Fun88 Security Policy on SSL Encryption, Two-Factor Authentication and Cookie Management
Fun88's security policy is built on 128β256-bit TLS/SSL encryption combined with IOVATION security infrastructure, ensuring personal data and financial transactions are strictly protected. The platform does not sell, lease or share member information with any third party without explicit consent. Players have the right to access, edit or request deletion of personal data at any time.
Creating an account and providing financial information to an online platform are two completely different things: one requires only an email and password, the other demands trust in the entire security system behind it. Understanding the security policy before transacting is the most effective way players can protect themselves.
What data does Fun88 collect from you?
Before discussing protection mechanisms, you need to know exactly what information the platform stores. According to current policy, personal data collected includes: full name, date of birth, email address, phone number, residential address and financial information related to the trading account.
These are mandatory data points for verifying member identity and processing transactions. The platform commits to not collecting information beyond what is necessary β players also have the right to decline providing non-mandatory fields without affecting access to basic services. This is clearly stated in the accompanying Privacy policy.
How does the encryption infrastructure work?
This is the core protection layer that players rarely see but directly impacts every action. Fun88 deploys 128β256-bit TLS/SSL connection encryption combined with IOVATION network security infrastructure β all data exchanged between user devices and servers is encrypted before transmission and cannot be read if intercepted in transit.
Storage servers are located on international infrastructure, protected by multi-layer firewall systems operating continuously. Each login session creates its own encrypted channel β meaning even if two users connect through the same network, their data remains completely separate. This is the standard applied across international financial platforms, not just online betting.
How are cookies handled?
Cookies store login session information for a specified period and automatically delete completely when the player logs out. This means: if you log out properly, the work session leaves no trace on your device β very different from simply closing the browser tab without logging out. This is why you should click the logout button instead of just closing the window, especially when using a device that isn't yours.
How does two-factor authentication protect your account?
A strong password can still be exposed through phishing or data breaches from other services. Multi-factor authentication (MFA) is the second blocking layer when that happens.
Each time you log in, the system sends an authentication code to your registered phone number or email. This code is valid for a short time and can only be used once β even if a bad actor has your password, they cannot access your account without the OTP code. This mechanism operates independently from your password, creating two separate verification layers.
Important: the OTP code is personal information and must never be shared with anyone β not even someone claiming to be support staff. Legitimate staff never request your authentication code.
24/7 transaction monitoring and fraud detection
All financial transactions are processed through reputable payment gateways and subject to continuous monitoring. A team of cybersecurity experts monitors the system 24/7, automatically detecting unusual signs such as: logins from unfamiliar locations, unusually valued transactions or multiple consecutive failed password attempts.
When suspicious activity is detected, the system activates a handling process immediately β it may temporarily lock the account for protection or request additional verification before allowing transactions to continue. This is a proactive measure, not passive waiting for players to report.
Commitment not to share data with third parties
The security policy clearly states: member personal information is not sold, rented or shared with third parties without explicit consent. The only exception is when there is a legal request from competent authorities under applicable law β and when there are changes in how data is managed, the platform clearly notifies users before implementation.
Fun88 operates under licenses issued by PAGCOR (Philippines) and Isle of Man GSC β both regulatory bodies have strict requirements for protecting user data, creating an additional layer of legal obligation beyond internal policy.
Player rights regarding personal data
Not everyone knows they have active rights over the data they've provided. According to current policy, players have three specific rights:
- Access: view all personal information the platform is storing.
- Edit: update any incorrect or outdated information at any time.
- Request deletion: request removal of personal data β especially relevant when no longer using the account.
Exercising these rights goes through official support channels. The support team receives and processes security requests, copyright disputes or unauthorized copying within the same day β meaning you don't have to wait many days for an initial response.
Security incident and complaint handling procedures
This is the part players need to understand most but often overlook β until they actually face an issue.
When should you report an incident?
Some signs suggest your account may have been compromised: receiving OTP codes without logging in, unexpected balance changes, or noticing unusual transaction history. In these cases, the first step is to change your password immediately and contact support β don't wait to "see if anything else happens".
Complaint handling procedure
When submitting a security complaint, the support team receives and categorizes it the same day. Players need to provide: account information (not including password), specific description of the issue and when it was discovered. The system will cross-reference activity logs to determine the scope of impact before proposing remedial measures.
Cases involving unauthorized content copying or copyright disputes are also handled under the same procedure β submit requests through official channels, not through social media or intermediaries. See the Terms of use to understand the scope of each party's responsibility in different situations.
Players protecting their own accounts: key points to note
The security layer from the platform only works at its best when players also do their part correctly. Below is a comparison table of common correct and incorrect security behaviors:
| Behavior | Correct | Wrong β avoid |
|---|---|---|
| Password | Combine uppercase, lowercase, numbers and special characters | Use birthdate, familiar names or simple number sequences |
| Sharing information | Never share password and OTP code with anyone | Send login details via chat/phone to "support" |
| Login device | Use personal device, stable network with encryption | Log in from public computers or unencrypted wifi |
| Logout | Click logout button after each session | Only close tab or shut down browser |
Reality shows that most account issues stem from the user side β not system vulnerabilities. Passwords exposed through phishing, sharing login details with family members "to play on your behalf", or logging in from unencrypted coffee shop wifi are all real risks that can be completely prevented.
If you're in the process of setting up an account for the first time, the Account creation guide has specific steps to enable two-factor verification from the start β don't leave it for later. For those who already have an account and want to review all rights and limitations, the Disclaimer page clarifies the platform's scope of responsibility in unavoidable technical situations.