OFFICIAL plae8 DOCUMENT

Privacy Policy plae8 — Personal Data Protection for Malaysian Players

Plae8 takes the privacy of every member seriously. This policy clearly explains the types of data we collect, how it is used, and how we protect it in accordance with the Personal Data Protection Act 2010 (PDPA 2010).

Effective Date: 1 January 2026
Last Updated: 1 July 2026
Version: 2.4
12 Sections
Full Policy
PDPA 2010
Full Compliance
256-bit SSL
Data Encryption
Malaysia
Official Version

Plae8's Privacy Commitment to Players

Six data protection principles that underpin how plae8 manages your information

Full Data Encryption

All personal data transmitted between your device and the servers plae8 is protected with 256-bit SSL encryption — the same security standard used by major Malaysian banking institutions. Sensitive information such as bank account numbers, MyKad numbers and payment details is stored in encrypted form and cannot be accessed by any unauthorised party.

No Sale of Data to Third Parties

plae8 never sells, rents, or trades members' personal data to any third party for marketing or commercial purposes. Your information belongs to you — we use it solely for purposes directly related to the services you use on the plae8 platform and to fulfil applicable legal obligations.

Malaysia PDPA 2010 Compliance

plae8 operates in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010), which governs how companies handle users' personal data in Malaysia. This means you have legally guaranteed rights — including the right to access, correct, and request the deletion of your personal data held by us.

Your Data, Your Control

Plae8 gives players control over their personal data. You can update your account information, manage your communication preferences, request a copy of the data we hold, or request data deletion through the channels we provide. Requests will be processed within the timeframe stipulated by PDPA 2010, at no charge.

Responsible Data Retention

Your personal data is retained only for as long as necessary for the stated purposes or as required by applicable Malaysian law. Once the retention period expires, data will be securely deleted or anonymised. plae8 does not retain data beyond what is required for operational and legal compliance purposes.

Data Breach Notification

In the event of any data security breach that may affect your personal information, plae8 is committed to notifying you in a timely manner in accordance with legal requirements. We will also take immediate steps to contain any damage and strengthen our security systems to prevent a recurrence.

Important Note: This Privacy Policy explains how we plae8 collect, use, store, and protect your personal data. By registering for or using the plae8 platform, you agree to the terms of this Privacy Policy. Please read this document carefully in its entirety.

1
Introduction & Scope of Privacy Policy

This Privacy Policy is issued by plae8 ("we", "platform", "Company") and applies to all individuals who register, use or visit the plae8 platform at https://plae8.best. This document sets out our privacy practices in detail — what data we collect, how it is used, who may access it, and your rights as the owner of that personal data.

plae8 is fully committed to protecting the privacy of all our Malaysian users in accordance with the Personal Data Protection Act 2010 (PDPA 2010). We understand that your trust depends on how we handle the personal information you entrust to us, and we never take that responsibility lightly.

This Privacy Policy should be read together with the plae8 Terms & Conditions, which form part of the overall agreement between you and plae8. In the event of any conflict between these documents, this Privacy Policy shall prevail in all matters relating to personal data protection.

2
Types of Personal Data We Collect

plae8 collects your personal data through various means — directly from you during registration or use of the platform, automatically through tracking technologies, and in certain cases from relevant third parties such as payment service providers. The categories of data we collect are as follows:

Data Category Examples of Information How It's Collected
Identity Data Full name, MyKad number, date of birth, gender Registration & KYC
Contact Data Email address, Malaysian phone number, residential address Registration
Financial Data E-wallet account numbers, bank account information, transaction history Deposits & withdrawals
Game Data Betting history, game preferences, session duration Platform activity
Technical Data IP address, browser type, device type, operating system Automatic
Usage Data Pages visited, access times, clicks, and navigation Automatic (cookies)

plae8 does not collect data that is not needed. Every piece of information we request has a clear purpose, as outlined in this section. You have the right to know why each item of data is collected before providing it to us.

3
How Your Personal Data Is Used

plae8 uses personal data collected solely for the purposes set out below. We will not use your data for any other purpose without first obtaining your consent:

  • Processing account registration and verifying your identity (KYC process) in accordance with legal requirements
  • Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as withdrawals of winnings to your Malaysian bank account
  • Provides access to slots, baccarat, live table games, digital lottery and Sports Betting on the plae8 platform
  • Managing the VIP Rewards programme, reward points, and any promotional offers you are eligible for
  • Sending service-related communications such as transaction confirmations, security alerts and account updates
  • Sending marketing communications about plae8 promotions and offers — only where you have given your consent to receive such communications
  • Detecting and preventing fraud, money laundering, and other illegal activities that may occur through the platform
  • Fulfilling legal obligations and compliance requirements imposed on plae8 by the relevant authorities
  • Analysing platform usage patterns to improve the overall player experience
  • Providing customer support and resolving any disputes that arise
4
Legal Basis for Data Processing

plae8 only processes your personal data where a valid legal basis exists to do so under PDPA 2010. The legal bases we rely on are as follows:

  • Contract Performance: Data processing necessary to provide the plae8 platform services you have requested, including account registration, payment processing, and game provision
  • Legal Obligations: Processing required to comply with applicable Malaysian law, including KYC requirements, financial reporting and anti-money laundering obligations
  • Legitimate Interests: Processing for fraud prevention, platform security, and usage analysis for service improvement — where our legitimate interests do not override your rights and interests
  • Consent: Processing for marketing communications and the use of non-essential cookies — you may withdraw this consent at any time

If you would like to know more about the specific legal basis we rely on when processing your data in a particular context, please contact us at the email address provided in the final section of this document.

