Privacy Policy

Empire88 ("we", "us", "our", "the Platform") operates the online gaming website accessible at empire88.cam. We understand that the personal data you share with us is sensitive, and we treat it with the highest level of care, confidentiality, and security at all times.

This Privacy Policy ("Policy") describes the practices Empire88 follows when collecting, storing, processing, and sharing personal data provided by users ("you", "your") of the Platform. It applies to all personal data collected via the website, our live chat support channels, email correspondence, and any other point of interaction between you and Empire88.

By registering an account on Empire88 or by continuing to use the Platform after the effective date of this Policy, you acknowledge that you have read and understood the data practices described herein. If you have any concerns about how your data is handled, you should contact our Data Privacy team before proceeding. Contact details are provided in Section 15.

The following defined terms are used throughout this Policy:

Empire88 collects only the categories of Personal Data that are necessary for the purposes described in this Policy. The main categories are as follows:

3.1 Identity & Registration Data

• Full legal name as it appears on your government-issued identity document.
• Date of birth (used to verify the 21+ age requirement applicable to Malaysian users).
• Gender (optional, collected during registration for profile personalisation purposes).
• Username chosen at registration.
• Nationality and country of residence.

3.2 Contact Data

• Primary email address — used for account notifications, transaction alerts, promotional communications (where consent is given), and support correspondence.
• Mobile phone number — used for SMS one-time password (OTP) verification and, where applicable, two-factor authentication.
• Residential address — collected as part of KYC verification and required for certain withdrawal thresholds.

3.3 KYC & Verification Data

• Copies of government-issued identity documents (Malaysian MyKad, passport, or other accepted government ID).
• Proof of address documents (utility bill, bank statement, or other accepted document dated within 90 days).
• Selfie photographs taken for liveness verification purposes.
• Source of funds declarations where required by our compliance obligations.

3.4 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method identifiers (truncated account numbers or e-wallet IDs where applicable).
• Wallet balance history and bonus credit records.
• Wagering and gaming activity records, including bets placed, games played, win/loss outcomes, and session durations.

3.5 Technical & Usage Data

• IP address and approximate geographic location derived from IP.
• Device type, operating system, browser version, and screen resolution.
• Pages visited on empire88.cam, time spent on pages, click paths, and session duration.
• Referral source (e.g., direct navigation, search engine, referral link).
• Login timestamps and frequency of access.

3.6 Communications Data

• Records of live chat interactions with our support team, including chat transcripts.
• Email correspondence between you and Empire88 support or compliance teams.
• Responses to surveys, feedback forms, or promotional engagement where you voluntarily participate.

Empire88 collects Personal Data through the following channels:

Empire88 processes your Personal Data only where we have a valid legal basis to do so. The applicable legal bases are as follows:

• Performance of Contract: Processing necessary for the performance of our agreement with you — including account registration, deposit processing, game play, withdrawal handling, and customer support.
• Legal Obligation: Processing required to comply with applicable legal obligations, including Anti-Money Laundering (AML) regulations, Know Your Customer (KYC) requirements imposed by our licensing authority, and fraud prevention obligations.
• Legitimate Interests: Processing for purposes that are in Empire88's legitimate business interests and are not overridden by your rights — including platform security monitoring, fraud detection, analytics for platform improvement, and responsible gambling monitoring.
• Consent: Processing based on your freely given consent — including the sending of marketing and promotional communications via email or SMS. You may withdraw consent at any time by contacting us or using the unsubscribe mechanism in our communications.

Empire88 uses the Personal Data we collect for the following specific purposes:

Empire88 does not sell your Personal Data to third parties. We may share your data with the following categories of recipients only where necessary and under appropriate data protection safeguards:

• Payment Processors & Financial Institutions: To facilitate deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, FPX, DuitNow, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency networks. Each processor receives only the minimum data required to complete the transaction.
• KYC & Identity Verification Providers: Licensed third-party KYC/AML service providers used to verify your identity documents and conduct sanctions screening. These providers operate under contractual data processing agreements.
• Game Content Providers: Certain technical data (such as session tokens and game results) is shared with licensed international game studios to enable game delivery. No directly identifiable personal data is shared beyond what is technically required.
• Fraud Prevention & Risk Management Services: Specialised fraud detection platforms used to identify suspicious activity patterns, shared under strict confidentiality terms.
• Regulatory & Law Enforcement Authorities: Where required by our gaming licence conditions, applicable law, or a valid legal order — including reports to competent authorities for AML compliance purposes.
• IT Infrastructure & Cloud Service Providers: Hosting, data storage, and cloud infrastructure providers operating under data processor agreements that prohibit independent use of your data.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or substantially all of Empire88's assets, your data may be transferred to the acquiring entity subject to equivalent privacy protections.

Empire88 uses cookies and similar tracking technologies (including local storage, session storage, and pixel tags) to operate and improve the Platform. When you first visit empire88.cam, you will be presented with a cookie consent notice. You may manage your cookie preferences at any time through your browser settings.

