Privacy Policy

Introduction

m8bet ("we", "us", "our", "the Platform") operates the online entertainment website accessible at m8bet.casa. In the course of providing live casino games, sports betting, slot games, and related services to registered Members across Malaysia, we necessarily collect, process, and store certain categories of personal data.

This Privacy Policy ("Policy") sets out a comprehensive account of our data practices — what we collect, the lawful grounds on which we process it, how long we retain it, who we may share it with, and the rights you hold as a data subject. This Policy applies to all individuals who visit m8bet.casa, register an account, or interact with our platform in any capacity.

By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein to the extent that consent is the applicable legal basis. Where processing is carried out on grounds other than consent — for example, contractual necessity or legal obligation — your use of the Platform constitutes your acknowledgment of that processing.

Definitions

The following terms carry the meanings set out below throughout this Policy:

Data We Collect

m8bet collects Personal Data across several categories depending on how you interact with the Platform. The following table summarises the categories and specific data points we collect:

We do not collect full payment card numbers. Payment processing for card-based or bank-based transactions is handled by our third-party payment service providers, including Malaysian e-wallet operators (Touch'n Go eWallet, Boost, GrabPay), FPX/DuitNow network processors, and cryptocurrency network validators. m8bet only receives tokenised or masked transaction references.

How We Use Your Data

m8bet processes your Personal Data for the following purposes:

1. Account Management: To create, maintain, and administer your registered account, including authentication and access control.
2. KYC & Compliance: To verify your identity and age in compliance with our regulatory obligations — including anti-money laundering (AML) checks and responsible gambling age enforcement (21+ minimum).
3. Transaction Processing: To process deposits and withdrawals via your selected Malaysian payment method — DuitNow, FPX, Maybank, CIMB, Public Bank, Touch 'n Go eWallet, Boost, GrabPay, Hong Leong, and cryptocurrency networks — and to maintain accurate financial records.
4. Platform Delivery: To operate and deliver the gaming services you access, including live casino, sports betting, and slot games, and to maintain session continuity.
5. Customer Support: To respond to your enquiries, resolve disputes, and provide assistance via live chat and email.
6. Responsible Gambling: To implement and enforce the deposit limits, loss limits, session timers, cooling-off periods, and self-exclusion settings that you configure, and to monitor for patterns indicative of problem gambling in accordance with our duty of care.
7. Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, collusion, money laundering, account takeovers, and prohibited conduct as defined in our Terms & Conditions.
8. Legal Compliance: To comply with applicable legal and regulatory obligations, including responding to lawful requests from competent authorities.
9. Platform Improvement: To analyse aggregated, anonymised usage data to improve the Platform's design, performance, game selection, and user experience.
10. Communications: To send you transactional notifications (account confirmations, withdrawal notifications, security alerts) and, where you have opted in, promotional communications about bonuses and offers.

Legal Basis for Processing

For each processing activity, m8bet relies on one or more of the following lawful bases:

Data Sharing & Third Parties

m8bet may share your Personal Data with the following categories of third parties, strictly limited to what is necessary for each specified purpose:

• Payment Service Providers: Malaysian e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay), FPX and DuitNow network processors, major Malaysian banks (Maybank, CIMB, Public Bank, RHB, Hong Leong), and cryptocurrency network validators — to process deposits and withdrawals. These providers receive only the data necessary to complete the specific transaction.
• KYC Verification Partners: Identity verification service providers who assist m8bet in authenticating identity documents and confirming age eligibility. These processors operate under strict data processing agreements and are prohibited from using your KYC data for any purpose other than verification.
• Game Studio Partners: Licensed international game studios whose games are integrated into the m8bet Platform may receive anonymised session data necessary to operate fair game outcomes. These partners are contractually prohibited from receiving or using personally identifiable information beyond what is required for game delivery.
• Customer Support Platform: The provider of our live chat infrastructure may process your name and communication content for support purposes only, under a binding data processing agreement.
• Legal & Regulatory Authorities: m8bet may be required to disclose Personal Data to competent authorities, courts, or regulators in response to lawful orders, subpoenas, or requests. We will provide only the minimum data required by the specific legal obligation.
• Anti-Fraud & AML Service Providers: Specialist risk management and financial intelligence providers used to detect money laundering, fraud, or collusion patterns. These providers act as Data Processors under contractual terms that prohibit use of your data for any other purpose.

m8bet does not share Personal Data with social media platforms, advertising networks, data brokers, or any third party for commercial purposes unrelated to the delivery of our services.

Cookies & Tracking Technologies

m8bet uses cookies and similar browser-based tracking technologies to operate the Platform effectively and improve your experience. The categories of cookies we use are as follows:

m8bet does not use third-party advertising cookies or behavioural tracking cookies. You may manage or delete cookies through your browser settings at any time. Disabling functional or analytics cookies may affect some non-essential features of the Platform but will not prevent you from logging in or playing.

