Privacy Policy c8asia — Malaysia Member Data Protection

This Privacy Policy ("Policy") describes how c8asia, Malaysia's leading online casino and Sports Betting platform, collects, uses, stores, discloses and protects your personal information as a member or visitor of our platform. This document is written in Bahasa Melayu because we operate primarily for Malaysian users and want to ensure all members fully understand their rights without any language barrier.

This Policy applies to all services provided by c8asia — including our website, online games (slots, Live Casino, table games, jackpots, lottery), Sports Betting (Malaysia Super League, EPL, BWF badminton, MPL Malaysia esports), virtual sports, and all communication channels between you and c8asia, including live chat and support email.

By using the services of c8asia — whether through account registration, deposits, placing bets or simply browsing the platform — you agree to the terms of this Privacy Policy. If you do not agree, you should not use our services. This Policy should be read together with Terms & Conditions c8asia, which are complementary documents.

C8asia collects two main categories of data — information you actively provide, and data collected automatically while you use the platform:

Data You Provide Directly:

• Personal identification information: Full name as per identity card, date of birth and identity card number (for KYC verification when required).
• Contact information: An active Malaysian phone number and email address.
• Financial information: E-wallet account details (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay) or FPX information (Maybank2u, CIMB Clicks) used for deposits and withdrawals. c8asia does not store credit or debit card numbers.
• Verification documents: Copies of your identification card, bank statements, or other documents requested during the KYC process.
• Communications: Records of live chat conversations, emails and any written communications between you and the c8asia support team.

Automatically Collected Data:

• Technical data: IP address, browser type and version, operating system, screen resolution, and device type.
• Usage data: Pages visited, time spent, matches or games viewed or wagered on, login frequency and general usage patterns.
• Gaming data: A complete record of all gaming activity, including bets placed, winnings, losses, transaction history and bonus usage.
• Location data: General location based on IP address (country and state) for security and regulatory compliance purposes.
• Cookies and similar technologies: As described in Section 7.

c8asia collects data through several clearly defined and identifiable channels:

• Registration form: When you register a new account, you provide the basic information required to create your account.
• KYC Process: When you are required to verify your identity — typically when a withdrawal exceeds a certain threshold or as a security measure — you upload verification documents through a secure channel within your account.
• Financial transactions: Each time you make a deposit via Touch 'n Go, GrabPay, DuitNow, FPX, Boost or ShopeePay, our system records the relevant transaction details (not your full financial account number).
• Gaming activity: c8asia's systems automatically log all your gaming activity — from slots to Live Casino, from Malaysia Super League betting to MPL esports — as part of your account records.
• Customer support: When you contact our support team via live chat or email, those conversations are stored for reference and service improvement purposes.
• Cookies and browser technologies: Automatically via your browser as you browse the c8asia platform. See Section 7 for more details.

C8asia uses collected personal data solely for legitimate purposes that are directly related to the services we provide. We do not use your data for any other purpose without your consent:

• Account operations: Creating, managing and maintaining your c8asia account — including login, two-factor authentication and account settings.
• Payment processing: Processing deposits via Touch 'n Go, GrabPay, DuitNow, FPX, Boost, and ShopeePay, as well as withdrawals of winnings to your verified account.
• Gaming service provision: Gives you access to all games — slots, Live Casino, Sports Betting, MPL Malaysia esports, jackpots, lottery and virtual sports.
• Identity verification and KYC: Ensuring your account is owned and used by you alone, and not by any unauthorised party.
• Security and fraud prevention: To detect and prevent fraudulent activity, money laundering, duplicate accounts and any misuse of the platform.
• Customer support: To provide relevant and effective assistance whenever you contact the c8asia support team.
• Regulatory compliance: Fulfilling applicable legal and regulatory obligations relating to the operation of an online gambling platform.
• Platform improvements: Analysing usage patterns on an aggregated and anonymised basis to improve the user experience, platform performance, and game selection.
• Service communications: Sending important notifications related to your account — including transaction confirmations, security alerts and policy updates.
• Promotional communications: Sending information about bonuses, promotions and the latest offers — only if you have consented to receive such communications. You may unsubscribe at any time.

c8asia does not sell, rent or share your personal data with third parties for their own marketing purposes. This is our unconditional commitment. However, there are limited situations in which c8asia may need to share your data:

• Licensed payment processors: Only the minimum necessary data is shared with licensed Malaysian payment processors (such as Touch 'n Go, GrabPay, DuitNow, FPX, Boost, and ShopeePay service providers) solely for the purpose of processing your financial transactions. These processors are bound by their own strict privacy and data protection policies.
• Technical service providers: Companies providing technical infrastructure services such as server hosting, cybersecurity protection and analytics — all bound by confidentiality agreements with c8asia.
• Game providers: Third-party game studios whose titles are offered on the c8asia platform may receive game statistical data necessary for technical operations. This data does not include your personally identifiable information specifically.
• Legal authorities: c8asia may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where required by applicable law, a valid court order, or for the purposes of crime and fraud prevention.
• Business transfers: In the event of a merger, acquisition or transfer of c8asia's assets, user data may be transferred to the successor entity. You will be notified in advance should this situation arise.

