Your privacy matters to us. This Privacy Policy explains what personal data on888 collects, how we use it, who we share it with, and how we keep it secure. Please read this document carefully — it applies to all players and visitors of the on888 platform.
on888 ("we", "us", "our", "the Platform") is committed to protecting and respecting the privacy of all individuals who interact with our platform at https://on888.cam. This Privacy Policy ("Policy") describes how on888 collects, processes, stores, shares, and safeguards personal data obtained from players, registered users, and visitors in connection with the use of our online casino and sports betting services.
on888 operates as an online casino and sports betting platform serving players primarily in Malaysia. All financial transactions on the platform are processed in Malaysian Ringgit (MYR) via Malaysian payment infrastructure including FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and direct bank transfers through institutions such as Maybank, CIMB, Public Bank, Hong Leong, and RHB. The personal and financial data collected in connection with these transactions is handled as described in this Policy.
By registering an account, making a deposit, or otherwise using any on888 service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to the terms of this Policy, you should not use the on888 platform.
This Privacy Policy should be read together with on888's Terms & Conditions. Together, these two documents govern your use of the on888 platform and our handling of your information.
For the purposes of this Privacy Policy, the following terms carry the meanings set out below:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person, including name, contact details, identification documents, financial data, and device identifiers. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction. |
| "Data Controller" | on888, which determines the purposes and means of processing Personal Data collected through the Platform. |
| "Data Processor" | A third party that processes Personal Data on behalf of on888 under a written data processing agreement. |
| "KYC Data" | Identity verification documentation including government-issued identification (e.g., Malaysian MyKad or passport), selfies, proof of address, and payment method verification materials. |
| "Cookies" | Small text files stored on your device by your browser when you visit the Platform, used to maintain session state, recognise returning users, and support analytics. |
| "Platform" | The on888 website accessible at https://on888.cam and all associated mobile-optimised interfaces and services. |
on888 collects Personal Data through several channels depending on the nature of your interaction with the Platform. The categories of data we collect are as follows:
When you create an on888 account, we collect: full legal name, date of birth, residential address, email address, Malaysian mobile phone number, and the username and password you select. This data is necessary to create and manage your account.
To comply with our obligations under applicable anti-money laundering and player protection requirements, we collect identity verification documents including a copy of your Malaysian MyKad or passport, proof of residential address (such as a utility bill or bank statement), and where required, a photograph or selfie for biometric confirmation purposes.
We collect data related to all financial transactions on the Platform, including deposit amounts, withdrawal requests, payment method details (FPX reference numbers, DuitNow transaction IDs, e-wallet account identifiers, bank account details, and card details where applicable), transaction timestamps, and account balance history.
We record all gaming activity on the Platform, including games played, bet amounts and outcomes, session duration, game preferences, sports betting selections, and bonus activation and wagering history. This data is used for platform integrity, dispute resolution, and responsible gambling monitoring.
We automatically collect technical data when you access the Platform, including your IP address, device type and model, operating system, browser type and version, screen resolution, geographic location (derived from IP address), and session identifiers.
When you contact our customer support team via live chat, email ([email protected]), or any other channel, we retain records of those communications including the content, timestamps, and the identity of the support agent who assisted you.
| Category | Examples | Purpose |
|---|---|---|
| Registration | Name, email, phone, DOB | Account creation & management |
| KYC / Identity | MyKad, passport, proof of address | Age verification, AML compliance |
| Financial | Bank account, FPX ref, DuitNow ID | Deposits, withdrawals, fraud detection |
| Gaming Activity | Bets, game history, session data | Platform integrity, responsible gambling |
| Technical | IP address, device, browser | Security, fraud prevention, analytics |
| Communications | Live chat logs, email records | Support quality, dispute resolution |
on888 processes Personal Data for the following purposes:
on888 processes your Personal Data under one or more of the following legal bases, depending on the specific processing activity:
Where we rely on consent as our legal basis, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. To withdraw marketing consent, contact our support team or use the unsubscribe option in any promotional communication.
on888 does not sell, rent, or trade your Personal Data to third parties for their own marketing purposes. We share Personal Data only in the following limited circumstances:
To process your deposits and withdrawals, we share necessary transaction data with payment service providers including FPX (Financial Process Exchange), DuitNow / PayNet, and e-wallet operators such as Touch 'n Go, Boost, and GrabPay. We also share data with your bank (Maybank, CIMB, Public Bank, Hong Leong, RHB, or whichever institution you use) to facilitate interbank transfers.
We may engage third-party KYC and identity verification service providers to assist with document verification and fraud screening. These providers process KYC Data strictly on our instructions under data processing agreements that prohibit independent use of your data.
Our platform integrates games from licensed international game studios. To facilitate gameplay and resolve disputes, limited gaming session data (including session identifiers and bet amounts) may be shared with the relevant game studio's systems. No personally identifiable registration data is shared for this purpose.
We may disclose Personal Data to regulatory bodies, law enforcement agencies, or courts where we are legally required to do so, or where disclosure is necessary to prevent fraud, money laundering, or other serious harm.
