M8Bets Privacy Policy – Malaysian Player Data Protection

M8bets ("we", "Platform") respects the privacy of every individual who uses our services. This Privacy Policy transparently explains how we collect, process, store, and protect your personal data when you visit m8bets.site, use the m8bets mobile app, or interact with any of the services we offer.

This policy is written in Malay to ensure ease of understanding for our Malaysian players. It also covers your rights under Malaysia's Personal Data Protection Act 2010 (PDPA) and other relevant data protection regulations.

By registering for or using the m8bets platform, you consent to the collection and use of your information as described in this Privacy Policy. If you do not agree with any part of this policy, please do not use our platform.

M8bets collects various types of data depending on how you interact with our platform. Below are the categories of data we collect and the reasons for doing so:

Data we do not collect: m8bets does not retain full credit or debit card numbers once a transaction is complete. We also do not collect biometric information, health data or any other sensitive information unrelated to the operation of the platform.

M8bets only uses your personal data for legitimate and necessary purposes. We never use your data for purposes outside the scope stated below without first obtaining your consent.

• Account Management: To create and maintain your m8bets account, process your registration, manage logins, and verify your identity.
• Transaction Processing: Processing deposits via Malaysian payment methods (Touch 'n Go, DuitNow, GrabPay, FPX and others), processing withdrawal requests in MYR and maintaining accurate financial records.
• Service Delivery: To allow you to play slots, Live Casino, poker, Sports Betting on competitions such as the Malaysia Super League and EPL, e-sports, badminton, and all other games on the m8bets platform.
• Age Verification & KYC: Verifying that you meet the minimum age requirement of 21 years and carrying out identity verification checks as required by regulations.
• Legal Compliance: To meet legal obligations, including anti-money laundering (AML) requirements, financial reporting, and other applicable regulatory requirements.
• Platform Security: To detect and prevent fraud, unauthorised access, multi-account usage and activities that violate m8bets' Terms & Conditions.
• Customer Support: To enable m8bets's 24/7 support team to assist you with enquiries, complaints, and technical needs.
• Platform Improvements: Analysing aggregated usage patterns to improve the user experience, platform performance, and content relevance.
• Service Communications: Sending important notifications relating to your account, transaction confirmations, policy updates and necessary security information.
• Promotions & Offers (with consent): To send you information about bonuses, promotions, and special offers, where you have given consent to receive marketing communications.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable data protection regulations, m8bets has a valid legal basis for every data processing activity we carry out. The processing of your data is based on one or more of the following grounds:

• Contract Performance: The majority of data processing is necessary to fulfil the agreement between you and m8bets — that is, to provide the online betting and casino platform services you registered to use.
• Legal Obligations: Certain processing is necessary to comply with legal obligations imposed on m8bets, including AML and KYC requirements and reporting to relevant authorities.
• Legitimate Interest: m8bets has a legitimate interest in processing certain data for platform security, fraud prevention, and service improvement, provided that these interests do not override your fundamental right to privacy.
• Consent: For processing that is not required for the purposes above — particularly marketing communications — we rely on explicit consent that you have provided, which may be withdrawn at any time.

M8bets does not sell your personal data to any third party under any circumstances. We only share your data in limited, necessary situations as outlined below:

• Payment Providers: Transaction information shared with Malaysian payment providers such as Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, and the FPX system to process your deposits and withdrawals. This sharing is limited strictly to the data required to complete the transaction.
• Licensed Game Providers: Licensed third-party game providers (such as Evolution Gaming, Pragmatic Play, and PG Soft) may receive the minimum session data required to operate their games. They are bound by strict data protection agreements with m8bets.
• Legal Authorities: m8bets will disclose data when required by applicable Malaysian law, a valid court order, or a legitimate request from a regulatory authority.
• Technical Service Providers: Companies that help us operate the platform — such as cloud infrastructure providers, analytics services, and cybersecurity tools — may process certain data as data processors under the strict direction and control of m8bets.
• Audit & Compliance: Independent auditing bodies that verify our games' RNG and operational compliance may access aggregated data that does not identify any individual.