5
Data Sharing with Third Parties

plae8 does not sell, rent or disclose your personal data to third parties for their own marketing purposes. However, there are limited circumstances in which we may need to share your data with certain third parties:

  • Payment Service Providers: Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, and Malaysian banks such as Maybank and CIMB — to process your deposits and withdrawals
  • Game Providers: International game software companies that provide games on the plae8 platform — only the minimum information required for smooth gameplay
  • Identity Verification Services: Third-party providers who assist us in running the KYC process — subject to strict confidentiality agreements
  • Authority: Law enforcement agencies, financial regulatory bodies or courts — when required by Malaysian law or a valid court order
  • Technical Infrastructure Services: Cloud hosting providers and IT infrastructure partners supporting plae8 platform operations — subject to strict data processing agreements

Guarantee: All third parties with whom we share data are required to process your data only for the stated purposes, adhere to security standards equivalent to or higher than those of plae8, and not disclose that data to any other party without plae8's authorisation.

6
Data Security Measures

plae8 implements a range of technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or improper disclosure. The key measures we apply include:

  • 256-bit SSL encryption for all data transmitted between your device and plae8's servers
  • At-rest encryption for sensitive information stored in plae8's databases
  • Role-based access control — only staff who require access to specific data to perform their duties are permitted
  • Two-factor authentication (2FA) for internal access to systems that store player data
  • Round-the-clock security monitoring with intrusion detection systems and immediate response capabilities
  • Regular security audits by independent third parties to identify and address vulnerabilities
  • Regular data security training for all plae8 staff with access to player data
  • A data incident response plan that is regularly tested and updated

While we take all reasonable steps to protect your data, no security system can guarantee absolute protection. If you suspect your account has been accessed without authorisation, please contact our support team plae8 immediately via Live Chat.

7
Data Retention Period

plae8 retains your personal data only for as long as necessary to fulfil the purposes set out in this policy, or as required or permitted by applicable Malaysian law. The general retention periods we follow are as outlined below:

  • Active Account Data: For as long as your account remains active on plae8 — data is kept current and retained to ensure smooth service delivery
  • Data After Account Closure: Minimum 7 years after account closure, in line with financial record-keeping requirements under Malaysian law
  • Financial Transaction Records: 7 years from the transaction date, in line with Malaysia's Anti-Money Laundering Act
  • KYC Records: For the duration of the active account and a minimum of 5 years after the account is closed or the business relationship ends
  • Marketing Data: Until you withdraw your consent to receive marketing communications
  • Technical Logs: 90 days for standard access logs; up to 2 years for logs related to security investigations

Once the retention period has ended, your personal data will be securely deleted or anonymised so that it can no longer be linked to you as an individual. You may request early deletion of your data in certain circumstances as outlined in the Your Rights section below.

8
Your Rights as a Data Subject

Under Malaysia's PDPA 2010, you have the following rights regarding your personal data held by plae8. We are committed to respecting and facilitating the exercise of these rights:

01
Right of Access

You have the right to request and receive a copy of the personal data plae8 holds about you. Requests will be processed within 21 business days.

02
Right to Rectification

If your personal data is inaccurate or out of date, you have the right to request a correction. Updates to your name, address and phone number can be made directly in your account settings.

03
Right to Erasure

Under certain circumstances, you may request the deletion of your personal data — for example, when the data is no longer needed for the purpose it was originally collected.

04
Right to Object

You may object to the processing of your data for direct marketing purposes at any time. Your request will be actioned immediately, without question.

05
Right to Restrict Processing

In certain circumstances, you may request that the processing of your personal data be temporarily restricted while we handle your other requests.

06
Right to Withdraw Consent

For processing based on consent (such as marketing communications), you may withdraw your consent at any time through your account settings or by contacting us.

To submit any request relating to the above rights, contact us at support@plae8.best stating the type of request, your full name, and your plae8 account number. We may require identity verification before processing any request. No fees are charged for reasonable requests.

9
Cookie Policy

Platform plae8 uses cookies and similar tracking technologies to enhance your experience, analyse platform usage, and ensure account security. Cookies are small data files stored on your device when you visit our website.

