Privacy Policy

This Privacy Policy ("Policy") is issued by Andalas188 ("we", "us", "our"), the operator of the online sportsbook and live casino platform accessible at https://andalas188.cam (the "Platform"). It describes how Andalas188 collects, processes, stores, and protects the personal data of users ("you", "the Member") who access or use our Platform.

Andalas188 is committed to protecting the privacy and personal data of all users, including players located across Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, and Shah Alam. This Policy has been drafted in accordance with applicable data protection principles and the requirements of international gaming standards.

By registering an Account on the Platform, depositing funds, or otherwise using any part of the Andalas188 service, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not consent, you must not use the Platform.

The following definitions apply throughout this Policy:

• "Personal Data" means any information that relates to an identified or identifiable natural person, including name, identification number, contact information, financial data, and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, or deletion.
• "Data Controller" means Andalas188, which determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third party engaged by Andalas188 to process Personal Data on its behalf, under contractual data processing obligations.
• "KYC" means Know Your Customer — the identity verification procedure used to authenticate Member identities and fulfil anti-money laundering obligations.
• "Cookies" means small text files placed on your device by the Platform to facilitate functionality, session management, and analytics.
• "AML" means Anti-Money Laundering — the framework of laws, regulations, and procedures designed to prevent the generation of income through illegal activities.

Andalas188 collects the following categories of personal data from Members and prospective Members:

Andalas188 collects personal data through the following channels:

Andalas188 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and Andalas188 — including account management, payment processing, and delivery of betting and casino services.
• Legal Obligation: Processing required to comply with applicable laws, including KYC, AML regulations, record-keeping requirements, and regulatory reporting obligations.
• Legitimate Interests: Processing necessary for our legitimate business interests, including fraud detection, security monitoring, platform optimisation, and responsible gambling compliance — provided such interests are not overridden by your fundamental rights.
• Consent: Where required by applicable law, we will seek your explicit consent before processing your personal data for specific purposes such as direct marketing. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

Andalas188 uses collected personal data strictly for the following purposes:

• Creating, managing, verifying, and maintaining your Member Account.
• Processing deposits and withdrawals in MYR via approved Malaysian payment methods including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong.
• Verifying your identity and age (21+) in compliance with KYC and responsible gambling obligations.
• Detecting, investigating, and preventing fraud, money laundering, collusion, and other prohibited activities.
• Providing 24/7 customer support and resolving disputes or complaints.
• Delivering promotional offers and VIP tier benefits to eligible Members, where you have not opted out of such communications.
• Improving Platform performance, user experience, and product development through aggregate analytics.
• Complying with applicable legal, regulatory, and licensing obligations.
• Monitoring compliance with our Responsible Gambling Policy, including identification of at-risk gambling patterns.

Andalas188 does not sell, rent, or commercially trade your personal data. We share personal data only in the following strictly controlled circumstances:

As an internationally operating platform, some of your personal data may be processed on servers or by service providers located outside of Malaysia. Where personal data is transferred internationally, Andalas188 ensures that appropriate safeguards are in place, including:

• Contractual clauses requiring receiving parties to apply equivalent data protection standards.
• Transfer only to jurisdictions assessed as providing an adequate level of data protection for the specific processing purpose.
• Use of data processing agreements with all international sub-processors that bind them to Andalas188's data protection requirements.

Andalas188 retains personal data only for as long as is necessary for the purposes outlined in this Policy or as required by applicable law. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be attributed to any identifiable individual.

Andalas188 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for core Platform functionality, including session management, secure login, and payment processing flows. These cannot be disabled without affecting Platform operation.
• Performance & Analytics Cookies: Used to collect aggregate information about how Members interact with the Platform, helping us identify areas for improvement. Data collected is anonymised where possible.
• Functional Cookies: Store your preferences such as language settings, last-visited sections, and responsible gambling tool configurations to personalise your experience.
• Security Cookies: Used to detect and prevent fraudulent activity, bot access, and account takeover attempts.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may impair Platform functionality. Andalas188 does not use third-party advertising cookies or cross-site tracking technologies for commercial marketing purposes.

Andalas188 implements a multi-layered security framework to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and Andalas188 servers.
• Encrypted storage of sensitive data at rest, including financial records and KYC documents.
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis.
• Continuous intrusion detection, anomaly monitoring, and security incident response procedures.
• Regular third-party security audits and penetration testing of Platform infrastructure.
• Two-factor authentication (2FA) available to all Members and mandatory for privileged internal access.

In the event of a data breach that poses a risk to your rights and freedoms, Andalas188 will notify affected Members and relevant authorities in accordance with applicable data breach notification obligations.

As a data subject, you hold the following rights in relation to your personal data processed by Andalas188. To exercise any of these rights, please contact our support team using the details in Section 15.

• Right of Access: You may request a copy of all personal data we hold about you, along with information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held about you.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction of Processing: You may request that we limit the processing of your personal data under certain circumstances while a dispute or investigation is ongoing.
• Right to Data Portability: You may request your personal data in a structured, commonly used, machine-readable format where processing is based on consent or contract.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

We will respond to all valid data rights requests within 14 calendar days of receipt. In complex cases, we may extend this period by a further 14 days and will notify you of the extension and reason.

The Andalas188 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21.

Parents and guardians who believe their child has accessed the Platform and provided personal data are encouraged to contact our support team immediately so that the data can be located and deleted promptly.

Andalas188 reserves the right to update, modify, or replace this Privacy Policy at any time. The date of the most recent revision is displayed prominently at the top of this document.

Where changes are material — for example, changes to the categories of data collected, the purposes for which data is used, or your rights — we will notify active Members via email or on-platform notification prior to the changes taking effect.

Your continued use of the Platform following notification of material changes constitutes your acceptance of the revised Policy. If you do not agree to the revised Policy, you must discontinue your use of the Platform and may request Account closure by contacting our support team.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the Andalas188 data support team using the details below. Our team is available 24 hours a day, 7 days a week.

For information about your betting account and gameplay terms, please refer to our Terms & Conditions. For information about responsible gambling tools and support resources, please visit our Responsible Gambling page.