Bt8 Privacy Policy – Personal Data Protection for Malaysian Players

Bt8 collects various types of personal information when you interact with our platform. Data is collected directly from you, automatically through your use of the platform, or via legitimate third parties. The following are the categories of data we may collect:

Personal Identification Information:

• Full name as shown on your Malaysian MyKad
• MyKad number or other valid identification number
• Date of birth (to verify that you are 18 years of age or older)
• Current residential address in Malaysia
• An active Malaysian mobile phone number
• A valid, active email address

Financial Information:

• E-wallet account numbers (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay) used for deposits and withdrawals
• Malaysian bank account numbers associated with FPX, DuitNow, or direct bank transfer methods
• Records of deposit and withdrawal transactions on the bt8 platform
• Records of your betting and gaming activity on bt8

Technical Information (collected automatically):

• The IP address of the device used to access bt8
• Your web browser type and device operating system version
• Usage data such as pages visited, time spent, and actions taken within the platform
• General geolocation information based on IP address (to verify access from Malaysia)
• Cookie and session tracker data as further described in Section 8

Bt8 uses the personal data collected for legitimate and specific purposes. We do not use your data for any purpose beyond what is stated below:

• Account Management: Creating and managing your bt8 account, processing registration, verifying your identity (KYC), and ensuring only one active account exists per individual.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, or any other Malaysian payment method you select, and processing winnings withdrawals to your account.
• Service Provision: Gives you access to all bt8 games, including Live Casino, baccarat, blackjack, slots, jackpot, virtual sports, and Sports Betting for EPL football, Malaysia Super League, badminton, and more.
• Security & Fraud Prevention: Detecting and preventing fraud, money laundering, bonus abuse, and any activity that violates bt8's terms or Malaysian law.
• Customer Support: Providing support and resolving your enquiries or complaints via live chat and email, and retaining records of those interactions for quality control purposes.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and taking proactive steps where necessary to safeguard your well-being.
• Marketing Communications: Sending you promotions, exclusive offers, and the latest bt8 news via email or SMS – only if you have given your consent to receive such communications. You may unsubscribe at any time.
• Legal Compliance: Complying with applicable legal obligations, including anti-money laundering (AML) reporting requirements, identity verification, and any directives from competent authorities in Malaysia.

Bt8 processes your personal data on valid legal grounds as provided under Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection principles. The legal basis we rely on for each type of processing is as follows:

Where we process your data based on your consent, you have the right to withdraw that consent at any time without affecting the validity of any processing that took place prior to the withdrawal.

Bt8 recognises that your trust is our most valuable asset. We do not sell, rent, or distribute your personal data to any third party for their own commercial purposes. However, there are limited circumstances in which bt8 may need to share your data with certain parties:

• Technical Service Providers: bt8 works with trusted technical service providers, including payment processors for Touch 'n Go eWallet, GrabPay, DuitNow, and FPX; gaming software providers such as Evolution, Pragmatic Play, and Playtech; and cloud infrastructure and cybersecurity providers. All providers are bound by strict confidentiality agreements and are only permitted to use your data for purposes specified by bt8.
• Regulatory Authorities: bt8 is legally required to disclose certain information to the relevant regulatory authorities upon lawful request. This includes Malaysian law enforcement agencies, financial regulatory bodies, and licensing authorities related to bt8's operations.
• Fraud Prevention & AML: In fulfilling its anti-money laundering (AML) and fraud prevention obligations, bt8 may be required to share certain information with relevant authorities or recognised third-party screening systems.
• Business Transfer: Should bt8 be involved in any merger, acquisition, or sale of company assets, users' personal data may be transferred as part of those assets. You will be notified prior to any such transfer, and the applicable new privacy policy will be clearly stated.

Bt8 continually invests in the latest security infrastructure to ensure your personal data is protected at a level on par with financial institutions at all times. The security measures we employ include:

• Data-in-Transit Encryption: All data transmitted between your browser and bt8's servers is protected by TLS (Transport Layer Security) protocol with 256-bit encryption. This means that even if your communication were intercepted by an unauthorised party, the content would remain unreadable.
• Data-at-Rest Encryption: Sensitive personal data stored in bt8's databases is encrypted using industry-standard encryption algorithms. Your account password is stored in hashed form and cannot be decrypted — meaning even bt8 staff are unable to view your original password.
• Role-Based Access Control: Access to players' personal data within bt8's internal systems is restricted according to role and job function. Staff may only access data necessary for their specific duties, and all access is logged for audit purposes.
• 24/7 Security Monitoring: bt8's systems are continuously monitored to detect any unusual activity, intrusion attempts, or security threats. bt8's IT security team responds promptly to any detected incidents.
• Regular Security Audits: bt8 undergoes periodic independent security audits conducted by recognised cybersecurity experts to ensure our data protection measures meet or exceed current industry standards.
• Incident Management: bt8 has a comprehensive incident response procedure in place. In the event of a data security breach affecting your personal data, bt8 will notify you within the timeframe required by applicable law.

Bt8 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. bt8's data retention policy is as follows:

• Active Account Data: Personal data associated with an active bt8 account is retained for the duration the account remains active, and for the required period following account closure to meet legal and contractual obligations.
• Financial Transaction Records: Records of deposits, withdrawals, and other financial activity are retained for a minimum of seven years from the transaction date, in compliance with Malaysia's anti-money laundering (AML) legal requirements.
• Support Communication Records: Live chat transcripts and emails with the bt8 support team are retained for two years for quality control and dispute resolution purposes.
• Technical & Log Data: Server logs and other technical data are retained for 12 months for the purposes of technical troubleshooting and system security.
• Marketing Data: If you have consented to receive marketing communications, the personal data used for that purpose is retained until you withdraw your consent or request deletion of your data.

Once the relevant retention period has expired, bt8 will securely delete or anonymise your personal data using methods that ensure it cannot be recovered or reused.

As a data subject, you have rights protected under Malaysia's Personal Data Protection Act 2010 (PDPA). bt8 fully respects and facilitates the exercise of these rights:

Bt8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data protection practices, applicable laws, or the services we offer. When we make material changes to this Privacy Policy:

• The "Last Updated" date shown at the top of this page will be revised to reflect the date of the most recent amendment.
• For amendments deemed material or significant, bt8 will notify registered members via the email address associated with their bt8 account.
• Bt8 may display a prominent policy update notice on the platform's main page to ensure all users are aware of any amendments made.
• Continued use of the bt8 platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy from time to time to stay informed about how bt8 protects your personal data. If you do not agree with any amendment, you have the right to close your bt8 account and request deletion of your data in accordance with the procedure set out in Section 7.

Bt8 takes every privacy-related inquiry and concern seriously. If you have any questions about this Privacy Policy, how we handle your personal data, or wish to exercise any of your rights as a data subject, please do not hesitate to contact us:

• Email: support@bt8.casino (please use the subject line "Data Privacy Enquiry" for faster processing)
• Live Chat: Available 24/7 directly on bt8.casino – the fastest way to get answers in real time
• Language: All bt8 support channels provide services in Bahasa Melayu for the convenience of Malaysian players

Bt8 is committed to responding to all privacy-related enquiries within a reasonable timeframe. For formal data rights requests — such as access, correction, or deletion — bt8 will respond within 21 business days from the date the request is received, in line with Malaysia's PDPA requirements.