Satu8 Privacy Policy – Our Commitment to Protecting Your Personal Data at All Times

1Introduction and Scope of This Policy

Satu8 values the privacy of every player who uses our platform. This Privacy Policy transparently explains how we handle your personal data — from the moment you register an account through to after you stop using our services.

This policy applies to all information you provide directly to us, information we collect automatically when you use the satu8 platform, and information we receive from trusted third-party sources such as payment providers and identity verification partners.

We encourage you to read this document in full so you have a clear understanding of your rights and how we fulfil our responsibilities in protecting your personal data. If any section is unclear, the satu8 support team is available to assist you 24 hours a day.

2Types of Personal Data We Collect

Satu8 collects your personal data through three primary methods: information you provide directly, data collected automatically, and information from authorised third parties.

Data you provide directly:

• Registration information: full name, date of birth, identification card number, email address, and phone number.
• Identity verification information (KYC): copies of identification card, passport, or other valid identification documents.
• Financial information: bank account details, e-wallet account numbers (FPX, DuitNow, Touch 'n Go, Boost), or crypto wallet addresses for transaction processing purposes.
• Support team communications: Live Chat, Telegram, and email conversation history.
• Feedback and surveys you voluntarily participate in.

Automatically collected data:

• Device information: device type, operating system, app version, and unique device identifier.
• Usage data: pages visited, games played, session duration, and navigation patterns within the platform.
• Network information: IP address, approximate location (state or city level), and internet service provider name.
• Transaction log data: history of deposits, withdrawals, wagering, and wins.

3How We Use Your Personal Data

Satu8 uses your personal data only for legitimate purposes necessary to operate our platform safely and efficiently. We do not use your data for unrelated purposes without your prior consent.

For marketing communications, you may withdraw your consent at any time by updating your notification preferences in your satu8 account settings or by contacting our support team.

4Data Sharing with Third Parties

Satu8 does not sell or disclose your personal data to third parties for their own marketing purposes. However, in the course of operating the platform, we may share your data with the following categories of recipients:

• Payment Service Providers: FPX, DuitNow, Touch 'n Go eWallet, Boost, and authorised crypto processing providers — solely for processing your financial transactions.
• Identity Verification Providers: Third-party KYC partners who assist in verifying player identities to comply with anti-money laundering (AML) requirements.
• Technical Service Providers: Cloud computing companies, customer support platforms, and email service providers that help us run the platform's day-to-day operations.
• Regulatory Bodies and Authorities: When required by law, court order, or a relevant regulatory authority.
• Game Providers: Our game software providers may receive limited game session data for game operation purposes only.

5Data Security Measures We Practice

Your data security is satu8's highest priority. We continuously invest in the latest security infrastructure and procedures to ensure your information is always protected.

• 256-bit SSL/TLS Encryption: All data communications between your device and satu8's servers are fully encrypted using the latest TLS 1.3 protocol.
• Two-Factor Authentication (2FA): Members can enable 2FA to add an extra layer of protection to their account via an authenticator app or SMS.
• Real-Time Monitoring: Our systems monitor account activity 24/7 and automatically flag and block any suspicious behaviour.
• Internal Access Controls: Only satu8 staff with a legitimate business need may access player personal data, and all access is logged and audited regularly.
• Regular Penetration Testing: satu8's infrastructure undergoes independent security testing on a regular basis to identify and address any system vulnerabilities.
• Secure Data Backup: Data is backed up daily to geographically separate backup data centres to ensure service continuity.

6Use of Cookies and Tracking Technologies

Satu8 uses cookies and similar tracking technologies to enhance your user experience, analyse platform usage patterns, and maintain the security of your login session.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login session authentication, betting slip, and language settings. These cookies cannot be disabled.
• Performance Cookies: Helps us understand how players use the platform so we can continuously improve your gaming experience.
• Functional Cookies: Saves your preferences such as language, display settings, and game settings so you do not need to reconfigure them every time you log in.
• Analytics Cookies: Used to analyse platform traffic in aggregate and anonymously for service improvement purposes.

You can manage cookies through your web browser settings. Disabling certain cookies may affect the functionality of some sections of the satu8 platform.

7Your Rights Regarding Personal Data

As a satu8 player in Malaysia, you have the following rights regarding your personal data under the Personal Data Protection Act 2010 (PDPA) and satu8's internal policies:

To exercise any of the above rights, contact the satu8 privacy team via Live Chat or Telegram. We will respond to your request within 14 business days.

8Data Retention Period

Satu8 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by applicable law.

• Active account data: Retained for as long as your account is active and for 5 years after account closure for legal compliance and audit purposes.
• Financial transaction records: Retained for 7 years after the transaction date as required by Malaysian financial law.
• KYC documents: Retained for the duration the account is active and 5 years after account closure to comply with AML requirements.
• Support communication logs: Retained for 2 years from the date of last interaction.
• Cookie and analytics data: Anonymous aggregated data may be retained indefinitely; individual session data is deleted within 90 days.

Upon expiry of the retention period, your data will be securely deleted or anonymised so it can no longer be linked to your identity.

9Cross-Border Data Transfers

In operating the satu8 platform, your personal data may be transferred to and stored on servers located outside Malaysia. Such transfers occur when we use international cloud computing services or global technology providers to operate our platform.

Satu8 ensures that all cross-border data transfers are carried out with adequate safeguards, including:

• Standard data processing agreements compliant with international data protection requirements.
• Use of cloud service providers holding internationally recognised security certifications such as ISO 27001 and SOC 2.
• Data protection impact assessments conducted before any new data transfers to jurisdictions outside Malaysia are implemented.

10Child Protection

The satu8 platform is intended strictly for individuals aged 18 and above. We do not knowingly collect or store personal data from minors.

11How to Contact Us for Privacy Matters

If you have any questions, concerns, or requests regarding this Privacy Policy or how satu8 handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 directly within the satu8 platform — the fastest way to get a response.
• Telegram: Contact our support agents via satu8's official Telegram for more detailed privacy enquiries.
• Privacy Email: [email protected] — for formal requests relating to data protection rights that require a written response.

Our privacy team will respond to all enquiries within 3 business days and data rights requests within 14 business days from the date of receipt.

12Amendments to This Privacy Policy

Satu8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or improvements in how we protect your data.

When we make significant changes:

• We will send a notification to your registered email address at least 14 days before the changes take effect.
• Change notices will be clearly displayed on the satu8 platform's home page and at the top of this Privacy Policy page.
• The "Updated" date at the top of this document will be refreshed to reflect the latest version.

Continued use of the satu8 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you disagree with the changes made, you have the right to close your account before the effective date.