M8bets invests seriously in security infrastructure to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our technical and organisational security measures include:

• 256-bit SSL Encryption: All communications between your device and m8bets servers are encrypted using TLS 1.3 protocol with 256-bit key strength — the same security standard used by Malaysian banks and financial institutions.
• Data-at-Rest Encryption: Sensitive data stored in m8bets' databases is encrypted at rest using industry-leading encryption algorithms.
• Strict Access Controls: Only m8bets staff with a legitimate operational need are permitted to access users' personal data. All access is logged and audited on a regular basis.
• Two-Factor Authentication (2FA): m8bets' internal systems require 2FA for all staff access to user data. Players are also encouraged to enable 2FA on their accounts.
• Regular Security Audits: m8bets's technical infrastructure undergoes regular independent security audits and penetration testing to identify and address potential vulnerabilities.
• Real-Time Monitoring: A 24/7 threat detection system monitors suspicious activity and cyberattacks in real time.
• Secure Data Backups: Data is regularly backed up and stored in secure, separate locations to ensure continuity of service.

M8bets retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, including meeting legal obligations, resolving disputes, and enforcing our agreements.

• Active Account Data: Retained for the duration your account is active and for a reasonable period after closure to allow for the resolution of any outstanding issues.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date, in accordance with Malaysian accounting and audit legal requirements and applicable AML obligations.
• KYC Documents: Retained for the duration of the active account and a minimum 5 years after account closure, in accordance with compliance requirements.
• Game Records: Betting history and game records are retained for a minimum of 3 years for audit purposes, dispute resolution and regulatory compliance.
• Communication Logs: Support chat records and email correspondence are retained for 2 years from the date of last interaction.
• Technical & Log Data: System logs and technical data are typically retained for 90 days unless a longer retention period is required for an ongoing security investigation.

When data is no longer needed and there is no legal obligation to retain it, m8bets will securely delete or anonymise it using industry-accepted methods.

M8bets uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

The types of cookies we use are:

• Essential Cookies: These cookies are required for the platform to function properly — including maintaining your login session, remembering your language preferences, and enabling security features. They cannot be disabled.
• Functional Cookies: Used to remember your in-platform preferences, such as display settings, favourite betting markets, and game preferences, to personalise your experience.
• Analytics Cookies: Helps us understand how users interact with the platform — including the most visited pages, time spent, and navigation patterns — so we can continue improving the m8bets experience.
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorised access, and other security threats.

You can manage cookie settings through your browser preferences. However, disabling certain cookies may affect the functionality and your experience on the m8bets platform. Essential cookies cannot be disabled without impacting your ability to use the platform.

Under Malaysia's PDPA and m8bets's internal policies, you have the following rights with respect to your personal data. m8bets is committed to respecting and facilitating the exercise of these rights.

To exercise any of the rights above, please contact us at support@m8bets.site with the subject line "Data Privacy Rights Request", along with your full name and m8bets account number. We will respond within 30 business days and may require identity verification before processing your request.

In the course of operating the m8bets platform, some of your personal data may be transferred to or stored on servers located outside Malaysia. This may occur when we use cloud infrastructure service providers that operate globally.

When data is transferred outside Malaysia, m8bets ensures that adequate and equivalent protections are in place to safeguard that data. These protective measures include:

• Strict data processing agreements with all third-party service providers that handle m8bets users' personal data.
• Transfers are made only to jurisdictions recognised as providing adequate data protection, or through approved transfer mechanisms such as standard contractual clauses.
• Encryption of data in transit and at rest across all storage locations.

For more information about the safeguards applied to international data transfers, please contact us at support@m8bets.site.

The m8bets platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If you are a parent or guardian and believe your underage child has registered on m8bets, please contact us immediately at support@m8bets.site and we will investigate, close the account and delete the relevant data without delay.

M8bets reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements or improvements to how we protect your data. The "Updated" date at the top of this policy will always reflect the latest version.

For material changes – meaning changes that significantly affect how we process your personal data – m8bets will notify you through:

• An email to the address registered on your account, at least 14 days before the changes take effect.
• A clear notice on the m8bets platform homepage.
• In-app notifications on the m8bets mobile app, if you use it.

Your continued use of the m8bets platform after any amendments to this Privacy Policy take effect will be considered your acceptance of the updated version. If you do not agree with the changes, please stop using the platform and contact us to close your account.

If you have any questions, concerns or complaints about how m8bets handles your personal data, our team is here to help. For data privacy enquiries specifically, please use the following channels:

• Data Privacy Email: support@m8bets.site — please include the subject line "Data Privacy Enquiry" to ensure your message is handled by the right team. Responses within 2 business days.
• Live Chat: On the m8bets platform — available 24/7 in Malay for general enquiries.
• Telegram: Official m8bets channel — 24/7.

For formal privacy rights requests (access, correction, deletion), please email us with the following details: your full name, m8bets account number, the type of request being made, and a copy of your identity verification document for verification purposes. We are committed to responding to all privacy rights requests within 30 business days.