We use three types of cookies:

Essential Cookies Functional Cookies Analytics Cookies
  • Essential Cookies: Required for core platform functions such as secure login, session verification, and transaction processing. These cookies cannot be disabled as they are essential to the security and operation of the plae8 platform
  • Functional Cookies: Allows the platform to remember your preferences such as language, time zone and display settings. Disabling these cookies may affect your experience on plae8
  • Analytics Cookies: Helps us understand how players use the platform so we can improve the overall experience. Data collected is aggregated and does not identify you individually. You may opt out of analytics cookies at any time

You can manage cookies through your web browser settings. However, disabling essential cookies may prevent you from fully accessing certain features on the plae8 platform. Instructions for managing cookies vary by browser — refer to your browser's help documentation for detailed guidance.

10
Child Protection

Platform plae8 is intended strictly for individuals aged 18 and above. We do not knowingly collect, use or store personal data of anyone under the age of 18. Every account registration goes through a rigorous age verification process.

Should we discover that we have inadvertently collected personal data of an individual under the age of 18, we will take immediate steps to delete that data and close the relevant account. If you are a parent or guardian who has found that your child has registered on plae8, please contact us immediately at support@plae8.best and we will treat this matter with the utmost priority.

Warning: Registering on plae8 using false information about your age is a violation of our Terms & Conditions and may contravene applicable Malaysian law. plae8 takes child protection seriously and will cooperate fully with the authorities in such cases.

11
Amendments to the Privacy Policy

plae8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, the technologies we use, legal requirements, or other relevant factors. When we make material changes to this policy, we will notify you through:

  • In-platform notifications on plae8 when you log in
  • Email notification to the address registered on your account for any significant changes
  • A clear notice on this page with an updated "Last Updated" date

We encourage you to review this Privacy Policy periodically. Your continued use of the plae8 after any amendment takes effect constitutes your acceptance of the revised terms. If you do not agree with the changes made, you have the right to close your account and request the deletion of your personal data.

12
Contact Us About Data Privacy

If you have any questions, concerns, or complaints regarding how plae8 handles your personal data, or if you wish to exercise your rights under the PDPA 2010, please contact us through the following channels:

  • Email: support@plae8.best — please include the subject line "Data Privacy Enquiry" to ensure your request is handled by the right team
  • Live Chat: Available 24/7 within the plae8 platform — for urgent enquiries or initial feedback

We are committed to responding to all privacy-related enquiries within 14 business days. For more complex requests such as comprehensive data access requests or data deletion requests, the response period may extend to up to 21 business days in accordance with the provisions of PDPA 2010.

If you are not satisfied with how we have handled your privacy request or complaint, you have the right to refer the matter to Malaysia's Personal Data Protection Commissioner under the provisions of PDPA 2010.

FAQ — plae8 Privacy Policy

Absolutely not. plae8 never sells, rents or trades players' personal data to any advertiser or third party for their own marketing purposes. Your data is used solely for the purposes stated in this Privacy Policy — namely to provide platform services, process financial transactions, fulfil legal obligations and send you service-related communications from plae8 (only where you have given your consent).

plae8 uses multiple layers of protection for your financial information. First, all communication between your device and our servers is secured with 256-bit SSL encryption. Second, sensitive information such as bank account numbers and e-wallet details is stored in encrypted form in our database. Third, we never store full credit or debit card numbers — only the last few digits for verification purposes. Payment processing is handled through providers that comply with stringent payment industry security standards.

Yes, you have the right to request a copy of the personal data plae8 holds about you under the right of access provided by PDPA 2010. To submit a request, send an email to support@plae8.best with the subject line "Data Access Request" and include your full name and plae8 account number. We may require additional identity verification before processing your request. Data will be provided in a readable format within 21 business days. No fee is charged for the first request made within any 12-month period.

When you close your plae8 account, your personal data is not deleted immediately, as we have legal obligations to retain financial and transaction records for the minimum period stipulated by Malaysian law — typically 7 years. After that mandatory period, data will be securely deleted or anonymised. Data not subject to legal retention requirements — such as marketing preferences and usage logs — will be deleted within 90 days of account closure. You may request further details on what specific data is still retained after account closure by contacting our team.

The majority of plae8 player data is stored in data centres located in the Asia region. Where data needs to be transferred outside Malaysia — for example, for processing by international game software providers — we ensure such transfers are carried out with safeguards that are equivalent to or higher than those required under PDPA 2010. All foreign service providers that handle Malaysian player data are contractually obligated to comply with strict data protection standards.
YOUR DATA IS PROTECTED AT plae8

Play Safe & With Confidence at plae8

With a transparent Privacy Policy and full compliance with Malaysia's PDPA 2010, plae8 is a platform you can trust. Register for free today and enjoy over 500 games with the assurance that your data is protected.

256-bit SSL PDPA 2010 No Data Sales 24/7 Support

18+ only • Terms & Conditions apply • Play responsibly

Bahasa Melayu