Satu8 Privacy Policy – How We Protect the Personal Data of Malaysian Players

Welcome to Satu8's Privacy Policy page. This document clearly and comprehensively explains how Satu8 ("we", "the Platform", or "Satu8") collects, processes, stores, and protects your personal data when you register, log in, or use any of the services offered on the satu8.best platform.

Player privacy is more than a legal obligation for Satu8 — it is a core value we have upheld since day one. We understand that Malaysian players entrust us with their personal information when registering an account, making deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, or other payment methods, and when using our Sports Betting and casino gaming services. That trust is something we take seriously.

By using the Satu8 platform, you agree to the collection and use of your information as described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the Satu8 platform and contact us to close your account in an orderly manner.

Satu8 collects various categories of personal data depending on how you interact with our platform. Below is a comprehensive overview of the data we may collect from Malaysian players:

Personal data categorised as "Mandatory" is required for Satu8 to provide the platform's core services. Failure to provide this mandatory data may prevent you from registering an account or using certain functions such as withdrawals. "Automatic" data is collected technically when you use the platform and requires no specific action on your part.

Satu8 collects personal data through several different channels throughout your interactions with our platform:

• During Account Registration: You actively provide personal information such as your name, phone number, email address, and password when creating a new Satu8 account.
• During the KYC (Identity Verification) Process: When you request a withdrawal above a certain threshold, Satu8 may require a copy of your identification documents to comply with anti-money laundering (AML) regulatory requirements.
• During Financial Transactions: Payment method and transaction information is collected when you make a deposit using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, CIMB Clicks, or any other payment method supported by Satu8.
• While Using the Platform: Technical and gameplay data is collected automatically when you access and use the Satu8 platform – including logins, interface navigation, games played, bets placed, and other interactions.
• Through Communications: When you contact the Satu8 customer support team via live chat or email, information shared during those communications may be retained for reference and service improvement purposes.
• Through Cookies and Tracking Technologies: The Satu8 platform uses cookies and similar technologies to enhance the user experience, maintain login sessions, and understand aggregate usage patterns. Further details are explained in Section 8.

Satu8 uses collected personal data solely for legitimate purposes that are directly relevant to our platform's operations and the needs of Malaysian players. We never use your data for any other purpose without clear notice and, where required, your explicit consent.

The primary purposes for which Satu8 uses personal data are as follows:

• Service Provision: Processing account registration, verifying identity, handling deposits and withdrawals via supported Malaysian payment methods, and providing access to all games and betting options on the Satu8 platform.
• Account Management & Security: Verifying your identity at login, detecting suspicious activity, preventing unauthorised access, and protecting your account from cybersecurity threats.
• Regulatory Compliance: Meeting legal requirements related to anti-money laundering (AML), know your customer (KYC), and any reporting obligations that may be required by the relevant enforcement authorities.
• Customer Service: Providing technical assistance, addressing enquiries, resolving disputes, and improving the quality of support we deliver to Satu8 players.
• Responsible Gaming: Identifying gameplay patterns that may indicate signs of problem gambling and offering appropriate self-management tools.
• Service Communications: Sending you important notifications related to your account, transactions, changes to our terms or policies, and relevant security information.
• Marketing (Subject to Consent): With your consent, Satu8 may send you information about promotions, bonuses, new games, and special offers that may interest you. You may withdraw this consent at any time.
• Platform Enhancements: Analysing usage patterns in aggregated, anonymised form to improve the design, functionality, speed, and overall experience of the Satu8 platform.

Whenever Satu8 intends to use your data for a new purpose not stated in this Privacy Policy, we will notify you in advance and, where required by law, obtain your consent before proceeding.

