Privacy Policy

This Privacy Policy ("Policy") is issued by M8Bets ("Company", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at https://m8bets.cam ("Platform", "Site"). This Policy governs the collection, processing, storage, disclosure, and protection of personal data submitted by or collected from individuals ("User", "Member", "you") who access or use the M8Bets platform.

M8Bets is committed to safeguarding the personal data of its members in compliance with applicable data protection legislation. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read alongside our Terms & Conditions, which govern the broader contractual relationship between you and M8Bets. If you have any questions about this Policy, please refer to the Contact section at the end of this document.

For the purposes of this Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, identification number, payment details, and IP address.
• "Processing" means any operation performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, consultation, use, disclosure, transmission, restriction, erasure, or destruction.
• "Data Controller" means M8Bets, as the entity that determines the purposes and means of processing Personal Data.
• "Data Processor" means a third party engaged by M8Bets to process Personal Data on the Company's behalf, subject to a data processing agreement.
• "KYC" means Know Your Customer — the identity and address verification procedures required by the Company and applicable regulatory frameworks.
• "Cookies" means small text files placed on your device by the Platform to collect technical and behavioural data.
• "Sensitive Data" means Personal Data revealing racial or ethnic origin, political opinion, religious belief, health information, or biometric data, which the Company does not intentionally collect.

M8Bets collects Personal Data through multiple channels. The categories of data we may hold about you are set out in the table below:

We do not intentionally collect Sensitive Data. If you provide such data incidentally (for example, in a support chat), it will not be used for any purpose other than resolving your specific query and will be handled with the highest level of care.

The Company processes your Personal Data under one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing required to enter into or perform the contract between you and M8Bets — including account creation, transaction processing, and game provision.
• Legal obligation: Processing necessary to comply with applicable laws, including anti-money laundering (AML) regulations, KYC requirements, and any mandatory reporting obligations.
• Legitimate interests: Processing carried out for the Company's legitimate business interests — such as fraud prevention, platform security, responsible gambling monitoring, and service improvement — provided such interests are not overridden by your rights.
• Consent: Where you have provided explicit consent, such as for receiving promotional communications or marketing materials. You may withdraw consent at any time by updating your account preferences.

M8Bets processes Personal Data for the following specific purposes:

5.1 Account Management

To create, maintain, verify, and close your M8Bets account; to authenticate your identity at login; to communicate important account information such as security alerts, policy updates, and transaction confirmations.

5.2 Transaction Processing

To facilitate deposits and withdrawals via Malaysian payment methods including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, and Public Bank Online; to maintain accurate financial records; and to detect, investigate, and prevent fraudulent transactions.

5.3 KYC & Compliance

To verify your identity and address in accordance with applicable regulatory requirements; to screen against sanctions lists and politically exposed persons (PEP) databases; to fulfil our obligations under anti-money laundering legislation.

5.4 Platform Operations & Improvement

To provide, maintain, and improve the Platform's functionality; to personalise your experience based on usage patterns; to conduct A/B testing, analytics, and research aimed at improving our casino, sports betting, and live dealer products.

5.5 Responsible Gambling

To monitor betting patterns that may indicate problem gambling behaviour; to enforce responsible gambling tools including deposit limits and self-exclusion; to communicate responsible gambling resources to members who may require support.

5.6 Marketing Communications

Where you have consented, to send you promotional offers, bonus notifications, and platform updates by email or push notification. You may opt out of marketing communications at any time via your account preferences or by contacting our support team.

5.7 Security & Fraud Prevention

To detect, investigate, and prevent cheating, collusion, bonus abuse, and other activities that violate our Terms & Conditions; to protect the integrity of our platform and safeguard all members from fraud.

M8Bets does not sell, rent, or trade your Personal Data to third parties for their own marketing or commercial purposes. We may share your data only in the following limited and controlled circumstances:

• Payment processors: To facilitate deposits and withdrawals, your payment-related data is shared with authorised payment service providers operating the Malaysian payment infrastructure (such as FPX operators, DuitNow network participants, and licensed e-wallet providers).
• KYC verification providers: Identity and document data may be shared with third-party identity verification services engaged to assist with our KYC obligations.
• Game content providers: Limited technical identifiers (such as session tokens and bet records) may be shared with licensed game studios supplying content to the Platform to ensure fair play and accurate game settlement.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory direction, the Company may be obligated to disclose Personal Data to competent authorities.
• Professional advisers: Lawyers, auditors, insurers, and other professional advisers engaged by the Company may have access to Personal Data under strict confidentiality obligations.
• Group companies: Where M8Bets is part of a corporate group, data may be shared with affiliated entities for the purposes described in this Policy, subject to equivalent data protection standards.

All third parties with access to your Personal Data are required to process it only in accordance with our instructions and applicable data protection law. We do not permit third-party Data Processors to use your data for their own independent purposes.

