Privacy Policy 1Malaysia 8 – Our Member Personal Data Protection

1 Introduction

1Malaysia 8 ("we", "the company", or "the platform") takes the privacy of every member who uses our Sports Betting and online casino platform seriously. This Privacy Policy transparently explains how we collect, use, disclose, and protect your personal information when you use 1Malaysia 8's services.

This policy is prepared in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international data protection best practices. We are committed to ensuring your personal information is handled responsibly, transparently, and securely at all times.

When we refer to "personal data" in this document, we mean any information that can be used to identify you directly or indirectly — including your name, phone number, email address, financial information, and your usage history on the 1Malaysia 8 platform.

2 Types of Personal Data We Collect

1Malaysia 8 collects various types of personal data depending on how you interact with our platform. The data we collect can be categorised as follows:

We do not collect sensitive data categories such as health information, religious beliefs, or sexual orientation, unless required to fulfil responsible gambling obligations and you have given explicit consent for that purpose.

3 How We Collect Personal Data

1Malaysia 8 collects your personal data through several different channels:

• During Registration: When you create a new account at 1Malaysia 8, you provide the basic identity and contact information required to set up your account;
• During Financial Transactions: When you make a deposit via Touch 'n Go eWallet, GrabPay, DuitNow, FPX (Maybank2u, CIMB Clicks), Boost, or ShopeePay, or when you submit a withdrawal request, transaction information is collected and recorded;
• During Platform Use: Technical and usage data is collected automatically when you browse the website or use the 1Malaysia 8 mobile app;
• During Identity Verification (KYC): When you are asked to submit verification documents such as a copy of your identity card or proof of address, the information from those documents is processed and stored;
• Via Communications with Us: When you contact customer support via live chat, email, or other channels, those communications are recorded for quality assurance and issue resolution purposes;
• Via Cookies and Similar Technologies: Our platform uses cookies and other tracking technologies to collect data on your usage and preferences — this is explained in greater detail in Section 8.

4 Purpose of Personal Data Use

1Malaysia 8 uses collected personal data solely for the following legitimate and stated purposes:

• Account Management: Creating, verifying, and managing your member account on the 1Malaysia 8 platform, including identity verification and KYC processing;
• Service Provision: Enables you to use all platform features, including placing Sports Betting, playing casino games, and making deposits and withdrawals;
• Financial Transaction Processing: Processing deposits via local eWallet and FPX, as well as verifying and processing your withdrawal requests;
• Security & Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, platform abuse, and any breach of our Terms & Conditions;
• Legal Compliance: Fulfilling legal obligations, including financial reporting requirements and compliance with directives from competent authorities;
• Customer Support: Responding to enquiries, resolving complaints, and providing technical assistance;
• Service Improvement: Analysing aggregate platform usage patterns to improve features, functionality, and the overall user experience;
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate support to members who need it;
• Service Communications: Sending important notifications relating to your account, transactions, changes to terms, and security updates.

We do not use your personal data for any other purpose without first obtaining your consent. If we wish to use your data for a new purpose not covered by this policy, we will notify you and request your consent before doing so.

5 Data Sharing & Disclosure

1Malaysia 8 does not sell or rent your personal data to any third party. However, we may share your personal data in the following limited circumstances:

• Service Providers: We share necessary data with payment service providers (such as processors for Touch 'n Go eWallet, GrabPay, DuitNow, FPX) and technical service providers who assist us in operating the platform. All such third parties are bound by strict data protection agreements;
• Legal Obligations: We will disclose data where required to do so under Malaysian law, by court order, or upon instruction from a competent authority such as Bank Negara Malaysia or law enforcement agencies;
• Rights Protection: We reserve the right to disclose data to protect the rights, property, or safety of 1Malaysia 8, our members, or the public when required;
• Business Transfer: In the event of a merger, acquisition, or sale of company assets, personal data may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

6 Data Security

Protecting your personal data is an absolute priority for 1Malaysia 8. We implement a range of technical and organisational security measures to safeguard your data against unauthorised access, alteration, disclosure, or destruction:

• 256-bit SSL Encryption: All data communications between your device and our servers are encrypted using industry-standard TLS/SSL protocols;
• Data-at-Rest Encryption: Sensitive data stored in our databases, including financial information and identity verification documents, is encrypted using recognised encryption algorithms;
• Layered Access Controls: Access to personal data within our internal systems is restricted to staff who require it to perform their duties, with strict access monitoring in place;
• Continuous Security Monitoring: Our systems are monitored around the clock to detect any suspicious activity or unauthorised access attempts;
• Regular Penetration Testing: We conduct regular security testing, including vulnerability assessments and penetration testing by independent third-party security experts;
• Staff Training: All 1Malaysia 8 staff with access to personal data receive regular data protection training.

While we make every effort to protect your data, no security system can be guaranteed 100% secure. In the unlikely event of a security incident, we are committed to responding promptly and notifying affected users within the stipulated timeframe.

7 Data Retention Period

1Malaysia 8 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or to comply with applicable legal requirements. The following are our general data retention guidelines:

• Active Account Data: Retained for the duration of your active 1Malaysia 8 account and for up to seven years after account closure for financial record-keeping and legal compliance purposes;
• Financial Transaction Records: Retained for seven years in accordance with Malaysian legal requirements on financial record-keeping;
• KYC Documents: Retained for the duration of the active account and seven years after account closure;
• Gaming and Betting History: Retained for five years for dispute resolution and legal compliance purposes;
• Support Communication Records: Retained for three years for reference and service quality improvement purposes;
• Technical & Log Data: Retained for 90 days for security purposes and technical troubleshooting;
• Cookie Data: Depending on the type of cookie — session cookies are deleted when the browser is closed, while persistent cookies are stored for up to 24 months or until you delete them.

Once the designated retention period has ended and there is no legal requirement to retain the data, 1Malaysia 8 will securely delete or anonymise your personal data using approved procedures.

8 Cookies & Tracking Technologies

The 1Malaysia 8 platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform runs smoothly. We use several types of cookies:

• Required Cookies (Mandatory): These cookies are essential for the platform's basic functions, such as maintaining your login session, remembering your language preference, and ensuring session security. They cannot be disabled;
• Functional Cookies: Used to remember your preferences and settings, such as responsible gambling limits you have set and your platform display preferences;
• Analytics Cookies: Helps us understand how users interact with the 1Malaysia 8 platform in aggregate, enabling us to make meaningful improvements;
• Security Cookies: Helping us detect and prevent fraudulent activity, including identifying suspicious access patterns.

You can manage your cookie preferences through your web browser settings. Please note that disabling certain cookies may affect the functionality of the 1Malaysia 8 platform — particularly cookies related to session authentication and security. For guidance on managing cookies in your browser, please refer to the relevant browser's support documentation.

9 Your Rights Regarding Personal Data

As a 1Malaysia 8 member and as an individual whose personal data we hold, you have the following rights, which you may exercise at any time:

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this information in a readable and understandable format within 30 days of receiving your request;
• Right to Rectification: If the personal data we hold is inaccurate or incomplete, you have the right to request that we correct or complete it promptly;
• Right to Erasure: Under certain circumstances, you have the right to request the deletion of your personal data. Please note that this right may be limited by our legal obligations to retain certain records;
• Right to Restriction of Processing: You have the right to request that we limit how we process your data in certain circumstances — for example, while you are verifying the accuracy of the data we hold on you;
• Data Portability Right: You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider if you wish;
• Right to Object: You have the right to object to the processing of your personal data for specific purposes, including direct marketing.

To exercise any of the rights above, please contact us by email at support@1malaysia8.com or via Live Chat on the platform, stating the right you wish to exercise and the relevant details. We will respond to your request within 30 days. Where a request is complex or involves multiple elements, we reserve the right to extend the response period to 60 days, with prior notice to you.

10 Protection of Children's Data

The 1Malaysia 8 platform is a service for individuals aged 21 and above only. We do not knowingly collect, process, or store personal data of individuals under the age of 21.

The 1Malaysia 8 registration process requires age verification and identity documentation. Any account found to have been registered by an individual below the minimum required age will be closed immediately and all related data will be deleted.

11 Changes to the Privacy Policy

1Malaysia 8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data collection practices, legal requirements, or the way we conduct our business. For material and significant changes, we will:

• Displaying a prominent notice on the 1Malaysia 8 platform homepage at least 14 days before the changes take effect;
• Sending email notifications to all registered members at the email address stored in our system;
• Requesting acknowledgement of acceptance for significant changes that affect how we use your data.

For non-material changes such as spelling corrections, clarifications that do not alter the meaning, or updates to contact information, we reserve the right to make such changes without prior notice. The "Updated" date at the top of this document will always reflect the date the latest update took effect.

Your continued use of the 1Malaysia 8 platform after the effective date of any changes will be considered your acceptance of the updated Privacy Policy. If you do not agree with the changes made, you have the right to close your account before the effective date.

12 Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how 1Malaysia 8 handles your personal data, our team is here to help:

• Privacy Email: support@1malaysia8.com — please include "Data Privacy Enquiry" in the email subject line
• Live Chat: Available 24/7 via the chat icon within the 1Malaysia 8 platform
• Response Time: We are committed to responding to all privacy-related enquiries within 48 business hours.

For formal requests regarding data rights — such as data access, correction, or deletion — please submit your request in writing via email, including your account number and the specific details of your request. We will acknowledge receipt within 24 hours and provide a full response within 30 days.