Privacy Policy

This Privacy Policy ("Policy") is issued by taxi888 ("Platform", "we", "us", "our") and applies to all personal data collected from individuals ("User", "you", "your") who access or use the taxi888 website at https://taxi888.cam and any associated services, features, and functionality.

taxi888 is an online casino and sports betting platform serving Malaysian players and others who access the Platform internationally. We take our obligations as a data controller seriously. This Policy has been drafted in plain, accessible English to ensure that all Users — wherever they are in Malaysia, whether in Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, or elsewhere — can understand exactly how their information is handled.

By registering an account on the Platform, depositing funds, placing a wager, or otherwise using our services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with the terms of this Policy, you must discontinue use of the Platform and close your account.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated by reference.

The following terms have the meanings set out below throughout this Policy:

taxi888 collects the following categories of personal data, depending on your interaction with the Platform:

3.1 Registration & Account Data

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Email address
• Mobile phone number
• Residential address (country, city, and postcode)
• Username and encrypted password

3.2 KYC & Identity Verification Data

• Copy of government-issued photo identification (Malaysian IC / MyKad, passport, or equivalent)
• Proof of residential address (utility bill, bank statement dated within 3 months)
• Proof of payment method ownership where required for anti-money laundering (AML) compliance
• Selfie photograph for liveness verification (where required)

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records including amounts, timestamps, and methods (Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, cryptocurrency wallet addresses, etc.)
• Account balance history
• Bonus claims and promotional participation records

3.4 Gameplay & Betting Data

• Game session logs (game title, bet amount, outcome, timestamp)
• Sports betting history (event, market, stake, odds, settlement)
• Platform interaction patterns and feature usage

3.5 Technical & Device Data

• IP address and geolocation (country/region level)
• Browser type and version
• Operating system and device type
• Session duration and navigation paths
• Cookies and similar tracking technology data (see Section 10)

3.6 Communications Data

• Live chat transcripts and support ticket correspondence
• Email communications with our support team
• Responses to optional surveys or feedback forms

We collect personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to promotional communications.
• Automatically: When you navigate and interact with the Platform, our servers and analytics tools automatically record technical data including IP addresses, device identifiers, and session activity.
• From payment processors: When you initiate a deposit or withdrawal through a third-party payment gateway (such as FPX, Touch 'n Go eWallet, Boost, GrabPay, or a cryptocurrency exchange), we receive transaction confirmation data from those processors.
• From KYC verification services: Where we engage a third-party identity verification provider to validate your government-issued identification, that provider may return a verification result and associated data to us.
• From fraud prevention and AML databases: We may conduct checks against third-party risk screening databases as required by our compliance obligations.

We process your personal data for the following specific purposes:

We rely on the following legal bases to process your personal data:

• Contractual necessity: Processing your registration data, KYC documents, and financial transaction records is necessary to perform the contract between you and taxi888 (i.e., to provide the gaming and betting services you have signed up for).
• Legal obligation: We are required by our international licensing conditions and anti-money laundering regulations to collect and retain certain data, including identity verification documents and transaction records. We cannot waive these obligations.
• Legitimate interests: We process technical and gameplay data to maintain platform security, prevent fraud, improve service quality, and administer the responsible gambling programme. These interests do not override your fundamental privacy rights.
• Consent: Where processing is not covered by the above bases — particularly for marketing communications and optional analytical cookies — we will seek your explicit consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

taxi888 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We may share your personal data with the following categories of recipients, strictly as necessary to deliver our services or meet our legal obligations:

• Payment processors: We share transaction data with Malaysian and international payment service providers (including those operating Touch 'n Go eWallet, Boost, GrabPay, DuitNow/FPX rails, and cryptocurrency processing networks) in order to execute your deposit and withdrawal requests.
• Identity verification providers: Where we use a third-party KYC service, your submitted identification documents and associated data are transmitted securely to that provider for verification purposes.
• Cloud infrastructure and hosting providers: Our Platform data is stored on secure cloud servers operated by reputable international providers. These providers act as Data Processors under contractual data processing agreements.
• Fraud prevention and AML compliance services: We may check your details against third-party risk screening databases as required by our compliance obligations.
• Regulatory and licensing authorities: We may be required to disclose data to our international licensing authority or to law enforcement agencies where required by applicable law, a court order, or regulatory directive.
• Professional advisors: Our legal, accounting, and auditing advisors may access relevant data on a strictly confidential, need-to-know basis in connection with professional services rendered to taxi888.

