Gran88 Privacy Policy — Data Protection for Malaysia Members

1

Gran88 Privacy Introduction & Commitment

Gran88 ("we", "Platform") understands that privacy is more than a legal obligation — it is the foundation of the trust you place in us every day. This Privacy Policy honestly and transparently explains how the gran88.win platform handles the personal information of its members, particularly users from Malaysia.

When you register and use the Gran88 platform, you entrust us with your personal information. We do not take this responsibility lightly. Every data-related decision is made with your interests and security as the priority, not purely commercial considerations.

This Privacy Policy applies to all services offered through the gran88.win website, the Gran88 mobile app, and all official Gran88 communication channels. By continuing to use our platform after reading this document, you acknowledge your understanding of how we handle your personal data.

2

Personal Information We Collect

Gran88 only collects information that is genuinely necessary to provide you with a safe, seamless, and responsible service. We do not collect data excessively or retain information that is irrelevant to the purpose of our services.

Below are the categories of information we collect and the purpose for each:

3

How We Use Your Personal Data

Every piece of information we collect is used for a clear and legitimate purpose. Gran88 does not use your data for purposes unrelated to the provision of our online entertainment platform services.

The primary purposes for which gran88 uses your personal data are as follows:

• Account management and verification — processes registration, verifies your identity through the KYC process, and ensures only you can access your account.
• Financial transaction processing — enables incoming deposits and outgoing withdrawals to be processed securely and promptly to the payment method registered in your name.
• Platform security — detects and prevents unauthorised access, fraud, money laundering, and platform abuse by irresponsible parties.
• Legal compliance — fulfils compliance obligations to relevant authorities, including suspicious transaction reporting requirements under applicable law.
• Service communications — sends important account-related notifications, security updates, transaction alerts, and promotional information you have agreed to receive.
• Service improvement — analyses usage patterns in aggregate and anonymised form to improve the platform experience for all gran88 members.
• Responsible gaming — monitors gaming activity patterns to identify early signs of problem gambling and offer appropriate assistance to members who need it.

4

Sharing Information with Third Parties

Gran88 does not sell, rent, or trade your personal data to any external party for marketing or commercial purposes. Data sharing only occurs in limited and lawful situations as described below.

Gran88 may share necessary information with the following parties under certain circumstances:

• Payment service providers — required transaction details are shared with partner banks, FPX providers, and e-wallet providers to process your deposits and withdrawals.
• Game software providers — minimal, encrypted user data is shared with third-party game providers solely to enable games to function correctly.
• KYC service providers — identity verification documents are submitted to certified third-party verification services that have strict confidentiality agreements with gran88.
• Authorities and regulatory bodies — gran88 will comply with any lawful request from authorities with jurisdiction, including law enforcement agencies, when required to do so by law.

All of Gran88's third-party partners are bound by strict data protection agreements and are only permitted to use your information for specific, agreed-upon purposes. Gran88 ensures that all third parties involved adhere to the same high data security standards as our own internal standards.

5

Encryption & Technical Security

Gran88 takes its technical security infrastructure seriously to ensure your personal data and financial information are always protected against cyber threats, unauthorised access, and all forms of data breaches.

• 256-bit SSL encryption — all communications between your device and gran88 servers are encrypted using 256-bit TLS/SSL protocol, the same standard used by leading banking institutions worldwide.
• Stored data encryption — sensitive information stored in gran88's databases is encrypted using advanced encryption algorithms, ensuring your data remains unreadable even in the event of unauthorised access.
• Two-factor authentication (2FA) — gran88 offers an additional layer of security through two-factor authentication, which you can enable in your account settings to better protect your account.
• 24/7 security monitoring — gran88's automated threat detection system monitors platform activity around the clock to detect and repel any unauthorised access attempts or suspicious activity.
• Internal access controls — access to members' personal data within gran88 staff is strictly limited on a "need-to-know" basis, ensuring only relevant personnel can access your information.

6

Cookies & Tracking Technologies

Gran88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the Gran88 website.

Types of cookies used by Gran88:

• Essential cookies — required for core platform functions such as Login sessions and security. These cookies cannot be disabled without affecting platform functionality.
• Performance cookies — helps us understand how members use our platform through anonymised analytics so we can improve platform design and performance.
• Preference cookies — saves your preferences such as language, display theme, and other settings so you do not need to reconfigure them each time you Login.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect your experience on the Gran88 platform. For the best experience, we recommend keeping essential cookies enabled.

7

Data Retention & Deletion Period

Gran88 does not retain your personal data for longer than is necessary for the purposes stated in this privacy policy or as required by applicable law.

• Active account data — retained for as long as your account remains active on the gran88 platform.
• Financial transaction records — retained for a minimum of 5 years from the transaction date, as required by financial compliance and anti-money laundering regulations.
• KYC Documents — retained for a minimum of 5 years after the business relationship with gran88 ends, in line with anti-money laundering (AML) compliance best practices.
• Security logs — retained for 12 months for security investigation and fraud detection purposes.
• Marketing data — retained until you choose to stop receiving marketing communications or request data deletion.

Once the retention period expires or upon your request for data deletion (subject to our legal obligations), Gran88 will securely delete or anonymize your data using verified data deletion methods.

8

Your Privacy Rights as a Gran88 Member

As a Gran88 member, you have several rights regarding your personal data that we respect and are committed to facilitating:

9

Privacy Policy Amendments

Gran88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or service improvements. Any material amendments will be communicated to you via your registered email and in-platform notifications before the changes take effect.

We encourage you to review this Privacy Policy from time to time to stay informed about how Gran88 protects your information. The "Last Updated" date at the top of this page reflects the date of the most recent revision. Your continued use of the Gran88 platform after any amendments are published constitutes your acceptance of the updated terms.