Privacy Policy

Introduction

This Privacy Policy (hereinafter "Policy") issued by Shoei888 (referred to as "Shoei888", "we", "us", or "the Company"), the operator of the online casino and sports betting platform accessible at https://shoei888.cam (the "Platform"). This Policy governs the collection, use, storage, transfer, and disposal of personal data relating to all individuals who access or interact with the Platform, including registered members, prospective users, and visitors.

Shoei888 is committed to protecting the privacy and personal data of every individual who interacts with our Platform. We process personal data only for specified, legitimate purposes and in a manner that is proportionate, transparent, and consistent with applicable data protection principles. This Policy reflects our obligations under internationally recognised data protection frameworks, including principles analogous to those established under the General Data Protection Regulation (GDPR) and Malaysia's Personal Data Protection Act 2010(PDPA) where applicable.

By accessing the Platform, creating an account, or submitting any personal information, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside our Terms & Conditions.

Definitions

The following definitions apply throughout this Privacy Policy:

Personal Data We Collect

Shoei888 collects personal data that is necessary and proportionate for the operation of the Platform and the fulfilment of our legal obligations. The categories of personal data we collect include:

3.1 Registration & Identity Data

• Full legal name as per government-issued identification
• Date of birth (for age verification — 21+ policy strictly enforced)
• Malaysian National Identity Card (MyKad) number or passport number
• Nationality and country of residence
• Gender (where provided during registration)

3.2 Contact Data

• Email address (primary communication channel)
• Mobile phone number (for account security and WhatsApp support access)
• Residential address (required for full KYC verification)

3.3 Financial & Transaction Data

• Payment method details — e-wallet identifiers (Touch 'n Go eWallet account number, Boost account, GrabPay account), bank account numbers (Maybank2u, CIMB Clicks, Public Bank, Hong Leong Connect), DuitNow IDs, and FPX transaction references
• Transaction history: deposit amounts, withdrawal amounts, dates, and processing status
• Source of funds declarations (for enhanced due diligence cases)

3.4 Gambling & Behavioural Data

• Betting history: markets wagered on, stakes placed, outcomes, and winings
• Game play sessions: game types accessed, session duration, and game-specific behaviour
• Responsible gambling data: deposit limits set, self-exclusion requests, cooling-off periods, and support interactions

3.5 Technical & Device Data

• IP address at time of login and transaction
• Device type, operating system version, and browser type
• Session timestamps and access logs
• Geolocation data (country-level, derived from IP address)
• Cookie identifiers and session tokens

3.6 Communications Data

• Content of communications with our customer support team via live chat, WhatsApp, or email
• Support ticket records and resolution notes

How We Collect Your Data

Shoei888 collects personal data through the following channels and mechanisms:

• Directly from you: Information you provide when registering an account, completing KYC verification, making deposits or withdrawal requests, or contacting our support team.
• Automatically through the Platform: Technical and device data collected via server logs, cookies, session tracking, and analytics tools when you access or navigate the Platform.
• From payment service providers: Transaction confirmation data received from Malaysian payment providers including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, and Hong Leong Connect, following your authorisation of a transaction.
• From identity verification services: Data returned by our KYC and AML screening providers following your submission of identity documents, and data from sanctions screening databases.
• From fraud prevention systems: Device fingerprinting and behavioural analytics data collected through our fraud and security monitoring tools.

How We Use Your Data (Data Processing)

Shoei888 processes personal data for the following specific purposes:

Legal Basis for Processing

All processing of personal data by Shoei888 is conducted one or more of the following legal bases:

• Contractual necessity: Processing required to perform the contract between Shoei888 and the Member — including account creation, transaction processing, and game service delivery.
• Legal obligation: Processing required to comply with applicable law — including KYC/AML obligations under our gaming licence, age verification requirements, and responses to lawful regulatory or law enforcement requests.
• Legitimate interests: Processing conducted for Shoei888's legitimate business interests — including fraud prevention, platform security, and anonymised analytics — where those interests are not overridden by the Member's rights and freedoms.
• Consent: Processing conducted where you have provided specific, informed consent — for example, receiving optional marketing communications or enabling non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of processing prior to withdrawal.

Data Sharing & Third-Party Disclosure

Shoei888 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial use. Personal data is shared with third parties only in the following circumstances, and only to the extent necessary for the stated purpose:

• Payment service providers: Malaysian payment processors including operators of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, and participating banks (Maybank, CIMB, Public Bank, Hong Leong, RHB) receive transaction data strictly as necessary to process authorised deposits and withdrawals.
• KYC and identity verification providers: Third-party identity verification and AML screening services receive submitted identity documents and associated personal data solely for the purpose of verifying your identity in compliance with our licensing obligations.
• Game content providers: Licensed international game studios that supply games accessible on the Platform may receive anonymised session data (no personally identifiable information) for RNG audit and technical performance purposes.
• Fraud prevention and security providers: Third-party fraud detection and cybersecurity services process technical and behavioural data for the purpose of detecting and preventing fraudulent activity on the Platform.
• Legal and regulatory authorities: Where required by applicable law, court order, or a lawful request from a competent regulatory or law enforcement authority — including obligations under our gaming licence and applicable AML regulations — personal data will be disclosed without prior notice to the Member.
• Professional advisers: Legal counsel, auditors, and compliance consultants bound by professional confidentiality obligations may access limited personal data as necessary to advise the Company.

