8mbets Privacy Policy – Data Protection for Malaysian Players

This Privacy Policy explains how 8mbets collects, uses, stores, and protects your personal data when you use our platform. This document applies to all 8mbets users — whether you are simply browsing our website, in the process of registering an account, or already an active member who plays every day.

8mbets understands that your trust in us depends largely on your confidence that your personal data is handled in a responsible and transparent manner. That is why we take the time to explain our privacy practices in clear, plain language — not in convoluted legal jargon that is difficult to translate into real-world meaning.

By using the 8mbets platform, you agree to the data collection and usage practices described in this Privacy Policy. If you do not agree with any part of this policy, we encourage you not to use our services and to contact our support team with any questions.

8mbets reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technology. When significant changes are made, we will notify you via an in-platform notice or to the email address you registered with. The "Updated" date at the top of this document indicates when the policy was last reviewed.

8mbets collects your personal data through several channels — directly from you during registration and platform use, automatically via tracking technologies, and in some cases from authorised third parties. Below is a breakdown of the data categories we collect:

It is important to understand that we do not collect sensitive data such as national identity card numbers (MyKad) or passport numbers, except in circumstances where full identity verification is required to comply with legal obligations or to process withdrawals that exceed a certain threshold. In such cases, any verification documents received will be processed securely and will not be retained longer than necessary.

The personal data we collect is used for specific and legitimate purposes. 8mbets does not use your data for purposes unrelated to the provision of our services or compliance with legal requirements. Below is a detailed explanation of how each category of data is used:

• Service Provision: Identity and account data is used to create and manage your account, verify your identity at login, and grant you access to all features on the 8mbets platform.
• Financial Transaction Processing: Financial data is used to process deposits and withdrawals through Malaysia's local payment methods — Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX — and to maintain accurate transaction records.
• Responsible Gaming Monitoring: Game activity data is used to monitor playing patterns for responsible gambling purposes — identifying players who may need support and ensuring that player-set limits are respected.
• Fraud Prevention: Technical data and activity patterns are used to detect and prevent fraudulent activity, misconduct, money laundering, and violations of our terms of use.
• Platform Improvements: Aggregated usage data (not individually identifiable data) is used to understand how players use the platform, identify areas for improvement, and develop new features.
• Service Communications: Contact information is used to send important account notifications, terms updates, security alerts, and responses to customer support inquiries.
• Legal Compliance: In certain situations, 8mbets may be required to process and disclose data to the relevant authorities in accordance with applicable legal obligations.

If 8mbets intends to use your data for purposes other than those described above — for example, for marketing activities that require explicit consent — we will seek your consent separately beforehand. You are free to give or withhold that consent without it affecting your access to 8mbets's core services.

8mbets does not sell your personal data to any third party. However, there are limited situations where we need to share data with certain parties for platform operational purposes. Any such data sharing occurs strictly on a need-to-know basis and is subject to rigorous confidentiality agreements.

The categories of parties that may receive your data, and the reasons for doing so, are as follows:

• Payment Service Providers: Required transaction information is shared with e-wallet and online banking providers (Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, FPX/Maybank2u/CIMB Clicks) solely for the purpose of processing your deposits and withdrawals.
• Game Providers: The minimum data necessary is shared with gaming software providers (Pragmatic Play, PG Soft, Evolution Gaming, and others) for game operation purposes, provider regulatory compliance, and technical dispute resolution.
• Technology Infrastructure Providers: Companies that provide the server hosting, cloud storage, and cybersecurity services required for the operation of the 8mbets platform. They act as data processors under our instruction and are bound by strict data processing agreements.
• Legal Authorities: 8mbets may be required to disclose personal data to the relevant authorities — such as the police, tax boards, or regulatory bodies — where there is a valid legal obligation to do so. We will always endeavour to notify you of any such disclosure unless we are prohibited from doing so by law.

8mbets takes a serious approach to security infrastructure to ensure your personal and financial data remains protected at all times. Our approach to data security is multi-layered — it does not rely on a single line of defence, but on a combination of complementary protective measures working together.

• 256-bit SSL/TLS Encryption: All communications between your browser or app and the 8mbets servers are encrypted using the latest version of the TLS protocol with a 256-bit key length. This means that even if someone were to intercept data in transit, it would be unreadable without the encryption key.
• Password Hashing: Your password is stored using an industry-recognised one-way cryptographic hashing algorithm. We never store passwords in plain text and are unable to retrieve your original password if it is forgotten.
• Two-Factor Authentication (2FA): 8mbets offers two-factor authentication as an additional security layer for your account. With 2FA enabled, anyone who knows your password still cannot log in without also having access to your smartphone.
• Continuous Security Monitoring: Our systems are continuously monitored for suspicious activity, intrusion attempts, and unusual usage patterns. Our security team responds to alerts promptly as they arise.
• Strict Internal Access Controls: Access to members' personal data within 8mbets' internal systems is restricted to staff who require it to carry out their responsibilities. All access is logged and auditable.
• Regular Security Testing: The 8mbets platform undergoes regular security assessments, including penetration testing by independent third parties, to identify and address any vulnerabilities before they can be exploited.

