Fortuna88 Privacy Policy – Your Personal Data Protection

1 Privacy Policy Introduction & Scope

Fortuna88 (hereinafter referred to as "we", "Platform" or "Fortuna88") is fully committed to protecting the privacy and data security of every individual who uses our services. This Privacy Policy is designed to provide complete clarity on how we handle your information.

This policy applies to all users who access the Fortuna88 website at fortuna88.win, the Fortuna88 mobile app for Android and iOS, and all digital services provided by our platform. It covers every interaction you have with the platform, from the moment of initial registration through every gaming session and financial transaction you make.

We understand that trust is the foundation of the relationship between users and a digital platform. That is why we do not merely comply with minimum legal requirements — we go further by implementing industry best practices to ensure your data remains secure and is used only for purposes you have consented to.

2 Data We Collect

Fortuna88 only collects data that is genuinely necessary to provide quality, secure, and regulatory-compliant services. The following are the categories of data we collect:

Data you provide directly:

• Identity information: full name, date of birth, identification card number (MyKad) or passport
• Contact information: email address, phone number, residential address
• Financial information: bank account details, e-wallet numbers for deposit and withdrawal processing
• KYC verification documents: copies of identity card, proof of address, and other required supporting documents
• Account information: username, password (stored in unreadable hashed format), account preferences

Data collected automatically:

• Technical data: IP address, web browser type, operating system, screen resolution, device information
• Usage data: pages visited, time spent, clicks and in-platform actions, navigation patterns
• Gaming data: betting history, wins, losses, game preferences, and playing patterns
• Cookie and similar technology data: session cookies, analytics cookies, and device identifiers

3 How We Use Your Data

Every piece of data we collect has a clear and lawful purpose. We do not use your data beyond the scope stated here:

• Service provision: Managing your account, processing deposits and withdrawals, providing access to games, and ensuring a smooth user experience.
• Identity verification (KYC): Meeting regulatory requirements by verifying user identity to prevent fraud, money laundering, and access by minors.
• Platform security: Detecting and preventing suspicious activity, cyberattacks, fraud, and account abuse through continuous monitoring.
• Legal compliance: Fulfilling reporting obligations to regulatory bodies, financial crime prevention agencies, and relevant authorities as required by law.
• Service improvement: Analysing usage patterns to improve platform performance, enhance the user interface, and develop more useful new features.
• Service communications: Sending important account-related notifications, security updates, transaction confirmations, and relevant service information.
• Marketing (with consent): Sending promotional information, bonus offers, and platform updates to users who have consented to receive marketing communications.
• Responsible gaming: Monitoring play patterns to identify users who may need responsible gaming support and providing appropriate interventions.

4 Legal Basis for Data Processing

Fortuna88 processes your personal data on valid legal grounds in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010. Each processing activity is supported by at least one of the following bases:

• Contract performance: Processing required to fulfil the service agreement between you and Fortuna88, including account management and transaction processing.
• Legal obligations: Processing required to comply with Malaysian law, including AML (Anti-Money Laundering) and KYC requirements.
• Legitimate interests: Processing for the purposes of platform security, fraud prevention, and service improvement that does not affect users' fundamental rights.
• Consent: For marketing and promotional communications, we only process your data where you have given clear consent, which can be withdrawn at any time.

5 Data Sharing with Third Parties

Fortuna88 does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, there are limited situations where data sharing is necessary and legally permissible:

• Trusted service providers: We share necessary data with payment service providers, licensed gaming platform providers, and cloud service providers that help us operate the platform. All parties are bound by strict confidentiality agreements.
• Legal and regulatory requirements: We will disclose data when required by a court, law enforcement agency, or regulatory body with valid jurisdiction.
• Fraud prevention: In cases involving suspected fraud, money laundering, or financial crime, we may share information with relevant agencies for investigation purposes.
• Business transfers: In the event of a merger, acquisition, or business asset transfer, user data may be transferred to the new entity, which will remain bound by this privacy policy.

6 Data Security

Fortuna88 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, or misuse.

