8fafafa Privacy Policy – Personal Data Protection for Malaysian Members

8fafafa ("we", "platform", or "company") is committed to protecting the privacy of every individual who uses our platform. This Privacy Policy clearly and transparently explains how we collect, use, disclose, and protect your personal information when you access or use our services. 8fafafa at https://8fafafa.xyz.

This policy is drawn up in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and global data protection best practices. We believe that transparency in data handling is the foundation of trust — and your trust is something we do not take lightly.

This Privacy Policy applies to all information we collect through the 8fafafa, including when you register an account, make a deposit or withdrawal, play games, contact customer support, or simply browse our website. It also applies to information you provide to us through other communication channels, including email and live chat.

8fafafa collects your personal information through two main channels — information you provide directly, and information collected automatically while you use the platform.

Information You Provide Directly

• Registration information: Username, Malaysian phone number, email address (if applicable), and encrypted password.
• Identity Verification (KYC) Information: MyKad number, full name as shown on MyKad, date of birth, and a copy of the submitted identity document.
• Financial information: eWallet details (Touch 'n Go, GrabPay, Boost, ShopeePay), DuitNow account, or Malaysian bank account information for deposit and withdrawal purposes.
• Communications: Customer support chat records, emails, and any feedback you submit to us.
• Account settings: Your deposit limit preferences, notification settings, and responsible gambling configurations that you set yourself.

Automatically Collected Information

• Usage data: Games played, session duration, login frequency, and betting patterns.
• Device data: Device type (Android/iOS/desktop), operating system, screen resolution, and web browser type.
• Network data: IP address, general geographic location (state or city level only), and internet service provider.
• Cookie and session data: Login session information, performance cookies, and session identifiers required for the platform to function.
• Transaction data: Records of all deposits, withdrawals, bets, and winnings processed through the platform. 8fafafa.

8fafafa use your personal data only for legitimate, relevant purposes that do not exceed reasonable requirements. The following are the primary purposes for which your data is used:

Platform Operations

• Creating and managing your member account at 8fafafa.
• Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as withdrawals to your Malaysian bank account or eWallet.
• Providing access to all games — slots, live baccarat, roulette, blackjack, Sports Betting on the Malaysia Super League and EPL, e-sports, and more.
• Managing bonuses, promotions, and VIP programmes you have joined.
• Providing 24/7 customer support in Bahasa Melayu via live chat and email.

Security & Compliance

• Verifying your identity during registration and the KYC process to prevent fraud.
• Detecting and investigating suspicious or unusual activity in your account.
• Complying with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements.
• Verifying age eligibility (18 years and above) as a condition of platform use.

Service Improvement

• Analysing usage patterns to improve platform performance and user experience.
• Developing new features that are more relevant to Malaysian players.
• Optimising the mobile interface for a better experience on Android and iOS.

Communication & Marketing (with your consent)

• Sending account-related notifications such as deposit confirmations, withdrawal status updates, and security alerts.
• Keeping you informed about promotions, bonuses, and exclusive offers 8fafafa — only if you have agreed to receive marketing communications.
• Sending information related to responsible gaming and relevant support resources.

8fafafa does not sell, rent, or disclose member personal data to third parties for marketing or commercial purposes. However, there are limited circumstances where sharing data with trusted parties is necessary for the platform to function properly:

Authorised Service Providers

• Game providers: Evolution Gaming, Pragmatic Play, PG Soft, Microgaming, and other providers receive only the minimum session data necessary to operate the games. They do not receive your full personally identifiable information.
• Payment processors: eWallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay) and the DuitNow and FPX systems receive only the transaction information necessary to process deposits and withdrawals.
• Technical infrastructure provider: Server hosting companies and cloud service providers that store platform data 8fafafa subject to strict confidentiality agreements.

Legally Mandated Disclosures

In certain circumstances, 8fafafa may be required to disclose member personal information to relevant authorities such as the police, anti-corruption commission, or courts pursuant to a valid legal order. We will notify you of any such disclosure where permitted by law to do so.

Business Transfer

In the event that 8fafafa involved in a merger, acquisition, or asset sale, member personal data may be transferred as part of the relevant assets. We will provide adequate notice before your data becomes subject to a different privacy policy.

8fafafa implement comprehensive technical and organisational security measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction.

Technical Measures

• Transit encryption: All communications between your browser and our servers 8fafafa encrypted using TLS 1.3 protocol with a 256-bit SSL certificate.
• Storage encryption: Sensitive data, including financial information and KYC documents, is encrypted when stored in our database.
• Passwords are encrypted: Your account password is never stored in plain text — it is encrypted using a one-way hash function that cannot be reversed.
• Multi-layer Firewall: Our server infrastructure is protected by firewalls and intrusion detection systems that continuously monitor all incoming and outgoing traffic.
• 24/7 Security Monitoring: Our security team continuously monitors systems to detect and respond to any threats or suspicious activity.

Organisational Measures

• Access to members' personal data is restricted to 8fafafa who require access to carry out their duties on a legitimate basis.
• All staff who handle personal data undergo data protection training and are bound by confidentiality agreements.
• Regular security audits are conducted to identify and address any vulnerabilities in the system.

While we take all reasonable steps to protect your data, no digital security system is entirely foolproof. Should a data security breach occur that affects your rights, 8fafafa will notify you within a reasonable timeframe and take the appropriate remedial steps.

8fafafa uses cookies and similar tracking technologies to keep the platform running smoothly, enhance the user experience, and analyse usage patterns. The following are the types of cookies we use:

You can manage or delete cookies through your web browser settings. However, removing essential cookies may affect the functionality of the platform. 8fafafa and may prevent you from logging in or accessing certain features.

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and the privacy principles we adhere to, you have the following rights regarding your personal data at 8fafafa:

To exercise any of the rights above, contact us at support@8fafafa.xyz by stating the type of request and your account number. We will verify your identity before processing any data-related request.

8fafafa retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or to comply with applicable legal obligations.

Once the relevant retention period expires, your personal data will be securely deleted or fully anonymised so that it can no longer be linked to your identity. This deletion process is permanent and irreversible.

Please note that even after you close your account 8fafafa, certain data may need to be retained for the periods specified above for legal compliance purposes — particularly financial transaction records and KYC documents subject to Malaysian statutory requirements.

The security of your financial information is something we take with the utmost seriousness. 8fafafa uses fully encrypted payment channels for all deposit and withdrawal transactions.

Supported Payment Methods

We support all major Malaysian payment methods — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX via Maybank2u and CIMB Clicks. Each of these payment methods operates under its own privacy policy and security standards, independent of 8fafafa.

What We Store and What We Don't

• We retain transaction records (amount, date, method, status) for account management and legal compliance purposes.
• We do not store your full bank account number, credit/debit card number, or eWallet password.
• Transaction verification is handled directly through the payment provider's system, with no sensitive data passing through our servers. 8fafafa.
• For withdrawal requests, we retain only the recipient account holder's name and a masked account number (e.g. ****1234) for reference purposes.

Platform 8fafafa is exclusively for adult users aged 18 and above. We do not knowingly collect or process personal data of individuals under the age of 18.

If we discover that personal data of a minor has been collected without verifiable parental or guardian consent, we will take immediate steps to delete that data and close the account in question. Parents or guardians who suspect that a child under their care has registered an account at 8fafafa can reach us at support@8fafafa.xyz for immediate assistance.

8fafafa employs multiple mechanisms to prevent registration by minors, including age verification at sign-up, phone number checks, and a KYC process requiring a MyKad. We are committed to strictly enforcing this age requirement as part of our social responsibility.

8fafafa reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our data practices, relevant legislation, or improvements to our services.

Any material changes to this Privacy Policy will be communicated to you via an in-platform notice or by email at least 14 days before the changes take effect. This gives you sufficient time to review the changes and, if necessary, take appropriate action — including discontinuing use of the platform or requesting deletion of your data.

The date of the latest update is shown at the top of this document and below each published version. We encourage you to review this Privacy Policy periodically to stay informed about how 8fafafa safeguarding your information.

If you have any questions, concerns, or complaints regarding how 8fafafa handles your personal data, or if you wish to exercise any of your privacy rights, please contact us through the following channels:

• Email: support@8fafafa.xyz (for data and privacy enquiries, please include "Privacy Enquiry" in the email subject line)
• Live Chat: Available 24/7 within the platform 8fafafa — response within 5 minutes

We will respond to all privacy-related enquiries within 5 business days for email, or within 5 minutes via live chat. For more complex requests such as data access or data deletion requests, we may require up to 14 business days to fully process your request.

We take every privacy enquiry seriously and ensure each case is handled with full professionalism, confidentiality, and complete respect for your rights as a member 8fafafa.