8fafafa Privacy Policy — Malaysia Player Data Protection

This Privacy Policy describes how 8fafafa ("we", "Platform") collect, use, store and protect your personal information when you use the website https://8fafafa.one and all related services.

We understand that your trust is our most valuable asset. That is why we take privacy protection extremely seriously and continually invest in systems, procedures and staff training to ensure your data is always handled with the highest level of care.

This Policy applies to all users of the 8fafafa including unregistered visitors, registered members, promotion participants, and all individuals who interact with our platform through any channel, including the website, mobile app, and customer service channels.

We comply with Personal Data Protection Act 2010 (PDPA) Malaysia and all relevant data protection regulations within our operating jurisdictions. If you are located outside Malaysia, please note that the level of data protection may differ from the laws in your country.

We collect various categories of information depending on how you interact with the platform 8fafafa:

Some information is mandatory to provide our services — for example, identity information for KYC compliance and financial information to process transactions. Other information is collected on the basis of your consent to improve your gaming experience.

The information we collect is used for lawful and transparent purposes. Every use of data is based on an appropriate legal basis — whether to perform a contract, comply with legal obligations, our legitimate interests, or based on your consent:

• Managing your account — Account registration, identity verification, secure login, and player profile management.
• Processing financial transactions — Accurate deposit, withdrawal, and transaction history records for your account.
• Legal and regulatory compliance — Meets KYC (Know Your Customer), AML (Anti-Money Laundering), and reporting requirements to the relevant authorities where required by law.
• Platform security — Detecting, investigating, and preventing fraud, multi-account usage, collusion, and other suspicious activities.
• Service improvements — Analyzing platform usage patterns to improve player experience, game performance, and interface usability.
• Service communications — Sending important notifications related to your account, transactions, term changes, and security information.
• Marketing (with consent) — Sending promotional offers, bonuses, and relevant campaign information to players who have consented to receive such communications.
• Responsible gaming — Monitors gaming patterns to identify signs of problem gambling and provide appropriate support when needed.

8fafafa does not sell your personal data. However, there are certain circumstances in which we may need to share your information with selected parties:

• Third-party service providers — Companies that assist us in operating the platform, such as payment processors, KYC verification providers, cloud service providers, and analytics companies. All such parties are bound by strict data confidentiality agreements and may only use your data for purposes we specify.
• Licensed game providers — Minimum necessary information is shared with third-party game providers (e.g., live casino suppliers) to enable you to access their games within our platform.
• Regulatory authorities — We will disclose information when required by law, court order, or a request from a competent authority, including financial crime prevention agencies.
• Law enforcement — In cases involving fraud, money laundering, or serious security threats, we may share the necessary information with the relevant authorities without prior notice to you.
• Business transfers — In the event of a platform merger, acquisition, or asset transfer, user data may be transferred to the new entity, subject to prior notification and continued privacy protection.

In all data sharing arrangements, we ensure that the receiving party has adequate data protection mechanisms equivalent to our own standards.

Platform 8fafafa uses cookies and similar tracking technologies to enhance the user experience and analyse platform performance. The following are the types of cookies we use:

• Essential Cookies — Required for core platform functions such as login session authentication and security. These cookies cannot be disabled without affecting platform functionality.
• Preference Cookies — Saving your preferences such as language, display settings, and game choices to provide a more personalized experience.
• Analytics Cookies — Helps us understand how players use the platform through aggregate data that does not identify individuals. This data is used to improve platform design and performance.
• Marketing Cookies — Used with your consent to deliver relevant advertisements and measure the effectiveness of our marketing campaigns.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality and user experience on our platform. For more information on managing cookies, refer to your web browser's help guide.

We implement comprehensive technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration or destruction:

• 256-bit SSL/TLS Encryption for all data transmitted between your device and our servers.
• Data Encryption at Rest for all sensitive information stored in our databases.
• Two-factor authentication (2FA) available for all player accounts as an additional layer of security.
• Tiered access controls — Only authorised personnel may access player personal data, and every access is logged in detail.
• Regular security audits and penetration testing by independent security experts to identify and address system vulnerabilities.
• Incident response plan that has been tested to ensure we can respond quickly and effectively in the event of a data breach.
• Staff training ongoing training on data security practices and awareness of the latest cyber threats.

As a data subject, you have the following rights under Malaysia's Personal Data Protection Act 2010, and we are committed to ensuring these rights can be exercised with ease:

To exercise any of the above rights, contact our Data Protection Officer at [email protected] or via live chat on the platform. We may need to verify your identity before processing your request to ensure the security of your data.

We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law:

• Active account data — Retained for the duration your account is active and for 5 years after account closure for legal compliance and dispute resolution purposes.
• Financial transaction records — Retained for a minimum of 7 years in accordance with Malaysia's accounting and taxation legal requirements.
• KYC records and identity verification — Retained for the duration of the active account plus 5 years for AML compliance purposes.
• Customer service communication logs — Retained for 3 years for quality control and dispute resolution purposes.
• Analytics and usage data — Anonymised aggregate data is retained indefinitely; individual user data is deleted or anonymised after 2 years from the date of collection.
• Marketing data — Retained until you withdraw your consent or for 3 years from the last interaction, whichever comes first.

Once the retention period expires, data will be securely deleted or permanently anonymised using procedures that ensure the data cannot be recovered or re-identified.

Platform 8fafafa is exclusively for individuals aged 18 years and above. We do not knowingly collect personal data from minors. We implement age verification measures during the registration process and will promptly close any account found to belong to an underage individual.

If you believe your child or any minor has registered on our platform or provided us with their personal information without authorisation, please contact us immediately at [email protected]. We will take immediate action to delete the account in question and all associated data.

8fafafa reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in how we protect your data. When we make material changes, we will:

• Updating the "Last Updated" date at the top of this document.
• Sending email notifications to all registered members at least 14 days before the changes take effect.
• Displaying a clear notice on the platform's home page during the notice period.
• In the case of highly material changes, we may request your renewed consent before you can continue using the platform.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of the platform after any changes take effect constitutes your acceptance of the updated policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer through the following channels:

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon at the bottom right corner of the platform.
• Response Time: We are committed to responding to all privacy inquiries within 3 working days and resolve more complex cases within 14 business days.

If you are dissatisfied with how we have handled your complaint, you have the right to lodge a complaint with the Malaysian Personal Data Protection Commissioner through the official portal of the Department of Personal Data Protection (JPDP).