Comel888 Privacy Policy – Personal Data Protection for Malaysian Members

This Privacy Policy explains how comel888 ("we", "our platform") collects, processes, stores, and protects your personal data when you use our website and services at comel888.best.

This policy applies to all individuals who interact with comel888, including registered members, users who browse our website without registering, and anyone who contacts our support team. By registering a comel888 account or continuing to use our platform after the effective date of this policy, you confirm that you have read and agreed to the terms set out in this Privacy Policy.

Comel888 operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We take compliance with privacy laws seriously and conduct regular internal reviews to ensure our practices meet current legal requirements.

Comel888 collects your personal data through various means depending on how you interact with our platform. The following are the categories of data we collect:

Comel888 does not collect sensitive data such as health information, religious beliefs, political views, or biometric data, unless required by law for a specific verification purpose.

Comel888 uses the personal data collected solely for the following purposes:

• Account management: Creating and managing your comel888 account, verifying your identity at login, and processing any service requests you make.
• Transaction processing: Processing deposits via Malaysian payment methods such as Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and FPX (Maybank2u, CIMB Clicks), as well as processing withdrawals of your winnings.
• Fraud prevention: Detecting and preventing fraudulent activity, money laundering, and platform abuse. This includes monitoring for unusual transaction patterns and verifying that each account belongs to a legitimate individual.
• Legal compliance: To fulfil the reporting and compliance obligations required under applicable Malaysian law, including Anti-Money Laundering (AML) and Know Your Customer (KYC) requirements.
• Customer support: Enables the comel888 support team to assist you with any account-related enquiries, complaints, or technical issues.
• Service communications: Sending important notifications related to your account, transactions, changes to our terms, or promotions you are eligible for based on your account activity.
• Platform improvements: Analysing usage data in aggregate (not at an individual level) to understand how members use the comel888 platform and to make meaningful improvements to the user experience.

In compliance with Malaysia's Personal Data Protection Act 2010 (PDPA), comel888 only processes your personal data when there is a valid legal basis to do so. The bases we rely on are:

• Contractual fulfilment: Processing necessary to fulfil the agreement between you and comel888 – including managing your account, processing financial transactions, and providing gaming services.
• Legal obligation: Processing required to comply with applicable Malaysian laws, including anti-money laundering obligations, identity verification, and reporting to authorities where required.
• Legitimate interest: Processing for purposes that serve comel888's legitimate interests and do not override your privacy rights – including fraud prevention, platform security, and service improvement.
• Consent: For processing activities not covered by another legal basis — such as optional marketing communications — we will ask for your explicit consent. You may withdraw this consent at any time.

Comel888 does not sell member personal data to any party. Data sharing only occurs in limited situations and strictly for legitimate purposes:

• Payment service providers: Required transaction information is shared with your chosen e-wallet and banking providers (Touch 'n Go, DuitNow, GrabPay, Boost, ShopeePay, FPX/Maybank2u, CIMB Clicks) to process your deposits and withdrawals. These providers are subject to their own privacy policies and security standards.
• Technology service providers: Service providers that assist comel888 in operating its platform — such as cloud computing services, security systems, and analytics tools — are all bound by strict confidentiality agreements with comel888.
• Legal authorities: comel888 will disclose personal data to Malaysian authorities if required by a court order, regulatory directive, or other legal obligation. We will notify you of any such disclosure where permitted by law.
• Business transfer: If comel888 undergoes any corporate restructuring, merger, or acquisition, member data may be transferred as part of the business assets. Members will be notified before their data becomes subject to a different privacy policy.

Comel888 continually invests in security infrastructure to protect members' personal data from unauthorised access, disclosure, alteration, or destruction. Our technical and organisational measures include:

• Data encryption in transit: All communications between your device and comel888's servers are secured by TLS 1.3 protocol with a 256-bit SSL certificate. This ensures that data transmitted – including login credentials and transaction details – cannot be intercepted by third parties.
• Data encryption at rest: Sensitive data stored in comel888's databases — such as passwords (stored as non-reversible hashes) and financial information — is protected by database-level encryption.
• Access controls: Internal access to member data is governed by the principle of least privilege — comel888 staff only have access to the data required to perform their specific role. All access is logged and monitored.
• 24/7 security monitoring: An automated threat detection system monitors the comel888 platform around the clock, identifying and responding to any suspicious activity or unauthorised access attempts.
• Regular security testing: comel888 conducts regular penetration testing and security vulnerability assessments to identify and address potential weaknesses before they can be exploited.
• Staff training: All comel888 staff who handle member personal data undergo regular privacy compliance training and data security procedure updates.

While comel888 takes reasonable steps to protect your data, no security system can guarantee absolute 100% protection. We encourage members to take their own precautions as well — such as using a strong, unique password and never sharing your login credentials with anyone.

Comel888 retains members' personal data only for as long as necessary for the purposes described in this Privacy Policy, or as required under applicable Malaysian law.

• Active account data: For as long as your comel888 account remains active, we retain all data associated with your account.
• Financial transaction records: Records of deposits, withdrawals, and other financial transactions are retained for a minimum of 7 years after the transaction date, in accordance with Malaysia's anti-money laundering and financial reporting legal requirements.
• Game data: Gaming history and Sports Betting records are retained for 3 years from the date of activity for the purposes of dispute resolution and security analysis.
• Customer support data: Customer support communication records are retained for 2 years after case resolution for reference and service quality improvement.
• After account closure: When a comel888 account is closed, personal data will be anonymised or deleted in accordance with the retention schedule above, except where longer retention is required by law.

As a comel888 member whose data falls under Malaysia's PDPA, you have the following rights in relation to your personal data:

• Right of access: You have the right to request a copy of the personal data we hold about you. comel888 will fulfil valid access requests within 30 days of receiving them.
• Right to rectification: If you find that the personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. You can update certain information directly through your account profile.
• Right to erasure: Under certain circumstances, you may request the deletion of your personal data. However, this right is subject to our legal obligations — for example, financial records that are required by law to be retained cannot be deleted on request alone.
• Right to withdraw consent: For processing that relies on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of any processing that took place beforehand.
• Right to object: You may object to the processing of your personal data for specific purposes, subject to the legal basis on which we rely for such processing.

Comel888 uses cookies and similar tracking technologies on our website to enhance your experience and ensure the platform functions correctly. The types of cookies we use include:

• Essential cookies: Required for core platform functions such as maintaining your login session and securing transactions. These cookies cannot be disabled without affecting your ability to use the comel888 platform.
• Preference cookies: Storing your preferences such as interface language and display settings, so comel888 can deliver a more personalised experience on your next visit.
• Analytics cookies: Collecting aggregated, non-identifying information about how visitors use the comel888 website. This data helps us understand which sections are used most frequently and where we can make improvements.
• Security cookies: Used to detect and prevent fraudulent activity by identifying unusual or suspicious usage patterns.

You can manage cookie settings through your web browser preferences. However, disabling certain cookies may affect the functionality of the comel888 platform. Essential cookies cannot be disabled through our platform settings as they are required for basic operations.

Comel888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or updated platform features. When we make material changes to this policy:

• The "Updated" date at the top of this page will be revised to reflect the date of the latest amendment.
• For significant changes, comel888 will notify members via their registered email or through in-platform notifications before the changes take effect.
• Continued use of the comel888 platform after the effective date of any changes will be considered acceptance of the updated Privacy Policy.

We encourage you to review this page regularly to stay informed of the latest privacy policy that applies to your personal data at comel888.

If you have any questions, concerns, or complaints regarding how comel888 handles your personal data, or if you wish to exercise any of the rights outlined in this Privacy Policy, please reach us through the following channels:

• Email: support@comel888.best – please include "Privacy Inquiry" in your email subject line to help us respond more promptly.
• LiveChat: Available on the comel888 platform, 24 hours a day, seven days a week, including Malaysian public holidays.

Comel888 is committed to responding to all privacy-related enquiries within a reasonable timeframe. For formal requests regarding the right of access or data deletion, we will respond within 30 days of receiving a complete request.