Privacy Policy y8games — Personal Data Protection for Malaysian Players

Introduction & Scope of Privacy Policy

Y8games is an online casino and Sports Betting platform established in 2019, with a dedicated focus on the Malaysian market. We recognise that players entrust us with sensitive personal information when they register and use the platform — a responsibility we take seriously.

This Privacy Policy applies to all personal data collected by y8games through the y8games.asia website, any y8games mobile applications that may be available, email and WhatsApp communications between you and the y8games team, and any other customer service channels.

This policy forms part of y8games Terms & Conditions and should be read alongside that document. By using the y8games platform, you give us your consent to process your personal data in the manner described in this document.

Y8games complies with Malaysia's Personal Data Protection Act 2010 (PDPA) — the primary legislation governing the collection and processing of personal data in Malaysia. We periodically review and update our privacy practices to ensure ongoing compliance with applicable laws.

Types of Personal Data We Collect

Y8games collects only the personal data necessary to provide a secure, efficient, and legally compliant service. Below is a detailed table of the data categories we collect and the reasons for doing so:

How y8games Collects Your Data

Y8games collects your personal data through various channels as you interact with our platform:

• During account registration: You provide basic information such as your phone number, email, and password directly to us through the y8games registration form.
• During financial transactions: When you make a deposit using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX (Maybank2u, CIMB Clicks), or any other supported Malaysian payment method, transaction details are recorded automatically.
• During identity verification (KYC): If you are required to undergo a KYC process prior to a large withdrawal, you may need to upload documents such as a copy of your MyKad or bank statement.
• Through use of the platform: Your gaming activity — including games played, bet amounts, outcomes, and session duration — is recorded automatically by the y8games system.
• Through cookies and tracking technologies: y8games uses cookies and similar technologies to collect technical data about how you use the platform. More information on cookies can be found in Section 9.
• Via support communications: When you contact the y8games support team via Live Chat, WhatsApp, or email, those communication records are retained for support and compliance purposes.

Y8games does not purchase or acquire your personal data from any third-party sources unrelated to your direct use of our platform.

Purposes for Processing Your Personal Data

Y8games processes your personal data only for legitimate and necessary purposes. All our data processing activities are grounded in one or more of the following legal bases: your consent, contractual necessity, legal obligation, or the legitimate interests of y8games, provided these do not override your fundamental rights.

The primary purposes for which y8games processes data are as follows:

• Account management: Creating, verifying, and managing your y8games player account, including identity and age verification.
• Financial transaction processing: Deposits and withdrawals in Malaysian Ringgit (RM) are processed securely through your preferred Malaysian payment method.
• Gaming service provision: Enabling you to access and play all online casino games, Live Casino, slots, fish shooting, progressive jackpots, and Sports Betting available on y8games.
• Security and fraud prevention: Detecting and preventing fraud, money laundering, system manipulation, or any unauthorised use of the y8games platform.
• Legal compliance: To fulfil legal obligations under the PDPA 2010, Malaysia's anti-money laundering laws, and any other applicable regulatory requirements.
• Customer support: To provide assistance and resolve issues you report through y8games' support channels in Bahasa Malaysia.
• Responsible gambling: Monitoring gameplay patterns to identify players who may need responsible gaming support, and managing the limits you set for yourself.
• Marketing communications (with your consent): To send you information about y8games promotions, bonuses, and the latest offers, where you have given your consent to receive such communications.
• Platform improvement: Analysing usage patterns in aggregate and anonymised form to continually improve the player experience on y8games.

Sharing Data with Third Parties

Y8games maintains a strict policy on the sharing of players' personal data. We do not sell, rent, or share your data for third-party commercial purposes. However, there are limited circumstances in which y8games needs to share your data with specific parties in order to provide our services:

• Payment service providers: Transaction details are shared with Malaysian payment service providers involved in processing your payments — such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, and CIMB Clicks — solely for the purpose of completing your transactions.
• Game providers: To deliver games from Pragmatic Play, Evolution Gaming, PG Soft, Jili, and other providers, the necessary game session data is shared with those respective providers. All providers are bound by strict data confidentiality agreements with y8games.
• Legal authorities: y8games will disclose personal data where required by a court order, a directive from the Malaysian Communications and Multimedia Commission (MCMC), or a lawful request from Malaysian law enforcement authorities.
• Technical service providers: IT infrastructure providers, cloud services, and analytics tools that support the operation of the y8games platform may process personal data on our behalf as data processors. They are bound by data processing agreements that comply with the PDPA.
• Identity verification body: For KYC and fraud prevention purposes, identity verification information may be checked against recognised verification authorities.

In all of the above situations, y8games ensures that the receiving party uses the data only for the stated purpose and is subject to appropriate data protection obligations.

Y8games Data Security Measures

Y8games takes security infrastructure seriously to protect players' personal data from unauthorised access, loss, alteration, or disclosure. This is not just talk — it is a layered system we have built and continuously maintain.

y8games technical security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between a player's device and y8games servers — the same standard used by internet banking in Malaysia.
• Passwords are stored as one-way hashes that cannot be decrypted — y8games staff are unable to view your password in plain text.
• Multi-layered firewall and intrusion detection system (IDS) that monitors inbound and outbound traffic in real time.
• Role-based access control (RBAC) ensuring that y8games staff can only access data required for their specific job functions.
• Periodic security vulnerability scanning and penetration testing carried out by independent third parties.
• Two-factor authentication (2FA) for y8games internal administrative access, also available as an option for player accounts.
• Regularly encrypted data backups to ensure service continuity in the event of a technical disruption.

