Privacy Policy bet8 — Our Commitment to Protecting Your Data

Bet8 is a fully operated online entertainment platform built to meet the needs of Malaysian players. We understand that your trust is our most valuable asset — and that trust begins with transparency about how we handle your personal information.

This Privacy Policy explains in detail how bet8 collects, uses, stores, protects, and in certain situations, shares your personal data. This Policy applies to all users of the bet8 platform, including the bet8.ad website and the official bet8 mobile app.

This document forms an inseparable part of the bet8 Terms and Conditions. Continued use of our platform after any changes to this Privacy Policy are published constitutes your acceptance of the updated terms.

If you have any questions about this Privacy Policy or how we handle your data, the bet8 customer support team is available via live chat 24 hours a day, 7 days a week.

Bet8 only collects personal data that is strictly necessary for the stated purposes. We do not practise excessive data collection. The types of data we collect are as follows:

Data You Provide Directly:

• Full name as stated in official identification documents
• Date of birth for age verification purposes
• ID card or passport number (for KYC process)
• Active email address and mobile number
• Current residential address
• Bank account or digital wallet details for deposit and withdrawal transactions
• Selfie with identity document (for advanced KYC verification)

Data Collected Automatically:

Every piece of data we collect has a clear and legitimate purpose. bet8 does not use your data for purposes not stated in this Privacy Policy without obtaining your consent first.

• Account Management: To create, verify, and manage your bet8 account, including the KYC process required prior to your first withdrawal.
• Payment Processing: To process deposits and withdrawals securely through trusted payment channels such as Maybank2u, CIMB Clicks, Touch 'n Go eWallet, and Boost.
• Security & Fraud Prevention: To detect and prevent fraudulent activity, money laundering, multiple account ownership, and any suspicious behaviour.
• Legal Compliance: To fulfil legal requirements such as PDPA 2010, anti-money laundering (AML) regulations, and applicable KYC requirements.
• Customer Support: To handle enquiries, complaints, and assistance requests submitted to the bet8 support team.
• Responsible Gaming: To monitor gaming patterns and identify members who may need assistance regarding their betting habits.
• Marketing (with consent): To send information about bet8's latest promotions, bonuses, and offers if you have consented to receive marketing communications.
• Platform Improvement: To analyse usage patterns in aggregate for the purpose of improving platform performance and overall user experience.

Every personal data processing activity carried out by bet8 is based on one or more valid legal grounds as follows, in accordance with Malaysia's PDPA:

• Consent: You provided clear and voluntary consent at the time of bet8 account registration. You may withdraw this consent at any time, though doing so may prevent you from accessing some or all bet8 services.
• Contract Performance: Processing is necessary to fulfil the agreement between you and bet8, including deposit processing, withdrawals, and account management.
• Legal Obligation: bet8 is required to process certain data to comply with applicable laws, including KYC requirements under the Anti-Money Laundering Act.
• Legitimate Interest: bet8 processes certain data on the basis of legitimate business interests, such as fraud prevention and platform security, provided these interests do not override your fundamental rights.

If you wish to know the specific legal basis for each type of data processing we carry out, you may submit a written request to the bet8 data protection team.

Bet8 does not sell your personal data to any third party for commercial purposes. However, in certain limited situations, we may share your information with the following parties:

• Payment Service Providers: Transaction data that must be shared with payment gateway providers such as banks, digital wallet operators, and card processors to complete your financial transactions.
• Identity Verification Service Provider: KYC information may be shared with authorised third parties to perform automated document and identity verification.
• Gaming Service Provider: Usernames and session information may be accessed by third-party game providers partnered with bet8 to enable you to play their games through our platform.
• Audit & Security Firm: Certain information may be shared with independent auditors we appoint to ensure the integrity and security of the bet8 platform.
• Law Enforcement Authority: bet8 will fully comply with any court orders or lawful requests from Malaysian authorities or competent law enforcement agencies.

The bet8 platform uses cookies and similar tracking technologies to enhance user experience, maintain session security, and understand how users interact with our platform.

Types of Cookies Used:

• Session Cookies (Required): Temporary cookies that store your login session information. These cookies are automatically deleted when you close your browser. Without them, the platform cannot function properly.
• Preference Cookies (Functional): Saves your preferences such as language, display theme, and personal settings so you don't have to reset them each time you log in.
• Analytics Cookies: Used to understand platform usage patterns in an aggregated and anonymous manner for service improvement purposes. This data is not linked to your personal identity.
• Security Cookies: Helps us detect suspicious login attempts, CSRF attacks, and other security threats to your account.

You can manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the bet8 platform. Mandatory cookies cannot be disabled as they are essential for session security.

Bet8 does not retain your personal data longer than necessary. Retention periods are determined based on the type of data, the purpose of collection, and applicable legal requirements.

Upon expiry of the retention period, your data will be securely deleted or fully anonymised so that it can no longer be linked back to your identity.

Bet8 continuously invests in security infrastructure to ensure your personal data remains protected at all times. The following are the key security layers we have implemented:

• End-to-End Encryption: All communications between your device and bet8 servers use TLS 1.3 protocol with AES-256-bit encryption — the same standard used by international banking institutions.
• Multi-Layer Access Control: Member personal data is accessible only to bet8 staff who require such access to perform their duties, based on the principle of least privilege.
• 24/7 Monitoring: Security monitoring systems operate around the clock to detect and respond to any threats or suspicious activity in real time.
• Periodic Penetration Testing: bet8 conducts regular security testing, including penetration testing by independent third parties, to identify and address any vulnerabilities before they can be exploited.
• Secure Data Backup: Your data is automatically backed up to redundant data centres located in different locations to ensure service continuity and disaster recovery.
• Two-Factor Authentication: All bet8 accounts support 2FA via an authenticator app or SMS as an additional layer of protection during login.

In operating the bet8 platform, certain personal data may be transferred to and stored on servers located outside Malaysia, specifically for data backup, international payment processing, and cloud infrastructure services.

Every cross-border data transfer carried out by bet8 is subject to the following protections:

• Transfers are only made to countries or jurisdictions that provide a level of data protection equivalent to or higher than Malaysia's PDPA.
• All overseas data recipients are bound by data processing agreements that comply with international standards such as the European GDPR or equivalent legislation.
• End-to-end encryption is maintained throughout the entire data transfer process, regardless of geographical boundaries.
• Bet8 maintains a record of all third parties that receive cross-border data transfers and the specific purpose of each such transfer.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how bet8 handles your personal data, you may contact us through the following channels:

• Live Chat 24/7: The fastest way to get immediate assistance. Available directly on the bet8 platform around the clock.
• Privacy Email: [email protected] — for written inquiries that require detailed responses or official documentation.
• Help Centre: Visit the FAQ section at bet8.ad/faq for answers to frequently asked questions about privacy and account security.

Bet8 is committed to responding to all privacy-related inquiries within 3 business days. For more complex data rights requests such as data export or account deletion, the response time is 14 business days.

If you are not satisfied with how bet8 handles your privacy complaint, you have the right to escalate it to the Department of Personal Data Protection Malaysia under the Ministry of Communications and Digital.