8 wins Privacy Policy – Your Personal Data Protection

01 Introduction & Scope of Privacy Policy

8 wins ("we", "platform", "company") operates under the domain 8wins.my and fully committed to protecting the privacy of all members and users who use our services. This Privacy Policy has been drafted in accordance with the Personal Data Protection Act 2010 (PDPA) Malaysia, and sets out in detail our personal data management practices.

This policy applies to all personal information we collect when you access the 8wins.my website, register an account, make deposits using local Malaysian payment methods such as Touch 'n Go eWallet, GrabPay, FPX or DuitNow, play Live Casino games, Sports Betting or slots, and when you interact with our customer support team.

By using the 8 wins platform, you consent to the collection and processing of your personal data as described in this Privacy Policy. If you do not agree, please discontinue use of the platform and contact us to close your account.

02 Types of Personal Data We Collect

8 wins collects several categories of personal data depending on how you interact with our platform. Below is a summary of the data we collect:

We only collect data that is strictly necessary to provide you with a safe, fair, and quality service. We do not collect sensitive data such as medical information or religious beliefs unless you voluntarily share it with us.

03 How We Use Your Personal Data

8 Wins uses the personal data collected for the following legally valid purposes:

• Account Management: Creating, verifying, and maintaining your member account, including the KYC process required by industry standards.
• Transaction Processing: Processing deposits via FPX, DuitNow, Touch 'n Go eWallet, GrabPay, Boost and ShopeePay, and managing withdrawals to verified accounts.
• Platform Security: To detect and prevent fraud, money laundering, unauthorised access, and other harmful activity on the 8 wins platform.
• Legal Compliance: To fulfil legal obligations under Malaysia's PDPA 2010, anti-money laundering (AML) requirements, and industry KYC standards.
• Service Improvement: To analyse usage patterns in order to improve the user experience, enhance platform features, and ensure system stability.
• Service Communications: To send account-related notifications, transaction confirmations, security updates, and relevant promotional alerts.
• Customer Support: Resolving enquiries, complaints, and assistance requests submitted to the 8 wins support team.
• Responsible Gambling: Monitoring gameplay patterns to identify signs of problem gambling and offer appropriate assistance.

04 Data Sharing with Third Parties

8 wins maintains a strict policy on the sharing of personal data. We do not sell your data to any party for marketing purposes. However, in certain limited situations, we may share your data with:

• Payment Service Providers: Financial institutions and e-wallet providers (such as TNG Digital, Grab Financial, Boost) that process your transactions – only the minimum data required to process the payment will be shared.
• Game Software Providers: Casino and Sports Betting software developers who provide games on the 8 wins platform — data is shared in anonymised or pseudonymised format for technical purposes only.
• Malaysian Authorities: Malaysian government agencies, law enforcement authorities, or regulatory bodies when required by law or a valid court order.
• Auditors & Professional Advisors: Audit firms, solicitors, or consultants bound by strict professional confidentiality obligations.
• Cybersecurity Provider: Companies that help us detect and prevent online fraud – only relevant technical data is shared.

All third parties that share data with 8 wins are required to comply with our Privacy Policy and Malaysia's Personal Data Protection Act 2010. They are not permitted to use your data for any purpose other than what is specified in their agreement with 8 wins.

05 Personal Data Security

8 wins continually invests in high-grade security infrastructure to keep your personal data safe at all times. The security measures we have in place include:

• 256-bit SSL Encryption: All data transmitted between your device and 8 wins servers is encrypted using the industry-standard TLS/SSL 256-bit protocol – the same standard used by leading Malaysian banking institutions.
• Secure Data Storage: Your personal data is stored on servers protected by multi-layered firewalls, strict access controls, and 24/7 monitoring.
• Two-Factor Authentication (2FA): We encourage all members to enable 2FA on their accounts for an added layer of protection against unauthorised access.
• Internal Access Controls: Only 8 wins staff who require access to your personal data to carry out their authorised duties are permitted to do so — the "least privilege" principle is strictly observed.
• Regular Security Audits: The 8 wins platform undergoes regular penetration testing and security audits by independent experts to identify and address any vulnerabilities.
• Real-Time Threat Monitoring: An automated threat detection system monitors for suspicious activity around the clock and responds immediately to any security incidents.

06 Cookies & Tracking Technologies

8 wins uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as maintaining login sessions, remembering language preferences, and ensuring transaction security. These cookies cannot be disabled.
• Performance Cookies: Collects anonymous information about how you use the platform — pages visited, time spent, and errors encountered — to help us improve our services.
• Functional Cookies: To remember your preferences and settings – such as your preferred betting denomination, favourite games, and interface language – for a more personalised experience.
• Analytics Cookies: Helps us understand aggregate traffic patterns and platform usage to make better business decisions.

You can control and manage cookie settings through your web browser settings. However, disabling certain cookies may affect the functionality of the 8 wins platform. For more information on how to manage cookies, please refer to your web browser's documentation.

07 Your Rights Under Malaysia's PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data held by 8 wins:

To exercise any of the rights above, please contact our Data Protection Officer by email at support@8wins.my. We will process your request within 21 working days in accordance with PDPA requirements.

08 Data Retention & Deletion

8 Wins retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy or as required by Malaysian law.

• Active Account Data: Retained for the duration your account is active, plus 7 years after account closure for legal compliance and audit purposes.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysia's tax and anti-money laundering legal requirements.
• Communication Logs: Live chat logs and support emails are retained for 2 years for service improvement and complaint resolution purposes.
• Marketing Data: Retained until you withdraw consent or request that we stop contacting you.
• Cookie Data: Session cookies are deleted when you close your browser, while persistent cookies expire after a set period (typically 30 to 365 days).

When your personal data is no longer needed, 8 Wins will securely delete it using methods that ensure the data cannot be recovered or accessed by any party.

09 Contact Us for Privacy Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal data, please contact the 8 wins Data Protection Officer through the following channels:

• Email: support@8wins.my – for written enquiries that require a written record
• Live Chat: Available on the 8 wins platform 24 hours a day, 7 days a week for immediate enquiries
• Response Time: We aim to respond to all privacy enquiries within 3 working days

You may also refer to Terms & Conditions and Responsible Gaming us for more information on how we manage your account and gaming activity.

If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection, Ministry of Digital Malaysia through their official channels.