The M8Bets Platform uses cookies and similar tracking technologies to improve your user experience, maintain session security, and analyse Platform performance. The types of cookies we use are described below:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled without impairing Platform functionality.
• Functional cookies: Enable the Platform to remember your preferences, such as language settings, preferred payment method, and session time limits you have set.
• Analytics cookies: Allow us to measure how members interact with the Platform — including pages visited, features used, and error events — so we can improve our service over time.
• Performance cookies: Help us identify and resolve latency issues and ensure the Platform performs consistently for members across Malaysia, from Kuala Lumpur to Penang to Johor Bahru.

You can manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect your ability to use some features of the Platform. Continuing to use m8bets without changing your cookie settings constitutes acceptance of our use of cookies as described above.

We retain your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law.

• Active account holders: Personal Data is retained for the full duration of your membership and for a minimum of five (5) years following account closure, in compliance with AML record-keeping obligations.
• KYC documents: Identity and address verification documents are retained for a minimum of five years following the end of the customer relationship or the date of the last transaction, whichever is later.
• Transaction records: Financial transaction records, including deposit and withdrawal history in MYR, are retained for a minimum of seven years in compliance with applicable financial record-keeping requirements.
• Support communications: Live chat transcripts and email correspondence are retained for two years from the date of the last communication, for quality assurance and dispute resolution purposes.
• Marketing consent records: Records of your consent to or withdrawal from marketing communications are retained for the duration of your membership and two years thereafter.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be attributed to you.

M8Bets implements appropriate technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser or device and our servers.
• Encryption at rest for all stored Personal Data and KYC documents held on our servers.
• Multi-factor authentication for internal staff access to data processing systems.
• Role-based access controls limiting employee access to Personal Data strictly to what is required for their job function.
• Regular penetration testing and security audits conducted by independent third-party security specialists.
• Incident response procedures designed to detect, contain, and remediate data breaches within required regulatory timeframes.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify affected members without undue delay and in accordance with applicable law.

Subject to applicable data protection law, you hold the following rights in respect of your Personal Data held by M8Bets. To exercise any of these rights, please contact our Data Protection team as described in Section 15.

• Right of Access: You may request a copy of the Personal Data we hold about you, along with information about how it is processed.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data. For certain data fields, you can update your information directly via your account settings.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations.
• Right to Restriction: You may request that we restrict processing of your Personal Data in certain circumstances, for example while a correction request is pending.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request a copy of your Personal Data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing. Where you object to marketing, we will cease that processing immediately.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

We will respond to all valid rights requests within 30 calendar days of receipt. We may extend this period by a further 60 days for complex or high-volume requests, in which case we will notify you of the extension and the reason for it.

The M8Bets platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect Personal Data from persons under the age of 21. All registration requests are subject to age verification, and the Company will refuse or close any account where it has reason to believe the member is below the minimum age.

If you have reason to believe that a minor has provided Personal Data to M8Bets, please contact us immediately at [email protected]. Upon confirmation, we will take immediate steps to delete the relevant data and close the associated account.

Parents and guardians are encouraged to use device parental controls and internet filtering tools to prevent minors from accessing online gambling platforms. More information is available on our Responsible Gambling page.

The M8Bets Platform may contain links to third-party websites, applications, or services. These links are provided for informational convenience only. M8Bets has no control over, and accepts no responsibility for, the privacy practices or content of any third-party destination. We encourage you to review the privacy policy of any third-party site you visit from a link on our Platform.

Where the Company engages Data Processors or affiliated entities located outside Malaysia, your Personal Data may be transferred to and processed in jurisdictions other than Malaysia. In such cases, the Company ensures that adequate safeguards are in place to protect your data, including the use of standard contractual clauses, data processing agreements, and assessments of the adequacy of data protection laws in the recipient jurisdiction.

By using the M8Bets platform, you consent to the transfer of your Personal Data to other jurisdictions where necessary for the provision of our services, subject to the safeguards described above.

M8Bets reserves the right to update or revise this Privacy Policy at any time. Material changes will be communicated to registered members by way of a prominent notice on the Platform or by email to the address associated with your account, at least 14 days before the changes take effect.

The "Last Updated" date at the top of this Policy reflects the most recent revision. Your continued use of the Platform following the effective date of a revised Policy constitutes your acceptance of those changes. If you do not agree to the revised Policy, you must cease using the Platform and may request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the M8Bets Data Protection team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly within the M8Bets platform. This is the fastest channel for routine account and data queries.
• Email: [email protected] — please include "Privacy Policy Request" in your subject line. We aim to acknowledge all data requests within 48 hours.

Our support team is available to assist members from across Malaysia — including Kuala Lumpur, Petaling Jaya, Shah Alam, Penang, and Johor Bahru. Please note that our staff will never ask for your password or full payment credentials when handling a data request.