While y8games takes all reasonable steps to protect your data, no security system can guarantee 100% protection under every circumstance. In the event of a data breach affecting your personal information, y8games will notify you in a timely manner and take the necessary remedial action.

You also play a role in keeping your y8games account secure — never share your password with anyone, use a strong and unique password, and contact the y8games support team immediately if you suspect your account has been compromised.

Personal Data Retention Period

Y8games retains your personal data only for as long as necessary for the purposes set out in this Privacy Policy, or as required by applicable Malaysian law. Our principle is to keep data adequately — no more and no less than what is needed.

• Active account data: For the duration of your active y8games account and for 7 years following account closure, to meet Malaysia's financial and tax regulatory compliance requirements.
• Financial transaction records: Minimum 7 years from the date of transaction, as required by Malaysian financial and anti-money laundering laws.
• Support communication records: 2 years from the date of last interaction, for support reference and compliance purposes.
• Technical log data: Between 90 days and 1 year depending on the type of log, for security and investigation purposes.
• KYC document data: For the duration of the active account and a minimum of 5 years after account closure.

Once the applicable retention period has expired, y8games will securely delete or anonymise your personal data using methods that ensure it cannot be recovered or re-identified.

Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a y8games player have the following rights regarding your personal data:

To exercise any of the above rights, contact us at support@y8games.asia with the email subject "Personal Data Rights Request" and clearly state which right you wish to exercise. y8games will respond to your request within 21 business days. We may need to verify your identity before processing the request.

Cookies, Pixels, & Tracking Technologies

Y8games uses cookies and similar tracking technologies to ensure the platform runs smoothly, enhance the user experience, and understand how players interact with our platform.

Types of cookies used by y8games:

• Essential Cookies (Required): These cookies are essential for the basic operation of the y8games platform — including login session management, form security, and payment functionality. Without them, the platform will not function properly. These cookies cannot be disabled.
• User Preference Cookies: Saves your preferences such as language, display settings, and game preferences so you do not have to reconfigure them each time you log in.
• Analytics Cookies: To help us understand how players use the platform — the most frequently visited pages, time spent in each section, and common navigation paths. This data is used to improve the y8games platform.
• Security Cookies: Used to detect suspicious login activity, attempted security breaches, and abnormal usage patterns that may indicate fraud.

You can manage or disable non-essential cookies through your browser settings. However, disabling essential cookies may affect the functionality of the y8games platform and prevent you from accessing certain features. Please refer to your browser's documentation for instructions on managing cookies in Chrome, Safari, Firefox, or Microsoft Edge.

Child Protection

The y8games platform is an exclusive service for individuals aged 18 and above only. y8games does not knowingly collect personal data from children or minors under the age of 18.

If you are a parent or guardian and believe your child has registered a y8games account or provided us with personal data, please contact us immediately at support@y8games.asia. We will investigate the matter and, if it is confirmed that the player is under 18 years of age, we will promptly delete the account and all associated personal data, and void any related transactions.

Y8games applies an age verification process during new account registration. For withdrawals exceeding certain limits, or where there is reason to suspect an account holder may be under the stipulated age, we will request proof of age in the form of an official Malaysian document before permitting further access or transactions.

We encourage parents and guardians to use appropriate parental control software to restrict children's access to online gambling sites. A range of parental control tools is available free of charge that can help with this.

Links to Third-Party Websites & Services

The y8games platform may contain links to or integrations with certain third-party services — for example, game providers such as Pragmatic Play, Evolution Gaming, PG Soft, and Jili, or Malaysian payment service providers that we support.

When you access these third-party services through the y8games platform, their own privacy policies apply to how they process your data. y8games is not responsible for the privacy practices or content of any such third-party websites or services.

Y8games recommends that you read the privacy policy of each third-party service you use in connection with the y8games platform, particularly payment services. If you have concerns about how any third party processes your data, please contact them directly or reach out to us at support@y8games.asia for information about our relationship with them.

Amendments to the Privacy Policy

Y8games reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or the expansion of y8games' services. The "Last Updated" date at the top of this page indicates when this Privacy Policy was last revised.

For significant amendments that affect how we process your personal data, y8games will notify you via an in-platform notification or an email to the address registered on your account before the changes take effect. This gives you the opportunity to review the updates and make an informed decision about your continued use of our platform.

Your continued use of the y8games platform after any amendments to this Privacy Policy take effect will be considered your acceptance of the updated policy. If you do not agree with any changes, you have the right to close your account and withdraw any eligible balance before the new policy comes fully into force.

Contact Us Regarding Data Privacy

If you have any questions, concerns, or requests regarding the y8games Privacy Policy or the processing of your personal data, our team is ready to assist through the following channels:

• Email (for formal data requests): support@y8games.asia — use the subject line "Data Privacy Request" to ensure your inquiry is routed to the right team. We will respond within 21 business days.
• Live Chat: Available 24/7 on the y8games platform — ideal for general privacy inquiries that need a prompt response.
• WhatsApp: For inquiries that require sharing additional information or supporting documents related to your data request.

All requests relating to data privacy rights will be handled in strict confidence. y8games will not discriminate against you or reduce the level of service provided to you solely because you have exercised your privacy rights under Malaysia's PDPA.

If you are dissatisfied with y8games's response to your privacy request, you have the right to lodge a complaint with the Malaysian Communications and Multimedia Commission (MCMC) or the relevant regulatory authority in Malaysia.