Satu8 does not sell, rent, or trade members' personal data to any third party for marketing or commercial purposes. This is an absolute, unwavering commitment. That said, in the normal course of platform operations, Satu8 may share your personal data with certain categories of third parties in limited and strictly controlled circumstances:

• Payment Providers: When you make a deposit or withdrawal, the necessary transaction information is shared with the relevant payment provider – such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow processors, or Malaysian banks handling your FPX transactions. This data is shared solely to facilitate the processing of your financial transaction.
• Game Providers: Game providers such as Pragmatic Play, Evolution Gaming, PG Soft, and others may receive the minimum technical data required to deliver their games to you through the Satu8 platform. These providers are bound by strict data confidentiality agreements.
• Identity Verification Services: For KYC and fraud prevention purposes, Satu8 may use recognised third-party identity verification services. Data shared is limited to the minimum necessary for verification purposes only.
• Regulatory Authorities: Satu8 will disclose personal data to authorities, law enforcement agencies, or courts when required by applicable Malaysian law or a valid court order.
• Business Transfer: In the event of a merger, acquisition, or sale of Satu8's assets, user data may be transferred as part of that transaction. You will be notified in advance via email and in-platform notification before any such transfer takes place.

Satu8 continually invests in the latest cybersecurity infrastructure to keep our players' personal data protected against a wide range of threats. Key security measures we have implemented include:

• Data Encryption in Transit: All communications between your web browser and Satu8's servers are protected by 256-bit TLS/SSL protocol, ensuring that data cannot be intercepted or read by unauthorised parties during transmission.
• Stored Data Encryption: Sensitive data in Satu8's databases — including financial information and identity documents — is stored in encrypted form using industry-standard encryption algorithms.
• Layered Access Controls: Access to systems containing player data is restricted to staff who require it to perform their job functions. All access is logged, monitored, and audited on a regular basis.
• Two-Factor Authentication: Satu8's internal systems use two-factor authentication (2FA) for all administrator access to databases containing player data.
• Regular Security Audits: Satu8 conducts regular penetration testing and security audits by qualified independent parties to identify and address any system vulnerabilities before they can be exploited.
• 24/7 Monitoring: Satu8's systems are continuously monitored to detect unusual activity, intrusion attempts, or anomalies that may indicate an active security threat.
• Incident Response Plan: Satu8 maintains a clearly documented security incident response procedure to ensure any data breach is promptly identified, contained, and resolved — while notifying affected users in accordance with legal requirements.

While we take all reasonable steps to protect your data, no security system in the world can guarantee 100% absolute protection against every threat. We continuously improve our security systems in line with the latest cybersecurity developments and evolving industry standards.

Satu8 retains your personal data only for as long as necessary to fulfil the original purpose for which it was collected, or as required under applicable Malaysian law. We do not hold on to data that is no longer needed, and we maintain systematic data deletion procedures.

Satu8 data retention period guidelines:

• Active Account Data: For as long as your account remains active and there are no ongoing review or dispute processes.
• Financial Transaction Records: Minimum 7 years from the transaction date, to meet the financial compliance and audit requirements prescribed under Malaysian law.
• KYC and Identity Verification Records: A minimum of 5 years after the business relationship ends, to satisfy AML requirements and applicable legislation.
• Customer Service Communication Logs: 3 years from the date of communication, for reference and service improvement purposes.
• Anonymous Analytics Data: May be retained for a longer period as it no longer contains information that can be attributed to a specific individual.

Once the relevant retention period has elapsed, your personal data will be securely deleted or anonymised so that it can no longer be linked to your identity. You may request early deletion in accordance with the rights described in Section 9, subject to any applicable legal retention obligations.

The Satu8 platform uses cookies and similar tracking technologies to enhance your experience, maintain login sessions, and understand how players interact with our platform. Below is an overview of the types of cookies we use:

• Essential Cookies: These cookies are essential for the core functionality of the Satu8 platform — including login authentication, session management, and security. The platform cannot function properly without them and they cannot be disabled.
• Preference Cookies: This cookie saves your preferences — such as interface language, game settings, and display options — so you don't have to reconfigure them every time you access Satu8.
• Analytics Cookies: Used to understand aggregate usage patterns on the Satu8 platform – such as the most frequently visited pages, time spent in each section, and user navigation flows. This data helps us improve the platform's design and functionality.
• Security Cookies: Used to detect suspicious activity, unauthorised login attempts, and other security threats that may compromise your account.