Data Retention

m8bet retains your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, or for longer where required by applicable legal, regulatory, or contractual obligations. The following retention periods apply:

• Active Account Data: Retained for the duration of your active account plus minimum of five (5) years following account closure, to satisfy our AML and financial recordkeeping obligations.
• KYC Identity Documents: Retained for a minimum of five (5) years from the date of submission or the date of account closure, whichever is later, in accordance with applicable regulatory requirements.
• Transaction Records: Financial transaction logs are retained for a minimum of seven (7) years from the date of the transaction to comply with standard financial recordkeeping obligations.
• Customer Support Correspondence: Retained for three (3) years from the date of the last interaction, unless the correspondence is related to a dispute or legal matter, in which case it is retained until that matter is fully resolved.
• Marketing Consent Records: Retained for the period during which you remain opted in, plus two (2) years following opt-out, to demonstrate compliance.
• Technical Logs: Server logs and security event logs are retained for ninety (90) days, unless a specific event requires extended retention for investigation purposes.

Following the applicable retention period, Personal Data is securely deleted or irreversibly anonymised. Anonymised aggregate data may be retained indefinitely for statistical and analytical purposes.

Data Security

m8bet implements a range of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction:

• Encryption in Transit: All data transmitted between your device and the m8bet Platform is encrypted using TLS (Transport Layer Security) — verifiable by the HTTPS padlock in your browser.
• Encryption at Rest: Sensitive data fields, including passwords (hashed), KYC document references, and financial identifiers, are encrypted at rest within our database infrastructure.
• Access Controls: Access to Personal Data within m8bet's internal systems is restricted on a need-to-know basis. Staff members are granted access only to the data categories required for their specific role.
• Two-Factor Authentication: Administrative access to systems that process Member data requires multi-factor authentication.
• Security Monitoring: Continuous automated monitoring detects and alerts our security team to anomalous access patterns, login attempts, and potential data exfiltration events.
• Vendor Security Requirements: All third-party Data Processors are contractually required to maintain security standards equivalent to or exceding those applied by m8bet.

Your Rights

As a Data Subject, you hold the following rights with respect to your Personal Data held by m8bet. To exercise any of these rights, please contact us via live chat or email at [email protected] using your registered email address:

• Right of Access: You may request a copy of the Personal Data m8bet holds about you, along with information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete Personal Data held your account.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to Restrict Processing: You may request that we suspend certain processing activities while a dispute about accuracy or lawfulness is being resolved.
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request a structured, machine-readable copy of the data you have provided to us.
• Right to Object: You may object to processing activities carried out on the basis of legitimate interests, including direct marketing communications.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

m8bet will respond to all verified data subject requests within thirty (30) days of receipt. Where a request is complex or numerous, we may extend this period by a further sixty (60) days, in which case we will notify you of the extension within the initial thirty-day period.

Minors & Age Verification

m8bet strictly prohibits the registration or use of the Platform by individuals under the age of 21. The Platform is intended exclusively for adults aged 21 and above. We do not knowingly collect, process, or retain Personal Data belonging to individuals under 21 years of age.

All registered Members are required to complete KYC age verification before their first withdrawal is processed. Any account found to belong to a person under 21 will be immediately suspended, and any deposited funds will be returned to the source payment method pending investigation.

If you believe that a person under 21 has registered an account on m8bet, please notify us immediately at [email protected] with any available details. We will investigate and take appropriate action promptly.

International Data Transfers

m8bet's infrastructure and some of its third-party Data Processors may process Personal Data in jurisdictions outside Malaysia. Where Personal Data is transferred internationally, m8bet takes appropriate steps to ensure that such transfers are conducted lawfully and that the receiving party provides adequate protections for your data, including:

• The execution of binding contractual data transfer agreements incorporating standard data protection clauses;
• Confirmation that the receiving jurisdiction has been assessed to offer an adequate level of data protection;
• Technical safeguards including encryption of data in transit and at rest.

For enquiries about specific international transfer arrangements, please contact us using the details in Section 14.

Policy Amendments

m8bet reserves the right to amend this Privacy Policy at any time. Where material changes are made that affect how your Personal Data is processed, we will notify active Members by email to their registered address and/or via a prominent notice on the Platform at least seven (7) days prior to the changes taking effect, except where immediate amendment is required for legal or security reasons.

The "Last Updated" date at the top of this page indicates the date of the most recent revision. Your continued use of the Platform following the effective date of any revision constitutes your acknowledgment of the updated Policy. If you do not accept the revised Policy, you should contact us to request account closure.

Contact & Data Requests

For all privacy-related enquiries, requests to exercise your data rights, or concerns about how m8bet handles your Personal Data, please contact us through the following channels:

• Live Chat: Available 24/7 via m8bet.casa. This is the fastest channel for general enquiries and straightforward data access requests. Typical response time: within 1–2 hours.
• Email: [email protected] — please use your registered email address when submitting data subject requests, as this allows us to verify your identity before releasing any personal data. Typical response time: up to 24 hours for initial acknowledgment.

When submitting a formal data subject request (access, rectification, erasure, portability, or restriction), please include:

1. Your full name and registered username;
2. The registered email address associated with your account;
3. A clear description of the right you wish to exercise and the specific data it concerns;
4. Any supporting information that will help us locate and process your request efficiently.

m8bet will verify your identity before processing any data subject request to protect against unauthorised access to Member data. We will not charge a fee for reasonable requests but reserve the right to apply an administrative charge for manifestly unfounded or excessive requests.