Ap8 Privacy Policy — Player Personal Data Protection

1 Information We Collect

In operating the ap8 platform, we collect several categories of information from you. This collection is necessary to ensure you can enjoy our services safely and seamlessly. In general, the information collected falls into three main categories:

a) Information You Provide Directly

• Full name, date of birth, and identity card or passport number (for KYC process)
• Active email address and mobile phone number
• Current residential address including postcode and state
• Payment method details such as bank account number, bank name, and account holder name
• Identity verification documents uploaded during the KYC process
• Communications you send to our support team

b) Automatically Collected Information

• IP address and device information used
• Browser type and version
• Your device's operating system
• Activity log data including pages visited, access times, and session duration
• Cookie data and similar tracking technologies

c) Gaming Activity Information

• Records of all deposit and withdrawal transactions
• Betting history and game results
• Account balance and fund movements
• Bonuses received and rollover requirement fulfilment status

2 How We Use Your Data

Every piece of information we collect has a clear and legitimate purpose. ap8 does not collect data excessively or for purposes unrelated to platform operations.

Ap8 will not use your data for any purpose other than those stated in the table above without obtaining your prior consent.

3 Sharing Information with Third Parties

Ap8 takes a very strict approach to sharing your personal information. We never sell or rent your data to any third party. However, there are limited circumstances where sharing information is necessary and permitted:

• Payment Service Providers: Transaction information that must be shared with payment gateway providers such as FPX, Touch 'n Go eWallet, and Boost to process your deposits and withdrawals.
• Game Software Providers: Minimum technical information required by casino software providers to ensure games function correctly.
• Regulatory Authorities: Information required by law to be disclosed to regulatory bodies or law enforcement agencies such as MACC or the police upon a valid court order or investigation.
• KYC Verification Services: Identity verification information shared with verified third-party KYC service providers, subject to strict confidentiality agreements.

4 Data Security

Ap8 invests seriously in security infrastructure to ensure your data is always protected. The security measures we implement cover multiple layers of technical and organisational protection:

• 256-bit SSL Encryption: All communications between your browser and ap8 servers are encrypted using the latest TLS 1.3 protocol, ensuring no third party can intercept your data in transit.
• Layered Access Control: Access to player data is restricted to staff with a legitimate business need only. All access is automatically logged and monitored.
• Intrusion Detection System (IDS): A real-time monitoring system that detects and responds to any unusual activity or unauthorised access attempts.
• Automatic Data Backup: Your data is automatically backed up to separate locations to ensure data resilience even in the event of a technical failure.
• Two-Factor Authentication (2FA): 2FA is available for all player accounts to add an extra layer of security during login.
• Periodic Penetration Testing: Our technical infrastructure undergoes regular security testing by independent experts to identify and address any vulnerabilities.

5 Use of Cookies and Tracking Technologies

Ap8 uses cookies and similar tracking technologies to enhance the user experience, analyse platform usage patterns, and ensure smooth technical functionality.

Types of Cookies We Use:

• Essential Cookies: Required for core platform functions such as login sessions and language preferences. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies: Collects anonymous information about how you use the platform to help us improve the user experience.
• Functional Cookies: Stores your preferences such as language selection and display settings to provide a more personalised experience.
• Analytics Cookies: Helps us understand overall platform usage patterns. This data is collected in aggregate form and is not linked to your personal identity.

You can manage and delete cookies through your browser settings at any time. However, disabling certain cookies may affect the functionality and user experience of the ap8 platform.

6 Your Rights

As an ap8 player, you have the following rights regarding your personal data, in accordance with Malaysia's Personal Data Protection Act 2010:

To exercise any of the above rights, please contact the ap8 support team. We will process your request within 30 business days or sooner where possible.

7 Data Retention and Deletion

Ap8 only retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law.

• Active Account Data: Retained for as long as your account is active and for a period of 7 years after account closure, in line with financial record requirements under Malaysian law.
• Transaction Records: Retained for a minimum of 7 years for financial audit and AML compliance purposes.
• KYC Documents: Retained for the period specified by the relevant regulatory authority, typically 5 to 7 years.
• Communication Logs: Records of interactions with customer support are retained for 3 years for reference and dispute resolution purposes.
• Marketing Data: Retained until you withdraw your consent or request deletion.

Once the relevant retention period has expired, your data will be securely deleted or permanently anonymised in accordance with our standard procedures.

8 Children's Privacy

Ap8 is a platform dedicated to individuals aged 18 and above. We do not knowingly collect or process any personal information from individuals under the age of 18.

9 Links to Third-Party Websites

The ap8 platform may contain links to third-party websites or services in certain contexts. This Privacy Policy applies solely to the ap8 platform and does not cover the privacy practices of any third-party website or service.

Ap8 is not responsible for the content, privacy policies, or security practices of any third-party websites. We encourage you to read the privacy policy of any third-party website you visit separately before providing them with any personal information.

10 Privacy Policy Amendments

Ap8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological improvements. The latest update date will always be displayed at the top of this page.

For significant changes, we will endeavour to notify you via an in-account notice or an email to your registered address. However, it remains your responsibility to check this page periodically.