Play8 takes the privacy and security of every user's personal data seriously. This Policy transparently explains how we collect, use, store, and protect your information in accordance with Malaysian law.
At play8, privacy is not merely a word we write in official documents — it is a core value we uphold in every business decision and platform development choice. We recognise that user trust is our most valuable asset, and that trust can only be built when every user is confident their personal information is handled with the utmost responsibility.
This Privacy Policy is designed to give Malaysian users a clear and honest overview of how play8 handles personal data — from the point of collection, how it is used, how it is shared with authorised third parties, through to the technical security measures we implement to prevent unauthorised access. We have nothing to hide, and we welcome any questions from users about our privacy practices.
This policy applies to all users who access the play8 platform via the official website, mobile app, or any other official channels operated by play8. By using our platform, you agree to the data collection and processing practices described in this document.
Legal Compliance: play8 operates in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA). All our data handling practices have been reviewed by our compliance and legal teams to ensure alignment with current applicable legislation.
This Privacy Policy forms part of play8's comprehensive user protection framework. This document should be read together with Terms and Conditions play8 as both together form the complete agreement between the user and the platform.
Play8 acts as both data processor and data controller for all personal information collected from users of our platform. This means play8 is fully responsible for ensuring your data is processed lawfully, fairly, and transparently in accordance with internationally recognised data protection principles.
In the context of this Privacy Policy, "personal information" refers to any information that can be used to identify you directly or indirectly as an individual. This includes but is not limited to your full name, identification card number, phone number, email address, residential address, financial information, and platform usage data.
Play8 strictly does not accept registrations from individuals under the age of 18. Should we discover that a child's personal information has been collected without valid parental or guardian consent, we will take immediate steps to delete that information from our systems.
Play8 only collects information that is strictly necessary to provide high-quality, secure, and legally compliant services. We follow a "minimum data" principle — meaning we do not collect information beyond what is required for platform operations.
| Information Type | Collection Purpose | Mandatory / Optional |
|---|---|---|
| Full name | Identity verification (KYC) and account management | Mandatory |
| Identity card number | KYC & fraud prevention | Mandatory |
| Email address | Account communications & notifications | Mandatory |
| Phone number | 2FA verification & support | Mandatory |
| Bank details | Deposit & withdrawal processing | Mandatory |
| Residential address | Identity verification & AML compliance | Mandatory |
| Profile photo | Account personalisation | Optional |
When you use the play8 platform, our systems automatically record certain technical information required for safe and smooth platform operation:
In certain cases, play8 may receive information about you from trusted third-party sources, including identity verification providers, financial institutions for payment processing purposes, and fraud prevention service providers. This information is used solely to enhance account security and ensure regulatory compliance.
Data Minimisation Principle: play8 never collects sensitive information such as passwords in plain text, biometric data, or health information. All passwords are stored in a hashed format that cannot be decrypted by anyone, including play8's own technical team.
Play8 only uses users' personal information for purposes that are lawful, transparent, and directly related to the provision of platform services. We do not sell, rent, or trade users' personal information to any third party for marketing purposes.
With your consent, play8 may send marketing communications regarding relevant promotions, bonuses, and exclusive offers. You may withdraw this consent at any time via your account settings or by contacting our support team. Withdrawal of marketing consent will not affect essential service communications that remain necessary for account operations.
Important: play8 never uses users' personal data to make significant automated decisions about you without human oversight, except in cases of real-time fraud detection where immediate action is required to protect the security of your account.
Play8 regards users' personal information as a trust to be safeguarded with the utmost care. We never sell user data, and information sharing only occurs in limited, clearly defined situations as stated below.
Every third party granted access to play8 user data is required to sign a strict data protection agreement. They are only permitted to use the data for the specific agreed purpose, and must implement technical and organisational security measures that are equivalent to or exceed play8's standards.
Should user data need to be transferred to servers located outside Malaysia, play8 ensures that such transfers are carried out with adequate safeguards in compliance with PDPA 2010 requirements. We only use cloud providers that hold internationally recognised data security certifications.
User data security is play8's greatest investment. We employ a combination of cutting-edge security technologies, strict internal policies, and continuous staff training to ensure your data is always protected against ever-evolving cyber threats.