While 8mbets takes all reasonable steps to protect your data, no system can be guaranteed 100% secure against every cyber threat. We therefore also encourage you to practise good security habits — use a strong, unique password, enable two-factor authentication, and never share your account credentials with anyone.

8mbets uses cookies and related tracking technologies to enhance your user experience, ensure the platform functions correctly, and analyse how players use our platform. Cookies are small text files stored on your device by your web browser when you visit a website.

The types of cookies used by 8mbets include:

• Essential Cookies: Required for the platform's core operations — including maintaining your login session, saving language preferences, and enabling security features. The platform cannot function properly without these cookies, and they cannot be disabled.
• Functional Cookies: Allows the platform to remember your preferences, such as display settings, preferred betting limits, and favourite games. This improves ease of use but is not required for core functionality.
• Analytics Cookies: Collects information on how users interact with the platform — which pages are visited most frequently, how long sessions last, and where users encounter difficulties. This data is used in aggregate form for platform improvements.

You can manage cookies through your browser settings. Most modern web browsers allow you to view, manage, and delete stored cookies. Please note, however, that disabling certain cookies may affect the functionality of some features on the 8mbets platform.

8mbets retains your personal data only for as long as necessary to fulfil the original purpose of collection or to comply with applicable legal obligations. Our general principle is that data is not kept longer than required.

• Active Account Data: Retained for the duration your account remains active and for a defined period following account closure, to allow for the resolution of any disputes that may arise.
• Financial Transaction Records: Retained for a minimum of 7 years from the date of transaction, in line with applicable financial and tax legislation in Malaysia.
• Support Communication Records: Customer support chats and emails are retained for 3 years from the date of the last interaction for training, quality assurance, and dispute resolution purposes.
• Identity Verification Data: Identity verification documents submitted for age verification or KYC (Know Your Customer) purposes are retained for as long as required by applicable legal obligations.
• Analytics Data: Platform usage data in a form that cannot identify any individual may be retained for longer periods for long-term trend analysis purposes.

When data is no longer needed and there is no legal obligation to retain it, 8mbets will securely delete or anonymise that data. You may contact our team for enquiries regarding specific data retention periods related to your account.

As an 8mbets player, you have several important rights regarding your personal data. 8mbets respects and supports the exercise of these rights. Below is an overview of your rights and how to use them:

• Right of Access: You have the right to obtain a copy of the personal data we hold about you. Access requests can be submitted via live chat or by emailing our support team.
• Right to Rectification: If you find that the personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. Most profile information can be updated directly from your account settings.
• Right to Erasure: Under certain circumstances, you have the right to request the deletion of your personal data. This right is subject to our legal obligations to retain certain data for specified periods — for example, financial transaction records.
• Right to Restriction of Processing: You may request that we restrict how we use your data in certain situations — for example, while a dispute regarding data accuracy is being resolved.
• Data Portability Right: You have the right to receive your personal data in a machine-readable format to facilitate transfer to another service should you choose to do so.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time. Once your objection is received, we will stop using your data for that purpose.

To exercise any of the rights above, please contact the 8mbets customer support team via live chat on the platform or by email at support@8mbets-jit.com. We will process your request within a reasonable timeframe and keep you informed of the steps being taken.

8mbets is a platform exclusively for users aged 18 and above. We take the protection of children and young people very seriously and maintain a strict policy against collecting data from minors.

The measures we take to protect children and minors include:

• The 8mbets platform is not designed for, and does not knowingly collect data from, individuals under the age of 18
• The registration process includes an age verification step requiring users to confirm they are 18 years of age or older
• If 8mbets determines that personal data has been collected from a minor, we will delete that data immediately and close the account in question.
• We encourage parents and guardians who suspect their child may have registered or used the 8mbets platform to contact us immediately

If you are a parent or guardian and believe that your child under the age of 18 has registered for or used the 8mbets platform, please contact our support team at support@8mbets-jit.com immediately. We will investigate and take prompt action to delete the account and all associated data.

If you have any questions, concerns, or requests relating to this Privacy Policy or how 8mbets handles your personal data, we encourage you to reach out to us directly. Our customer support team, available in Bahasa Melayu, is on hand to assist you 24 hours a day, 7 days a week.

• Live Chat: The fastest option — click the live chat button within the 8mbets platform. Typical response time is under 5 minutes.
• Email: Send an email to support@8mbets-jit.com with the subject line "Privacy Policy Inquiry" to ensure it is routed to the right team. Best suited for inquiries that require detailed clarification.

When submitting a privacy-related inquiry, please clearly state the nature of your request — whether it is a data access request, a correction request, a complaint about data use, or a general inquiry. This helps us process your request more efficiently and in a timely manner.

8mbets is committed to resolving all privacy-related complaints in a fair and transparent manner. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in Malaysia in accordance with applicable law.