1. Introduction
This Privacy Policy applies to all users of superman88 — our website at superman88.lat, our mobile platform, and any related services we offer. By registering an account or using our site, you acknowledge that you have read and understood this Privacy Policy.
superman88 is committed to protecting your personal data and respecting your privacy rights. This document is written in plain English to make it as easy as possible for Malaysian players to understand exactly how their information is handled. Where we reference "we", "us", or "superman88", we mean the brand and its operating entity. Where we reference "you" or "user", we mean any registered member, prospective member, or visitor to our platform.
Important: This Privacy Policy should be read alongside our
Terms & Conditions. Both documents together govern your relationship with superman88.
2. Data We Collect
superman88 collects the following categories of personal data:
- Registration Data: Full name, date of birth, email address, phone number, and country/state of residence (e.g. Kuala Lumpur, Selangor, Penang, Johor Bahru).
- Identity Verification Data: Government-issued ID documents (MyKad, passport) submitted during KYC (Know Your Customer) verification, as required under our licensing obligations and anti-money laundering procedures.
- Financial Data: Bank account details, e-wallet identifiers (such as Touch 'n Go eWallet or Boost), and transaction records including deposits and withdrawals in Malaysian Ringgit (MYR) or other accepted currencies.
- Gameplay Data: Game session history, bet amounts, win/loss records, and wagering behaviour — used for account management, fraud detection, and responsible gaming monitoring.
- Technical Data: IP address, browser type, device type, operating system, and session timestamps — collected automatically when you access our platform.
- Communications Data: Records of your correspondence with our support team via Live Chat or email, including any complaints or requests lodged.
- Preference Data: Language preferences, notification settings, and any self-exclusion or deposit limit configurations you apply to your account.
We do not collect sensitive categories of personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless directly required for responsible gaming compliance purposes, and only with your explicit consent.
3. How We Use Your Data
The personal data collected by superman88 is used for the following purposes:
- To create, maintain, and administer your player account.
- To process deposits, withdrawals, and other financial transactions through local Malaysian payment channels (Maybank, CIMB Bank, Public Bank, Touch 'n Go eWallet, Boost, Bank Transfer, and Cryptocurrency).
- To verify your identity and age in compliance with our licensing conditions. All users must be 21 years of age or older to register and play at superman88.
- To comply with Anti-Money Laundering (AML) and Counter-Terrorism Financing (CTF) obligations.
- To detect, investigate, and prevent fraudulent activity, cheating, or abuse of our services.
- To provide customer support and respond to your queries, complaints, and feedback.
- To send you transactional communications such as deposit confirmations, withdrawal updates, and security alerts.
- To send you promotional communications about offers, bonuses, and new games — but only where you have given your consent to receive marketing materials, and only in compliance with applicable laws.
- To monitor gameplay patterns for responsible gaming purposes, including identifying players who may be exhibiting signs of problem gambling behaviour.
- To improve our platform, products, and services based on anonymised and aggregated usage analytics.
superman88 does not use your personal data for automated decision-making or profiling in ways that would produce significant legal or similarly significant effects on you without your knowledge and consent.
4. Legal Basis for Processing
We process your personal data on the following legal grounds:
- Contractual necessity: Processing is required to fulfil our contractual obligations to you as a registered player, including account management and payment processing.
- Legal obligation: We are required to process certain data to comply with anti-money laundering laws, financial reporting obligations, and licensing requirements.
- Legitimate interests: We process technical and gameplay data to ensure platform security, prevent fraud, and improve the overall quality of our services — provided such processing does not override your fundamental rights.
- Consent: For marketing communications and certain cookies, we rely on your explicit, freely given consent, which you may withdraw at any time.
5. Sharing Your Data
superman88 will never sell, rent, or trade your personal data to third-party marketers or data brokers. We may share your data with the following categories of recipients, strictly on a need-to-know basis:
- Payment Processors: Licensed payment service providers who facilitate your deposits and withdrawals, including local Malaysian banking partners and e-wallet operators. These parties are contractually obligated to handle your data securely.
- Identity Verification Providers: Third-party KYC service providers who assist us in verifying your identity documents and age as part of our compliance obligations.
- IT Infrastructure Providers: Cloud hosting and server providers who store platform data on our behalf, operating under strict data processing agreements.
- Regulatory and Law Enforcement Authorities: Where we are legally compelled to disclose data by a court order, regulatory directive, or law enforcement request, we will comply with applicable legal requirements.
- Fraud Prevention Services: Specialist third-party providers who help us detect and prevent fraudulent activity across our platform.
- Professional Advisors: Lawyers, auditors, and compliance consultants, bound by professional confidentiality obligations, where necessary for legal or business purposes.
Any third party receiving your data is required to process it only for the specified purpose and in accordance with applicable data protection standards. superman88 remains responsible for ensuring appropriate safeguards are in place when your data is shared with external parties.
