Privacy Policy 8win — Our Commitment to Your Data

8win ("we", "our platform") takes the responsibility of protecting every player's privacy extremely seriously. This Privacy Policy explains in detail how we collect, use, store, disclose and protect the personal information you provide to us or that we collect when you use the 8win platform.

This policy applies to all information collected through our official website, mobile app, live chat, support email, and any other communication channels related to 8win services. It covers all users who have registered an account as well as visitors who are simply browsing our platform.

By accessing or using the 8win platform, you confirm that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, we advise you to discontinue use of our platform. Any enquiries regarding this policy may be directed to our support team via live chat within the platform.

We collect various types of information depending on how you interact with our platform. Generally, the data we collect falls into three main categories:

A. Information You Provide Directly:

• Full name as it appears on official identity documents.
• National identity card number (MyKad) or passport number.
• Date of birth for age verification.
• Active email address and mobile phone number.
• Current residential address.
• Bank account or e-wallet details registered for deposit and withdrawal purposes.
• Copies of KYC documents uploaded during the account verification process.

B. Information Collected Automatically:

• IP address and city-level geolocation information.
• Device type, operating system, and web browser version used.
• Session data including pages visited, access times and session duration.
• In-platform game activity logs and financial transaction records.
• Cookie data and device identifiers to enhance user experience.

C. Information from Third Parties:

• Verification data from licensed KYC service providers.
• Payment verification information from our transaction processors.
• Blacklist screening data from regulatory bodies for anti-money laundering (AML) compliance.

Every piece of data we collect has a clear and legitimate purpose. We do not use your data for any purpose other than those stated below:

• Account Management: To register, verify, and manage your player account on the 8win platform.
• Transaction Processing: To process deposits, withdrawals, and any other financial transactions you carry out on the platform.
• Identity Verification (KYC): To comply with legal requirements relating to age and identity verification for online gaming platforms.
• Fraud Prevention: To detect and prevent fraudulent activity, money laundering, and any misuse of the platform.
• Customer Support: To provide effective technical assistance and resolve any disputes relating to your account or transactions.
• Service Communications: To send important account notifications such as transaction confirmations, security alerts, and policy updates.
• Marketing (with consent): To send promotional information and special offers, only where you have consented to receive them.
• Platform Improvements: To analyse usage patterns and improve overall platform performance and user experience.
• Legal Compliance: To fulfil legal and regulatory obligations imposed on us by the relevant authorities.

8win does not sell or rent your personal data to any third party for their own commercial purposes. However, in the course of operating the platform, we may share your data with the following categories of third parties under limited and controlled circumstances:

• KYC Service Providers: Licensed identity verification companies that assist us in verifying player documents and personal information in accordance with compliance requirements.
• Payment Processors: Payment gateway providers and financial institutions that process your deposit and withdrawal transactions.
• Game Providers: Gaming software companies that supply game content to our platform; they receive only the minimum technical data required for game operation.
• Regulatory Authority: When required by law or a valid court order, we will disclose the necessary data to the relevant authorities.
• Technical Infrastructure Providers: Hosting and cloud computing companies that store and process data on our behalf, subject to strict data protection agreements.

All third parties working with us are required to comply with strict data protection policies and may only use your data for agreed purposes. We conduct thorough due diligence on all partners before sharing any player data.

We continuously invest in the latest security infrastructure to ensure your data remains protected at all times. The following are the key security layers we have implemented:

• Data-in-Transit Encryption: All communications between your device and our servers are protected by TLS 1.3 protocol and SSL 256-bit encryption.
• Data-at-Rest Encryption: Sensitive information such as passwords is stored in irreversibly cryptographically hashed form.
• Layered Access Control: Only authorized personnel with legitimate operational needs may access player data, and every access is automatically logged.
• Regular Security Audits: Our platform undergoes regular penetration testing and independent security audits conducted by third-party experts.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA for an additional layer of protection on their account.
• Threat Detection System: We operate a 24/7 continuous monitoring system capable of detecting and responding to intrusion attempts in real time.

The 8win platform uses cookies and similar tracking technologies to enhance your experience, maintain your login session, and understand platform usage patterns. We use several types of cookies:

• Essential Cookies: These cookies are required for core platform functions such as login authentication and session security. The platform cannot function properly without them.
• User Preference Cookies: Cookies that store your preferences such as interface language, display theme, and other personal settings.
• Analytical Cookies: Cookies that help us understand how players interact with the platform so we can continually improve the user experience. This data is collected in aggregate form and contains no personally identifiable information.
• Security Cookies: Cookies used to detect suspicious activity and protect your account from unauthorized access.

You can manage cookies through your web browser settings. However, if you block all cookies, some platform features may not function properly. Third-party cookies for advertising purposes are not used on the 8win platform.

You have certain rights regarding the personal data we hold about you. These rights can be exercised by contacting our support team via live chat within the platform:

• Right of Access: You have the right to request a copy of all personal data we hold about you.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data.
• Right to Erasure: In certain circumstances, you have the right to request deletion of your personal data, subject to applicable legal retention obligations.
• Right to Object to Processing: You have the right to object to the processing of your data for specific purposes such as direct marketing.
• Right to Withdraw Consent: You may withdraw your consent for consent-based data processing at any time, without affecting the validity of processing carried out prior to withdrawal.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format for transfer to another service provider.

8win only retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Our general data retention policy is as follows:

• Active account data is retained for as long as your account remains active on our platform.
• Following account closure, identity and financial records are retained for 7 years to meet anti-money laundering compliance requirements.
• Technical logs and session data are retained for 12 months from the date of generation for security and troubleshooting purposes.
• Customer support communication records are retained for 3 years from the date of last interaction.

When data is no longer needed and there is no legal obligation to retain it, we will securely delete or anonymise it using approved procedures.

In some cases, your personal data may be processed or stored on servers located outside Malaysia. This occurs when we use cloud service providers or international technical infrastructure to ensure optimal platform performance and high service availability.

When cross-border data transfers occur, 8win ensures that:

• The recipient country has an equivalent or higher level of data protection.
• Appropriate data transfer agreements (such as Standard Contractual Clauses) have been put in place with all recipients.
• All data transfers comply with applicable Malaysian data protection laws.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our team through the following channels:

• Live Chat: The fastest way to reach us — available 24 hours a day, 7 days a week via the chat icon within the 8win platform.
• Support Email: [email protected] — we aim to respond to all enquiries within 1–2 business days.
• FAQ Page: Visit the FAQ our team for answers to the most frequently asked questions about privacy and account security.

If you are dissatisfied with our response to your privacy complaint, you have the right to refer the matter to the relevant data protection authority in Malaysia.

This Privacy Policy is subject to periodic review. Any material changes will be communicated to you via in-platform notifications or the email address registered to your account. Continued use of the platform after changes are published constitutes your acceptance of the updated policy.