting our customer support.
• Right to Object to Processing: You may object to the processing of your data for specific purposes if you have legitimate grounds to do so. Turbo88 will consider your objection and respond within 30 days.

To exercise any of the rights above, send an email to support@turbo88-jit.com with the subject line "Data Rights Request — [Type of Right]", along with your full name and Turbo88 account number. We will verify your identity before processing any request to protect your privacy.

Turbo88 is an adult entertainment platform open only to individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. Should we discover that we have inadvertently collected personal data from a minor, we will take the following steps immediately:

• Immediately closing the account in question and refunding any existing balance (subject to review)
• Deleting all relevant personal data from our systems as quickly as possible
• Notifying the parent or legal guardian if their details are known

If you believe a minor has registered an account on Turbo88, please notify us immediately at support@turbo88-jit.com. We take this matter very seriously and will act without delay.

Turbo88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or improvements to the privacy protections we offer. When we make material changes, we will:

• Updating the "Last Updated" date at the top of this document
• A clear notice will be displayed on the Turbo88 homepage for at least 30 days
• Sending email notifications to all registered players with an active email address
• For changes that are highly material, we may request your acknowledgement before you can continue using the platform

Continued use of the Turbo88 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account and request data deletion in accordance with the procedure described in Section 8.

Contact the Turbo88 Privacy Officer:

• Email: support@turbo88-jit.com (Subject: "Privacy Policy Enquiry")
• Live Chat: Available on the platform 24 hours a day, 7 days a week in Bahasa Malaysia
• Email Response Time: Within 24 hours on business days