8id Privacy Policy — Personal Data Protection for Malaysia Members

8id is an online gaming platform operating under a valid licence, committed to protecting the privacy of every member. We understand that your trust is our most valuable asset, and safeguarding your personal data is a responsibility we take seriously.

This Privacy Policy is provided in English to ensure clarity for all our members across Malaysia. It details the types of data we collect, the purposes for collection, how we store and protect it, and your rights as the data owner.

8id operates in compliance with applicable data protection laws, including Malaysia's Personal Data Protection Act 2010 (PDPA). We update this policy periodically to reflect changes in legislation or industry best practices. The effective date of the current version is shown at the top of this document.

If you have any questions regarding this policy, our privacy team is ready to assist. Please refer to the Contact Us for more information.

To deliver the best service and ensure legal compliance, 8id collects certain categories of information from our members. We only collect data that is genuinely necessary for a specific purpose.

Collected data is used responsibly for the following purposes only. We will not use your data for any other purpose without obtaining your additional consent.

• Account Management: Creating, verifying, and managing your member account, including the KYC process and identity verification.
• Transaction Processing: Processing deposits, withdrawals, and all financial transactions on the 8id platform quickly and securely.
• Legal Compliance: Meeting legal obligations, including reporting to the relevant authorities when required.
• Fraud Prevention: Detecting, investigating, and preventing any fraudulent activity, money laundering, or platform abuse.
• Customer Support: Providing effective technical assistance and customer support whenever you contact us.
• Marketing (with consent): Sending information about promotions, bonuses, and platform updates — only if you have given consent to receive marketing communications.
• Platform Improvements: Analysing usage patterns in aggregate to improve features and the overall user experience.
• Platform Security: Monitoring suspicious activity and protecting the integrity of the platform and the security of all members.

8id does not sell your personal data to any third party. However, there are specific situations where we need to share information to keep the platform functioning properly.

Data sharing only occurs in the following circumstances:

• Payment Providers: Required transaction information is shared with licensed payment processors to securely handle your deposits and withdrawals.
• Game Providers: Minimal game session data is shared with gaming software providers to ensure a smooth and fair gameplay experience.
• Legal Authorities: Data may be disclosed to government authorities or law enforcement when required by court order or applicable law.
• Identity Verification Services: Basic identity data is shared with licensed KYC service providers for identity verification purposes.
• Professional Advisors: Lawyers, accountants, or auditors bound by professional confidentiality obligations when required for legitimate business purposes.

8id uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

We use several types of cookies:

• Essential Cookies: Required for core platform functions such as login and session security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies: Storing your preferences such as language, time zone, and display settings to provide a more personalised experience.
• Analytics Cookies: Helping us understand how members use the platform so we can continuously improve our services. This data is collected in aggregate and without identifying individuals.
• Performance Cookies: Used to monitor platform performance and identify any technical issues that require prompt resolution.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality of some parts of the 8id platform. For the best experience, we recommend keeping essential cookies enabled.

The security of your personal data is 8id's top priority. We implement multiple layers of technical and organisational protection to safeguard your data from unauthorised access, loss, or misuse.

The security measures we implement include:

• End-to-End Encryption: All communications between your platform and our servers are secured with the latest TLS 1.3 encryption.
• Data-at-Rest Encryption: Sensitive data stored in our databases is encrypted using AES-256 algorithm.
• Strict Access Control: Only staff with a legitimate business need may access member personal data, and every access is logged and audited.
• Two-Factor Authentication: 8id's internal systems require multi-factor authentication for all access to sensitive data.
• Regular Security Audits: Our platform and systems undergo regular security audits conducted by qualified independent parties.
• Incident Response Plan: We have clear procedures in place to detect, respond to, and report any data breach within the timeframe required by law.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable data protection laws, you have the following rights regarding your personal data held by 8id.

8id retains your personal data for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable law.

Our general data retention period guidelines are as follows:

• Active Account Data: Retained for the duration of your active account and its use.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date in accordance with Malaysia's taxation and financial legal requirements.
• KYC Documents: Retained for a minimum of 5 years after account termination in accordance with anti-money laundering legal requirements.
• Communication Logs: Retained for 2 years for customer support and dispute resolution purposes.
• Analytics Data: Aggregated data that does not identify individuals may be retained indefinitely for platform improvement purposes.

Once the relevant retention period has expired, your data will be securely deleted using methods that ensure no recovery is possible. For data stored in physical format, secure document destruction procedures will be applied.

The 8id platform is strictly intended for individuals aged 18 years and above only. We do not knowingly collect personal data from underage children or minors.

If we find that personal data of anyone under 18 has been collected without our knowledge, that data will be deleted immediately and the account will be terminated.

We also encourage parents to use appropriate parental control software to prevent children from accessing online gambling sites. For more information on responsible gaming, please visit the Responsible Gaming ours.

8id reserves the right to amend this Privacy Policy from time to time to reflect changes in laws, technology, business practices, or new regulatory requirements.

When material changes occur, we will:

• Updating the "Last Updated" date at the top of this document.
• Displaying clear notifications on the platform for a set period after changes have been implemented.
• Sending notification emails to all registered members if the changes materially affect how we use your personal data.

Continued use of the 8id platform after any policy changes take effect will be considered your acceptance of the updated policy. We recommend reviewing this page periodically to stay informed on how we protect your data.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, our privacy team is here to help.

You may reach us through the following channels: