Privacy Policy 8mbet – Personal Data Protection for Malaysia Online Casino Players

This Privacy Policy is published by 8mbet ("we", "platform", "company") and applies to all individuals who register for, use, or access our online casino services. We understand that your personal data is a trust you place in us — and we do not take that responsibility lightly.

As an online casino platform serving players from across Malaysia, 8mbet collect, process, and store certain personal data to enable us to deliver services that are high-quality, secure, and user-friendly. This Privacy Policy clearly explains what data we collect, why we need it, how it is used, who it may be shared with (if anyone), and what your rights are in relation to that data.

We are committed to complying with all applicable data protection laws and regulations, including Malaysia's Personal Data Protection Act 2010 (PDPA 2010). Our privacy practices are reviewed regularly to ensure we remain aligned with evolving legal requirements and industry best practices.

This document takes effect from 1 January 2026 and supersedes all previous versions of the 8mbet Privacy Policy. You will be notified of any material changes to this policy via email or a notice displayed on the 8mbet platform.

8mbet collects various types of personal data depending on your relationship with our platform. The following are the main categories of data we collect:

2.1 Data You Provide Directly

• Identity Information: Full name, date of birth, Malaysian identity card number (MyKad) or passport number
• Contact Information: Malaysian mobile number, email address, residential address
• Account Eligibility: Username and password (stored in encrypted form, never in plain text)
• Financial Information: Details of the payment methods you use – whether Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or an FPX account (Maybank2u, CIMB Clicks) – including the associated account holder name and account number
• Verification Documents: Copy of identity document for the KYC (Know Your Customer) process, bank statement or proof of address if requested

2.2 Automatically Collected Data

• Technical Data: IP address, browser type, device operating system, screen resolution, device language
• Usage Data: Pages visited, time spent, games played, bet amounts, wins and losses
• Transaction Data: Deposit history, withdrawals, and all financial activity on the 8mbet platform
• Session Data: Login information, activity timestamps, and session duration
• Location Data: General geographic location (based on IP address) for eligibility verification and security purposes

8mbet uses the personal data collected for the following legitimate and necessary purposes in operating our platform:

3.1 Account Management & Services

• Creating and managing your 8mbet account
• Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX
• Processing withdrawal of winnings to your Malaysian payment account
• Providing effective customer support in both Bahasa Melayu and English
• Sending important notices related to your account, transactions, and security

3.2 Security & Legal Compliance

• Verifying your identity and age (confirmation that you are 18 years of age or older)
• Conducting KYC (Know Your Customer) and AML (Anti-Money Laundering) processes as required by law
• Detecting and preventing fraud, hacking and unlawful activity on the 8mbet platform
• Complying with directives from Malaysian legal authorities when required to do so
• Maintaining records for audit and reporting purposes as required by the relevant authorities

3.3 Platform Improvement & User Experience

• Analysing platform usage patterns to improve 8mbet's interface and performance
• Personalising game recommendations based on your preferences (slots, Live Casino, crash games)
• Conducting research and statistical analysis in a form that does not identify any individual
• Testing new features and ensuring the 8mbet platform consistently meets the highest quality standards

3.4 Marketing & Communications (With Your Consent)

• Sending promotions, bonus offers and information about new games at 8mbet – only if you have agreed to receive them
• Keeping you informed about 8mbet's special events, tournaments, and VIP programmes
• Sending invitations to join our loyalty programme and members' rewards

You may withdraw your marketing consent at any time by using the "unsubscribe" link in our emails, or by contacting the 8mbet support team. Withdrawing marketing consent does not affect the delivery of important operational notices.

8mbet does not sell, rent or transfer your personal data to third parties for marketing purposes. However, in operating the platform, we may need to share certain data with the following parties under limited and controlled circumstances:

4.1 Approved Service Providers

8mbet works with trusted third-party service providers to help operate our platform. These include Malaysian payment service providers (for processing transactions via Touch 'n Go, GrabPay, DuitNow and FPX), gaming software providers, independent security auditing firms, and licensed cloud service providers. All third parties are required to uphold the same strict privacy standards as we do and are prohibited from using your data for their own purposes.