As an internationally licensed online gaming platform, taxi888 operates infrastructure and engages service providers located in multiple jurisdictions. As a result, your personal data may be transferred to and stored in countries outside Malaysia. These countries may have different data protection standards from those applicable in Malaysia.

Where we transfer personal data internationally, we take appropriate safeguards to ensure that your data remains protected to a standard consistent with this Policy. These safeguards include:

• Contractual data protection clauses in agreements with all Data Processors;
• Limiting transfers to processors who operate in jurisdictions with recognised data protection frameworks;
• Applying technical security measures (encryption, access controls) regardless of the jurisdiction in which data is stored.

By using the Platform, you acknowledge and consent to the international transfer of your personal data under the safeguards described above.

We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and our licensing obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.

taxi888 uses cookies and similar technologies (including web beacons, pixel tags, and local storage) to operate and improve the Platform. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential to the functioning of the Platform and cannot be disabled. They include session authentication tokens, security cookies, and load-balancing cookies. No personal data is stored in these cookies beyond what is technically required to maintain your session.
• Functional Cookies: These remember your preferences (such as language settings, odds format preferences, and last-viewed page) to provide a more personalised experience. Disabling these cookies may affect certain features of the Platform.
• Analytical Cookies: These collect aggregated, anonymised data about how users interact with the Platform — pages visited, time on page, and navigation paths — to help us improve platform performance and user experience. Analytical cookies can be managed in your account settings or browser preferences.
• Marketing Cookies: Where you have given explicit consent, marketing cookies may be used to deliver relevant promotional content to you. You may withdraw this consent at any time through your account settings.

Most modern browsers allow you to manage cookie preferences through the browser's settings menu. Restricting all cookies may affect your ability to use certain features of the Platform.

You have the following rights with respect to your personal data held by taxi888. To exercise any of these rights, please contact us as described in Section 16. We will respond to verified requests within 30 calendar days at no charge.

The Platform is strictly intended for adults aged 21 years and above. taxi888 does not knowingly collect personal data from any individual under the age of 21. Our registration process includes mandatory date-of-birth declaration, and KYC verification prior to first withdrawal ensures age compliance.

If we become aware that personal data has been submitted by an individual under the age of 21 — whether through our own detection, KYC findings, or a third-party report — we will:

• Immediately suspend the relevant account;
• Refund any deposits made, net of any demonstrable gambling losses, through the original payment method where technically possible;
• Permanently delete all personal data associated with that account, except where retention is required by law.

taxi888 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction:

• Encryption in transit: All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher (256-bit SSL). Connections that do not meet this standard are refused.
• Encryption at rest: Sensitive personal data, including KYC documents and payment information, is encrypted at rest using industry-standard algorithms.
• Access controls: Access to personal data within our organisation is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and regular security training.
• Network security: Our infrastructure is protected by firewalls, intrusion detection systems, and regular vulnerability scanning. We conduct periodic penetration testing.
• Incident response: We maintain a documented data breach response procedure. In the event of a security incident that poses a risk to your rights, we will notify affected users promptly and take immediate remediation steps.

You play an important role in account security. You are responsible for maintaining the confidentiality of your login credentials and for notifying us immediately at [email protected] (plain text — not a link) if you suspect unauthorised access to your account.

The Platform may contain references to third-party services (for example, payment gateways such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, and FPX) that are necessary for the operation of our deposit and withdrawal functionality. When you initiate a transaction through one of these gateways, you are subject to that third party's own privacy policy and terms of use in respect of data processed directly by them.

taxi888 is not responsible for the privacy practices or data handling of third-party service providers beyond the contractual data processing obligations we impose on them. We recommend reviewing the privacy policy of any third-party service before providing personal information directly to it.

This Policy does not govern information collected by any service not operated by taxi888, even where that service is accessed via a link or integration on our Platform.

taxi888 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or platform functionality. Where changes are material — meaning they significantly affect how we collect or use your data — we will notify registered Users via the email address associated with their account at least seven (7) days prior to the changes taking effect.

The current version of this Policy will always be accessible on this page, with the "Last Updated" date displayed prominently at the top. Your continued use of the Platform following the effective date of any update constitutes your acceptance of the revised Policy.

If you do not accept the revised Policy, you must discontinue using the Platform and contact our support team to close your account. We will process any outstanding withdrawal requests in accordance with our standard procedures.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by taxi888, please contact our Data Protection team through the following channels:

When submitting a data subject request, please include your registered email address and a description of your request so that we can verify your identity and locate the relevant data efficiently. We will not charge a fee for handling data subject requests unless requests are manifestly unfounded or repetitive, in which case a reasonable administrative fee may apply.