• Data encryption in transit: All communications between your browser or app and Fortuna88 servers are secured by TLS 1.3 protocol with 256-bit encryption.
• Data encryption at rest: Sensitive data such as financial information and identity documents are stored in encrypted format using industry-standard encryption algorithms.
• Layered access controls: Only staff who require access to specific data to perform their duties are permitted to do so, with a full audit log for every access.
• Continuous security monitoring: A SIEM (Security Information and Event Management) system monitors the platform 24/7 to detect any suspicious activity or intrusion attempts.
• Regular security testing: Fortuna88 conducts regular penetration testing and security audits by independent cybersecurity experts.
• Incident management: We have a clear incident response procedure. In the event of a data breach affecting users, we will notify the affected users and relevant authorities within the timeframe prescribed by law.

7 Data Retention Period

Fortuna88 only retains your personal data for as long as necessary for the purposes stated in this policy or as required by law.

• Active account data: Retained for as long as your account is active and for any additional period required by law following account closure.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's accounting and anti-money laundering legal requirements.
• KYC Documents: Retained for the duration of the active account period plus 5 years after account closure, in accordance with regulatory requirements.
• Security and technical logs: Retained for between 6 months and 2 years depending on log type, for the purpose of security incident investigation.
• Marketing communication data: Retained until you withdraw your marketing consent, after which the data will be deleted or anonymised.

Once the retention period expires, data will be securely deleted or anonymised so it can no longer be linked to any specific individual.

8 Your Rights as a User

Under Malaysia's Personal Data Protection Act (PDPA), you have specific rights regarding your personal data held by Fortuna88. We respect and facilitate the exercise of these rights:

9 Cookies & Tracking Technologies

Fortuna88 uses cookies and similar tracking technologies to enhance the user experience and ensure platform security. The following are the types of cookies we use:

• Essential cookies (Required): Required for core platform operations such as maintaining login sessions, transaction security, and other essential functions. These cookies cannot be disabled without affecting platform functionality.
• Analytics cookies: Helping us understand how users interact with the platform so we can improve it. Data collected is in aggregate form and does not identify specific individuals.
• Functional cookies: Storing user preferences such as language, display settings, and other preferences to deliver a more personalised experience.
• Security cookies: Used to identify trusted devices, detect suspicious login attempts, and protect your account from unauthorised access.

You can manage cookie settings through your web browser preferences. Please note that disabling certain cookies may affect the functionality of the Fortuna88 platform.

10 Cross-Border Data Transfers

In the course of platform operations, your personal data may be transferred to and stored on servers located outside Malaysia. Fortuna88 ensures that all such data transfers are carried out with adequate safeguards:

• All cross-border data transfers are made only to countries or entities that provide a level of data protection equivalent to or higher than Malaysia.
• Legally binding data transfer agreements are signed with all data recipients outside Malaysia to ensure consistent protection standards.
• Fortuna88 maintains complete records of all cross-border data transfer activities for accountability and audit purposes.

11 Children's Privacy

Fortuna88 strictly prohibits individuals under the age of 18 from using our platform. We do not knowingly collect personal data from minors.

• Our registration process is designed to screen and reject registrations from underage individuals, including date of birth verification and KYC document checks.
• If we find that data belonging to underage children has been collected without parental or guardian consent, we will delete that data immediately and close the relevant account.
• Parents or guardians who become aware that their underage child has registered on Fortuna88 are requested to contact us immediately at [email protected].

12 Privacy Policy Amendments

Fortuna88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments.

• Users will be notified of any material amendments via in-platform notifications or email to your registered address at least 14 days before the changes take effect.
• The "Last Updated" date at the top of this document will be updated whenever an amendment is made.
• Continued use of the Fortuna88 platform after the effective date of any amendment constitutes acceptance of the latest version of the Privacy Policy.
• Previous versions of the Privacy Policy can be requested from our Privacy Officer for historical reference if needed.

13 Contact Our Privacy Officer

Fortuna88 has appointed a Data Protection Officer responsible for ensuring compliance with this privacy policy and handling enquiries or complaints related to personal data.

• Privacy Officer Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 via the chat icon on the Fortuna88 platform
• Response time: We are committed to responding to all privacy inquiries within 30 business days

If you are not satisfied with our response to your privacy complaint, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the relevant regulatory authority in your country.