8win Privacy Policy — Personal Data Protection Malaysian Members

In operating the platform, 8win collects several categories of personal information from members. This is done solely for legitimate purposes necessary to deliver the best service to you.

Identity Information:

• Full name as shown on your official identification document (MyKad or passport).
• Date of birth and gender.
• National Registration Identity Card (NRIC) number or passport number.
• Current residential address in Malaysia.

Contact Information:

• Active email address registered in your name.
• A valid Malaysian mobile phone number.

Financial Information:

• Local bank name and bank account number.
• E-wallet account information (Touch 'n Go eWallet, GrabPay).
• Deposit and withdrawal transaction records.

Technical Information:

• IP address and device type used.
• Browser type and version.
• Session log data including login and logout times.
• General location information (state/city level) derived from your IP address.

8win collects your personal information through several different methods depending on the nature of your interaction with our platform:

• Account Registration: When you register as a new member, you are required to complete a registration form containing basic information such as your name, email address, and phone number.
• KYC Verification: To comply with Know Your Customer (KYC) requirements, we collect a copy of your official identification document during the identity verification process.
• Financial Transactions: Every time you make a deposit or withdrawal, your bank account or e-wallet details are securely recorded in our system.
• Platform Usage: Our system automatically records technical data such as IP addresses, device types, and browsing behaviour via cookies and similar tracking technologies.
• Support Communications: When you contact our customer support team via live chat or email, the content of those conversations is stored for reference and service improvement purposes.
• Promotions and Contests: If you participate in a promotion or special campaign, additional information may be collected based on the requirements of that promotion.

The information we collect is used responsibly for legitimate purposes only. Below is a summary of our data usage:

We do not use your personal data for any purpose not stated above without obtaining your consent first.

8win takes an extremely cautious approach to sharing members' personal data. We has never sold your data to any third party. Data sharing only occurs in the following limited situations:

• Payment Providers: Transaction information is shared with registered payment service providers (such as FPX, Touch 'n Go, GrabPay) solely for the purpose of processing your transactions. These providers are bound by strict confidentiality agreements with 8win.
• Game Service Providers: Minimal technical data may be shared with certified game software providers to ensure a smooth and fair gaming experience.
• Legal Requirement: Where required by law, court order, or direction from a lawful authority, 8win may be required to disclose certain information to the relevant authorities.
• Fraud Prevention: In certain cases, limited information may be shared with authorised fraud prevention agencies to protect the interests of the platform and its members as a whole.

All third parties that receive data from 8win are required to handle that information in accordance with security standards equal to or higher than those practised by 8win.

Your personal data is stored on servers located in certified data centres with international security certifications. Data retention periods are as follows:

• Active account data is retained for as long as your account remains active and for a period of 5 years after account closure to meet legal compliance requirements.
• Financial transaction records are retained for a period of 7 years in accordance with financial reporting requirements.
• Customer support communication logs are retained for a period of 2 years.
• Anonymised analytics data may be retained indefinitely as it contains no personally identifiable information.

The technical and organizational security measures we implement include:

• 256-bit SSL encryption for all data in transit.
• AES-256 encryption for stored data (data at rest), particularly sensitive financial information.
• Role-Based Access Control for internal access.
• Regular security audits by independent security teams.
• 24/7 monitoring for abnormal system activity.
• Multi-layer firewall protection and intrusion detection systems.

As an 8win member and as an individual protected under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You may request that we correct any information that is inaccurate or incomplete.
• Right to Erasure: In certain circumstances, you may request that we delete your personal data, subject to our legal obligations to retain certain records.
• Right to Object to Processing: You may object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where data processing is based on your consent, you may withdraw that consent at any time.
• Right to Data Portability: You have the right to receive your personal data in a machine-readable format for the purpose of transferring it to another platform.

To exercise any of the above rights, contact our Data Protection Officer by email at [email protected] or via live chat on the platform. We will process your request within 14 working days after receiving a complete request.

8win uses cookies and similar tracking technologies to enhance the user experience and analyse platform usage. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session authentication and security settings. These cookies cannot be disabled.
• Performance Cookies: Collecting anonymous information about how you use the platform to help us identify areas for improvement.
• Functional Cookies: Remembering your preferences such as language, display settings, and saved login details so you do not need to re-enter them each time.
• Analytical Cookies: We use analytics tools to understand overall platform usage patterns. This data is aggregated and does not identify you individually.

You can manage or disable cookies through your web browser settings. However, disabling certain cookies may affect platform functionality. Refer to your browser's help documentation for detailed instructions.

The 8win platform may contain references to third-party services such as game providers, payment platforms, and identity verification providers. It is important that you understand the following:

• This Privacy Policy applies solely to the 8win platform and does not cover the privacy practices of any third parties.
• Each third-party provider integrated with 8win has its own privacy policy governing how they manage data.
• 8win selects third-party providers that meet high data protection standards and have a proven track record in the industry.
• We recommend reading the privacy policies of any relevant third-party service providers before using their services.

8win is not responsible for the privacy practices or content of third-party platforms. Any information you provide directly to third parties is subject to their own privacy policies.

8win services are exclusively for individuals aged 18 and above only. We do not knowingly collect or process any personal data from individuals under the age of 18.

If we find that we have collected data from an individual under the age of 18 without appropriate age verification, we will immediately take the following steps:

• Suspending the account immediately.
• Deleting all personal data associated with the account.
• Returning any valid remaining funds to the original deposit method.

8win reserves the right to amend or update this Privacy Policy at any time to reflect changes in data processing practices, new legal requirements, or service improvements. Any material changes will be communicated to you via:

• Prominent notice on the 8win platform homepage.
• Email notification to your registered email address.
• In-platform pop-up messages upon your next login.

The "Last Updated" date shown at the top of this page will always be updated to reflect the latest version of this policy. Continued use of the 8win platform following any amendments constitutes your acceptance of the updated policy.

We recommend checking this page periodically to stay informed about how we protect your information. If you disagree with any amendments, you may close your account before the amendment's effective date.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer (DPO) through the following channels:

We are committed to addressing every inquiry seriously and providing thorough responses within the stated timeframe. Your satisfaction and trust are our top priority.