6. Data Retention
superman88 retains your personal data for as long as your account remains active and for a reasonable period thereafter, to satisfy our legal, regulatory, and business obligations. Specifically:
- Account and transaction records are retained for a minimum of five (5) years following account closure, in line with standard anti-money laundering record-keeping requirements.
- KYC and identity verification documents are retained for the duration of your account plus the applicable statutory retention period under licensing conditions.
- Support communications are retained for up to three (3) years from the date of correspondence.
- Marketing consent records are retained until you withdraw your consent, and for a reasonable period thereafter as evidence of compliance.
- Technical and analytics data (in anonymised or aggregated form) may be retained indefinitely for platform improvement purposes.
Once data is no longer required, superman88 will securely delete or anonymise it in accordance with our internal data retention procedures.
7. Security Measures
superman88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include:
- SSL/TLS encryption across all pages and API endpoints to protect data in transit.
- Encrypted storage of sensitive personal and financial data at rest.
- Role-based access controls ensuring only authorised personnel can access player data, on a strict need-to-know basis.
- Regular security audits, vulnerability assessments, and penetration testing of our platform infrastructure.
- Two-factor authentication (2FA) options available for all registered players to secure their accounts.
- Automated fraud detection systems that monitor account activity for anomalies in real time.
Your responsibility: While superman88 takes every reasonable precaution to protect your data, you are also responsible for keeping your account credentials — username, password, and any 2FA codes — confidential. Never share your login details with anyone. If you suspect unauthorised access to your account, contact our support team immediately via Live Chat.
In the unlikely event of a data breach that affects your rights and freedoms, superman88 will notify relevant authorities and affected users in accordance with applicable legal timelines.
8. Cookies & Tracking Technologies
superman88 uses cookies and similar tracking technologies to deliver a smooth, personalised experience on our platform. A cookie is a small text file placed on your device when you visit our site. We use the following types of cookies:
- Essential Cookies: Strictly necessary for the platform to function — these enable your session to remain active, keep you logged in, and ensure secure transactions. These cookies cannot be disabled without affecting core functionality.
- Preference Cookies: Remember your settings, such as language preferences and game display options, so you do not have to reset them on each visit.
- Analytics Cookies: Collect anonymised data about how users interact with our platform — pages visited, time spent, navigation paths — to help us improve the site experience. No personally identifiable information is included in analytics reports.
- Marketing Cookies: Used only where you have consented, to track the effectiveness of promotional campaigns and personalise offers shown to you.
You can manage or disable cookies through your browser's settings at any time. Please note that disabling essential cookies may impact your ability to use certain features of the superman88 platform. For more information on managing cookies, refer to your browser's help documentation.
We do not use third-party advertising networks that place tracking pixels for external advertising purposes on our platform.
9. Your Rights
As a user of superman88, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us using the details in the Contact section below:
- Right of Access: You may request a copy of all personal data superman88 holds about you, free of charge, within a reasonable timeframe.
- Right to Rectification: If any of your personal data is inaccurate or incomplete, you have the right to request that we correct or update it promptly.
- Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
- Right to Restriction: You may ask us to restrict the processing of your data in certain circumstances — for example, while a complaint is being investigated.
- Right to Data Portability: Where processing is based on your consent or on a contract, you may request that we provide your data in a structured, machine-readable format.
- Right to Object: You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will stop processing your data for marketing if you withdraw consent.
- Right to Withdraw Consent: Where we rely on your consent to process data, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.
We will respond to all verified data rights requests within thirty (30) days. In complex cases, this period may be extended by a further two months, and we will inform you of any such extension.
10. Minors
superman88 is strictly an adults-only platform. You must be 21 years of age or older to register an account and participate in any real-money gaming or betting activity on our site. This age restriction applies to all users accessing superman88 from Malaysia and all other jurisdictions.
We do not knowingly collect or process personal data from individuals under the age of 21. During the registration process, all users are required to confirm their date of birth, and KYC identity verification is mandatory before any withdrawal or significant deposit activity is permitted.
If superman88 becomes aware that personal data has been collected from an individual under the age of 21, we will immediately suspend the relevant account, delete the associated data, and reverse any transactions where technically possible. If you believe a minor has registered on our platform, please notify our support team immediately via Live Chat or email.
We encourage parents and guardians in Malaysia to make use of parental control tools and internet filtering software to prevent minors from accessing online gambling platforms. For further guidance, please visit our Responsible Gaming page.
11. Changes to This Privacy Policy
superman88 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered players via email or through a prominent notice on our platform, and the "Last Updated" date at the top of this page will be revised accordingly.
Your continued use of the superman88 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how we are protecting your data.
If you disagree with any changes to this Privacy Policy, you should discontinue your use of our platform and may request account closure and data deletion by contacting our support team.