8fafafa Privacy Policy – Malaysian Player Data Protection

This Privacy Policy ("Policy") describes how the 8fafafa platform ("8fafafa", "We") manages personal information collected from users of our platform — whether through our website, mobile app, or other communication channels related to 8fafafa's services.

This policy applies to all individuals who register an account with 8fafafa, use any of our services including online casino games, Sports Betting, or simply browse the 8fafafa website. We are committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA) in all aspects of collecting and processing our users' personal data.

8fafafa reserves the right to update this Privacy Policy from time to time in line with changes to laws, technology, or our business operations. Any material changes will be communicated to you via your registered email or through an in-platform notification on 8fafafa. Continued use of the platform after such notice is considered acceptance of the updated Policy.

8fafafa collects various types of personal information for lawful, clearly stated purposes. The information we collect can be grouped into several key categories:

We do not collect information that is unnecessary or beyond the scope of the stated purposes. Should you choose not to provide certain information, some features on the 8fafafa platform may not be fully accessible — for example, an incomplete KYC process may limit your ability to make withdrawals.

8fafafa collects your personal information through a variety of channels as you interact with our platform. Understanding these channels helps you make more informed decisions about what information you share with us.

Directly from You:

• 8fafafa account registration form — name, Malaysian phone number, email, and password.
• Identity verification (KYC) process — copies of MyKad and other supporting documents.
• Deposit and withdrawal forms — payment method details such as Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX Maybank2u, and CIMB Clicks.
• Contact the 8fafafa customer support team via live chat, WhatsApp, or email.
• Feedback or survey responses you voluntarily submit.

Automatically During Platform Use:

• Game and Sports Betting activity logs — games played, bets placed, and session durations.
• Technical data — IP address, device type, operating system, and web browser used.
• Cookies and similar tracking technologies — to remember your preferences and improve your experience on 8fafafa.
• General geolocation data based on IP address — to verify eligibility and ensure regulatory compliance.

From Third Parties:

• Payment service providers — to verify deposit and withdrawal transactions.
• Third-party identity verification services — for KYC and fraud prevention purposes.
• Game providers such as Pragmatic Play, PG Soft, and Evolution Gaming — technical data related to gaming sessions.

8fafafa uses your personal information only for lawful, necessary purposes that are directly related to providing our services to you. We never use your data for undisclosed purposes without first obtaining your additional consent.

The primary purposes for which 8fafafa uses your data are as follows:

• Account Management: Creating, maintaining, and securing your 8fafafa account, including identity verification and password management.
• Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, FPX Maybank2u, and CIMB Clicks, as well as withdrawals of your winnings.
• Service Delivery: Access all casino games, Sports Betting for the Malaysia Super League, EPL, badminton, cricket, esports, and other services on the 8fafafa platform.
• Security and Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, multiple accounts, and any conduct that violates 8fafafa's Terms & Conditions.
• Regulatory Compliance: Fulfilling applicable legal and regulatory obligations, including mandatory KYC and reporting requirements.
• Customer Support: Resolving complaints, responding to enquiries, and providing technical support to 8fafafa players.
• Experience Personalisation: Personalising game recommendations and promotional offers based on your preferences and playing patterns on 8fafafa.
• Marketing Communications: Sending information about bonuses, promotions, and exclusive offers — only if you have given your consent to receive such communications.
• Responsible Gambling: Monitoring playing patterns to identify signs of problem gambling and activating appropriate protective measures.
• Platform Improvements: Analysing aggregated usage data to improve the performance, design, and features of the 8fafafa platform.

8fafafa takes seriously the trust you place in us by sharing your personal information. We do not sell, rent, or trade your personal information to any third party for their own marketing purposes. Full stop.

However, in order to provide you with a complete service, certain data may be shared with the following parties within strictly defined and limited parameters:

• Payment Service Providers: Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, Maybank2u, CIMB Clicks — only the data required to process your transactions.
• Game Providers: Pragmatic Play, PG Soft, Evolution Gaming, and other providers partnered with 8fafafa — game session data required for smooth gameplay operations.
• Identity Verification Services: Third-party KYC providers that assist us in verifying member identities and meeting compliance requirements.
• Competent Authorities: Where required by Malaysian law, court order, or a lawful request from law enforcement authorities.
• Analytics Services: Analytics providers that help us understand platform usage patterns — in aggregated form only, with no direct identification of individuals.

Every third party that receives data from 8fafafa is bound by strict confidentiality and data protection agreements. They are only permitted to use that data for the specific purposes agreed upon with 8fafafa — nothing beyond that. We conduct regular reviews to ensure all our third-party partners comply with the data protection standards we have set.

