Privacy Policy myr8 – Player Data Protection

01Introduction

Myr8.app ("myr8", "we", "Platform") respects every player's privacy and is committed to protecting the personal data shared with us. This Privacy Policy describes our practices regarding the collection, use, storage, and disclosure of your personal information when you use the myr8 online entertainment platform.

This policy applies to all services provided through the myr8.app website and our official mobile app. By registering an account or using any myr8 service, you agree to the terms set out in this Privacy Policy.

We encourage you to read this document in full. If any section raises concerns, please contact our support team before proceeding with registration. Your trust is our most valuable asset, and we take our responsibility to protect your privacy seriously.

02Information Collected

Myr8 collects two main categories of information: information you provide directly, and information collected automatically when you use our platform.

Information you provide:

• Full name as shown on your identification card or passport.
• Identification card number (MyKad) or passport number for KYC verification purposes.
• An active Malaysian mobile phone number.
• A valid and active email address.
• Bank account or digital wallet details (bank name, account number) for processing deposits and withdrawals.
• Date of birth for age verification (18 years and above).
• KYC supporting documents such as a selfie with your ID when required.

Information collected automatically:

• IP address and general location information (state, country).
• Device type, operating system, and web browser version.
• Gaming activity records including bets, wins, and transaction history.
• Session duration, pages visited, and navigation patterns within the platform.
• Cookie data and device identifiers for security and authentication purposes.

03How We Use Your Data

Every piece of data we collect has a clear purpose. myr8 does not collect unnecessary information and will not use your data beyond the scope stated below:

• Verifying your identity and confirming you meet the minimum age requirement of 18 years.
• Processing deposits, withdrawals, and all financial transactions securely.
• Providing effective customer support and resolving any complaints.
• Sending important notifications related to your account, security, and transactions.
• Ensuring compliance with legal obligations, including anti-money laundering (AML) regulations.
• Detecting and preventing fraud, account abuse, and unlawful activity on the platform.
• Supporting responsible gaming programs, including monitoring for high-risk wagering patterns.
• Improving user experience and developing new features based on usage patterns.
• Sending relevant promotional offers and bonuses — only if you have not opted out of marketing communications.

04Cookies & Tracking Technology

Myr8 uses cookies and similar tracking technologies to enhance platform functionality, maintain session security, and understand how players interact with our services. Cookies are small text files stored on your device when you visit our platform.

• Essential Cookies: Required for core platform functions such as login verification and session security. Cannot be disabled.
• Functional Cookies: Saving personal preferences such as your language choice and recent game history for your convenience.
• Analytics Cookies: Helping us understand which pages are most visited and how to improve the platform.
• Security Cookies: Used to detect suspicious login attempts and protect your account from unauthorised access.

You can manage your cookie settings through your web browser at any time. Please note that disabling essential cookies may affect platform functionality and your overall gaming experience.

05Data Sharing

Myr8 does not sell your personal data. We only share your information in limited and necessary circumstances, as stated below:

• Payment Service Provider: Minimal transaction information is shared with licensed payment gateways (FPX, DuitNow, TnG eWallet) solely to process your deposits and withdrawals.
• Game Provider: Non-directly identifying account identifiers are shared with gaming software providers to ensure a seamless gaming experience.
• Regulatory Authority: Information required by law or court order will be disclosed to the relevant authorities.
• KYC Verification Provider: Identity data is shared with licensed third-party verification services to fulfil KYC/AML requirements.
• We not share your data with advertisers, data brokers, or any party for marketing purposes.
• We not transfer your data to countries that do not have equivalent data protection standards.

All third-party service providers we work with are bound by strict data confidentiality agreements and are only permitted to process your data under myr8's instructions.

06Data Security

Myr8 implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or accidental disclosure:

• Data encryption in transit using TLS 1.3 and 256-bit SSL for all communications between your device and our servers.
• Data encryption at rest — passwords are stored in a hashed format that cannot be decrypted, even by myr8 staff.
• Two-factor authentication (2FA) is available and recommended for all player accounts.
• Round-the-clock security monitoring with an active intrusion detection system (IDS).
• Strict internal access controls — only staff who require access to perform their duties may view sensitive data.
• Regular penetration testing by independent security auditors to identify and patch vulnerabilities.
• Automatic data backups and disaster recovery procedures to ensure continuity of service.

07Data Retention Period

Myr8 only retains your personal data for as long as necessary for the purposes stated in this Privacy Policy, or as required by applicable laws in Malaysia:

• Active account: Data is retained for the duration your account remains active on the myr8 platform.
• After account closure: Transaction records and KYC documents are retained for a minimum of 7 years in accordance with Malaysia's AML legal requirements.
• Technical log data: Retained for 12 months for security and incident investigation purposes.
• Customer support communications: Retained for 3 years for reference and quality control.
• Marketing data: Deleted within 30 days after you withdraw your consent.

Once the retention period expires, your data will be deleted or anonymised in a secure and irreversible manner.

08Your Rights

As a data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you hold the following rights regarding your personal data held by myr8:

09Children's Data

The myr8 platform is strictly for individuals aged 18 and above. We do not knowingly collect, process, or store personal data of anyone under the age of 18.

If you are a parent or guardian and believe your underage child has registered an account at myr8 or provided us with their personal data, please contact us immediately. We will investigate the matter and take appropriate action, including deleting all related data and closing the account.

10Third-Party Links

The myr8 platform may contain links to third-party websites or services in certain contexts, such as payment providers or gaming partners. This Privacy Policy applies solely to the myr8 platform.

Myr8 is not responsible for the privacy practices or content of those third-party websites. We encourage you to read the privacy policy of every third-party website you visit. Users who follow links to external sites do so at their own risk.

11Policy Amendments

Myr8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, technological requirements, or new legal obligations. Any material changes will be communicated to you via in-platform notification or email at least 7 days before they take effect.

• The "Last Updated" date at the top of this page always reflects the latest version in effect.
• Continued use of the platform after the effective date of any amendment constitutes acceptance of the updated terms.
• You may request a copy of a previous version of the Privacy Policy through customer support for reference.

12Contact Us

If you have any questions, concerns, or wish to exercise your data rights as outlined in this Privacy Policy, please contact the myr8 Data Protection Officer (DPO) team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly within the myr8 platform.
• Email: [email protected] (response time: within 1 business day).

For data protection complaints that cannot be resolved directly with us, you have the right to refer the matter to Malaysia's Department of Personal Data Protection (JPDP), the regulatory body for PDPA in this country.