Official Privacy Document

Caca88 Privacy Policy – Data Protection Your Privacy

At caca88, your privacy is more than a legal obligation — it is a genuine commitment. This document clearly explains how we collect, use, store, and protect the personal information of every member who uses our platform.

Updated: 1 January 2026 Applicable in: Malaysia PDPA Compliance

Our Protection Commitment

256-bit SSL encryption for all data
Data is not sold to third parties
Guaranteed right of access and data correction
Personal Data Protection Act (PDPA) Compliance

Why Your Privacy Is Safe

Six Core Principles Data Protection caca88

We invest in best-in-class security infrastructure because we believe every player deserves to play in a safe and trusted environment.

High-Level Encryption

All data transmitted between your device and caca88 servers is protected by 256-bit SSL encryption — the same industry standard used by leading banking institutions in Malaysia.

Secure Data Storage

Your personal and financial information is stored on servers protected by multi-layered firewalls, intrusion detection systems, and regular backups to ensure the integrity of your data at all times.

Strict Access Control

Access to members' personal data is restricted to staff who genuinely require it for operational purposes. All access is logged and automatically monitored by our internal security systems.

No Data Sales

Caca88 has never and will never sell, lease, or disclose your personal information to third parties for commercial marketing purposes without your explicit and informed consent.

Rapid Incident Response

The caca88 security team monitors our systems 24 hours a day. In the event of any security incident, we will notify affected members within 72 hours in line with industry best practices.

Malaysia PDPA Compliance

The caca88 Privacy Policy is fully designed to comply with Malaysia's Personal Data Protection Act 2010 (PDPA), ensuring your rights as a user are always protected under local law.

1

Introduction & Scope of This Policy

Welcome to the caca88 Privacy Policy page. This document outlines our commitment to protecting your personal information as a user of the caca88 online entertainment platform, accessible through our official website at caca88.win and our mobile app available for download.

Caca88 is managed and operated by a registered and licensed entity, and we regard every member's privacy as our highest priority in every business decision we make. This Privacy Policy applies to all individuals who browse, register, or use any services offered by caca88, regardless of whether you are in Malaysia or overseas when accessing our platform.

This Privacy Policy should be read together with the caca88 Terms and Conditions and our Responsible Gaming Policy. By continuing to use the platform, you confirm that you have read and fully understand the contents of this policy.

This policy takes effect from 1 January 2026 and supersedes all previous versions of the caca88 Privacy Policy. Any future amendments will be published on this page with appropriate notice.
2

Personal Information We Collect

Caca88 collects your personal information through several means — directly from you during registration, automatically while you use the platform, and in some cases, from legitimate third parties. The types of information we may collect are as follows:

Data Category Examples of Information Collection Method
Personal Identity Full name, MyKad number, date of birth, gender Account registration & KYC process
Contact Information Email address, phone number, residential address Account registration & user profile
Financial Data Bank account number, bank name, transaction history Deposit & withdrawal processing
Technical Data IP address, browser type, operating system, device Automatically during platform use
Activity Data Game history, game preferences, session duration Automatically during gameplay
Communication Data Support chat logs, emails, complaints Interactions with the support team

We only collect information that is strictly necessary for the stated purposes. caca88 does not collect sensitive information such as biometric data, medical records, or information relating to religious beliefs unless specifically required by law.

It is important to ensure all information you provide is accurate and up to date. Inaccurate information may affect our ability to process transactions or verify your identity during withdrawals.
3

How We Use Your Information

Every piece of information we collect is used for clear, legitimate purposes directly related to the operation of the caca88 platform. We do not use your data for unrelated purposes without your prior consent.

The purposes for which your personal data is used are as follows:

  • Account Management: Creating, maintaining, and securing your account; processing logins and two-factor identity verification.
  • Financial Processing: Securely verifying and processing deposits, withdrawals, and bonus transactions.
  • Identity Verification (KYC): Ensuring compliance with anti-money laundering (AML) regulations and verifying players' age eligibility.
  • Platform Improvements: Analysing usage patterns to improve user experience, optimise platform performance, and develop relevant new features.
  • Service Communications: Sending important account notifications, system updates, and customer support responses.
  • Marketing (with consent): Delivering promotional offers, exclusive bonuses, and VIP programme information to members who have consented to receive marketing communications.
  • Security & Fraud Prevention: Identifying and investigating suspicious activity to protect the platform and all its users.
  • Legal Compliance: Meeting obligations under applicable Malaysia laws, including PDPA 2010, and cooperating with legitimate authorities when required.
You may withdraw consent to receive marketing communications at any time by contacting our customer support team. Withdrawing this consent will not affect the core services we provide to you.
4

Sharing Information with Third Parties

Caca88 understands that your trust is our most valuable asset. We will not sell or rent your personal information to any third party for marketing or commercial purposes. However, there are limited situations where we need to share your data with certain parties to ensure the platform operates smoothly:

  • Payment Providers: Transaction information is shared with payment gateway providers (FPX, Touch 'n Go, GrabPay, DuitNow, and others) solely for the purpose of processing your deposits and withdrawals.
  • Game Providers: Usernames and session data are shared with third-party game providers that operate live casino games, slots, and fish shooting games on our platform.
  • Identity Verification Services: KYC documents are shared with licensed identity verification service providers for the purpose of authenticating document validity.
  • Legal Authority: caca88 will disclose information to government authorities or law enforcement bodies when required by court order or applicable law.
  • Analytics Services: Anonymised technical data is shared with analytics providers to help us understand platform usage patterns and continuously improve the experience.

All third parties we work with are required to comply with strict data security policies and may only use shared information for the specified purposes. caca88 takes responsibility for ensuring all third-party partners meet data protection standards equivalent to our own.