4.2 Legal Requirements

8mbet may disclose your personal data to the relevant authorities where required by Malaysian law, court order, or valid regulatory obligation. We will always endeavour to notify you of any such disclosure unless prohibited from doing so by law.

4.3 Security Safeguards

Where 8mbet reasonably believes that disclosing certain information is necessary to protect the rights, property or safety of the platform, its members or the public, we may share the relevant information with the appropriate parties — for example, with insurance companies or law enforcement agencies in the course of investigating fraud.

8mbet uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

• Essential Cookies: Required for core platform functions such as login authentication, session security and language preferences. These cookies cannot be disabled.
• Performance Cookies: We collect information on how you use 8mbet — pages visited, time spent, and games played. This data helps us improve the platform.
• Functional Cookies: We store your preferences — such as favourite games, display settings and language — to deliver a more personalised experience.
• Analytics Cookies: We use analytics tools to understand usage trends in aggregate. This data does not identify any individual.

You can control and manage cookies through your browser settings. However, disabling certain cookies may affect the full functionality of the 8mbet platform. For guidance on managing cookies in your preferred browser, please refer to your browser's own documentation.

8mbet invests significantly in security infrastructure to ensure your personal and financial data is always protected. The security measures we have in place include:

• 256-bit SSL Encryption: All communications between your device and 8mbet's servers are encrypted using TLS 1.3 — the highest industry standard currently available.
• Stored Data Encryption: Sensitive data stored in our databases — including financial information and KYC documents — is encrypted using robust encryption algorithms.
• Two-Factor Authentication (2FA): 8mbet supports and encourages the use of 2FA on all member accounts for an added layer of security.
• Internal Access Controls: Only 8mbet staff with a legitimate operational need who have undergone rigorous background checks are permitted to access member personal data.
• 24/7 Threat Monitoring: Our automated security monitoring system operates around the clock to detect and respond to any threats or unauthorised access attempts immediately.
• Regular Penetration Testing: 8mbet conducts regular penetration testing by independent security experts to identify and address vulnerabilities before they can be exploited.

While we take comprehensive security measures, no system can guarantee 100% security over the internet. We encourage you to also take personal security precautions, such as using a strong and unique password for your 8mbet account, never sharing your login credentials with anyone, and enabling two-factor authentication.

8mbet retains your personal data for as long as necessary to fulfil the original purpose of collection and to comply with applicable legal obligations. The following is a general guide to our data retention practices:

• Active Account Data: Retained for the duration your account remains active with 8mbet
• Transaction & Financial Data: Retained for a minimum of 7 years after the last transaction to comply with Malaysia's financial and tax regulations
• KYC Records: Retained for a minimum of 5 years following account closure, in compliance with anti-money laundering legal requirements
• Security Logs: Retained for 2 years for security investigation purposes if required
• Marketing Data: Deleted within 30 days of you withdrawing your marketing consent

Once the retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to you personally. Our deletion process complies with industry standards to ensure that deleted data cannot be recovered.

As an 8mbet member, you have certain rights regarding the personal data we hold about you. We respect and facilitate the exercise of these rights:

To exercise any of the rights above, please contact the 8mbet privacy team by email at [email protected] or via live chat on the platform. We will process your request within 14 business days and may require additional identity verification before processing certain requests in order to protect the security of your account.

The 8mbet platform is intended solely for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18.

Should we discover that personal data belonging to an individual under the age of 18 has been collected inadvertently, we will take immediate steps to delete that data and close the associated account. If you believe we may hold data belonging to a minor, please contact us immediately at [email protected] so we can act promptly.

8mbet reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or improvements in the way we handle member personal data.

When we make material changes to this Privacy Policy, we will notify you via:

• Notices displayed prominently on the 8mbet platform's homepage and privacy section
• Email notification sent to the address registered to your account
• Push notifications via the 8mbet mobile app where applicable

Changes will take effect 14 days after notice is given, unless stated otherwise. Your continued use of the 8mbet platform after the effective date of any amendment constitutes your acceptance of the updated privacy policy.

We recommend reviewing this Privacy Policy periodically to stay up to date on how we protect your personal data.

If you have any questions, concerns or complaints regarding this Privacy Policy or the way 8mbet handles your personal data, please do not hesitate to contact us through the following channels: