Privacy Policy F8bett – Your Information, Our Responsibility

1 Personal Information We Collect

F8bett collects your personal information when you register an account, carry out financial transactions, use our customer support services, or interact with our platform. This data collection is necessary for us to operate our services securely and comply with legal requirements in force in Malaysia.

We only collect information that is strictly necessary. This "data minimisation" principle means we do not request information beyond what is needed for the stated purpose. For a basic account, we only require a valid email address and phone number. Additional information such as identity document copies is only requested when you reach certain transaction limits or when compliance checks require full identity verification.

2 How We Use Your Data

Every piece of data we collect has a clear and lawful purpose. F8bett does not use your data for undisclosed purposes without first obtaining your consent. The following are the primary purposes for which member personal data is used:

• Account management: Creates and manages your member account, ensuring secure access through identity verification.
• Transaction processing: Processes deposits, withdrawals, and all financial transactions on your account quickly and accurately.
• Legal compliance: Meets KYC (Know Your Customer), AML (Anti-Money Laundering), and required regulatory reporting obligations.
• Platform security: Detects and prevents fraudulent activity, duplicate account creation, and other cybersecurity threats.
• Customer support: Provides relevant and effective assistance when you contact our support team.
• Service improvement: Analyses aggregated usage patterns to improve the interface and overall gaming experience.
• Marketing communications: Sends promotional information, bonuses, and platform updates — only with your consent and unsubscribable at any time.

3 Sharing Information with Third Parties

F8bett does not sell or rent your personal data to any external party. However, there are limited situations where we need to share certain information with trusted third parties to enable us to provide services to you:

• Payment providers: DuitNow, FPX, Touch 'n Go, GrabPay, and Boost receive transaction data necessary to process your deposits and withdrawals. These providers are bound by strict confidentiality agreements.
• Game providers: Game software providers receive the member identifier required to manage your gaming session. No financial information or full identity details are shared with game providers.
• Identity verification services: Certified third-party KYC partners assist in verifying identity documents. All such partners are bound by data processing agreements that comply with PDPA.
• Authorities: Information may be disclosed to law enforcement agencies or regulatory bodies when required by court order or applicable Malaysian law.

4 Data Security & Technical Protection

We continually invest in security infrastructure to ensure your data is protected to the highest standard. Our technical and organisational measures include:

• Data encrypted in transit using TLS 1.3 and at rest using AES-256.
• Two-factor authentication (2FA) is available for all member accounts as an additional layer of security.
• 24/7 system monitoring with an active intrusion detection system (IDS).
• Regular security audits by independent external parties to identify and patch vulnerabilities.
• Role-based access control (RBAC) ensuring staff can only access data relevant to their responsibilities.
• A comprehensive security incident response plan with clear notification procedures in the event of a data breach.

In the event of a data breach that may affect your rights or freedoms, f8bett is committed to notifying you within 72 hours of becoming aware of the incident, in line with international best practices in data protection.

5 Cookies & Tracking Technologies

The f8bett platform uses cookies and similar technologies to enhance your experience. Cookies are small text files stored on your device when you visit our website. They help us recognise you on return visits and tailor content to your preferences.

Types of cookies we use:

• Essential Cookies: Required for core platform functions such as login, session management, and security. These cookies cannot be disabled.
• Performance Cookies: Collects information on how you use the platform (pages visited, time spent) to help us improve our services.
• Functional Cookies: Stores your preferences such as language, display settings, and frequently used game areas.
• Analytics Cookies: Helps us understand aggregated, anonymised usage patterns to inform product development decisions.

You can manage cookies through your browser settings. Disabling certain cookies may affect some platform features. Guides for managing cookies on major browsers are available in your browser's help section.

6 Your Rights as a Data Owner

Under Malaysia's Personal Data Protection Act 2010 and international best practices, you have the following rights regarding your personal data held by f8bett:

7 Data Retention Period

F8bett retains your personal data for as long as necessary to fulfil the purposes stated in this privacy policy, or as required by applicable Malaysian law. The following are our data retention guidelines:

• Active account data: Retained for the duration your account remains active and usable.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian financial and tax legal requirements.
• KYC Documents: Retained for 5 years after the business relationship ends, in accordance with AML/CTF requirements.
• Support communication logs: Retained for 2 years for reference in the event of a dispute.
• Closed account data: Basic information is retained for 5 years for fraud prevention and compliance purposes before being permanently deleted.

When data is no longer needed for any legitimate purpose, it will be securely deleted using methods that ensure it cannot be recovered.

8 Children's Privacy & Underage Users

The f8bett platform is strictly for users aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18.

9 Links to Third-Party Sites

The f8bett platform may contain links to third-party websites or applications such as game providers and payment partners. Once you click those links and leave our platform, our privacy policy no longer applies.

We recommend reading the privacy policy of every website you visit. F8bett is not responsible for the privacy practices or content of third-party websites outside our control. Your choice to access any third-party site is entirely at your own risk.

10 Amendments to This Privacy Policy

F8bett reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new technology, or updated legal requirements. Any material amendments will be communicated to you via:

• A clear notice on the platform's home page at least 14 days before any amendments take effect.
• Email notification to your registered email address for significant amendments.
• In-app notifications for f8bett mobile app users.

The "Updated" date at the top of this page reflects the date of the most recent amendment. Continued use of the f8bett platform after amendments take effect constitutes your acceptance of the updated terms. If you do not agree with the amendments, please discontinue use of the platform and contact us to close your account.

11 Contact Our Data Protection Officer

For any questions, concerns, or requests related to this Privacy Policy or the processing of your personal data, please contact us through the following channels: