C8Asia Privacy Policy – Malaysian Player Data Protection

C8asia is an online sports betting and casino platform operating for players in Malaysia. As a digital platform operator that processes financial and personal information, we fully recognise the significant responsibility we hold in safeguarding every member's privacy.

This privacy policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection principles. All c8asia staff who handle members' personal data are trained and bound by strict internal privacy policies, and access to data is restricted solely to those who genuinely require it to carry out their duties.

C8asia collects personal data in two main ways: directly from you during registration and platform use, and automatically through standard tracking technologies. The categories of data we collect are as follows:

C8asia uses collected personal data only for legitimate and necessary purposes. We will not use your data for any purpose beyond those stated below without first obtaining your consent:

• Account Management — creates, verifies and maintains your member account, including password recovery and identity verification (KYC).
• Transaction Processing — processes deposits via DuitNow, Touch 'n Go, GrabPay, Boost, ShopeePay and FPX, and handles withdrawal requests to your Malaysian bank account or e-wallet.
• Customer Support — to address enquiries, resolve complaints, and provide assistance relating to your account or transactions.
• Security & Fraud Prevention — to detect and prevent fraudulent activity, money laundering, unauthorised access, and platform abuse.
• Legal Compliance — to meet Malaysia's legal compliance obligations, including anti-money laundering (AML) and know your customer (KYC) requirements.
• Service Improvement — analyses usage patterns in aggregate (not at an individual level) to improve platform design, user experience, and content relevance.
• Marketing Communications — used to send you promotional information, bonuses and new offers — only if you have consented to receive such communications, with the option to unsubscribe at any time.
• Responsible Gaming — to monitor activity patterns for signs of gambling-related issues and provide appropriate assistance to members who may need it.

C8asia does not sell, rent, or distribute members' personal data for commercial purposes to any third party. However, there are limited situations where data may be shared with specific parties for legitimate reasons:

• Payment Processors — transaction information shared with payment providers such as DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and FPX banks (Maybank, CIMB, Public Bank, RHB, Hong Leong) solely for the purpose of processing your deposits and withdrawals.
• Technology Service Providers — technical vendors that help operate the c8asia platform infrastructure (such as cloud and cybersecurity services) are bound by strict confidentiality agreements.
• Malaysian Authorities — when required by law, court order, or directive from a relevant authority in Malaysia. c8asia will comply with such lawful orders while protecting members' rights to the fullest extent permitted by law.
• Identity Verification Provider — a third-party KYC service that helps verify member identities to meet anti-money laundering compliance requirements.

C8asia continually invests in security infrastructure to ensure members' personal data is always protected against unauthorised access, disclosure, alteration, or destruction. Our key security measures include:

• SSL 256-bit Encryption — all data communications between your browser or app and c8asia's servers are encrypted using the latest TLS protocol, preventing any third party from intercepting or reading your data.
• Two-Factor Authentication (2FA) — an additional security option available to all members, requiring OTP verification via your Malaysian phone number each time you log in from a new device.
• Internal Access Controls — members' personal data is accessible only to c8asia staff with a clear, legitimate business need. All access is logged and regularly audited.
• Real-Time Security Monitoring — c8asia's automated monitoring system detects suspicious activity 24/7, including repeated failed login attempts and unusual transaction patterns.
• Regular Security Audits — c8asia conducts regular security audits by independent third parties to identify and address any vulnerabilities before they can be exploited.
• Secure Data Backup — data is regularly backed up to secure data centres to ensure service continuity and data recovery in the event of a technical failure.

C8asia retains your personal data only for as long as necessary for the purposes outlined in this privacy policy or as required by applicable Malaysian law. The main data retention schedule is as follows:

• Active Account Data — retained for the duration your c8asia account remains active, plus any applicable legal compliance period following account closure.
• Financial Transaction Records — retained for a minimum of 7 years in accordance with Malaysia's financial and anti-money laundering legal requirements.
• KYC & Identity Verification Data — retained for the period required by compliance obligations, typically no less than 5 years after the business relationship ends.
• Customer Support Log — retained for 3 years for reference and dispute resolution purposes.
• Cookie & Session Data — session cookies expire automatically when you close your browser; preference cookies persist for up to 12 months unless deleted earlier.

Once the retention period ends, data will be securely deleted or anonymised (with all personally identifiable information removed) in accordance with established procedures.

The c8asia website uses cookies and similar tracking technologies to enhance the user experience, ensure account security, and understand platform usage patterns. The following are the types of cookies we use:

• Essential Cookies (Required) — required for core platform functions such as login sessions, security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Analytics Cookies — to help c8asia understand how visitors use the platform, which pages are most visited, and where users encounter difficulties. This data is collected in aggregate form and does not identify individuals.
• Preference Cookies — saves your preferences such as display language, account settings and game preferences to ensure a more personalised experience each time you visit c8asia.
• Security Cookies — used to detect suspicious activity, prevent cross-site request forgery (CSRF) and protect your account from security threats.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), every c8asia member has the following rights regarding their personal data. We are committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, please contact the c8asia support team via live chat or send an email to support@c8asia.best with the subject line "Data Rights Request". We will respond within 21 business days as required under PDPA 2010.

C8asia strictly prohibits any individual under the age of 18 from registering or using our platform. We do not knowingly collect personal data from children.

In the course of operating c8asia, members' personal data may be stored or processed on servers located outside Malaysia, including in other regions across Asia. All cross-border data transfers carried out by c8asia comply with the following conditions:

• The recipient country or region maintains a level of data protection equivalent to or higher than Malaysia's.
• Data transfers are governed by comprehensive data processing agreements with the receiving parties.
• All data transfers are conducted through encrypted, secure channels.
• Data transferred is limited to the minimum necessary for legitimate operational purposes.

C8asia reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or changes to the services we offer. We are committed to notifying members of any material changes.

• Material changes will be communicated via in-platform notifications or email to the relevant members.
• The date of the most recent update will always be displayed at the top of this page.
• Continued use of the c8asia platform after any changes are published will be considered acceptance of the updated policy.
• If you do not agree with the changes made, you have the right to close your account and request data deletion before the new policy takes full effect.

If you have any questions, concerns, or complaints regarding how c8asia handles your personal data, or if you wish to exercise any of your rights under the PDPA 2010, please reach out to us through the following channels:

• 24/7 Live Chat — the fastest way to reach us for urgent enquiries. Click the chat icon at the bottom of the page to connect with the c8asia support team in Bahasa Melayu.
• Privacy Email — send an email to support@c8asia.best with the subject line "Privacy Policy Enquiry" or "Data Rights Request" for a response within 2 business days.