Play8 retains users' personal data only for as long as necessary for the purposes stated in this Privacy Policy, or as required by law. Generally, active account data is retained for the duration of the active account period plus 7 years for legal compliance purposes. Terminated account data is retained for 5 years before being securely deleted.
In the event of any data security breach that could pose a risk to users' rights and freedoms, play8 is committed to notifying affected users and the Personal Data Protection Commissioner within 72 hours of becoming aware of the breach, in accordance with applicable legal requirements.
Annual Security Audit: play8 undergoes comprehensive security audits conducted by independent cybersecurity firms at least once a year. The results of these audits are used for the continuous improvement of our security infrastructure.
As a play8 user and data subject under PDPA 2010, you have certain rights regarding the personal data we collect and process. play8 fully respects and facilitates the exercise of these rights.
To exercise any of the rights above, submit a written request to the play8 privacy team via email at [email protected]. We will process your request within 21 business days. For more complex cases, this period may be extended to up to 60 days with prior notice to you.
Certain Limitations: Certain rights may not be fully exercisable in situations where data retention or processing is required by law, such as record-keeping requirements for AML compliance and financial reporting obligations.
Play8 uses cookies and similar tracking technologies to ensure the platform functions correctly, enhance the user experience, and analyse usage patterns for continuous improvement.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential Cookies | Required for core platform operations, secure Login & session verification | Session only |
| Preference Cookies | Store user language settings, themes, and display preferences | 1 year |
| Analytics Cookies | Analyse how users interact with the platform for improvements | 6 months |
| Security Cookies | Detect suspicious login attempts & protect against CSRF | Session only |
You can manage or delete cookies through your web browser settings at any time. Please note, however, that disabling certain cookies — especially essential cookies — may affect the functionality and security of your account on the play8 platform. Analytics and preference cookies can be disabled without affecting core platform functionality.
Play8 takes children's privacy protection very seriously. Our platform is exclusively designed for adult users aged 18 and above. We do not knowingly collect, process, or store personal information of individuals under the age of 18.
During the registration process, play8 performs an age check using the information provided by the applicant along with identity document verification. Should we determine that a user has provided false information regarding their age at registration, the account will be terminated immediately and all balances and wins will be forfeited in accordance with the platform's Terms and Conditions.
Immediate Action: If you are a parent or guardian with reason to believe your child has registered for or used the play8 platform, please contact us immediately at [email protected]. We will investigate and take appropriate action within 24 hours.
Play8 reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our data handling practices, new legal requirements, or platform service improvements. Each amendment will include a clear effective date at the top of this document.
For material and significant amendments, play8 will notify users via their registered email or in-platform notification at least 14 days before the changes take effect. For minor amendments that are purely technical or clarificatory in nature, we may update this document without prior notice.
Your continued use of the play8 platform after any amendment takes effect constitutes your acceptance of the latest version of the Privacy Policy. If you do not agree with the changes made, you have the right to close your account by contacting our support team.
Version History: play8 maintains an archive of all previous versions of this Privacy Policy. Users may request access to earlier versions by contacting our privacy team via email for reference and comparison purposes.
If you have any questions, concerns, or complaints regarding this Privacy Policy or how play8 handles your personal data, our privacy team is ready to assist. We are committed to providing a thorough and accurate response to every privacy enquiry received.
If you are not satisfied with our response to a privacy complaint, you have the right to refer the matter to the Personal Data Protection Commissioner of Malaysia (PDPC) under the provisions of the Personal Data Protection Act 2010.
All your personal data and financial information are protected using the same military-grade encryption employed by leading banking institutions worldwide.
Play8 operates in full compliance with the Malaysian Personal Data Protection Act 2010, ensuring that user rights as data subjects are fully respected.
Only authorised play8 staff with a specific business need may access user data. All access is automatically logged and audited by our system.
Play8's cybersecurity team monitors the platform around the clock to detect and respond to any threats or suspicious activity in real time.
Play8 has never and will never sell, rent, or trade users' personal data to any third party for marketing or commercial purposes.
You have full control over your personal data. Request data deletion at any time and our team will process the request within the period stipulated by law.
Your data is fully protected. Enjoy Malaysia's best gaming experience with the assurance that your privacy is always our top priority.
Responsible Gaming
Play8 is committed to ensuring a safe and responsible gaming experience for all users in Malaysia.
Learn More