Privacy Policy

This Privacy Policy (hereinafter referred to as "the Policy" or "this Policy") is published by 8mbets (hereinafter referred to as "8mbets", "the Platform", "we", "us", or "our") and governs the collection, processing, storage, and disclosure of personal data relating to all users (hereinafter "User", "Player", or "you") who access or register an account on the 8mbets website at https://8mbets.cam.

8mbets is committed to protecting the privacy and personal data of its players in accordance with applicable data protection principles. We operate the Platform for the benefit of Malaysian players and take our data stewardship responsibilities seriously. This Policy is designed to give you clear, transparent information about how your personal data is handled — in language that is accessible and direct, not buried in impenetrable legal jargon.

This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which form part of the overall framework governing your relationship with 8mbets. This Policy is effective as of 1 January 2026.

For the purposes of this Privacy Policy, the following definitions shall apply:

• "Personal Data" means any information relating to an identified or identifiable natural person — including name, email address, phone number, payment details, IP address, device identifiers, and betting or transaction history.
• "Processing" means any operation performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, restriction, erasure, or destruction.
• "Data Controller" means 8mbets, the entity that determines the purposes and means of processing Personal Data collected through the Platform.
• "Data Processor" means any third party that processes Personal Data on behalf of 8mbets in accordance with this Policy and applicable data protection obligations.
• "Consent" means any freely given, specific, informed, and unambiguous indication by the data subject of their agreement to the processing of their Personal Data for one or more specific purposes.
• "KYC Data" means identity and address verification documentation submitted by a Player as part of the Know Your Customer process, including government-issued ID and proof of address documents.
• "Cookies" means small data files stored on a User's device by the Platform for purposes including session management, analytics, and personalisation.

8mbets collects Personal Data through various touchpoints across the Platform. The categories of data we collect, and the purposes for which each category is typically used, are set out in the table below:

We do not collect sensitive categories of Personal Data (such as racial or ethnic origin, political opinions, religious beliefs, or biometric data) unless specifically required for compliance purposes and with explicit consent or as otherwise permitted by applicable law.

8mbets collects Personal Data through the following channels:

4.1 Directly From You

• During account registration — when you provide your name, email address, date of birth, mobile number, and residential address.
• During the KYC verification process — when you upload identity documents and proof of address.
• When you make a deposit or request a withdrawal — payment details and transaction metadata are captured through our payment processing partners.
• When you contact our support team via live chat, WhatsApp, or email — communication data including your query and our responses are recorded.
• When you submit feedback, respond to surveys, or participate in promotions.

4.2 Automatically Through Platform Use

• Technical data such as IP address, device identifiers, browser information, and session duration are collected automatically when you access the Platform.
• Cookies and similar tracking technologies collect usage data including pages visited, features used, and time spent on the Platform.
• Betting and gaming activity is automatically recorded in our systems for every bet placed, game started, or wager settled.

4.3 From Third Parties

• Payment processors (including DuitNow, FPX, Maybank, CIMB, and Public Bank intermediaries) may share transaction confirmation data with us.
• Identity verification and fraud prevention partners may provide supplementary verification data as part of the KYC process.
• Geolocation service providers may confirm country-level access to assist with jurisdiction compliance.

8mbets processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and 8mbets (i.e., operating your Account, processing deposits and withdrawals, settling bets, and administering bonuses).
• Legal Obligation: Processing is required to comply with applicable laws including anti-money laundering (AML) regulations, age verification requirements, and identity verification obligations.
• Legitimate Interests: Processing is necessary for the legitimate interests of 8mbets, including fraud prevention, platform security, responsible gambling monitoring, and service improvement — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we process your data for marketing communications, we rely on your explicit consent. You may withdraw consent at any time by contacting our support team or updating your communication preferences within your Account settings.

8mbets uses your Personal Data for the following primary purposes:

6.1 Account Management & Platform Operations

To create and maintain your Account, authenticate your identity at login, process deposits and withdrawals via Malaysian payment methods including DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, and Public Bank, and provide access to our games, sports betting markets, and live dealer tables.

6.2 Regulatory Compliance

To verify your age (strictly 21 years and above), conduct KYC identity checks, fulfil AML monitoring obligations, and respond to lawful requests from regulatory or law enforcement authorities. Compliance processing is mandatory — we cannot operate your Account or process transactions without it.

6.3 Responsible Gambling

To monitor your betting and gaming patterns for indicators of problem gambling behaviour, to enforce deposit and loss limits you have set through our Responsible Gambling Tools, and to give effect to any self-exclusion or cooling-off period you have requested. We take these obligations seriously as a core element of our platform operations.

6.4 Security & Fraud Prevention

To detect, investigate, and prevent fraudulent transactions, unauthorised account access, bonus abuse, multi-accounting, and other security threats to the Platform or to individual players.

6.5 Customer Support

To manage and resolve support queries, provide assistance via live chat or WhatsApp, investigate complaints, and improve our service quality based on interaction data.

6.6 Marketing & Personalisation (with Consent)

Where you have provided explicit consent, to send you promotional communications about relevant offers, bonuses, and Platform updates. You may withdraw consent for marketing communications at any time without affecting your Account status.

8mbets does not sell your Personal Data to third parties. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the identified purpose:

• Payment Processors: Financial data is shared with payment processing partners (including the operators of DuitNow, FPX, and major Malaysian banks) solely to facilitate deposit and withdrawal transactions.
• Identity Verification Partners: KYC documentation may be processed by accredited third-party identity verification providers operating under data processing agreements with 8mbets.
• Fraud Prevention & AML Partners: Technical and transaction data may be shared with specialist fraud prevention and AML screening providers as part of our risk management programme.
• IT Infrastructure Providers: Cloud hosting, database, and security service providers who host or process Platform data are engaged as Data Processors under contractual obligations of confidentiality and data protection.
• Regulatory & Law Enforcement Authorities: We will disclose Personal Data to regulators, law enforcement agencies, or courts where required to do so by applicable law, or where disclosure is necessary to protect the rights, safety, or property of 8mbets or other players.
• Corporate Transactions: In the event of a merger, acquisition, or restructuring of the 8mbets business, Personal Data held by the Platform may be transferred to the relevant successor entity, subject to continued protection consistent with this Policy.

8mbets uses cookies and similar tracking technologies to operate the Platform efficiently, improve user experience, and gather analytics data. The following categories of cookies may be used:

• Strictly Necessary Cookies: Essential for Platform functionality including session management, authentication state, and security token storage. These cannot be disabled without impairing your ability to use the Platform.
• Performance & Analytics Cookies: Used to understand how players interact with the Platform — which pages are visited most frequently, where sessions originate (e.g., Kuala Lumpur, Penang, Johor Bahru), and how navigation flows are used. Data is aggregated and anonymised where possible.
• Functionality Cookies: Store your preferences such as language settings, display preferences, and remembered login details (if you opt in to this feature).
• Marketing Cookies: Used, where consent has been given, to track promotional campaign effectiveness and deliver relevant promotional content based on your Platform activity.

You may control cookie settings through your browser preferences at any time. Please note that disabling certain cookies may affect Platform functionality. Continued use of the Platform after being presented with cookie consent options constitutes acceptance of strictly necessary cookies.

8mbets retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting, and reporting requirements. The following general retention periods apply:

• Active Account Data: Retained throughout the duration of your Account and for a period of at least five (5) years following Account closure, in accordance with AML and financial record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission or from the date of Account closure, whichever is later.
• Transaction Records: Retained for a minimum of seven (7) years in accordance with financial regulatory requirements applicable to payment processing and AML compliance.
• Support Communications: Retained for three (3) years from the date of the relevant interaction, unless the matter is subject to an ongoing dispute or investigation.
• Marketing Preferences: Retained until consent is withdrawn, plus a reasonable period thereafter to evidence the consent record.

8mbets implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 8mbets Platform.
• Encryption of sensitive Personal Data and financial information at rest within our database infrastructure.
• Two-factor authentication (2FA) available for all player Accounts, strongly recommended to protect Account access.
• Role-based access controls limiting internal access to Personal Data to employees who require it to perform their duties.
• Regular security audits, penetration testing, and vulnerability assessments of Platform infrastructure.
• IP-based anomaly detection and real-time fraud monitoring to identify and respond to suspicious access patterns.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 8mbets will notify you and any relevant authorities in accordance with applicable legal obligations and without undue delay.

Subject to applicable law, you have the following rights with respect to your Personal Data held by 8mbets:

• Right of Access: You have the right to request a copy of the Personal Data we hold about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any Personal Data that is inaccurate or incomplete. You may update basic Account information directly within your Account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose it was collected, or where you withdraw consent (and no other legal basis applies). This right is subject to overriding retention obligations under AML and financial law.
• Right to Restriction of Processing: You may request that we restrict processing of your Personal Data in certain circumstances, such as while the accuracy of data is being contested.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you have the right to receive your Personal Data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests, and to processing for direct marketing purposes at any time without providing any specific reason.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact our Data Protection team at the details provided in Section 16. We will respond to all verifiable requests within 30 days. In complex cases, this period may be extended by a further 60 days, in which case you will be notified of the extension and the reason for it.

If you are a parent or guardian and believe that your child has provided Personal Data to 8mbets, please contact us immediately at the details in Section 16 so that we can take appropriate action.

The 8mbets Platform does not contain links to third-party websites, social media platforms, or external services in its standard navigation or core content. Where any such reference appears in a contextual or informational capacity, 8mbets is not responsible for the privacy practices or content of those third-party resources.

Players should review the privacy policies of any third-party service they interact with independently of the 8mbets Platform, including payment processors and e-wallet providers such as Touch 'n Go eWallet, Boost, and GrabPay, whose data handling is governed by their own applicable privacy policies.

8mbets operates with infrastructure that may involve the storage or processing of Personal Data in jurisdictions outside Malaysia. Where Personal Data is transferred internationally, 8mbets ensures that appropriate safeguards are in place — including contractual clauses, data processing agreements, and transfer impact assessments where applicable — to ensure that your data receives a level of protection consistent with the standards described in this Policy.

8mbets reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. The revised Policy will be published at /privacy-policy with an updated "Last updated" date at the top of the page.

Where amendments are material — meaning they significantly change how we collect, use, or share your Personal Data — 8mbets will endeavour to provide advance notice via in-platform notification or email to the address registered on your Account. For non-material amendments, the publication of the updated Policy constitutes sufficient notice.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of those amendments. We encourage you to review this Policy periodically.

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have a concern about how your Personal Data is being handled, please contact our support and data protection team using the contact details below. All contact information is displayed as plain text only and is not a clickable link.

Please include your full registered name, Account username, and a clear description of your request or concern when contacting us regarding a data subject rights request. This helps us verify your identity and process your request efficiently.