In the event of a merger, acquisition, or sale of all or part of on888's business, Personal Data held by on888 may be transferred to the successor entity as part of the transaction, subject to equivalent privacy protections being maintained.
on888 retains Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following indicative retention periods apply:
Upon expiry of the applicable retention period, Personal Data will be securely deleted or irreversibly anonymised.
on888 implements appropriate technical and organisational measures to protect your Personal Data against unauthorised access, loss, destruction, or alteration. Our security measures include, but are not limited to:
While on888 takes all reasonable steps to protect your data, no internet transmission is entirely secure. You are responsible for maintaining the confidentiality of your account credentials. Please notify us immediately via live chat if you suspect your account has been compromised.
on888 uses cookies and similar tracking technologies to operate improve the Platform. The categories of cookies we use are as follows:
| Category | Type | Purpose |
|---|---|---|
| Session Cookies | Maintain your login session and account state while you navigate the Platform. These cannot be disabled without breaking core functionality. | |
| Security Cookies | Support fraud detection and CSRF protection. Required for secure operation of the Platform. | |
| Analytics Cookies | Collect anonymised data about how users navigate the Platform to help us improve performance and user experience. | |
| Preference Cookies | Remember your Platform preferences such as language selection and display settings across sessions. |
You may control cookie settings through your browser. Disabling essential cookies will prevent the Platform from functioning correctly. Analytics and preference cookies can be disabled without affecting core functionality.
As an individual whose Personal Data is processed by on888, you hold the following rights in relation to your data. To exercise any of these rights, please contact us using the details in Section 14.
on888 will respond to all valid data subject requests within 30 calendar days of receipt. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. We may ask you to verify your identity before processing a request to protect against unauthorised access to your data.
Please note that certain rights — particularly the right to erasure — may be limited where we have a legal obligation to retain data (for example, AML and KYC record-keeping requirements). We will clearly explain any such limitations when responding to your request.
on888 is strictly prohibited from collecting Personal Data from, or providing any services to, individuals under 21 years of age. Our platform enforces age verification at the point of registration and through the KYC process for all accounts.
If on888 becomes aware or reasonably suspects that a registered player is under 21 years of age, we will immediately suspend the account, conduct a full review of all transactions and gaming activity associated with the account, and take such further action as may be appropriate including voiding all bets and refunding deposits (net of any bonuses claimed) to the payment source.
We do not knowingly collect or retain Personal Data of individuals under 21. If you believe that a minor has registered on our Platform or that we are unknowingly holding data relating to a minor, please contact us immediately at [email protected] so that we can take prompt remedial action.
Strict 21+ Policy. on888 enforces a minimum age of 21 years for all players. This applies to residents of Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, and all other locations in Malaysia and internationally. Age verification is mandatory prior to any withdrawal being processed.
on888 may transfer Personal Data to service providers or technical infrastructure located outside Malaysia. Where such transfers occur, on888 takes appropriate steps to ensure that your Personal Data receives an equivalent level of protection to that which it receives within Malaysia.
Protective measures for international transfers may include: contractual clauses requiring the recipient to maintain equivalent data protection standards; confirmation that the recipient country has adequate data protection laws in place; or other legally recognised transfer mechanisms appropriate to the circumstances.
The primary categories of international recipients include cloud infrastructure providers, licensed game studios, and KYC / identity verification technology providers. All such recipients are bound by data processing agreements that restrict their use of your Personal Data to the specific purposes for which it was transferred.
on888 reserves the right to amend this Privacy Policy at any time. Where changes are material — for example, where we begin processing a new category of Personal Data, introduce new sharing arrangements, or change our retention periods — we will provide notice by updating the "Last Updated" date at the top of this Policy and, where appropriate, by displaying a prominent notice on the Platform or contacting you directly.
Your continued use of the on888 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the revised Policy, you should cease using the Platform and may request account closure as described in on888's Terms & Conditions.
We encourage you to review this Privacy Policy periodically to remain informed about how we protect your Personal Data. The current version will always be accessible at https://on888.cam/privacy-policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by on888, please contact us through the following channels. All privacy-related communications are handled by our support and compliance team.
When submitting a data subject rights request, please include: your full name as registered on your account, your registered email address, and a clear description of the right you wish to exercise. We may ask for additional identity verification before processing requests to protect your data from unauthorised access.
Six core commitments that underpin how on888 handles the personal data of every Malaysian player on the platform.
All data transmitted between your device and on888's servers is protected by bank-grade SSL/TLS encryption. The same standard used by Maybank2u and CIMB Clicks for online banking.
We verify the identity and age of every player before processing withdrawals. Our 21+ policy is non-negotiable. No exceptions are made regardless of account standing or deposit history.
on888 does not sell, rent, or trade your personal data to third parties for marketing. Your information is used solely to operate your account and comply with legal obligations.
Access, rectify, erase, or export your data — on888 processes valid data subject requests within 30 days and maintains transparent records of what we hold and why.
We keep data only as long as necessary. Financial records are held for a minimum of five years for AML compliance. When data is no longer needed, it is securely deleted or anonymised.
Privacy enquiries and data subject requests are handled in English, Bahasa Melayu, and Chinese — because Malaysian players deserve to understand their rights in their own language.
Your personal data is protected under this Privacy Policy. Join over 850,000 Malaysian players on888, deposit via FPX or Touch 'n Go eWallet, and enjoy a secure gaming experience in MYR. For players aged 21 and above only.
21+ only. Gambling involves risk. Please read our Responsible Gambling page before playing.