8fafafa Privacy Policy

1. Introduction and Scope

8fafafa ("we", "us", "our") is committed to protecting the privacy of all individuals ("you", "your", "the User") who access or use the 8fafafa Platform at 8fafafa.club and any associated subdomains or applications (collectively, the "Platform"). This Privacy Policy ("Policy") describes our practices regarding the collection, use, storage, sharing, and protection of personal data in connection with your use of the Platform.

By registering an account on the 8fafafa Platform or otherwise providing us with your personal information, you acknowledge that you have read, understood, and agree to the collection and use of your information as described in this Policy. If you do not agree with any part of this Policy, you should not use the Platform.

This Policy applies to all current and former users of the Platform and should be read in conjunction with our Terms & Conditions and our Responsible Gaming Policy.

2. Data Controller

For the purposes of applicable data protection legislation, 8fafafa is the data controller in respect of the personal data collected through the Platform. As data controller, 8fafafa determines the purposes and means of processing your personal data. All data protection enquiries and requests should be directed to our support team via the contact details provided in Section 15 of this Policy.

3. Personal Data We Collect

8fafafa collects and processes the following categories of personal data:

3.1 Identity Data — Full name, date of birth, nationality, gender, and government-issued identification numbers (such as MyKad number or passport number).

3.2 Contact Data — Email address, mobile phone number, and residential address (including postcode, city, and country).

3.3 Financial Data — Bank account details, e-wallet identifiers (such as Touch n Go eWallet account number or Boost account reference), payment card information (stored via tokenisation — 8fafafa does not store full card numbers), transaction history, deposit amounts, and withdrawal records.

3.4 Account Data — Username, account registration date, login history (including timestamps, IP addresses, and device identifiers), game activity, bet history, bonus usage records, and account preferences.

3.5 KYC Verification Data — Copies of identity documents, proof of address documents, and source-of-funds documentation where required for regulatory compliance.

3.6 Technical Data — IP address, device type, operating system, browser type and version, screen resolution, and session duration data collected automatically when you access the Platform.

3.7 Communications Data — Records of your communications with the 8fafafa support team, including live chat transcripts, email correspondence, and any feedback or complaint submissions.

3.8 Marketing Preferences — Your stated preferences regarding receipt of promotional communications from 8fafafa, including consent records and opt-out history.

4. How We Collect Your Data

8fafafa collects personal data through the following means:

• Direct submission — Data you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting our support team, or participating in promotions;
• Automated collection — Technical data collected automatically through cookies, log files, pixel tags, and similar technologies when you access and navigate the Platform;
• Third-party sources — Where necessary for identity verification or fraud prevention, we may receive data from identity verification service providers, payment processors, or fraud detection agencies;
• Publicly available sources — Publicly accessible records used for due diligence, compliance screening, or source-of-funds verification purposes.

5. Purposes and Legal Basis for Processing

8fafafa processes your personal data for the following purposes and on the following legal bases:

• Contract performance — To create and manage your account, process transactions, verify your identity, and provide the gaming services you have requested. Processing is necessary for the performance of our contract with you.
• Legal compliance — To fulfil our obligations under applicable anti-money laundering (AML) legislation, know-your-customer (KYC) regulations, data protection laws, and any orders from regulatory or law enforcement authorities. Processing is necessary for compliance with a legal obligation.
• Legitimate interests — To prevent fraud and abuse of the Platform, maintain security, improve the Platform, conduct analytics, and manage risk. Processing is based on our legitimate interest in operating a safe and commercially viable platform, provided such interests are not overridden by your rights.
• Consent — To send you promotional communications, personalised offers, and marketing materials where you have given your explicit consent. You may withdraw consent at any time by contacting support or updating your account preferences.
• Responsible gaming — To implement responsible gaming measures, including monitoring play patterns, applying account limits, and facilitating self-exclusion requests. Processing is based on both our legitimate interests and legal obligations.

6. Sharing of Personal Data

8fafafa does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual safeguards:

• Payment processors and e-wallet providers — Necessary to process deposits and withdrawals (e.g., Maybank, CIMB, Public Bank, Touch n Go, Boost, Visa/Mastercard network operators);
• Identity verification service providers — Third-party KYC and AML screening providers engaged to verify your identity and comply with regulatory requirements;
• Game content providers — Third-party game developers and live casino operators whose content is hosted on the Platform may receive limited game session data necessary for game operation and RNG certification;
• Fraud prevention and security service providers — Specialist agencies engaged to detect and prevent fraudulent activity, account compromise, and money laundering;
• Regulatory and law enforcement authorities — Where required or permitted by applicable law, including in response to legally valid requests, court orders, or regulatory investigations;
• Group entities and successors — In the event of a merger, acquisition, restructuring, or sale of assets, your data may be transferred to the relevant successor entity, subject to this Policy continuing to apply.

