Privacy Policy & Data Protection
Platform 1988bo Malaysia

1Definitions and Scope of This Policy

This Privacy Policy ("Policy") describes how 1988bo ("we", "the platform", or "1988bo") collects, uses, discloses, stores, and protects your personal information when you use the 1988bo.org website, our mobile app, or any services we offer ("Services").

This Policy applies to all users, visitors, and registered members of the 1988bo platform regardless of their geographical location, provided they access our services. By using our Services, you acknowledge that you have read and understood this Policy.

For the purposes of this Policy, "Personal Data" refers to any information that directly or indirectly identifies you as an individual, as defined under Malaysia's Personal Data Protection Act 2010 (PDPA).

2Types of Personal Data We Collect

1988bo collects your personal data through various means — whether provided directly by you, collected automatically, or obtained from legitimate third-party sources. The following are the categories of data we collect:

2.1 Data You Provide Directly

• Identity Information: Full name, date of birth, identification card or passport number, gender, and nationality
• Contact Information: Email address, mobile number, and current residential address
• Account Information: Username, password (stored in hashed form), and security questions
• KYC Documents: Copy of ID card, passport, driver's license, utility bill, or bank statement for identity verification
• Financial Information: Bank account number, bank name, and digital wallet details for payment processing

2.2 Data Collected Automatically

• Technical Data: IP address, device type, operating system, browser version, and screen resolution
• Usage Data: Pages visited, session duration, games played, access time and date
• Location Data: Approximate geographic location based on IP address (not precise GPS location)
• Cookie Data: Session cookies, preference cookies, and marketing identifiers as described in Section 7

2.3 Data From Third Parties

• Verification information from licensed third-party KYC service providers
• Transaction data from payment providers for verification and fraud prevention
• Anti-Money Laundering (AML) blacklist screening information from recognised agencies

3Purpose of Use of Your Personal Data

1988bo uses your personal data solely for the purposes outlined below. We will not use your data for any other purpose without obtaining your prior consent:

4Legal Basis for Data Processing

Every instance of personal data processing by 1988bo has a valid legal basis under Malaysia's PDPA and international data protection standards:

• Contract Performance: Processing necessary to provide the services you have requested, including account management and payment processing
• Legal Requirement: Processing required under Malaysian law, including AML, KYC, and tax reporting obligations
• Legitimate Interest: Processing for platform security, fraud prevention, and service improvement purposes that do not infringe on your fundamental rights
• Your Consent: Processing for direct marketing and promotional communications, where you have given explicit consent that may be withdrawn at any time

5Data Sharing With Third Parties

1988bo does not sell your personal data. We only share your data in the limited situations described below, and only with parties that have signed strict confidentiality agreements:

5.1 Trusted Service Providers

We share necessary data with service providers that help us operate the platform — including payment processors, KYC verification companies, cloud computing services, and data analytics firms. All such providers are bound by strict data processing agreements and undergo regular audits.

5.2 Legal Requirements and Authorities

We may disclose your data to government authorities, law enforcement bodies, or courts when required by applicable Malaysian law, a valid court order, or to defend our legal rights. We will endeavour to notify you of any such disclosure unless prohibited by law.

5.3 Business Transfers

If 1988bo is involved in a merger, acquisition, or asset sale, your personal data may be transferred as part of that transaction. You will be notified via email and a prominent notice on our website at least 30 days before your data becomes subject to a different privacy policy.

6Data Security and Encryption

We take data security seriously. The technical and organisational measures we have in place include:

• Transmission Encryption: All communications between your device and our servers are protected with TLS 1.3 / SSL 256-bit encryption
• Storage Encryption: Sensitive data such as financial information and identity documents is stored in encrypted form using AES-256
• Access Controls: Access to members' personal data is restricted to staff with a legitimate business need, with full audit logs maintained
• Two-Factor Authentication: 2FA is available and encouraged for all member accounts as an added layer of protection
• Penetration Testing: Independent security audits and penetration testing are conducted quarterly by third-party cybersecurity firms
• 24/7 Monitoring: A real-time threat detection system operates around the clock to identify and address any suspicious activity

7Cookie and Tracking Technology Policy

1988bo uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

You can manage your cookie settings through your browser settings at any time. Please note that disabling essential cookies may affect platform functionality. For more information on managing cookies, refer to your browser's documentation.

8 International Data Transfers

As an online platform, 1988bo's servers and infrastructure may be located across various geographical locations. When your personal data is transferred outside Malaysia, we ensure protection equivalent to Malaysia's PDPA standards through the following measures:

• Legally binding data processing agreements with all overseas service providers
• Use of internationally recognised standard contractual clauses for cross-border data transfers
• Selecting cloud providers with ISO 27001 and SOC 2 Type II certification
• Data protection impact assessments (DPIA) are conducted before any new data transfer outside Malaysia

Countries or regions where data may be processed include Singapore, Hong Kong, and European Union member states with adequate data protection standards. We do not transfer data to regions without an equivalent data protection framework.

9Your Rights as a Data Owner

Under Malaysia's PDPA and international standards, you have the following rights regarding your personal data held by us. All requests can be submitted via email to our privacy team at [email protected] and will be processed within 14 business days:

10Child Data Protection

The 1988bo platform is an adult service that strictly prohibited for individuals under the age of 18. We do not knowingly collect personal data from minors. The measures we take include:

• Mandatory age verification at registration using valid government-issued identification
• Continuous cross-checks using licensed third-party age verification systems
• Continuous monitoring to detect usage patterns indicating underage users

If we discover that we have collected personal data from someone under the age of 18, we will promptly delete that data and close the account in question. If you are aware that a minor has registered on our platform, please contact us immediately at [email protected].

11Data Retention Period

We retain your personal data only for as long as necessary for the stated purpose or as required by Malaysian law. Our retention schedule is as follows:

Once the retention period has ended, data will be securely deleted using industry-standard data erasure methods or converted into an anonymised format that cannot be used to identify you.

12Amendments to This Privacy Policy

1988bo reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. When we make material changes, we will:

• Updating the "Last Updated" date at the top of this document
• Sending email notifications to all registered members at least 14 days before the amendment takes effect
• Displaying a prominent notice on our platform's homepage
• Maintaining an archive of previous versions of this Policy, available upon member request

Your continued use of our platform after the effective date of any amendment constitutes your acceptance of the updated Policy. If you do not agree with any amendment, you have the right to close your account before it takes effect.

13Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact our Data Protection Officer (DPO):