The security of your personal data is an absolute priority at 8fafafa. We continually invest in the latest cybersecurity infrastructure to ensure your information is protected at every stage — during collection, processing, storage, and transmission.

The technical and organisational security measures we have implemented at 8fafafa include:

• 256-bit SSL Encryption: All data transmitted between your device and 8fafafa's servers is encrypted using 256-bit TLS/SSL protocols — the same standard used by Malaysia's leading banking institutions such as Maybank and CIMB.
• Encryption of Stored Data: All sensitive data stored in 8fafafa's databases — including passwords and financial details — is encrypted using irreversible one-way hashing algorithms.
• Two-Factor Authentication (2FA): An additional layer of security available to all 8fafafa accounts — we strongly encourage all members to enable this feature.
• 24/7 Security Monitoring: 8fafafa's cybersecurity team continuously monitors the platform to detect any suspicious activity or intrusion attempts.
• Data Segregation: Members' personal data is stored separately from gaming data to minimise the risk of unnecessary exposure.
• Strict Access Controls: Only 8fafafa employees with a legitimate business need may access members' personal data — and all such access is logged and regularly audited.
• Regular Security Testing: 8fafafa conducts regular penetration testing and security audits carried out by independent third-party experts to identify and address any vulnerabilities.

While we take all reasonable steps to protect your data, no security system can guarantee absolute 100% protection at all times. In the event of a data breach that materially affects your personal information, 8fafafa will notify you within the timeframe required by law and take all necessary steps to mitigate the impact.

The 8fafafa platform uses cookies and similar tracking technologies to enhance the user experience, maintain security, and analyse platform performance. Cookies are small text files stored in your web browser when you visit the 8fafafa website.

Types of cookies used on the 8fafafa platform:

• Essential Cookies (Required): These cookies are essential for the core functions of the 8fafafa platform — including login authentication, session security, and language preferences. Without them, the platform cannot operate properly. These cookies cannot be disabled.
• Performance Cookies: Used to collect information on how players use the 8fafafa platform — the most frequently visited pages, time spent, and any errors encountered. This information is used in aggregate form to improve platform performance.
• Functional Cookies: Allows the 8fafafa platform to remember your preferences, such as interface language, preferred betting limits, and other settings you have previously configured.
• Analytics Cookies: Helps us understand overall usage patterns so we can make better decisions about improving the 8fafafa platform.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect your experience on 8fafafa — some features may not function fully. For more information on managing cookies in popular browsers, please refer to your browser's help documentation.

As an 8fafafa member and an individual whose data we process, you have certain rights regarding your personal information under Malaysia's Personal Data Protection Act 2010 (PDPA). 8fafafa is committed to respecting and facilitating the exercise of these rights.

8fafafa retains your personal information only for as long as necessary to fulfil the original purpose of collection, or as required by applicable laws and regulations. Once the data is no longer needed, we will securely delete or anonymise it.

General data retention guidelines at 8fafafa:

• Active Account Data: Retained for as long as your account remains active with 8fafafa, plus any required period following account closure for compliance purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with applicable Malaysian financial and tax legal requirements.
• KYC and Identity Verification Data: Retained for the duration of the active account and for no less than 5 years after account closure, in accordance with anti-money laundering regulations.
• Support Communication Logs: Retained for 2 years from the date of the last communication for reference and dispute resolution purposes.
• Cookie & Analytics Data: Typically retained for no more than 13 months from the date of collection.

Once the retention period expires, 8fafafa will securely delete or anonymise the relevant data in accordance with established internal procedures. Data deletion is carried out on a regular basis as part of our data lifecycle management programme.

If you have any questions, concerns, or wish to exercise your rights regarding personal data held by 8fafafa, we encourage you to reach out to us directly. The 8fafafa privacy and support team is ready to assist you.

You can reach us through:

• Email: support@8fafafa.asia — please include "Privacy Enquiry" in your subject line to ensure your message is directed to the right team.
• Live Chat: Available 24 hours a day, 7 days a week on the 8fafafa platform — the fastest way to get an immediate response.
• WhatsApp: Accessible through your 8fafafa account after logging in.

8fafafa will endeavour to respond to all privacy-related enquiries within 14 business days of receipt. For more complex requests, such as full data access or data deletion requests, processing may take up to 30 business days. You will be kept informed of the progress of your request on a regular basis.

This Privacy Policy takes effect from January 2026 and supersedes all previous versions. 8fafafa reserves the right to update this document at any time with reasonable notice to registered players.