grab888 is committed to protecting your personal data. This Privacy Policy explains what information we collect from Malaysian players and other users of our platform, how we use it, who we share it with, and the rights you have over your own data.
Last Updated: 1 January 2026All personal and financial data transmitted to and from grab888 is protected by 256-bit SSL encryption. We apply industry-standard access controls and security monitoring across all systems that store or process personal data.
grab888 does not sell, rent, or trade your personal information to third-party advertisers or data brokers. Your data is used strictly for platform operations, regulatory compliance, and improving your experience as a player.
You have the right to access, correct, or request deletion of your personal data at any time. We respond to verified data requests within 30 calendar days and provide clear, plain-English responses about what data we hold on you.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Account data is typically retained for 7 years after account closure to meet regulatory obligations.
Marketing communications from grab888 are always opt-in. You can withdraw your consent and unsubscribe from promotional emails or SMS at any time through your Account Settings or by contacting our support team directly.
Our data handling practices are designed to align with the principles of the Personal Data Protection Act 2010 (PDPA) of Malaysia, as well as internationally recognised privacy standards applicable to our licensed operations.
This Privacy Policy ("Policy") is issued by grab888 ("Company", "we", "us", "our") and applies to all personal data collected, processed, and stored in connection with your use of the grab888 website at https://grab888.cam, its subdomains, and all related services (collectively, the "Platform").
grab888 operates as an online casino and sports betting platform serving players primarily in Malaysia, including users in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and across all states of Malaysia. In providing our Services, we necessarily collect and process certain personal data relating to our users.
This Policy sets out in clear, plain-English terms: what personal data we collect, why we collect it, how we use it, with whom we may share it, how long we keep it, and what rights you have over your own information. We encourage you to read this Policy carefully before creating an Account or using the Platform.
For the purposes of this Privacy Policy, the following terms have the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including names, identification numbers, contact details, financial data, and online identifiers. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, use, disclosure, transfer, or deletion. |
| "Controller" | The entity that determines the purposes and means of processing personal data — in this case, grab888. |
| "Data Subject" | The individual to whom personal data relates — in this context, you, the User or Player. |
| "Third Party" | Any natural or legal person other than the Data Subject, the Controller, and persons authorised to process data under the Controller's direct authority. |
| "KYC" | Know Your Customer — the identity verification procedures applied by grab888 to confirm user identity, age, and payment instrument ownership. |
| "Cookies" | Small text files placed on your device by the Platform that store session and preference data to improve your user experience. |
grab888 collects personal data across several categories depending on how you interact with the Platform:
We collect personal data through the following means:
grab888 processes your personal data for the following purposes:
| Purpose | Data Used |
|---|---|
| Account registration and management | Identity, contact, account data |
| Identity verification and KYC compliance | Identity, financial, contact data |
| Processing deposits and withdrawals in MYR | Financial, transaction data |
| Fraud detection and prevention | Technical, financial, identity data |
| Anti-money laundering (AML) monitoring | Transaction, identity, financial data |
| Delivery of gaming services and personalised experience | Gaming activity, account, technical data |
| Customer support and dispute resolution | Communication, account, transaction data |
| Responsible gambling monitoring and interventions | Gaming activity, account data |
| Marketing communications (with consent only) | Contact, account, gaming activity data |
| Platform analytics and performance improvement | Technical, behavioural data |
| Regulatory reporting and legal compliance | All categories as required by applicable law |
grab888 processes your personal data only where a valid legal basis exists. The primary legal bases applicable to our processing activities are:
grab888 does not sell, rent, or trade your personal data. We may share your data with third parties only in the following circumstances:
In the course of providing Services to Malaysian players, some personal data may be transferred to, or processed by, entities located in jurisdictions outside Malaysia. This may occur in connection with our use of international cloud hosting providers, game content partners with studios in Eastern Europe and Asia, or global compliance service providers.
Where personal data is transferred internationally, grab888 ensures that appropriate safeguards are in place, including data processing agreements incorporating standard contractual clauses and equivalent data protection standards. We take steps to ensure that your personal data remains protected to a standard at least equivalent to that afforded under Malaysian data protection law regardless of where it is processed.
grab888 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.
grab888 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we use are as follows:
You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. grab888 does not currently use advertising or third-party tracking cookies for the purpose of serving targeted advertisements on external websites.
As a user of grab888, you have the following rights in relation to your personal data. These rights may be subject to certain limitations where overriding legal obligations apply (for example, where we are required to retain data by law regardless of a deletion request):
Request a copy of the personal data grab888 holds about you, along with information about how it is processed.
Request correction of any inaccurate or incomplete personal data held on your Account or in our records.
Request deletion of your personal data where there is no longer a lawful basis for continued processing, subject to overriding legal obligations.
Request that grab888 limit the processing of your personal data in certain circumstances, such as while a dispute regarding data accuracy is being resolved.
Request a copy of personal data you have provided to grab888 in a structured, commonly used, and machine-readable format where technically feasible.
Withdraw consent for consent-based processing (such as marketing communications) at any time without affecting the lawfulness of prior processing.
grab888 strictly prohibits access to its Platform by persons under the age of 21 years. The Platform is intended solely for adults of legal gambling age in their applicable jurisdiction. We do not knowingly collect, process, or retain personal data from individuals under the age of 21.
If we become aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated Account. If you believe that a minor may have accessed the Platform or provided personal data without appropriate authorisation, please contact us immediately at [email protected].
grab888 implements a comprehensive suite of technical and organisational security measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These measures include:
Despite these measures, no data transmission over the internet or electronic storage system is completely immune to security threats. In the event of a data breach that poses a risk to your rights and freedoms, grab888 will notify affected users and applicable regulatory authorities within the timeframes required by law.
The grab888 Platform may contain references or links to third-party services, including payment processors and game content providers. This Privacy Policy applies solely to grab888's own data collection and processing activities.
Third-party services accessed through or in connection with the Platform are governed by their own privacy policies and terms of service. grab888 is not responsible for the privacy practices of third-party providers, and we encourage you to review the relevant policies of any third-party services you use in connection with our Platform.
grab888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform functionality. Where changes are material, we will notify you through one or more of the following channels: a prominent notice on the Platform homepage, an email notification to your registered address, or an in-platform notification upon your next login.
The updated Policy will take effect from the date indicated in the "Last Updated" field at the top of this page. Continued use of the Platform following the effective date of any amended Policy constitutes your acceptance of the changes. If you do not agree with the updated Policy, please discontinue use of the Platform and contact us to initiate Account closure.
If you have any questions, concerns, or requests regarding this Privacy Policy or the way grab888 handles your personal data, please reach out through the following channels:
For issues specifically related to responsible gambling, self-exclusion, or account restrictions, please also refer to our Responsible Gambling page for dedicated resources and guidance.
Our support team is available around the clock. Reach us via live chat from your Account dashboard or email us directly. We're committed to responding to all privacy requests within 30 days.