You can manage your cookie settings through your web browser at any time. However, disabling certain cookies may affect the functionality of some features on the Satu8 platform. For more information on managing cookies in your browser, refer to your browser's help documentation.

As a Satu8 player and data subject under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data we hold about you:

• Right of Access: You have the right to request a copy of the personal data we hold about you. Satu8 will provide this information within a reasonable timeframe once your request has been received and your identity verified.
• Right of Rectification: If you find that your personal data in Satu8's system is inaccurate, incomplete, or out of date, you have the right to request a correction. Basic account data can be updated directly through your account settings. For more complex data corrections, please contact our team.
• Right to Erasure: In certain circumstances — such as when data is no longer needed for its original purpose or when you withdraw the consent on which processing was based — you have the right to request deletion of your personal data. Please note that this right is subject to legal retention obligations that may prevent the immediate deletion of certain records.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing for other purposes based on your specific circumstances.
• Right to Withdraw Consent: Where data processing is based on your consent, you may withdraw that consent at any time without affecting the validity of any processing that took place prior to the withdrawal.
• Right to Data Portability: You have the right to receive the personal data you have provided to Satu8 in a structured, commonly used, and machine-readable format, and to have it transferred to another data controller if you so choose.

To exercise any of the rights above, please contact the Satu8 team via Live Chat or email at support@satu8.best, stating which right you wish to exercise and providing sufficient information for us to verify your identity. We will process your request within 30 days of receipt.

The Satu8 platform is intended solely for individuals aged 18 and above. We do not knowingly collect, store, or process any personal data from individuals under the age of 18.

Satu8 has strict age verification procedures in place during the registration and KYC process to ensure only adults are able to use our platform. If we discover that personal data belonging to an individual under the age of 18 has been inadvertently collected — whether due to false information provided during registration or any other reason — we will take immediate action to:

• Immediate closure of the account in question.
• Deleting all associated personal data from our systems.
• Returning any legitimate account balance to the relevant payment method once the investigation is concluded.

If you are a parent or guardian and have reason to believe that your underage child has registered a Satu8 account without your permission, please contact us immediately at support@satu8.best so we can take the appropriate action without delay.

Satu8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, updates to applicable Malaysian laws and regulations, or improvements to the way we protect player data.

For any material changes — meaning changes that may significantly affect how we use or protect your personal data — Satu8 will:

• Providing at least 14 days' notice before changes take effect via in-platform notification when you log in.
• Sending a notification email to the email address registered to your Satu8 account.
• Displaying a prominent notice on the Satu8 website homepage for an appropriate period.

The "Last Updated" date displayed at the top of this document will always reflect the latest version of the Privacy Policy currently in force. Your continued use of the Satu8 platform after an amendment's effective date constitutes your acceptance of the updated privacy terms.

If you have any questions, concerns, or complaints about how Satu8 handles your personal data, or if you wish to exercise any of the privacy rights described in Section 9, please contact us through the following channels:

• Live Chat: The fastest option — available 24/7 directly from the Satu8 platform. Average response time is under 2 minutes. Ideal for general enquiries about our privacy policy.
• Email: support@satu8.best – for more complex privacy enquiries, data access requests, or formal complaints. We respond within 24–48 business hours. Please include "Privacy Enquiry" in the subject line of your email.
• FAQ: Page Satu8 FAQ contains answers to frequently asked questions about privacy, account security, and data protection.

The Satu8 team is fluent in both Bahasa Malaysia and English and is ready to assist you patiently and professionally with any privacy concerns you may have. We are committed to taking every privacy-related enquiry seriously and responding within a reasonable timeframe.