5

Security & Data Protection

Caca88 continuously invests in the latest security infrastructure to ensure your personal data remains protected at all times. The technical and organisational measures we employ include:

  • 256-bit SSL/TLS encryption for all data communications between client and server.
  • Multi-layered firewall and intrusion detection systems (IDS/IPS) operating 24 hours a day.
  • Regular security testing including penetration testing by independent security experts.
  • Two-factor authentication (2FA) for access to user accounts and internal management panels.
  • Role-based access control (RBAC) ensures staff can only access data required for their specific responsibilities.
  • Regularly encrypted data backups stored at separate physical locations to ensure service continuity.
  • Mandatory cybersecurity awareness training for all caca88 staff who handle user data.
While we take every reasonable step to protect your data, no data transmission system over the internet can be guaranteed 100% secure. You also play an important role in keeping your account safe by using a strong password and not sharing it with anyone.
6

Cookie Policy

Caca88 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device by your web browser when you visit our website.

The following are the types of cookies we use:

Cookie Type Purpose Status
Session Cookies Maintaining your login status and game session while browsing the platform. Mandatory
Preference Cookies Saving your language preference, display theme, and personal settings. Mandatory
Security Cookies Detecting unusual login activity and preventing unauthorised access. Mandatory
Analytics Cookies Collecting anonymised data on usage patterns for platform improvements. Options
Performance Cookies Helping us understand which pages are most popular and optimising load times. Options

You can manage or delete cookies through your web browser settings at any time. Please note that disabling essential cookies may affect core functions of the caca88 platform, including your ability to stay logged in to your account.

7

Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal information we hold. caca88 fully respects and facilitates the exercise of these rights:

Right of Access

You have the right to request a copy of the personal information we hold about you. Such requests will be processed within 21 working days.

Right to Rectification

If any information we hold is inaccurate or outdated, you have the right to request an immediate correction through your account profile page or our support team.

Right to Withdraw Consent

You may withdraw consent to certain data processing, particularly for marketing purposes, at any time without affecting the platform's core services.

Right to Restrict Processing

In certain circumstances, you have the right to object to or restrict how we process your personal data, subject to the legal obligations binding on caca88.

Right to Erasure

You may request deletion of your personal data upon account closure, subject to the minimum legal requirements for retaining financial records.

Right to Complain

If you believe your privacy rights have been violated, you have the right to file a complaint with the Personal Data Protection Commissioner of Malaysia.

To exercise any of the above rights, please contact the caca88 customer support team via live chat or our support email. All requests will be taken seriously and responded to within the specified timeframe.

8

Data Retention Period

Caca88 retains your personal information for as long as necessary to fulfil the purposes stated in this Privacy Policy, or as required by applicable law. The general principles we follow are:

  • Active Account Data: Retained for the duration your account remains active and for at least 5 years after account closure, in line with financial record-keeping requirements under Malaysian law.
  • Financial Transaction Records: Retained for a minimum of 7 years in accordance with applicable taxation and anti-money laundering (AML) legal requirements.
  • Communication Logs: Support chat logs and email communications are retained for 2 years for quality control and dispute resolution purposes.
  • Technical Data: IP address logs and technical data are retained for 12 months for security and fraud prevention purposes.
  • Marketing Data: Marketing subscription lists are retained until you withdraw your consent or request deletion.

When your personal data is no longer required and there is no legal obligation to retain it, caca88 will delete or destroy that data securely and irreversibly.

9

Links to Third-Party Platforms

The caca88 platform may contain links or integrations with third-party services such as game providers, payment gateways, and digital wallet applications. Whenever you leave the caca88 platform and access these third-party platforms, the respective third party's Privacy Policy — and not caca88's Privacy Policy — will apply.

Caca88 is not responsible for the privacy practices or content of any third-party platform or service. We encourage you to read and understand the Privacy Policy of each third-party platform you use in connection with transactions or activities on caca88.

Third-party game providers operating within the caca88 platform may have access to your username and session data while you are playing. This is a technical requirement to ensure games function correctly and does not constitute a privacy breach.
10

Changes to This Privacy Policy

Caca88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, new legal requirements, or technological developments that affect how we handle data.

When we make significant changes to this Privacy Policy, we will:

  • Updating the "Last Updated" date at the top of this page.
  • Sending notifications to your registered email address at least 7 days before material changes take effect.
  • Displaying clear notices on the caca88 platform homepage regarding important policy updates.

Continued use of the caca88 platform after the effective date of any amendment is deemed as your acceptance of the updated Privacy Policy. If you disagree with the changes made, you have the right to close your account and request deletion of your data in accordance with the procedure set out in Section 7 above.

11

Contact Us About Privacy

If you have any questions, concerns, or wish to exercise your privacy rights as outlined in this Privacy Policy, our team is ready to assist you. There are several ways to reach us:

Live Chat

Available 24 hours a day, 7 days a week. The fastest way to get immediate assistance with your privacy and account inquiries.

Support Email

Send your privacy enquiries to [email protected]. We will respond within 48 working hours.

When contacting us regarding a privacy request, please include your registered username and a clear description of your request to help us process it promptly. Your identity will be verified before any action is taken on your personal data.

All privacy-related requests will be handled with full confidentiality. Any information you provide when contacting us will only be used to process your request and will not be shared with any third party.

Join caca88 Today

Privacy Guaranteed, Unlimited Games

Now that you understand how caca88 protects your privacy, register a free account today and enjoy over 1,000 live casino games, slots, and fish shooting games in a safe and trusted environment.

SSL 256-bit Protected Data Officially Licensed & Trusted 24/7 Support
Bahasa Melayu