Your data security is our highest technical priority c8asia. The following are the protective measures we have in place:

• 256-bit SSL encryption: All communications between your device and c8asia's servers are encrypted using 256-bit TLS/SSL protocols — the same standard used by Malaysia's leading banks. This means data transmitted during your session cannot be read by any third party, even if they manage to intercept your network traffic.
• Data-at-rest encryption: Sensitive data stored in c8asia's databases — including financial information and KYC documents — is encrypted using current industry standards during the storage process.
• Internal access controls: Only c8asia staff with a legitimate business need are permitted to access member personal data. All access is logged and monitored.
• Regular security audits: c8asia conducts regular security assessments and penetration testing to identify and address potential vulnerabilities.
• Two-factor authentication (2FA): Available to all member accounts as an additional layer of protection against unauthorised access.

Data Retention Period: c8asia retains your personal data for as long as your account remains active and for a specified period following account closure to meet our legal and regulatory obligations. Financial and gaming records are typically kept for a minimum of five years from the date of the last transaction, in line with industry compliance requirements. Data that is no longer needed will be securely deleted using industry-recognised procedures.

C8asia uses cookies and similar technologies to enhance your experience on the platform. Cookies are small text files stored in your browser when you visit a website. The following are the types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be turned off, as the platform will not function properly without them.
• Performance cookies: Collects information on how visitors use the platform — which pages are visited most frequently, and any error messages encountered — to help us improve the user experience. All data is collected anonymously.
• Functional cookies: Allows the platform to remember your preferences — such as language, display settings, and game choices — to deliver a more personalised experience.
• Analytics cookies: Helping c8asia understand aggregated platform usage patterns for continuous improvement purposes. This data contains no personally identifiable information.

You can manage cookie settings through your browser preferences. However, if you disable essential cookies, some functions on the c8asia platform may not work properly. For more information on how to manage cookies in your browser, please refer to the relevant browser help documentation.

As a member c8asia, you hold the following rights regarding your personal data. All of these rights may be exercised by contacting our support team:

• Right of Access: You have the right to request a copy of all personal data we hold about you. We will provide this information in a readable format within a reasonable timeframe.
• Right to Rectification: If you find that any personal data we hold is inaccurate or incomplete, you have the right to request a correction or update.
• Right to Erasure: Under certain circumstances, you may request the deletion of your personal data. Please note that some data may need to be retained to fulfil legal or regulatory obligations even after a deletion request is made.
• Right to Restrict Processing: You may request that c8asia restrict how we process your data in certain circumstances — for example, while you are disputing the accuracy of that data.
• Right to Object: You may object to the processing of your data for specific purposes such as marketing communications. You can unsubscribe from promotional emails at any time.
• Data Portability Right: You have the right to receive your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to Withdraw Consent: Where data processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawing consent does not affect the validity of any processing that took place prior to the withdrawal.

C8asia has a strict, zero-compromise policy on child protection. Our platform for individuals aged 18 and above only. We do not knowingly collect, store or process personal data from individuals under the age of 18.

During registration, you are required to confirm that you are 18 years of age or older. c8asia reserves the right to request proof of age at any time through its KYC process. Should we discover that we have inadvertently collected data from an underage individual, we will take immediate steps to delete that data and close the account in question.

If you are a parent or guardian who believes your minor child has registered an account or provided their personal data to c8asia, please contact us immediately at support@c8asia.click. We will take prompt action to address the situation.

C8asia reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements or platform improvements. Any material amendments — meaning changes that significantly affect how we use or protect your data — will be communicated to you via:

• A prominent in-platform notification on c8asia the next time you log in.
• A notification email will be sent to the email address registered on your account.
• Update the "Effective" date at the top of this document.

We encourage you to review this Privacy Policy from time to time, especially when you receive notifications about updates. Continued use of the c8asia platform after the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with any changes, you have the right to close your account and discontinue use of our services.

If you have any questions, concerns or complaints regarding this Privacy Policy or the way c8asia handles your personal data, please contact us through the following channels:

• Live Chat: The fastest way — access via the chat icon in your c8asia account. Our team speaks Bahasa Malaysia and is available to assist you 24 hours a day, 7 days a week.
• Email: Submit your enquiry in writing to support@c8asia.click. We will respond within 24 business hours.

When contacting us regarding a privacy request, please include the following to help us process it promptly: your full name as registered on your account, the type of request (access, correction, deletion, etc.), and the specific details of your request. c8asia is committed to handling all privacy-related enquiries thoroughly, professionally, and within a reasonable timeframe.