Privacy Policy satu8 — Your Data Security Is Our Priority

Satu8 collects your personal information through several channels across different contexts. This data collection is necessary to enable us to provide a secure, personalised platform service that meets regulatory requirements.

1.1 Information You Provide Directly

• Registration Information: Full name, email address, phone number, date of birth, and the password you create when registering your satu8 account.
• KYC Documents: A copy of your MyKad or passport, proof of address (recent utility bill or bank statement), and any other supporting documents required for identity verification.
• Financial Information: Payment method details such as bank account numbers, DuitNow, FPX, TNG eWallet, GrabPay, or Boost information you use for deposits and withdrawals.
• Communications: Any messages, complaints, or enquiries you send to the satu8 support team via Live Chat or email.

1.2 Information Collected Automatically

• Device & Technical Data: IP address, browser type, operating system, device model, screen resolution, and unique device identifiers.
• Usage Data: Pages you visit, games you play, session duration, login frequency, and interaction patterns with the platform.
• Transaction Data: A complete record of all deposits, withdrawals, wagering, and financial activities conducted through your account.
• Location Data: General location information based on your IP address for geographic eligibility verification and fraud prevention purposes.

The personal data we collect is used for legitimate purposes that have been made known to you. satu8 does not use your data for any purpose outside the scope stated below without first obtaining your consent.

If you have given consent to receive marketing communications but later wish to withdraw that consent, you may do so at any time by contacting the satu8 support team or through your account settings.

Satu8 understands the importance of keeping your data confidential. We do not sell or trade your personal information. However, in certain limited situations, we may need to share some of your information with trusted parties.

3.1 Trusted Service Providers

Satu8 partners with selected third-party service providers to help us operate the platform more efficiently. These include payment processing providers such as DuitNow, FPX, and e-wallet providers, identity verification service providers for the KYC process, data analytics companies that help us understand platform usage, and cloud hosting providers for secure data storage. All these providers are required to comply with the strict security and privacy standards we set.

3.2 Legally Required Disclosures

Satu8 may be required to disclose your personal information to the relevant authorities upon receipt of a valid court order, an official request from a law enforcement agency, or in the context of a financial crime investigation such as money laundering or fraud. In such situations, we will only disclose the minimum information required.

Your data security is not just a responsibility — it is satu8's core commitment. We continuously invest in the latest security technologies and procedures to ensure your personal and financial information is always protected against cyber threats.

• End-to-End Encryption: All data transmitted between your device and satu8's servers is encrypted using TLS 1.3 protocol and 256-bit SSL encryption, ensuring no third party can read your data in transit.
• Strict Access Controls: Access to user personal data is restricted to satu8 staff who require it solely to carry out their specific duties. All access is logged and continuously monitored.
• Two-Factor Authentication (2FA): satu8 supports and encourages the use of two-factor authentication for all accounts to add an extra layer of security beyond your password.
• Regular Security Audits: The satu8 platform undergoes periodic independent security audits by qualified cybersecurity firms to identify and address any vulnerabilities before they can be exploited.
• 24/7 Monitoring: Our automated monitoring system operates around the clock to detect suspicious activity, intrusion attempts, or any anomalies related to data security.
• Secure Data Backup: Your data is securely and regularly backed up to separate locations to ensure service continuity in the event of any unforeseen incident.

Satu8 uses cookies and similar tracking technologies to enhance your experience on our platform. These technologies help us remember your preferences, understand how our platform is used, and deliver more relevant content to you.

Types of Cookies We Use:

• Essential Cookies: These cookies are required for core platform functions such as maintaining your login session, remembering items in your promotional cart, and ensuring transaction security. Without these cookies, the platform cannot function properly.
• Performance Cookies: Used to gather information on how users interact with our platform. This data is used to improve the overall performance and usability of the platform.
• Functional Cookies: Allows the platform to remember your preferences such as language, region, and display settings to provide a more personalized experience.
• Analytics Cookies: Helps us understand overall platform usage patterns through aggregated and anonymized data. This information is used to make product improvement decisions.

You can manage your cookie settings through your browser settings. Please note that disabling certain cookies may affect the functionality of some areas of the satu8 platform.

Under Malaysia's Personal Data Protection Act (PDPA) and satu8's privacy policy, you have certain rights regarding your personal data. satu8 fully respects and facilitates the exercise of these rights.

To exercise any of the above rights, please contact the satu8 support team via Live Chat or our support email. We will process your request within 14 business days. Please note that certain requests may be subject to legal or operational restrictions that we are required to comply with.

Satu8 adheres to the principle of data minimisation — we retain your personal information only for as long as is strictly necessary. Retention periods depend on the type of data and its original purpose of collection.

• Active Account Data: For as long as your account remains active with satu8, basic profile information and transaction data will be retained to enable us to provide you with uninterrupted service.
• Financial Transaction Records: All financial transaction records are retained for a minimum of 7 years in accordance with Malaysian legal requirements relating to financial compliance and anti-money laundering (AML).
• KYC Documents: Identity verification documents are retained for 5 years after account closure or after the last transaction, whichever is later, in line with legal requirements.
• Communication Logs: Customer support communication records are retained for 2 years for reference, complaint resolution, and service improvement purposes.
• Inactive Account Data: Accounts inactive for more than 3 years will undergo a review process. You will be notified before any data is deleted.

Once the retention period expires, your data will be securely deleted using industry-recognised data deletion methods or anonymised in a way that it can no longer be personally linked to you.

Satu8 reserves the right to review and amend this Privacy Policy from time to time to reflect changes in our business practices, new legal requirements, or improvements in the way we handle data.

• Any material changes to this Privacy Policy will be communicated to you via an in-platform notification or your registered email at least 14 days before the changes take effect.
• The "Updated" date at the top of this document will always be updated to reflect the latest version of this policy.
• Continued use of the satu8 platform after the effective date of any amendment constitutes your acceptance of the revised policy.
• If you do not agree with any changes, you have the right to close your account and request deletion of your data before the changes take effect.

For any enquiries, concerns, or complaints regarding satu8's Privacy Policy, please contact our Data Protection Officer through the satu8 support team. We are committed to responding to all privacy enquiries within 5 business days.