All third-party data processors engaged by Shoei888 are required to process personal data strictly in accordance with Shoei888's instructions, maintain appropriate technical and organisational security measures, and not use the data for any purpose other than that for which it was disclosed.

Data Retention Periods

Shoei888 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and our licensing obligations. The following general retention periods apply:

• Active account data: Retained for the duration of the Member's account plus a minimum of 5 years following account closure, in compliance with AML record-keeping requirements under our gaming licence.
• KYC and identity verification documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later, in line with AML obligations.
• Transaction records: Retained for a minimum of 5 years following each transaction to comply with financial record-keeping obligations.
• Customer support records: Retained for3 years from the date of the last interaction, for complaint management and quality assurance purposes.
• Technical logs and access records: Retained for 12 months, after which they are deleted or anonymised.
• Marketing consent records: Retained for as long as you remain subscribed or for 3 years following withdrawal of consent, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data may be retained indefinitely for statistical or analytical purposes as it no longer constitutes personal data.

Security Measures & Safeguards

Shoei888 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security framework includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform — the same standard used by leading financial institutions Malaysia and globally.
• Encrypted data storage for all sensitive personal data, including identity documents and payment method details, at rest within our infrastructure.
• Two-factor authentication (2FA) available to all Members for account access, strongly recommended as an additional layer of protection.
• Access controls and role-based permissions — internal access to personal data is restricted to authorised personnel on a strict need-to-know basis. All access is logged and auditable.
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity professionals.
• Incident response procedures — in the event of a personal data breach that is likely to result in risk to affected individuals, Shoei888 will notify affected Members and relevant authorities promptly in accordance with applicable obligations.

Cookies & Tracking Technologies

Shoei888 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device by your browser. They enable us to recognise your device across sessions, maintain your login state, remember your preferences, and gather analytical data about Platform usage.

Categories of cookies we use:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without disabling core Platform functionality.
• Functional Cookies: Store your preferences such as language settings, display preferences, and responsible gambling limit settings. Disabling these cookies may reduce your experience on the Platform.
• Analytical Cookies: Collect anonymised data about how Members navigate the Platform — pages visited, session duration, and feature usage. This data is used to improve Platform performance and user experience. These cookies do not identify you personally.
• Security and Fraud Prevention Cookies: Used by our fraud detection systems to identify unusual session patterns, device anomalies, and potential account takeover indicators.

You may control cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to access the Platform. Analytical and functional cookies can be disabled without affecting core Platform access. For detailed cookie management instructions, refer to your specific browser's help documentation.

Your Rights as a Data Subject

Subject to applicable law and the conditions described below, you hold the following rights with respect to your personal data processed by Shoei888. To exercise any of these rights, please contact our data protection team via the contact details in Section 15.

Please note that certain rights may be limited or unavailable where Shoei888 is required to retain or process data to comply with legal obligations — including AML record-keeping, gaming licence requirements, and fraud prevention. We will always inform you of the specific grounds for any limitation on the exercise of your rights.

Minors & Age Verification Policy

The Shoei888 Platform is strictly for individuals aged21 years and above. We do not knowingly collect, process, or retain personal data belonging to minors. All registration applications are subject to age verification, and accounts where underage use is detected are closed immediately with all associated data handled in accordance with applicable law.

If you are a parent or guardian and believe that a person under 21 has created an account on the Platform using false identity information, please contact our support team immediately at [email protected]. We will investigate promptly and take appropriate action, including account closure and return of any deposits (net of any withdrawals made).

International Data Transfers

As an internationally licensed platform, Shoei888 may transfer personal data to, and process it in, jurisdictions outside Malaysia. These transfers may occur when data is processed by our hosting infrastructure, by third-party data processors (such as KYC providers or fraud detection services), or by our game content partners.

Where personal data is transferred outside Malaysia, Shoei888 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that required under Malaysia's Personal Data Protection Act 2010and the data protection principles reflected in this Policy. Safeguards include: contractual clauses with data processors requiring equivalent data protection standards, the use of processors that operate under recognised international data protection frameworks, and technical security controls that apply regardless of processing location.

By using the Platform, you acknowledge and consent to the international transfer of your personal data as described in this section, subject to the safeguards described above.

Changes to This Privacy Policy

Shoei888 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or operational requirements. We are committed to informing you of material changes with reasonable notice.

Where changes are material — for example, changes to the types of data collected, new sharing arrangements with third parties, or changes to your rights — we will notify registered Members via email to their registered address, or via a prominent notice on the Platform, at least 7 calendar days before the changes take effect. Non-material changes (such as clarifications of existing practices or corrections of typographical errors) may be made without prior notice, though the "Last Updated" date will be revised accordingly.

Your continued use of the Platform after any revision takes effect constitutes acceptance of the updated Policy. If you do not agree with any changes, you may request account closure by contacting our support team prior to the effective date of the change.

Contact & Data Subject Requests

For all privacy-related enquiries, data subject rights requests, or complaints regarding the processing of your personal data, please contact the Shoei888 data protection team through any of the following channels. We aim to acknowledge all requests within 2 business days and to resolve or fully respond within 30 calendar days.