Cookie Categories We Use

To opt out of non-essential cookies, you can withdraw consent at any time by contacting our support team or by adjusting your browser's cookie settings. Note that disabling strictly necessary cookies will impair your ability to use the Platform.

Empire88 retains your Personal Data only for as long as is necessary for the purposes described in this Policy, or as required by applicable law, whichever is longer. The following indicative retention periods apply:

After the applicable retention period expires, your Personal Data will be securely deleted or anonymised so that it can no longer be linked to you as an individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

Empire88 implements industry-standard technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes the following measures:

• Encryption in Transit: All data transmitted between your browser and empire88.cam is encrypted using TLS 1.2 or higher (HTTPS). Financial transactions are further protected by additional encryption layers applied at the payment gateway level.
• Encryption at Rest: Sensitive stored data, including KYC documents and financial records, is encrypted using AES-256 encryption at the storage layer.
• Password Security: Account passwords are stored exclusively as salted cryptographic hashes (bcrypt). Empire88 never stores plaintext passwords and cannot retrieve your password — only reset it through a verified process.
• Access Controls: Access to Personal Data by Empire88 staff is governed by strict role-based access controls and is limited to personnel with a documented need for access. All staff with data access undergo privacy and security training.
• Penetration Testing: Empire88 conducts regular independent security assessments, including penetration testing and vulnerability scanning, of its platform infrastructure.
• Incident Response: In the event of a personal data breach that poses a risk to your rights, Empire88 will notify affected users and relevant supervisory authorities within the timeframes required by applicable law.

Subject to applicable law and certain limited exceptions (for example, where legal obligations require us to retain data), you have the following rights in relation to your Personal Data held by Empire88:

To exercise any of the above rights, please contact our Data Privacy team at [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days of receipt. We may ask you to verify your identity before processing your request.

Empire88 operates internationally and may store or process your Personal Data on servers located outside of Malaysia. Where Personal Data is transferred to countries that do not provide a level of data protection equivalent to your home jurisdiction, Empire88 implements appropriate safeguards to protect your data, including:

• Executing Standard Contractual Clauses (SCCs) or equivalent contractual protections with data processors located in third countries.
• Conducting Transfer Impact Assessments (TIAs) where required to evaluate the risk of transfer to specific jurisdictions.
• Applying supplementary technical measures (such as end-to-end encryption) where standard contractual protections alone are deemed insufficient.

By using the Empire88 Platform, you acknowledge that your Personal Data may be processed in jurisdictions outside of Malaysia for the purposes described in this Policy. Empire88 ensures that all cross-border data transfers are conducted in accordance with our licensing obligations and applicable international data protection standards.

Empire88 is strictly an adult gaming platform. We do not knowingly collect, process, or retain Personal Data from any individual who is under the age of 21 years. This is not merely a policy preference — it is an enforceable requirement under our international gaming licence and a core component of our responsible gambling programme.

All new accounts undergo mandatory age verification as part of the KYC process before any real-money gaming activity is permitted. Age verification checks are conducted using the date of birth provided at registration alongside documentary evidence submitted during KYC. Where our systems detect that an account may have been registered by a person under 21 years of age, the account will be immediately suspended pending investigation.

Any Personal Data inadvertently collected from an underage user will be deleted promptly upon confirmation of the user's age, and any deposits made will be returned via the original payment method where feasible. If you believe that Empire88 has inadvertently collected data from a person under the age of 21, please notify us immediately at [email protected].

Empire88 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable law, or our gaming licence requirements. When material changes are made — that is, changes that significantly affect your rights or how your data is used — we will notify you via your registered email address no less than 14 days before the updated Policy takes effect.

Non-material changes (such as typographical corrections, clarifications to existing practices, or updated contact details) may be made without advance notice. The "Last updated" date at the top of this page always reflects the most recent version. We encourage you to review this Policy periodically to stay informed about how Empire88 handles your data.

Where an amendment to this Policy requires your fresh consent (for example, where we propose to use your data for a new purpose not covered by existing consent), we will seek that consent separately and explicitly before commencing the new processing activity. We will never rely on your continued use of the Platform as implicit consent to materially new data uses.

If you have any questions, concerns, or requests relating to this Privacy Policy or Empire88's handling of your Personal Data, please contact our Data Privacy team using the following channels. All privacy-related communications are handled with strict confidentiality.

• Email (Privacy): [email protected] — use the subject line "Privacy Policy Enquiry" or "Data Rights Request" for faster routing. We aim to acknowledge all privacy enquiries within 5 business days.
• Live Chat: Available 24/7 on empire88.cam. For data rights requests, please use email to ensure a written record is maintained.
• Written Correspondence: For formal data protection complaints or legal notices, written correspondence should be addressed to Empire88's registered legal entity. Contact our support team by email to obtain the current registered address.