The Controller Behind Your Account Data
af888 operates af888.mobi and decides how the personal details collected on the site are used. That makes af888 the data controller for everything tied to your username: registration details, deposit references, game history and chat transcripts. Play records and payment records sit with one team, so a question about a stored document and a question about a missing deposit reach the same queue. Have your af888 username ready when you ask.
| Record group | What it contains | How it gets here |
|---|---|---|
| Account profile | Full name, date of birth, mobile number, language, currency in RM | You enter it at registration |
| Identity file | One photo ID: National ID Card (NID), passport or driving licence | You upload it before your first withdrawal |
| Money trail | References from Touch ’n Go eWallet, DuitNow, FPX Online Banking and Bank Transfer | Created each time you deposit or withdraw |
| Play log | Bets placed, session times, device and browser type | Recorded automatically while you play |
Nothing on that list is collected for its own sake. Each group answers a question we are obliged to answer: who you are, whether a payment is really yours, and what happened during a session.
Details We Record When You Join
Registration on af888 stays short because we only ask for what a playable, verifiable account needs. A mobile number, your name, your date of birth and a password are enough to open one. Everything else arrives later, at the point where it becomes necessary.
- Mobile number — used for the one-time code at login and password reset, plus service messages about your af888 account.
- Date of birth — checked against our 18+ rule. No account is opened for anyone younger.
- Identity documents — requested before your first withdrawal and reviewed within 24 hours.
- Payment references — the wallet or bank reference attached to a Touch ’n Go eWallet, DuitNow, FPX or Bank Transfer deposit.
- Device signals — IP address, browser type and approximate location, kept to spot unusual logins.
We do not ask for payslips, employer letters or bank statements as a condition of playing. If a document you send is unreadable, we ask for a clearer copy of the same document rather than something new.
Why We Keep Each Type of Record
Every record has a purpose attached to it, and that purpose decides who inside af888 may open it.
Running your account and payouts
Your profile, payment references and play log let us credit deposits, settle withdrawals and show a correct balance. Withdrawals go back to the wallet or bank account you deposited from, which is why the money trail carries more weight than the profile itself.
Verification before money leaves
Malaysian rules require us to know who is withdrawing. An NID, passport or driving licence that matches the name on the account clears that check. Reviews complete within 24 hours, and a first withdrawal is normally paid in about 36 minutes once verification is done.
Safety and fraud checks
Device signals and play history help us catch shared accounts, bonus abuse and stolen payment details. When a pattern looks wrong we may pause a withdrawal and ask a question. The record is what lets us ask a specific question instead of a vague one.
Messages you can switch off
Promotional messages about bonuses are optional. Account notices about a pending verification or a processed withdrawal are not, because they carry information you need. Turning promotions off never affects your access to af888.
Small Files That Keep Sessions Working
af888 uses a small number of cookies. A session cookie keeps you signed in between pages, a security cookie remembers the device you already verified, and a preference cookie holds choices such as language. All three are needed for the site to behave normally.
- Session cookie — ends when you sign out or close the browser.
- Security cookie — stays until you clear it or verify a new device.
- Preference cookie — keeps your language and display settings for return visits.
You can clear cookies in your browser whenever you like. Doing so signs you out and may trigger a fresh code the next time you log in.
Partners Who Receive Your Details
af888 does not sell personal data. Sharing happens only where a service cannot run without it.
- Payment providers — Touch ’n Go eWallet, DuitNow, FPX Online Banking and Bank Transfer receive the amount and reference needed to move money.
- Identity reviewers — a verification partner checks an uploaded document against the name on your af888 account.
- Game studios — providers such as Pragmatic Play, JILI, CQ9, Playtech and Red Tiger receive a session token, not your profile.
- Hosting and security — infrastructure partners hold technical logs used to keep the site online and block abuse.
Each partner works under a contract that limits it to the task at hand. None of them may use your details to market their own products to you.
How Long Records Stay on File
Play and payment records stay while your account is open. After you close it, records are held for the period that tax and anti-money-laundering rules require, then deleted or anonymised. Identity documents follow the same path and are never kept longer than the payment records they support.
If you ask us to close an account, your profile and marketing preferences are removed straight away and only the transaction history we must hold remains. That leftover file is restricted to the compliance team and cannot be used for promotions.
Your Rights Over Your Own Records
You can ask what af888 holds about you, correct it, or ask for it to be removed. Requests are handled by the privacy team through Live Chat, and every one is logged so you can follow it up later.
| Right | What it means at af888 |
|---|---|
| Access | A copy of your profile, verification status and transaction history |
| Correction | Fixing a misspelt name, an old mobile number or a wrong date of birth |
| Deletion | Closing the account and clearing marketing data; history we must keep stays |
| Portability | Your own records handed over as a readable file |
| Objection | Stopping promotional messages while account notices continue |
One limit is worth knowing in advance: we cannot delete a record that a payment dispute or an open investigation depends on. We tell you which record and why, rather than leaving the request unanswered.
Asking for a Copy or a Correction
- Step 1Sign in with the af888 account the request is about. A request for someone else needs their written authority first.
- Step 2Open Live Chat, which runs 24/7, and say you are asking the privacy team about a stored record.
- Step 3Confirm your identity with the one-time code sent to your registered mobile number.
- Step 4Keep the reference you are given. It is what you quote when you follow up on the same request.
Security Habits and Account Rules
af888 runs over an encrypted connection and stores passwords in hashed form, so nobody here can read yours. What protects the account day to day is your own habit: a password you use nowhere else, and one-time codes that stay on your own phone.
The service is for players aged 18 and above. We do not knowingly hold data from anyone younger, and an account found to belong to a minor is closed with its records removed, subject to the payment rules above. If you believe a minor has signed up, tell us through Live Chat.
Staff never ask for your password or for a code sent to your phone. Treat any message that does as a signal to stop and report it.
When This Notice Changes
This notice is updated when the way we handle records changes, for example when a new payment method is added or a review step is adjusted. The current version always sits at af888.mobi/privacy/ and replaces earlier ones. If a change affects what you agreed to, we tell you through your account before it applies.
Quick Answers on Data Requests
01Do I need an account to ask about my data?
For anything tied to a player record, yes. General questions about this notice can be asked in Live Chat before you register, and the team will walk you through the process without needing a username.
02Can I play without sending an ID?
You can deposit and play without one. An NID, passport or driving licence is required before your first withdrawal, because the account holder has to be confirmed before money leaves af888.
03Does closing the account erase everything?
Your profile and marketing preferences are removed. Transaction history stays for the period tax and anti-money-laundering rules set, and access to that file is limited to the compliance team.
04What if a message about my data looks wrong?
Send it to Live Chat without clicking any link inside it. Genuine af888 messages never ask for a password or a login code, so a request for either is a reason to pause.
How to Reach the Privacy Team
Every privacy question goes through 24/7 Live Chat, which keeps the request attached to your af888 account and gives you a written record of the answer. Ask for the privacy team and describe the record you have in mind. The agent raises it with the team that holds it and comes back with a reference you can quote again.