7. International Data Transfers

Your personal data may be transferred to, and processed in, countries outside of Malaysia, including countries whose data protection laws may differ from those in Malaysia. Where such transfers occur, 8fafafa ensures that appropriate safeguards are in place — such as standard contractual clauses or equivalent mechanisms — to protect your personal data to a standard consistent with applicable data protection law. By using the Platform, you acknowledge and consent to such transfers where necessary for the provision of the services.

8. Data Retention

8fafafa retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the duration of your account relationship with us and thereafter for the following periods:

• Account data and transaction records are retained for a minimum of five (5) years following account closure, in compliance with applicable AML and financial record-keeping obligations;
• KYC and identity verification documents are retained for a minimum of five (5) years following the end of the business relationship;
• Marketing preference records and consent logs are retained for as long as necessary to demonstrate compliance with consent requirements;
• Technical and log data may be retained for up to twelve (12) months from the date of collection for security and fraud prevention purposes.

Where data is no longer required and there is no legal basis for further retention, it will be securely deleted or anonymised.

9. Cookies and Tracking Technologies

The 8fafafa Platform uses cookies and similar tracking technologies to enhance your browsing experience, maintain session integrity, analyse Platform usage, and deliver relevant content. The categories of cookies used include:

• Strictly necessary cookies — Essential for Platform functionality, including authentication session management. These cannot be disabled.
• Performance and analytics cookies — Collect anonymised data on how users interact with the Platform to help us improve functionality and user experience.
• Preference cookies — Remember your settings and preferences across sessions, such as language and display preferences.
• Marketing and targeting cookies — Used to deliver relevant promotions and track the effectiveness of our marketing activities. These are only placed with your consent.

You can control and manage cookies through your browser settings. Note that disabling certain cookies may affect Platform functionality. For strictly necessary cookies, no consent is required as they are essential to the operation of the service you have requested.

10. Security of Your Personal Data

8fafafa implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the Platform;
• Tokenisation of payment card data — full card numbers are never stored by 8fafafa;
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis;
• Multi-factor authentication requirements for staff accessing systems containing personal data;
• Regular security assessments, penetration testing, and vulnerability management procedures.

Despite these measures, no transmission over the internet or electronic storage system is completely secure. In the event of a personal data breach that poses a high risk to your rights and freedoms, 8fafafa will notify you without undue delay in accordance with applicable legal requirements.

11. Your Rights as a Data Subject

Subject to applicable data protection legislation, you have the following rights in relation to your personal data held by 8fafafa:

• Right of access — To request a copy of the personal data we hold about you;
• Right to rectification — To request correction of inaccurate or incomplete personal data;
• Right to erasure — To request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations;
• Right to restriction — To request that we restrict processing of your personal data in certain circumstances;
• Right to data portability — To receive a copy of data you have provided to us in a structured, machine-readable format;
• Right to object — To object to processing based on legitimate interests, or to withdraw consent where processing is based on consent;
• Right not to be subject to automated decision-making — To request human review of any significant decision made by automated means.

To exercise any of these rights, please contact our support team via live chat or email. We will respond to all valid requests within thirty (30) days. We may require identity verification before processing certain requests.

12. Responsible Gaming and Data

In connection with our responsible gaming obligations, 8fafafa may use your account and activity data to monitor for indicators of problem gambling behaviour, to apply self-imposed limits you have set, to enforce platform-imposed limits, and to facilitate self-exclusion requests. Data processed for responsible gaming purposes is handled with the same security standards as all other personal data and is used exclusively for the protection of the player, not for marketing or commercial profiling purposes. For more information, please refer to our Responsible Gaming page. The 8fafafa Platform is strictly for individuals aged 21 and above.

13. Children's Privacy

The 8fafafa Platform is not directed at individuals under the age of 21. We do not knowingly collect personal data from any person under 21 years of age. If we become aware that personal data has been collected from an individual who is under 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has created an account or provided personal data to us, please contact our support team immediately.

14. Changes to This Privacy Policy

8fafafa reserves the right to update or amend this Privacy Policy at any time. Any material changes will be notified to registered users via the email address on file or through a prominent notice on the Platform prior to the change taking effect. The "Last Updated" date at the top of this Policy will be revised whenever changes are made. Your continued use of the Platform following notification of changes constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically.

15. Contact and Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 8fafafa handles your personal data, please contact our Data Protection team via:

• Live Chat — Available 24/7 on the Platform
• Email — support@8fafafa.club (plain text only — not a clickable link)

If you are dissatisfied with our response to a data protection concern, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. For Malaysian users, this is the Personal Data Protection Department (JPDP) under the Malaysian Personal Data Protection Act 2010 (PDPA).